From a0d89472fc7e398555c66bbe97ab6345526d2d22 Mon Sep 17 00:00:00 2001
From: Lumpiasty <arek.dzski@gmail.com>
Date: Thu, 4 Jun 2026 17:27:22 +0200
Subject: [PATCH] oauth auto redirect and allowed role in openwebui

---
 apps/openwebui/release.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/apps/openwebui/release.yaml b/apps/openwebui/release.yaml
index 2314c4b..6100598 100644
--- a/apps/openwebui/release.yaml
+++ b/apps/openwebui/release.yaml
@@ -74,6 +74,10 @@ spec:
         value: "false"
       - name: OAUTH_MERGE_ACCOUNTS_BY_EMAIL
         value: "true"
+      - name: OAUTH_ALLOWED_ROLES
+        value: "user"
+      - name: OAUTH_AUTO_REDIRECT
+        value: "true"
       # STT via whisper-server (routed through llama-swap)
       - name: AUDIO_STT_ENGINE
         value: "openai"