From c8331e88472dcf2821bb4edef4c5c197e69d059b Mon Sep 17 00:00:00 2001
From: rayshoo <fire@dragonz.dev>
Date: Sat, 8 Nov 2025 03:05:54 +0900
Subject: [PATCH] fix(helm): add missing -oidc-use-pkce arg when
 OIDC_USE_PKCE=true

---
 charts/headlamp/templates/deployment.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/charts/headlamp/templates/deployment.yaml b/charts/headlamp/templates/deployment.yaml
index 81d91fa8f2c..21133d9e753 100644
--- a/charts/headlamp/templates/deployment.yaml
+++ b/charts/headlamp/templates/deployment.yaml
@@ -290,6 +290,9 @@ spec:
             # Check if callbackURL is non empty either from env or oidc.config
             - "-oidc-callback-url=$(OIDC_CALLBACK_URL)"
             {{- end }}
+            {{- if or (eq ($oidc.usePKCE | toString) "true") (eq $usePKCE "true") }}
+            - "-oidc-use-pkce=$(OIDC_USE_PKCE)"
+            {{- end }}
             {{- if or (ne $oidc.validatorClientID "") (ne $validatorClientID "") }}
             # Check if validatorClientID is non empty either from env or oidc.config
             - "-oidc-validator-client-id=$(OIDC_VALIDATOR_CLIENT_ID)"