add

deploy/k8s/00-config.yaml

@@ -113,8 +113,12 @@ data:
       # is unset, so a missing secret is a crash loop rather than an
       # unauthenticated console.
       auth:
-        mode: apikey
+        mode: oidc
         api_keys: ["${FANCYDNS_API_KEY}"]
+        oidc_issuer: https://users.k6n.net
+        oidc_audience: https://dns.k6n.net
+        oidc_client_id: fancy-dns
+        oidc_write_roles: [admin]
         trust_loopback: false
 
     metrics: