From de5183469ebb44e01fbf16b8e1c64ddb794ba99b Mon Sep 17 00:00:00 2001
From: Mayne0213 <bluemayne0213@icloud.com>
Date: Fri, 2 Jan 2026 00:09:44 +0900
Subject: [PATCH] FEAT(authelia): add JWT_HMAC_KEY to ExternalSecret

- Add JWT_HMAC_KEY for password reset functionality
- Update ExternalSecret configuration
---
 authelia/vault/authelia-secrets.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/authelia/vault/authelia-secrets.yaml b/authelia/vault/authelia-secrets.yaml
index 70e8eb1..822b0f0 100644
--- a/authelia/vault/authelia-secrets.yaml
+++ b/authelia/vault/authelia-secrets.yaml
@@ -37,6 +37,11 @@ spec:
       remoteRef:
         key: cluster-infrastructure/authelia
         property: OIDC_JWKS_PRIVATE_KEY
+    # JWT HMAC key for identity validation (password reset)
+    - secretKey: identity_validation.reset_password.jwt.hmac.key
+      remoteRef:
+        key: cluster-infrastructure/authelia
+        property: JWT_HMAC_KEY
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret