From ceb692f7ee9d8f37876338b4a798446d3e180c51 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sun, 7 Dec 2025 13:09:29 -0300 Subject: [PATCH] oauth2-proxy: drop groups scope to avoid invalid_scope --- services/oauth2-proxy/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/oauth2-proxy/deployment.yaml b/services/oauth2-proxy/deployment.yaml index 7c22a93..03d30c1 100644 --- a/services/oauth2-proxy/deployment.yaml +++ b/services/oauth2-proxy/deployment.yaml @@ -35,7 +35,7 @@ spec: - --provider=oidc - --redirect-url=https://auth.bstein.dev/oauth2/callback - --oidc-issuer-url=https://sso.bstein.dev/realms/atlas - - --scope=openid profile email groups + - --scope=openid profile email - --email-domain=* - --set-xauthrequest=true - --pass-access-token=true