From 5c0a1dff57833ac0bdc3cf4aeac07dcc67b7dda4 Mon Sep 17 00:00:00 2001
From: Lumpiasty <arek.dzski@gmail.com>
Date: Thu, 4 Jun 2026 17:27:22 +0200
Subject: [PATCH] oauth auto redirect and allowed role in openwebui

---
 apps/openwebui/release.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/apps/openwebui/release.yaml b/apps/openwebui/release.yaml
index 2314c4b..8a0f5e4 100644
--- a/apps/openwebui/release.yaml
+++ b/apps/openwebui/release.yaml
@@ -74,6 +74,12 @@ spec:
         value: "false"
       - name: OAUTH_MERGE_ACCOUNTS_BY_EMAIL
         value: "true"
+      - name: ENABLE_OAUTH_ROLE_MANAGEMENT
+        value: "true"
+      - name: OAUTH_ALLOWED_ROLES
+        value: "user"
+      - name: OAUTH_AUTO_REDIRECT
+        value: "true"
       # STT via whisper-server (routed through llama-swap)
       - name: AUDIO_STT_ENGINE
         value: "openai"