Inject KamoDesktop SSO env directly + wire guac-sso into tracked k8s deployment

Shipped

July 7, 2026 at 11:18 PM UTC

Author

Kamo

Commit

356f5b8

- @Value reads KAMO_GUAC_SIGNING_KEY / DESKTOP_PASSWORD from env directly (runtime application.yml is configmap-mounted, so property indirection wouldn't bind). - Add optional guac-sso secretRef to k8s/deployment.yaml (the manifest CI actually applies; deploy/ is gitignored). Revert the unused application.yml block.