bea3f04bf8
* update to release version v7.15.5 * Merge commit from fork Signed-off-by: Jan Larwig <jan@larwig.com> Co-authored-by: blakeroberts-wk <blake.roberts@workiva.com> * Merge commit from fork Signed-off-by: Jan Larwig <jan@larwig.com> * Merge commit from fork * fix: validate trusted IP proxy headers Respect trusted proxy boundaries before using real-client-IP headers for authentication bypass decisions and safely traverse X-Forwarded-For chains. Signed-off-by: Jan Larwig <jan@larwig.com> * fix: trusted-ip header bypass Signed-off-by: Jan Larwig <jan@larwig.com> * docs: add changelog entry Signed-off-by: Jan Larwig <jan.larwig@digits.schwarz> --------- Signed-off-by: Jan Larwig <jan@larwig.com> Signed-off-by: Jan Larwig <jan.larwig@digits.schwarz> * docs: changelog for v7.15.5 Signed-off-by: Jan Larwig <jan.larwig@digits.schwarz> * docs: update order of owners for prow Signed-off-by: Jan Larwig <jan.larwig@digits.schwarz> * ci: make the linter happy again Signed-off-by: Jan Larwig <jan.larwig@digits.schwarz> --------- Signed-off-by: Jan Larwig <jan@larwig.com> Signed-off-by: Jan Larwig <jan.larwig@digits.schwarz> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Jan Larwig <jan@larwig.com> Co-authored-by: blakeroberts-wk <blake.roberts@workiva.com> Co-authored-by: Jan Larwig <jan.larwig@digits.schwarz>
1.6 KiB
id, title
| id | title |
|---|---|
| installation | Installation |
-
Choose how to deploy:
a. Using a Prebuilt Binary (current release is
v7.15.5)b. Using Go to install the latest release
$ go install github.com/oauth2-proxy/oauth2-proxy/v7@latestThis will install the binary into
$GOPATH/bin. Make sure you include$GOPATHin your$PATH. Otherwise your system won't find binaries installed viago installc. Using a Prebuilt Docker Image (AMD64, PPC64LE, S390x, ARMv6, ARMv7, and ARM64 available)
d. Using a Pre-Release Nightly Docker Image (AMD64, PPC64LE, ARMv6, ARMv7, and ARM64 available)
e. Using the official Kubernetes manifest (Helm)
Prebuilt binaries can be validated by extracting the file and verifying it against the
sha256sum.txtchecksum file provided for each release starting with versionv3.0.0.$ sha256sum -c sha256sum.txt oauth2-proxy-x.y.z.linux-amd64: OK -
Select a Provider and Register an OAuth Application with a Provider
-
Configure OAuth2 Proxy using config file, command line options, or environment variables
-
Configure SSL or Deploy behind an SSL endpoint (example provided for Nginx)
-
Configure OAuth2 Proxy using systemd.socket (example provided for Nginx/Systemd)