From f8d698ba421e1049367eaf68b04a5793da661b6c Mon Sep 17 00:00:00 2001
From: WorkClub Automation <automation@workclub.local>
Date: Sat, 21 Mar 2026 09:30:13 +0100
Subject: [PATCH] Fix KEYCLOAK_ISSUER_INTERNAL to include port 8080

The internal Keycloak URL was missing the port number, causing
the OIDC token exchange to fail. The code tries to replace
:8080 with :8081 but the port was missing entirely.

- Changed from: http://workclub-keycloak/realms/workclub
- Changed to: http://workclub-keycloak:8080/realms/workclub
---
 infra/k8s/base/frontend-deployment.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/infra/k8s/base/frontend-deployment.yaml b/infra/k8s/base/frontend-deployment.yaml
index 066aa7c..45817e9 100644
--- a/infra/k8s/base/frontend-deployment.yaml
+++ b/infra/k8s/base/frontend-deployment.yaml
@@ -87,4 +87,4 @@ spec:
               name: workclub-config
               key: keycloak-authority
         - name: KEYCLOAK_ISSUER_INTERNAL
-          value: "http://workclub-keycloak/realms/workclub"
+          value: "http://workclub-keycloak:8080/realms/workclub"