From 369363277c734c4e72aa7869b63d5e2b93e6070c Mon Sep 17 00:00:00 2001
From: Backstage Deploy <backstage@onlinesales.ai>
Date: Wed, 14 Jan 2026 16:56:26 +0530
Subject: [PATCH] Override default Keycloak auth with Google OAuth - mount
 config as app-config.yaml

---
 templates/backstage-deployment.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/templates/backstage-deployment.yaml b/templates/backstage-deployment.yaml
index ceff43e..7b82cf2 100644
--- a/templates/backstage-deployment.yaml
+++ b/templates/backstage-deployment.yaml
@@ -102,7 +102,17 @@ spec:
             secretKeyRef:
               name: backstage-secrets
               key: GITEA_PASSWORD
+        # Override auth environment to production
+        - name: AUTH_ENVIRONMENT
+          value: "production"
+        # Disable guest provider
+        - name: AUTH_PROVIDERS_GUEST_ENABLED
+          value: "false"
         volumeMounts:
+        - name: config
+          mountPath: /app/app-config.yaml
+          subPath: app-config.production.yaml
+          readOnly: true
         - name: config
           mountPath: /app/app-config.production.yaml
           subPath: app-config.production.yaml
@@ -111,6 +121,8 @@ spec:
         - node
         - packages/backend
         - --config
+        - app-config.yaml
+        - --config
         - app-config.production.yaml
         {{- with .Values.livenessProbe }}
         livenessProbe: