updated deployment.yaml

This commit is contained in:
yasar 2023-03-21 12:22:46 +05:30
parent f26b920573
commit b8dac5f907
4 changed files with 26 additions and 19 deletions

View File

@ -36,8 +36,8 @@ spec:
- configMapRef:
name: hsd-oauth-proxy-env-cm
- secretRef:
name: hsd-oauth-proxy-es
{{- range $k, $v := .Values.optionalEnvVariables }}
name: hsd-oauth-proxy-externalsecret
{{- range $k, $v := .Values.envVariables }}
- name: {{ $k | quote }}
value: {{ $v | quote }}
{{- end }}

View File

@ -3,17 +3,6 @@ kind: ConfigMap
metadata:
name: hsd-oauth-proxy-env-cm
data:
OAUTH2_PROXY_COOKIE_EXPIRE: {{ .Values.envVariables.OAUTH2_PROXY_COOKIE_EXPIRE | quote }}
OAUTH2_PROXY_COOKIE_REFRESH: {{ .Values.envVariables.OAUTH2_PROXY_COOKIE_REFRESH | quote }}
OAUTH2_PROXY_HTTP_ADDRESS: {{ .Values.envVariables.OAUTH2_PROXY_HTTP_ADDRESS | quote }}
OAUTH2_PROXY_METRICS_ADDRESS: {{ .Values.envVariables.OAUTH2_PROXY_METRICS_ADDRESS | quote }}
OAUTH2_PROXY_PROXY_PREFIX: {{ .Values.envVariables.OAUTH2_PROXY_PROXY_PREFIX | quote }}
OAUTH2_PROXY_REDIRECT_URL: {{ .Values.envVariables.OAUTH2_PROXY_REDIRECT_URL | quote }}
OAUTH2_PROXY_STANDARD_LOGGING: {{ .Values.envVariables.OAUTH2_PROXY_STANDARD_LOGGING | quote }}
OAUTH2_PROXY_REQUEST_LOGGING: {{ .Values.envVariables.OAUTH2_PROXY_REQUEST_LOGGING | quote }}
OAUTH2_PROXY_AUTH_LOGGING: {{ .Values.envVariables.OAUTH2_PROXY_AUTH_LOGGING | quote }}
OAUTH2_PROXY_COOKIE_SECURE: "true"
OAUTH2_PROXY_EMAIL_DOMAINS: "*"
OAUTH2_PROXY_INSECURE_OIDC_ALLOW_UNVERIFIED_EMAIL: "true"

View File

@ -0,0 +1,19 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: hsd-oauth-proxy-externalsecret
spec:
secretStoreRef:
name: aws-parameter-cluster-store
kind: ClusterSecretStore
refreshInterval: "10m"
target:
name: hsd-oauth-proxy-externalsecret
creationPolicy: 'Owner'
dataFrom:
- extract:
key: {{ .Values.secretStoreBasePath}}/authgateway/oauthproxy-secrets
- extract:
key: {{ .Values.secretStoreBasePath}}/authgateway/oauth-cookiedomain-env
- extract:
key: {{ .Values.secretStoreBasePath}}/authgateway/oauth-whitelistdomain-env

View File

@ -76,9 +76,8 @@ envVariables:
OAUTH2_PROXY_COOKIE_EXPIRE: "24h0m0s"
OAUTH2_PROXY_COOKIE_REFRESH: "0h28m0s"
OAUTH2_PROXY_STANDARD_LOGGING: false
OAUTH2_PROXY_REQUEST_LOGGING: false
OAUTH2_PROXY_AUTH_LOGGING: false
#Any additional OAuth2 specific enviroment variables can be passed here
optionalEnvVariables: {}
OAUTH2_PROXY_STANDARD_LOGGING: "false"
OAUTH2_PROXY_REQUEST_LOGGING: "false"
OAUTH2_PROXY_AUTH_LOGGING: "false"
#Any additional OAuth2 specific enviroment variables can be added here