feat: migrate oauth2-proxy auth to the internal cloud zitadel (#1699)

Author: zackpollard

kubernetes/apps/authentication/oauth2-proxy/app/helmrelease.yaml

@@ -38,7 +38,7 @@ spec:
               OAUTH2_PROXY_USER_ID_CLAIM: "sub"
               OAUTH2_PROXY_PROVIDER_DISPLAY_NAME: "ZITADEL"
               OAUTH2_PROXY_REDIRECT_URL: "https://oauth2-proxy.internal.immich.cloud/oauth2/callback"
-              OAUTH2_PROXY_OIDC_ISSUER_URL: "https://zitadel.internal.immich.cloud"
+              OAUTH2_PROXY_OIDC_ISSUER_URL: "https://auth.internal.futo.org"
               OAUTH2_PROXY_EMAIL_DOMAINS: "*"
               OAUTH2_PROXY_COOKIE_DOMAINS: ".immich.cloud"
               OAUTH2_PROXY_WHITELIST_DOMAINS: ".immich.cloud"

kubernetes/apps/authentication/oauth2-proxy/secrets/oauth.yaml

@@ -11,7 +11,7 @@ spec:
   data:
     - secretKey: OAUTH2_PROXY_CLIENT_ID
       remoteRef:
-        key: ZITADEL_OAUTH_CLIENT_ID_OAUTH2_PROXY
+        key: FUTO_ZITADEL_OAUTH_CLIENT_ID_OAUTH2_PROXY
     - secretKey: OAUTH2_PROXY_COOKIE_SECRET
       remoteRef:
         key: OAUTH2_PROXY_COOKIE_SECRET