From 1d2dbf8ed728a936df0b5dfe4a420c4998e58852 Mon Sep 17 00:00:00 2001
From: jsell-rh <jsell@redhat.com>
Date: Tue, 28 Apr 2026 11:04:11 -0400
Subject: [PATCH] fix(deploy): add IAM single tenant mode configuration

Signed-off-by: jsell-rh <jsell@redhat.com>
---
 deploy/apps/kartograph/base/api-deployment.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/deploy/apps/kartograph/base/api-deployment.yaml b/deploy/apps/kartograph/base/api-deployment.yaml
index ec6906f9f..1de0bc5ee 100644
--- a/deploy/apps/kartograph/base/api-deployment.yaml
+++ b/deploy/apps/kartograph/base/api-deployment.yaml
@@ -115,6 +115,13 @@ spec:
                   key: SPICEDB_USE_TLS
             - name: SPICEDB_CERT_PATH
               value: /etc/spicedb-ca/service-ca.crt
+            # IAM config
+            - name: KARTOGRAPH_IAM_SINGLE_TENANT_MODE
+              valueFrom:
+                configMapKeyRef:
+                  name: kartograph-config
+                  key: KARTOGRAPH_IAM_SINGLE_TENANT_MODE
+                  optional: true
             # CORS config
             - name: KARTOGRAPH_CORS_ORIGINS
               valueFrom: