From cf35884eaefad4aa82d6d24ddcb6c95351a3f09e Mon Sep 17 00:00:00 2001
From: Andrew Stoltz <andrew@flowercore.io>
Date: Wed, 29 Apr 2026 16:43:09 -0500
Subject: [PATCH] deploy(intranet): harden knowledge search rollout

---
 apps/intranet/intranet.yaml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/apps/intranet/intranet.yaml b/apps/intranet/intranet.yaml
index 189720b..9c470d1 100644
--- a/apps/intranet/intranet.yaml
+++ b/apps/intranet/intranet.yaml
@@ -23,6 +23,7 @@ metadata:
   namespace: intranet
 data:
   KnowledgeApiKey: ""
+  TrustedHeaderSharedSecret: ""
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -45,7 +46,7 @@ spec:
     spec:
       containers:
         - name: intranet-web
-          image: localhost/fc-intranet-web:v20260429-1513
+          image: localhost/fc-intranet-web:v20260429-1624
           imagePullPolicy: Never
           ports:
             - containerPort: 5300
@@ -75,6 +76,12 @@ spec:
                   name: intranet-config
                   key: KnowledgeApiKey
                   optional: true
+            - name: TrustedHeaderAuthentication__SharedSecret
+              valueFrom:
+                configMapKeyRef:
+                  name: intranet-config
+                  key: TrustedHeaderSharedSecret
+                  optional: true
           resources:
             requests:
               memory: "256Mi"