FEAT: add dual auth provider support to Helm chart

- Add auth_provider config to values.yaml (cognito/keycloak)
- Add AUTH_PROVIDER env var to deployment template
- Add conditional Keycloak env vars (URL, realm, client ID, secret)
- Enables parallel deployments with different auth providers

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

deploy/helm-chart/templates/deployment.yaml

@@ -48,10 +48,27 @@ spec:
             {{- toYaml .Values.resources | nindent 12 }}
           {{- end }}
           env:
+            # Auth Provider Configuration
+            - name: AUTH_PROVIDER
+              value: {{ .Values.maestro.auth_provider | default "cognito" | quote }}
             - name: AWS_IDENTITY_POOL_ID
               value: {{ .Values.maestro.aws_identity_pool_id }}
             - name: AWS_REGION
               value: "us-east-1"
+            {{- if eq .Values.maestro.auth_provider "keycloak" }}
+            # Keycloak Configuration (when auth_provider=keycloak)
+            - name: KEYCLOAK_URL
+              value: {{ .Values.maestro.keycloak_url | quote }}
+            - name: KEYCLOAK_REALM
+              value: {{ .Values.maestro.keycloak_realm | default "dadosfera" | quote }}
+            - name: KEYCLOAK_CLIENT_ID
+              value: {{ .Values.maestro.keycloak_client_id | quote }}
+            - name: KEYCLOAK_CLIENT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.maestro.keycloak_secret_name | default "maestro-keycloak-credentials" }}
+                  key: client-secret
+            {{- end }}
             - name: BASE_HOST
               value: "maestro_prd"
             - name: BUCKET_CUSTOMER_CSV_ASSETS

deploy/helm-chart/values.yaml

@@ -27,7 +27,14 @@ resources:
     cpu: 2000m
     memory: 2Gi
 maestro:
+  # Auth provider: "cognito" (default) or "keycloak"
+  auth_provider: "cognito"
   aws_identity_pool_id: "us-east-1_Mrezsw9Sn"
+  # Keycloak config (when auth_provider=keycloak)
+  keycloak_url: ""
+  keycloak_realm: "dadosfera"
+  keycloak_client_id: ""
+  keycloak_secret_name: "maestro-keycloak-credentials"
   duc_url: duc.dadosfera.ai
   in_factory_url: in-factory.dadosfera.ai
   bucket_customer_csv_assets: "customers-csv-assets-prd-611330257153"