From d7205ca1d14aa92909ce35637c7d68b68bc7a69b Mon Sep 17 00:00:00 2001
From: Will Anderson <will@neuralplatform.ai>
Date: Thu, 16 Apr 2026 16:22:09 -0500
Subject: [PATCH] feat(fornax): add CF Access JWT and RBAC env vars to
 coordinator deployment

---
 servers/legion/k8s/fornax/coordinator/deployment.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/servers/legion/k8s/fornax/coordinator/deployment.yaml b/servers/legion/k8s/fornax/coordinator/deployment.yaml
index 7104110..7e4cbd6 100644
--- a/servers/legion/k8s/fornax/coordinator/deployment.yaml
+++ b/servers/legion/k8s/fornax/coordinator/deployment.yaml
@@ -35,6 +35,12 @@ spec:
               value: "admin"
             - name: QBT_PASS
               value: "adminadmin"
+            - name: CF_TEAM_DOMAIN
+              value: "neuralplatform.cloudflareaccess.com"
+            - name: CF_AUD
+              value: "530b995531b1227ea8adabea26d8635eba4347de795204945cbc3cce695728ec"
+            - name: FORNAX_BOOTSTRAP_ADMIN
+              value: "andersonwilliam85@gmail.com"
           envFrom:
             - secretRef:
                 name: fornax-coordinator-secrets