From b24e4e976f11cb4c5a5b7870da47ce3f3383bd0a Mon Sep 17 00:00:00 2001
From: Michal Konecny <mkonecny@redhat.com>
Date: Wed, 1 Oct 2025 08:58:22 +0200
Subject: [PATCH] [haproxy] Add rule for openidc endpoint

The paths are too similar and /openidc ended up being routed to wrong
ipsilon server, let's add specific rule for OIDC as well.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
---
 roles/haproxy/templates/haproxy.cfg | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/roles/haproxy/templates/haproxy.cfg b/roles/haproxy/templates/haproxy.cfg
index bed967cf5c..db42a85217 100644
--- a/roles/haproxy/templates/haproxy.cfg
+++ b/roles/haproxy/templates/haproxy.cfg
@@ -173,7 +173,10 @@ frontend ipsilon-frontend
 
 {% if env == "staging" %}
     # Define ipsilon OpenID only instance
+    acl path_openid path_beg /openidc
     acl path_openid path_beg /openid
+
+    use_backend ipsilon-backend if path_openidc
     use_backend ipsilon-backend-openid if path_openid
 {% endif %}