129 lines
3.9 KiB
YAML
129 lines
3.9 KiB
YAML
# Default values for hsd-oauth-proxy.
|
|
# This is a YAML-formatted file.
|
|
# Declare variables to be passed into your templates.
|
|
|
|
replicaCount: 1
|
|
|
|
image:
|
|
repository: 070446044274.dkr.ecr.us-east-1.amazonaws.com/hsd-pfs-auth-gateway-oauth-proxy
|
|
pullPolicy: IfNotPresent
|
|
# Overrides the image tag whose default is the chart appVersion.
|
|
tag: ""
|
|
|
|
imagePullSecrets: []
|
|
nameOverride: ""
|
|
fullnameOverride: ""
|
|
|
|
serviceAccount:
|
|
# Specifies whether a service account should be created
|
|
create: false
|
|
# Annotations to add to the service account
|
|
annotations: {}
|
|
# The name of the service account to use.
|
|
# If not set and create is true, a name is generated using the fullname template
|
|
name: ""
|
|
|
|
podAnnotations: {}
|
|
|
|
podSecurityContext: {}
|
|
# fsGroup: 2000
|
|
|
|
securityContext: {}
|
|
# capabilities:
|
|
# drop:
|
|
# - ALL
|
|
# readOnlyRootFilesystem: true
|
|
# runAsNonRoot: true
|
|
# runAsUser: 1000
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 8080
|
|
|
|
ingress:
|
|
enabled: false
|
|
className: ""
|
|
annotations: {}
|
|
# kubernetes.io/ingress.class: nginx
|
|
# kubernetes.io/tls-acme: "true"
|
|
hosts:
|
|
- host: chart-example.local
|
|
paths:
|
|
- path: /
|
|
pathType: ImplementationSpecific
|
|
tls: []
|
|
# - secretName: chart-example-tls
|
|
# hosts:
|
|
# - chart-example.local
|
|
|
|
resources: {}
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user. This also increases chances charts run on environments with little
|
|
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
|
|
autoscaling:
|
|
enabled: false
|
|
minReplicas: 1
|
|
maxReplicas: 100
|
|
targetCPUUtilizationPercentage: 80
|
|
# targetMemoryUtilizationPercentage: 80
|
|
|
|
nodeSelector: {}
|
|
|
|
tolerations: []
|
|
|
|
affinity: {}
|
|
|
|
envSecrets:
|
|
OAUTH2_PROXY_CLIENT_SECRET: ""
|
|
OAUTH2_PROXY_COOKIE_SECRET: ""
|
|
OAUTH2_PROXY_REDIS_CONNECTION_URL: ""
|
|
|
|
envVariables:
|
|
OAUTH2_PROXY_AUTH_LOGGING: "true"
|
|
OAUTH2_PROXY_AUTH_LOGGING_FORMAT: "info|CustomLogEvent||OAuth2Proxy|{{.Client}} - [{{.Timestamp}}] [{{.Status}}] {{.Message}}"
|
|
OAUTH2_PROXY_CLIENT_ID: ""
|
|
OAUTH2_PROXY_COOKIE_DOMAINS: ""
|
|
OAUTH2_PROXY_COOKIE_EXPIRE: "24h0m0s"
|
|
OAUTH2_PROXY_COOKIE_NAME: "edi_session_wfm-ci"
|
|
OAUTH2_PROXY_COOKIE_REFRESH: "0h28m0s"
|
|
OAUTH2_PROXY_COOKIE_SECURE: "true"
|
|
OAUTH2_PROXY_EMAIL_DOMAINS: "*"
|
|
OAUTH2_PROXY_HTTP_ADDRESS: "0.0.0.0:8080"
|
|
OAUTH2_PROXY_INSECURE_OIDC_ALLOW_UNVERIFIED_EMAIL: "true"
|
|
OAUTH2_PROXY_INSECURE_OIDC_SKIP_ISSUER_VERIFICATION: "true"
|
|
OAUTH2_PROXY_INTROSPECT_URL: ""
|
|
OAUTH2_PROXY_LOGIN_URL: ""
|
|
OAUTH2_PROXY_METRICS_ADDRESS: "0.0.0.0:9090"
|
|
OAUTH2_PROXY_OIDC_ISSUER_URL: ""
|
|
OAUTH2_PROXY_OIDC_JWKS_URL: ""
|
|
OAUTH2_PROXY_PASS_ACCESS_TOKEN: "true"
|
|
OAUTH2_PROXY_PASS_AUTHORIZATION_HEADER: "true"
|
|
OAUTH2_PROXY_PASS_BASIC_AUTH: "true"
|
|
OAUTH2_PROXY_PROFILE_URL: ""
|
|
OAUTH2_PROXY_PROVIDER: "oidc"
|
|
OAUTH2_PROXY_PROVIDER_DISPLAY_NAME: "oidc"
|
|
OAUTH2_PROXY_PROXY_PREFIX: ""
|
|
OAUTH2_PROXY_REDEEM_URL: ""
|
|
OAUTH2_PROXY_REDIRECT_URL: ""
|
|
OAUTH2_PROXY_REQUEST_LOGGING: "true"
|
|
OAUTH2_PROXY_REQUEST_LOGGING_FORMAT: "info|CustomLogEvent||OAuth2Proxy|{{.Client}} - [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}}"
|
|
OAUTH2_PROXY_SESSION_STORE_TYPE: "redis"
|
|
OAUTH2_PROXY_SET_AUTHORIZATION_HEADER: "true"
|
|
OAUTH2_PROXY_SET_INTROSPECTION_VALUE: "true"
|
|
OAUTH2_PROXY_SET_XAUTHREQUEST: "true"
|
|
OAUTH2_PROXY_SKIP_OIDC_DISCOVERY: "true"
|
|
OAUTH2_PROXY_SKIP_PROVIDER_BUTTON: "true"
|
|
OAUTH2_PROXY_STANDARD_LOGGING: "true"
|
|
OAUTH2_PROXY_STANDARD_LOGGING_FORMAT: "info|CustomLogEvent||OAuth2Proxy|[{{.Timestamp}}] [{{.File}}] {{.Message}}"
|
|
OAUTH2_PROXY_UPSTREAMS: "static://"
|
|
OAUTH2_PROXY_WHITELIST_DOMAINS: ""
|
|
|
|
OptionalEnvVariables: {} |