updated deployment.yaml
This commit is contained in:
parent
f26b920573
commit
b8dac5f907
|
|
@ -36,8 +36,8 @@ spec:
|
|||
- configMapRef:
|
||||
name: hsd-oauth-proxy-env-cm
|
||||
- secretRef:
|
||||
name: hsd-oauth-proxy-es
|
||||
{{- range $k, $v := .Values.optionalEnvVariables }}
|
||||
name: hsd-oauth-proxy-externalsecret
|
||||
{{- range $k, $v := .Values.envVariables }}
|
||||
- name: {{ $k | quote }}
|
||||
value: {{ $v | quote }}
|
||||
{{- end }}
|
||||
|
|
|
|||
|
|
@ -3,17 +3,6 @@ kind: ConfigMap
|
|||
metadata:
|
||||
name: hsd-oauth-proxy-env-cm
|
||||
data:
|
||||
|
||||
OAUTH2_PROXY_COOKIE_EXPIRE: {{ .Values.envVariables.OAUTH2_PROXY_COOKIE_EXPIRE | quote }}
|
||||
OAUTH2_PROXY_COOKIE_REFRESH: {{ .Values.envVariables.OAUTH2_PROXY_COOKIE_REFRESH | quote }}
|
||||
OAUTH2_PROXY_HTTP_ADDRESS: {{ .Values.envVariables.OAUTH2_PROXY_HTTP_ADDRESS | quote }}
|
||||
OAUTH2_PROXY_METRICS_ADDRESS: {{ .Values.envVariables.OAUTH2_PROXY_METRICS_ADDRESS | quote }}
|
||||
OAUTH2_PROXY_PROXY_PREFIX: {{ .Values.envVariables.OAUTH2_PROXY_PROXY_PREFIX | quote }}
|
||||
OAUTH2_PROXY_REDIRECT_URL: {{ .Values.envVariables.OAUTH2_PROXY_REDIRECT_URL | quote }}
|
||||
OAUTH2_PROXY_STANDARD_LOGGING: {{ .Values.envVariables.OAUTH2_PROXY_STANDARD_LOGGING | quote }}
|
||||
OAUTH2_PROXY_REQUEST_LOGGING: {{ .Values.envVariables.OAUTH2_PROXY_REQUEST_LOGGING | quote }}
|
||||
OAUTH2_PROXY_AUTH_LOGGING: {{ .Values.envVariables.OAUTH2_PROXY_AUTH_LOGGING | quote }}
|
||||
|
||||
OAUTH2_PROXY_COOKIE_SECURE: "true"
|
||||
OAUTH2_PROXY_EMAIL_DOMAINS: "*"
|
||||
OAUTH2_PROXY_INSECURE_OIDC_ALLOW_UNVERIFIED_EMAIL: "true"
|
||||
|
|
|
|||
|
|
@ -0,0 +1,19 @@
|
|||
apiVersion: external-secrets.io/v1beta1
|
||||
kind: ExternalSecret
|
||||
metadata:
|
||||
name: hsd-oauth-proxy-externalsecret
|
||||
spec:
|
||||
secretStoreRef:
|
||||
name: aws-parameter-cluster-store
|
||||
kind: ClusterSecretStore
|
||||
refreshInterval: "10m"
|
||||
target:
|
||||
name: hsd-oauth-proxy-externalsecret
|
||||
creationPolicy: 'Owner'
|
||||
dataFrom:
|
||||
- extract:
|
||||
key: {{ .Values.secretStoreBasePath}}/authgateway/oauthproxy-secrets
|
||||
- extract:
|
||||
key: {{ .Values.secretStoreBasePath}}/authgateway/oauth-cookiedomain-env
|
||||
- extract:
|
||||
key: {{ .Values.secretStoreBasePath}}/authgateway/oauth-whitelistdomain-env
|
||||
|
|
@ -76,9 +76,8 @@ envVariables:
|
|||
OAUTH2_PROXY_COOKIE_EXPIRE: "24h0m0s"
|
||||
OAUTH2_PROXY_COOKIE_REFRESH: "0h28m0s"
|
||||
|
||||
OAUTH2_PROXY_STANDARD_LOGGING: false
|
||||
OAUTH2_PROXY_REQUEST_LOGGING: false
|
||||
OAUTH2_PROXY_AUTH_LOGGING: false
|
||||
|
||||
#Any additional OAuth2 specific enviroment variables can be passed here
|
||||
optionalEnvVariables: {}
|
||||
OAUTH2_PROXY_STANDARD_LOGGING: "false"
|
||||
OAUTH2_PROXY_REQUEST_LOGGING: "false"
|
||||
OAUTH2_PROXY_AUTH_LOGGING: "false"
|
||||
|
||||
#Any additional OAuth2 specific enviroment variables can be added here
|
||||
|
|
|
|||
Loading…
Reference in New Issue