FEAT: add AUTH_PROVIDER config to Helm chart

- Add auth_provider to values.yaml (cognito/keycloak)
- Add AUTH_PROVIDER env var to deployment template
- Note: maestro only needs to know which provider is used, duc handles connection

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

deploy/helm-chart/templates/deployment.yaml

@@ -48,27 +48,13 @@ spec:
             {{- toYaml .Values.resources | nindent 12 }}
           {{- end }}
           env:
-            # Auth Provider Configuration
+            # Auth Provider Configuration (cognito or keycloak)
             - name: AUTH_PROVIDER
               value: {{ .Values.maestro.auth_provider | default "cognito" | quote }}
             - name: AWS_IDENTITY_POOL_ID
               value: {{ .Values.maestro.aws_identity_pool_id }}
             - name: AWS_REGION
               value: "us-east-1"
-            {{- if eq .Values.maestro.auth_provider "keycloak" }}
-            # Keycloak Configuration (when auth_provider=keycloak)
-            - name: KEYCLOAK_URL
-              value: {{ .Values.maestro.keycloak_url | quote }}
-            - name: KEYCLOAK_REALM
-              value: {{ .Values.maestro.keycloak_realm | default "dadosfera" | quote }}
-            - name: KEYCLOAK_CLIENT_ID
-              value: {{ .Values.maestro.keycloak_client_id | quote }}
-            - name: KEYCLOAK_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: {{ .Values.maestro.keycloak_secret_name | default "maestro-keycloak-credentials" }}
-                  key: client-secret
-            {{- end }}
             - name: BASE_HOST
               value: "maestro_prd"
             - name: BUCKET_CUSTOMER_CSV_ASSETS

deploy/helm-chart/values.yaml

@@ -28,13 +28,9 @@ resources:
     memory: 2Gi
 maestro:
   # Auth provider: "cognito" (default) or "keycloak"
+  # Note: maestro doesn't connect to Keycloak directly, only duc does
   auth_provider: "cognito"
   aws_identity_pool_id: "us-east-1_Mrezsw9Sn"
-  # Keycloak config (when auth_provider=keycloak)
-  keycloak_url: ""
-  keycloak_realm: "dadosfera"
-  keycloak_client_id: ""
-  keycloak_secret_name: "maestro-keycloak-credentials"
   duc_url: duc.dadosfera.ai
   in_factory_url: in-factory.dadosfera.ai
   bucket_customer_csv_assets: "customers-csv-assets-prd-611330257153"