tidepool-org · darinkrauss · Dec 30, 2025 · Jan 12, 2026 · Jan 14, 2026 · Jan 22, 2026
diff --git a/charts/tidepool/charts/abbott/README.md b/charts/tidepool/charts/abbott/README.md
@@ -14,6 +14,7 @@ A Helm chart for Kubernetes
 | configmap.redirectURL | string | `""` | OAuth2 redirect URL |
 | configmap.tokenURL | string | `""` | OAuth2 token URL |
 | configmap.authorizeURL | string | `""` | OAuth2 authorization URL |
+| configmap.revokeURL | string | `""` | OAuth2 revoke URL |
 | configmap.jwksURL | string | `""` | JWKS URL |
 | configmap.clientURL | string | `""` | client URL |
 | configmap.scopes | string | `""` | OAuth2 scopes |

diff --git a/charts/tidepool/charts/abbott/templates/0-configmap.yaml b/charts/tidepool/charts/abbott/templates/0-configmap.yaml
@@ -14,6 +14,7 @@ data:
 {{ end }}
   TokenURL: {{ .Values.configmap.tokenURL | default "" }}
   AuthorizeURL: {{ .Values.configmap.authorizeURL | default "" }}
+  RevokeURL: {{ .Values.configmap.revokeURL | default "" }}
   JWKSURL: {{ .Values.configmap.jwksURL | default "" }}
   ClientURL: {{ .Values.configmap.clientURL | default "" }}
   Scopes: {{ .Values.configmap.scopes | default "" }}

diff --git a/charts/tidepool/charts/abbott/values.yaml b/charts/tidepool/charts/abbott/values.yaml
@@ -3,6 +3,7 @@ configmap:
   redirectURL: ""
   tokenURL: ""
   authorizeURL: ""
+  revokeURL: ""
   jwksURL: ""
   clientURL: ""
   scopes: ""

