From cd514c71b6f0501515bf5db93e37be49ba3c831d Mon Sep 17 00:00:00 2001
From: Lumpiasty <arek.dzski@gmail.com>
Date: Thu, 4 Jun 2026 17:27:22 +0200
Subject: [PATCH] oauth auto redirect and allowed role in openwebui

---
 apps/openwebui/release.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/apps/openwebui/release.yaml b/apps/openwebui/release.yaml
index 2314c4b..ec6afcc 100644
--- a/apps/openwebui/release.yaml
+++ b/apps/openwebui/release.yaml
@@ -74,6 +74,16 @@ spec:
         value: "false"
       - name: OAUTH_MERGE_ACCOUNTS_BY_EMAIL
         value: "true"
+      - name: ENABLE_OAUTH_ROLE_MANAGEMENT
+        value: "true"
+      - name: OAUTH_ROLES_CLAIM
+        value: "groups"
+      - name: OAUTH_ADMIN_ROLES
+        value: "Admins"
+      - name: OAUTH_ALLOWED_ROLES
+        value: "Users"
+      - name: OAUTH_AUTO_REDIRECT
+        value: "true"
       # STT via whisper-server (routed through llama-swap)
       - name: AUDIO_STT_ENGINE
         value: "openai"