From bb73c65d9fc5589aef3a9193f190812588753957 Mon Sep 17 00:00:00 2001
From: jenkins <jenkins@bstein.dev>
Date: Sat, 20 Jun 2026 14:43:24 -0300
Subject: [PATCH] gitea: request groups for Veles OIDC

---
 services/gitea/deployment.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/services/gitea/deployment.yaml b/services/gitea/deployment.yaml
index b26b29eb..33b32b9c 100644
--- a/services/gitea/deployment.yaml
+++ b/services/gitea/deployment.yaml
@@ -185,11 +185,11 @@ spec:
 
               if [ -n "$VELES_CLIENT_ID" ] && [ -n "$VELES_CLIENT_SECRET" ] && [ -n "$VELES_DISCOVERY_URL" ] && [ -n "$VELES_REQUIRED_CLAIM_NAME" ] && [ -n "$VELES_REQUIRED_CLAIM_VALUE" ]; then
                 if [ -n "$VELES_GROUP_TEAM_MAP" ]; then
-                  ensure_oidc_source veles "openid profile email" "$VELES_CLIENT_ID" "$VELES_CLIENT_SECRET" "$VELES_DISCOVERY_URL" "$VELES_REQUIRED_CLAIM_NAME" "$VELES_REQUIRED_CLAIM_VALUE" \
+                  ensure_oidc_source veles "openid profile email groups" "$VELES_CLIENT_ID" "$VELES_CLIENT_SECRET" "$VELES_DISCOVERY_URL" "$VELES_REQUIRED_CLAIM_NAME" "$VELES_REQUIRED_CLAIM_VALUE" \
                     --restricted-group "$VELES_REQUIRED_CLAIM_VALUE" \
                     --group-team-map "$VELES_GROUP_TEAM_MAP"
                 else
-                  ensure_oidc_source veles "openid profile email" "$VELES_CLIENT_ID" "$VELES_CLIENT_SECRET" "$VELES_DISCOVERY_URL" "$VELES_REQUIRED_CLAIM_NAME" "$VELES_REQUIRED_CLAIM_VALUE" \
+                  ensure_oidc_source veles "openid profile email groups" "$VELES_CLIENT_ID" "$VELES_CLIENT_SECRET" "$VELES_DISCOVERY_URL" "$VELES_REQUIRED_CLAIM_NAME" "$VELES_REQUIRED_CLAIM_VALUE" \
                     --restricted-group "$VELES_REQUIRED_CLAIM_VALUE"
                 fi
               else