diff --git a/charts/tidepool/charts/auth/templates/1-deployment.yaml b/charts/tidepool/charts/auth/templates/1-deployment.yaml
@@ -8,8 +8,8 @@ metadata:
   name: auth
   namespace: {{.Release.Namespace}}
   annotations:
-    secret.reloader.stakater.com/reload: "server,{{ .Values.mongo.secretName }},abbott,dexcom,twiist,auth"
-    configmap.reloader.stakater.com/reload: "abbott,dexcom,twiist"
+    secret.reloader.stakater.com/reload: "auth,server,{{ .Values.mongo.secretName }},abbott,customer-io,dexcom,oura,twiist"
+    configmap.reloader.stakater.com/reload: "abbott,auth,customer-io,dexcom,oura,twiist"
 {{ if .Values.deployment.annotations }}
     {{- .Values.deployment.annotations | toYaml | nindent 4 }}
 {{- end }}
@@ -75,6 +75,12 @@ spec:
               name: abbott
               key: TokenURL
               optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_ABBOTT_REVOKE_URL
+          valueFrom:
+            configMapKeyRef:
+              name: abbott
+              key: RevokeURL
+              optional: true
         - name: TIDEPOOL_SERVICE_PROVIDER_ABBOTT_JWKS_URL
           valueFrom:
             configMapKeyRef:
@@ -125,6 +131,12 @@ spec:
               name: dexcom
               key: TokenURL
               optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_DEXCOM_REVOKE_URL
+          valueFrom:
+            configMapKeyRef:
+              name: dexcom
+              key: RevokeURL
+              optional: true
         - name: TIDEPOOL_SERVICE_PROVIDER_DEXCOM_CLIENT_ID
           valueFrom:
             secretKeyRef:
@@ -143,6 +155,78 @@ spec:
               name: dexcom
               key: StateSalt
               optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_OURA_CLIENT_ID
+          valueFrom:
+            secretKeyRef:
+              name: oura
+              key: ClientId
+              optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_OURA_CLIENT_SECRET
+          valueFrom:
+            secretKeyRef:
+              name: oura
+              key: ClientSecret
+              optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_OURA_ACCEPT_URL
+          valueFrom:
+            configMapKeyRef:
+              name: oura
+              key: AcceptURL
+              optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_OURA_AUTHORIZE_URL
+          valueFrom:
+            configMapKeyRef:
+              name: oura
+              key: AuthorizeURL
+              optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_OURA_REDIRECT_URL
+          valueFrom:
+            configMapKeyRef:
+              name: oura
+              key: RedirectURL
+              optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_OURA_TOKEN_URL
+          valueFrom:
+            configMapKeyRef:
+              name: oura
+              key: TokenURL
+              optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_OURA_REVOKE_URL
+          valueFrom:
+            configMapKeyRef:
+              name: oura
+              key: RevokeURL
+              optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_OURA_SCOPES
+          valueFrom:
+            configMapKeyRef:
+              name: oura
+              key: Scopes
+              optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_OURA_STATE_SALT
+          valueFrom:
+            secretKeyRef:
+              name: oura
+              key: StateSalt
+              optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_OURA_CLIENT_ADDRESS
+          valueFrom:
+            configMapKeyRef:
+              name: oura
+              key: ClientURL
+              optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_OURA_PARTNER_URL
+          valueFrom:
+            configMapKeyRef:
+              name: oura
+              key: PartnerURL
+              optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_OURA_PARTNER_SECRET
+          valueFrom:
+            secretKeyRef:
+              name: oura
+              key: PartnerSecret
+              optional: true
         - name: TIDEPOOL_SERVICE_PROVIDER_TWIIST_AUTHORIZE_URL
           valueFrom:
             configMapKeyRef:
@@ -161,6 +245,12 @@ spec:
               name: twiist
               key: TokenURL
               optional: true
+        - name: TIDEPOOL_SERVICE_PROVIDER_TWIIST_REVOKE_URL
+          valueFrom:
+            configMapKeyRef:
+              name: twiist
+              key: RevokeURL
+              optional: true
         - name: TIDEPOOL_SERVICE_PROVIDER_TWIIST_JWKS_URL
           valueFrom:
             configMapKeyRef:
@@ -320,6 +410,60 @@ spec:
               name: palmtree
               key: tlsKeyData
               optional: true
+        - name: TIDEPOOL_OURA_JOTFORM_API_KEY
+          valueFrom:
+            secretKeyRef:
+              name: oura
+              key: JotformAPIKey
+              optional: true
+        - name: TIDEPOOL_OURA_JOTFORM_BASE_URL
+          valueFrom:
+            configMapKeyRef:
+              name: oura
+              key: JotformBaseURL
+              optional: true
+        - name: TIDEPOOL_OURA_JOTFORM_FORM_ID
+          valueFrom:
+            configMapKeyRef:
+              name: oura
+              key: JotformFormId
+              optional: true
+        - name: TIDEPOOL_CUSTOMERIO_SITE_ID
+          valueFrom:
+            configMapKeyRef:
+              name: customer-io
+              key: SiteId
+              optional: true
+        - name: TIDEPOOL_CUSTOMERIO_APP_API_KEY
+          valueFrom:
+            secretKeyRef:
+              name: customer-io
+              key: AppAPIKey
+              optional: true
+        - name: TIDEPOOL_CUSTOMERIO_TRACK_API_KEY
+          valueFrom:
+            secretKeyRef:
+              name: customer-io
+              key: TrackAPIKey
+              optional: true
+        - name: TIDEPOOL_OURA_SHOPIFY_STORE_ID
+          valueFrom:
+            configMapKeyRef:
+              name: oura
+              key: ShopifyStoreId
+              optional: true
+        - name: TIDEPOOL_OURA_SHOPIFY_CLIENT_ID
+          valueFrom:
+            secretKeyRef:
+              name: oura
+              key: ShopifyClientId
+              optional: true
+        - name: TIDEPOOL_OURA_SHOPIFY_CLIENT_SECRET
+          valueFrom:
+            secretKeyRef:
+              name: oura
+              key: ShopifyClientSecret
+              optional: true
 {{- range $key, $val := ((.Values.deployment).extraEnv | default ((.Values.global).deployment).extraEnv | default (dict)) }}
         - name: {{ $key }}
           value: {{ $val | quote }}

