fix(deploy): correct stage OIDC URL configuration for Dev UI

[aredenba-rh]

Summary

• Fixed misconfigured stage OIDC settings that produced a malformed authority URL
• The Dev UI was building https://auth.stage.redhat.com/auth/realms/EmployeeIDP/realms/kartograph (double /realms/)
• Made correction in config,ap-patch.yaml so the code correctly builds https://auth.stage.redhat.com/auth/realms/EmployeeIDP

Root Cause

The stage configmap had the full issuer URL in DEV_UI_KEYCLOAK_URL while useAuth.ts appends /realms/${realm} to that value. Local dev worked because it uses just the base URL (http://keycloak:8080).

Summary by CodeRabbit

• Chores
  • Updated stage authentication configuration to use the base authentication endpoint and set the realm to EmployeeIDP, while keeping the client identifier unchanged. This aligns stage sign-in endpoints and may affect authentication behavior in the stage environment.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 7603da50-ff15-4987-8db1-f17c48e160cb

📥 Commits

Reviewing files that changed from the base of the PR and between e82e4a2 and 89d4c38.

📒 Files selected for processing (1)

• deploy/apps/kartograph/overlays/stage/configmap-patch.yaml

🚧 Files skipped from review as they are similar to previous changes (1)

• deploy/apps/kartograph/overlays/stage/configmap-patch.yaml

---

Walkthrough

A ConfigMap patch for the Kartograph staging overlay updates Keycloak settings: DEV_UI_KEYCLOAK_URL is changed from a realm-specific endpoint to the base auth endpoint (https://auth.stage.redhat.com/auth), and DEV_UI_KEYCLOAK_REALM is changed from kartograph to EmployeeIDP. DEV_UI_KEYCLOAK_CLIENT_ID remains unchanged. These edits adjust which Keycloak realm and URL the Dev UI uses in the staging environment.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately and specifically describes the main change: correcting stage OIDC URL configuration, which is the core bug fix in this pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch austin/oidc-url-stage-bug

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}