From 4f81f0c5630f94878e7568169a4fc09b0366c1f2 Mon Sep 17 00:00:00 2001
From: Lumpiasty <arek.dzski@gmail.com>
Date: Thu, 4 Jun 2026 17:27:22 +0200
Subject: [PATCH] oauth auto redirect and allowed role in openwebui

---
 apps/openwebui/release.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/apps/openwebui/release.yaml b/apps/openwebui/release.yaml
index 2314c4b..33378fc 100644
--- a/apps/openwebui/release.yaml
+++ b/apps/openwebui/release.yaml
@@ -74,6 +74,14 @@ spec:
         value: "false"
       - name: OAUTH_MERGE_ACCOUNTS_BY_EMAIL
         value: "true"
+      - name: ENABLE_OAUTH_ROLE_MANAGEMENT
+        value: "true"
+      - name: OAUTH_ADMIN_ROLES
+        value: "admin"
+      - name: OAUTH_ALLOWED_ROLES
+        value: "user"
+      - name: OAUTH_AUTO_REDIRECT
+        value: "true"
       # STT via whisper-server (routed through llama-swap)
       - name: AUDIO_STT_ENGINE
         value: "openai"