Configure OpenID secrets via env variables

Support
1

Im trying to configure vikunja via your helmchart and have come up with the following config:

      configMaps:
        api-config:
          enabled: true
          data:
            config.yml: |
              auth:
                local:
                  enabled: false
                openid:
                  enabled: true
                  providers:
                    authentik:

      env:
      # OpenID settings
        VIKUNJA_AUTH_OPENID_PROVIDERS_AUTHENTIK_NAME: "authentik"
        VIKUNJA_AUTH_OPENID_PROVIDERS_AUTHENTIK_SCOPE: "openid profile email"
        VIKUNJA_AUTH_OPENID_PROVIDERS_AUTHENTIK_LOGOUTURL: "https://ABC.DE/application/o/vikunja/end-session/"
        VIKUNJA_AUTH_OPENID_PROVIDERS_AUTHENTIK_AUTHURL:
          valueFrom:
            secretKeyRef:
              name: sealed-secret-vikunja-passwords
              key: vikunja-openid-authurl
        VIKUNJA_AUTH_OPENID_PROVIDERS_AUTHENTIK_CLIENTID:
          valueFrom:
            secretKeyRef:
              name: sealed-secret-vikunja-passwords
              key: vikunja-openid-clientid
        VIKUNJA_AUTH_OPENID_PROVIDERS_AUTHENTIK_CLIENTSECRET:
          valueFrom:
            secretKeyRef:
              name: sealed-secret-vikunja-passwords
              key: vikunja-openid-clientsecret

but regardless which combination of env variables and config map variables I am choosing, I always get one of the following errors, see below.
With unstable tag:

INFO      ▶ 001 Using config file: /etc/vikunja/config.yml
panic: interface conversion: interface {} is string, not map[string]interface {}

with 0.24.5:

interface conversion: interface {} is map[string]interface {}, not string goroutine 303 [running]:

Im really getting frustrated with this config as it seems there is some bug in the code and the documentation does really not help with figuring things out or having an example.

Can somebody please help me with my problem or provide an example that works?
I must have the secrets inside the existing sealed-secret, so I cant just plain text them because of gitops practices I use in my homelab.

Thanks for anyone that can help me with this ^^

2

This is a known issue, see discussion here. It’s being worked.

3

This sounds like a bug. Does it work if you remove this line:

                  providers:
                    authentik: