Move jwks.json to subfolder

oathkeeper/config.yaml

@@ -33,7 +33,7 @@ mutators:
     enabled: true
     config:
       issuer_url: https://dev-auth.holi.social # overridden via env var with environment specific value
-      jwks_url: file:///opt/oathkeeper/jwks.json
+      jwks_url: file:///opt/oathkeeper/secrets/jwks.json
       ttl: 60s
       claims: '{"ident": "{{ if and .Extra (index .Extra "identity") }}{{ print (replace " " "_" (lower .Extra.identity.traits.name)) }}{{ else }}anonyous{{ end }}"}'
 

terraform/environments/deployment.tf

@@ -95,7 +95,7 @@ resource "google_cloud_run_service" "unified_api" {
           value = local.environment == "production" ? "https://auth.holi.social/sessions/whoami" : "https://dev-auth.holi.social/sessions/whoami"
         }
         volume_mounts {
-          mount_path = "/opt/oathkeeper/"
+          mount_path = "/opt/oathkeeper/secrets/"
           name       = "JWKS"
         }