diff --git a/charts/tidepool/charts/auth/templates/4-routetable.yaml b/charts/tidepool/charts/auth/templates/4-routetable.yaml
@@ -152,6 +152,22 @@ spec:
       single:
         upstream:
           name: auth
+  - matchers:
+    - methods:
+      - POST
+      regex: /v1/partners/jotform/[^/]+
+    routeAction:
+      single:
+        upstream:
+          name: auth
+  - matchers:
+      - methods:
+          - POST
+        prefix: /v1/partners/shopify/
+    routeAction:
+      single:
+        upstream:
+          name: auth
   - matchers:
       - methods:
           - GET

diff --git a/charts/tidepool/charts/customer-io/.helmignore b/charts/tidepool/charts/customer-io/.helmignore
@@ -0,0 +1,22 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
diff --git a/charts/tidepool/charts/customer-io/Chart.yaml b/charts/tidepool/charts/customer-io/Chart.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+appVersion: "1.0"
+description: A Helm chart for Kubernetes
+name: customer-io
+version: 0.1.0
+home: https://github.com/tidepool-org/development/charts
diff --git a/charts/tidepool/charts/customer-io/README.md b/charts/tidepool/charts/customer-io/README.md
@@ -0,0 +1,18 @@
+# customer-io
+
+![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![AppVersion: 1.0](https://img.shields.io/badge/AppVersion-1.0-informational?style=flat-square)
+
+A Helm chart for Kubernetes
+
+**Homepage:** <https://github.com/tidepool-org/development/charts>
+
+## Values
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| secret.data_.customerIOAppAPIKey | string | `""` | API key customer.io's App API |
+| secret.data_.customerIOTrackAPIKey | string | `""` | API key customer.io's Track API |
+| secret.enabled | bool | `false` | whether to generate a secret |
+
+----------------------------------------------
+Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
diff --git a/charts/tidepool/charts/customer-io/templates/0-configmap.yaml b/charts/tidepool/charts/customer-io/templates/0-configmap.yaml
@@ -0,0 +1,11 @@
+{{ if .Values.configmap.enabled }}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: customer-io
+  namespace: {{ .Release.Namespace }}
+  labels:
+{{ include "charts.labels.standard" . }}
+data:
+  SiteId: "{{ .Values.configmap.siteId | default "" }}"
+{{ end }}
diff --git a/charts/tidepool/charts/customer-io/templates/0-secret.yaml b/charts/tidepool/charts/customer-io/templates/0-secret.yaml
@@ -0,0 +1,14 @@
+{{ if .Values.secret.enabled -}}
+---
+apiVersion: v1
+{{ with .Values.secret.data_ -}}
+data:
+  AppAPIKey: {{ .appAPIKey | default "" | b64enc | quote }}
+  TrackAPIKey: {{ .trackAPIKey | default "" | b64enc | quote }}
+{{- end }}
+kind: Secret
+metadata:
+  name: customer-io
+  namespace: {{ .Release.Namespace }}
+type: Opaque
+{{- end }}
diff --git a/charts/tidepool/charts/customer-io/values.yaml b/charts/tidepool/charts/customer-io/values.yaml
@@ -0,0 +1,13 @@
+secret:
+  # -- whether to generate a secret
+  enabled: false
+  data_:
+    # -- API key customer.io's App API
+    appAPIKey: ""
+    # -- API key customer.io's Track API
+    trackAPIKey: ""
+configmap:
+  # -- whether to generate a configmap
+  enabled: true
+  # -- Customer.io site ID
+  siteId: ""