public_git
/
oauth2-proxy
mirror of https://github.com/oauth2-proxy/oauth2-proxy.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

updated deployment.yaml

This commit is contained in:
yasar 2023-03-21 12:22:46 +05:30
parent f26b920573
commit b8dac5f907
4 changed files with 26 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
helm/hsd-oauth-proxy/templates/deployment.yaml
View File

@ -36,8 +36,8 @@ spec:
- configMapRef: - configMapRef:
name: hsd-oauth-proxy-env-cm name: hsd-oauth-proxy-env-cm
- secretRef: - secretRef:
name: hsd-oauth-proxy-es name: hsd-oauth-proxy-externalsecret
{{- range $k, $v := .Values.optionalEnvVariables }} {{- range $k, $v := .Values.envVariables }}
- name: {{ $k | quote }} - name: {{ $k | quote }}
value: {{ $v | quote }} value: {{ $v | quote }}
{{- end }} {{- end }}

11
helm/hsd-oauth-proxy/templates/hsd-oauth-proxy-env-cm.yaml
View File

@ -3,17 +3,6 @@ kind: ConfigMap
metadata: metadata:
name: hsd-oauth-proxy-env-cm name: hsd-oauth-proxy-env-cm
data: data:
OAUTH2_PROXY_COOKIE_EXPIRE: {{ .Values.envVariables.OAUTH2_PROXY_COOKIE_EXPIRE | quote }}
OAUTH2_PROXY_COOKIE_REFRESH: {{ .Values.envVariables.OAUTH2_PROXY_COOKIE_REFRESH | quote }}
OAUTH2_PROXY_HTTP_ADDRESS: {{ .Values.envVariables.OAUTH2_PROXY_HTTP_ADDRESS | quote }}
OAUTH2_PROXY_METRICS_ADDRESS: {{ .Values.envVariables.OAUTH2_PROXY_METRICS_ADDRESS | quote }}
OAUTH2_PROXY_PROXY_PREFIX: {{ .Values.envVariables.OAUTH2_PROXY_PROXY_PREFIX | quote }}
OAUTH2_PROXY_REDIRECT_URL: {{ .Values.envVariables.OAUTH2_PROXY_REDIRECT_URL | quote }}
OAUTH2_PROXY_STANDARD_LOGGING: {{ .Values.envVariables.OAUTH2_PROXY_STANDARD_LOGGING | quote }}
OAUTH2_PROXY_REQUEST_LOGGING: {{ .Values.envVariables.OAUTH2_PROXY_REQUEST_LOGGING | quote }}
OAUTH2_PROXY_AUTH_LOGGING: {{ .Values.envVariables.OAUTH2_PROXY_AUTH_LOGGING | quote }}
OAUTH2_PROXY_COOKIE_SECURE: "true" OAUTH2_PROXY_COOKIE_SECURE: "true"
OAUTH2_PROXY_EMAIL_DOMAINS: "*" OAUTH2_PROXY_EMAIL_DOMAINS: "*"
OAUTH2_PROXY_INSECURE_OIDC_ALLOW_UNVERIFIED_EMAIL: "true" OAUTH2_PROXY_INSECURE_OIDC_ALLOW_UNVERIFIED_EMAIL: "true"

19
helm/hsd-oauth-proxy/templates/hsd-oauth-proxy-externalsecret.yaml Normal file
View File

@ -0,0 +1,19 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: hsd-oauth-proxy-externalsecret
spec:
secretStoreRef:
name: aws-parameter-cluster-store
kind: ClusterSecretStore
refreshInterval: "10m"
target:
name: hsd-oauth-proxy-externalsecret
creationPolicy: 'Owner'
dataFrom:
- extract:
key: {{ .Values.secretStoreBasePath}}/authgateway/oauthproxy-secrets
- extract:
key: {{ .Values.secretStoreBasePath}}/authgateway/oauth-cookiedomain-env
- extract:
key: {{ .Values.secretStoreBasePath}}/authgateway/oauth-whitelistdomain-env

11
helm/hsd-oauth-proxy/values.yaml
View File

@ -76,9 +76,8 @@ envVariables:
OAUTH2_PROXY_COOKIE_EXPIRE: "24h0m0s" OAUTH2_PROXY_COOKIE_EXPIRE: "24h0m0s"
OAUTH2_PROXY_COOKIE_REFRESH: "0h28m0s" OAUTH2_PROXY_COOKIE_REFRESH: "0h28m0s"
OAUTH2_PROXY_STANDARD_LOGGING: false OAUTH2_PROXY_STANDARD_LOGGING: "false"
OAUTH2_PROXY_REQUEST_LOGGING: false OAUTH2_PROXY_REQUEST_LOGGING: "false"
OAUTH2_PROXY_AUTH_LOGGING: false OAUTH2_PROXY_AUTH_LOGGING: "false"
#Any additional OAuth2 specific enviroment variables can be passed here #Any additional OAuth2 specific enviroment variables can be added here
optionalEnvVariables: {}