oauth2-proxy helm

No introduction found. Create it?

Install

Install with:

helm repo add bjw-s oci://ghcr.io/bjw-s/helm/
helm install oauth2-proxy bjw-s/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (3 out of 5)

NameRepoStarsVersionTimestamp
oauth2-proxytyriis/home-ops383.5.13 days ago
oauth2-proxycarpenike/k8s-gitops2343.2.13 months ago
oauth2-proxybjw-s/home-ops3951.5.110 months ago

Values

See the most popular values for this chart:

KeyTypes
controllers.oauth2-proxy.annotations."reloader.stakater.com/auto" (3)
true
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_COOKIE_DOMAINS (2)
holthome.net
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_COOKIE_SECURE (2)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_EMAIL_DOMAINS (2)
*
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_HTTP_ADDRESS (2)
0.0.0.0:4180
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_METRICS_ADDRESS (2)
0.0.0.0:44180
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_PASS_ACCESS_TOKEN (2)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_PASS_AUTHORIZATION_HEADER (2)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_PASS_HOST_HEADER (2)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_PASS_USER_HEADERS (2)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_PREFER_EMAIL_TO_USER (2)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_PROVIDER (2)
azure
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_REDIS_CONNECTION_URL (2)
redis://oauth2-proxy-redis.security.svc.cluster.local:6379
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_REVERSE_PROXY (2)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_SCOPE (2)
openid profile email
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_SESSION_STORE_TYPE (2)
redis
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_SET_AUTHORIZATION-HEADER (2)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_SET_XAUTHREQUEST (2)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_AZURE_TENANT.valueFrom.secretKeyRef.key (1)
azure-tenant
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_AZURE_TENANT.valueFrom.secretKeyRef.name (1)
oauth2-proxy-secrets
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_CLIENT_ID.valueFrom.secretKeyRef.key (1)
client-id
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_CLIENT_ID.valueFrom.secretKeyRef.name (1)
oauth2-proxy-secrets
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_CLIENT_SECRET.valueFrom.secretKeyRef.key (1)
client-secret
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_CLIENT_SECRET.valueFrom.secretKeyRef.name (1)
oauth2-proxy-secrets
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_COOKIE_SECRET.valueFrom.secretKeyRef.key (1)
cookie-secret
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_COOKIE_SECRET.valueFrom.secretKeyRef.name (1)
oauth2-proxy-secrets
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_LOGIN_URL (1)
https://accounts.google.com/o/oauth2/v2/auth?access_type=offline
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_OIDC_ISSUER_URL.valueFrom.secretKeyRef.key (1)
oidc-issuer-url
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_OIDC_ISSUER_URL.valueFrom.secretKeyRef.name (1)
oauth2-proxy-secrets
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_OIDC_ISSUER_URL (1)
https://accounts.google.com
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_REDEEM_URL (1)
https://oauth2.googleapis.com/token
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_REDIS_PASSWORD.valueFrom.secretKeyRef.key (1)
redis-password
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_REDIS_PASSWORD.valueFrom.secretKeyRef.name (1)
oauth2-proxy-secrets
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_SILENCE_PING_LOGGING (1)
true
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_WHITELIST_DOMAINS (1)
.ryho.lt
string
controllers.oauth2-proxy.containers.app.image.repository (2)
quay.io/oauth2-proxy/oauth2-proxy
string
controllers.oauth2-proxy.containers.app.image.tag (2)
v7.6.0
string
controllers.oauth2-proxy.containers.app.probes.liveness.custom (2)
true
boolean
controllers.oauth2-proxy.containers.app.probes.liveness.enabled (2)
true
boolean
controllers.oauth2-proxy.containers.app.probes.liveness.spec.failureThreshold (2)
3
number
controllers.oauth2-proxy.containers.app.probes.liveness.spec.httpGet.path (2)
/ping
string
controllers.oauth2-proxy.containers.app.probes.liveness.spec.httpGet.port (2)
4180
number
controllers.oauth2-proxy.containers.app.probes.liveness.spec.initialDelaySeconds (2)
10
number
controllers.oauth2-proxy.containers.app.probes.liveness.spec.periodSeconds (2)
10
number
controllers.oauth2-proxy.containers.app.probes.liveness.spec.timeoutSeconds (2)
1
number
controllers.oauth2-proxy.containers.app.probes.readiness.custom (2)
true
boolean
controllers.oauth2-proxy.containers.app.probes.readiness.enabled (2)
true
boolean
controllers.oauth2-proxy.containers.app.probes.readiness.spec.failureThreshold (2)
3
number
controllers.oauth2-proxy.containers.app.probes.readiness.spec.httpGet.path (2)
/ready
string
controllers.oauth2-proxy.containers.app.probes.readiness.spec.httpGet.port (2)
4180
number
controllers.oauth2-proxy.containers.app.probes.readiness.spec.initialDelaySeconds (2)
10
number
controllers.oauth2-proxy.containers.app.probes.readiness.spec.periodSeconds (2)
10
number
controllers.oauth2-proxy.containers.app.probes.readiness.spec.timeoutSeconds (2)
1
number
controllers.oauth2-proxy.containers.app.probes.startup.enabled (2)
true
boolean
controllers.oauth2-proxy.containers.app.probes.startup.spec.failureThreshold (2)
30
number
controllers.oauth2-proxy.containers.app.probes.startup.spec.periodSeconds (2)
10
number
controllers.oauth2-proxy.containers.app.resources.limits.memory (2)
1Gi
string
controllers.oauth2-proxy.containers.app.resources.requests.cpu (2)
100m
string
controllers.oauth2-proxy.containers.app.envFrom[].secretRef.name (1)
oauth2-proxy-env-secrets
string
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_COOKIE_DOMAINS (1)
${PUBLIC_DOMAIN0}
string
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_COOKIE_SECURE (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_EMAIL_DOMAINS (1)
*
string
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_HTTP_ADDRESS (1)
0.0.0.0:4180
string
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_METRICS_ADDRESS (1)
0.0.0.0:44180
string
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_PASS_ACCESS_TOKEN (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_PASS_AUTHORIZATION_HEADER (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_PASS_USER_HEADERS (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_PREFER_EMAIL_TO_USER (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_PROVIDER (1)
github
string
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_REVERSE_PROXY (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_SESSION_STORE_TYPE (1)
cookie
string
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_SET_AUTHORIZATION-HEADER (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_SET_XAUTHREQUEST (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_WHITELIST_DOMAINS (1)
.${PUBLIC_DOMAIN0}
string
controllers.oauth2-proxy.containers.oauth2-proxy.envFrom[].secretRef.name (1)
oauth2-proxy-secret
string
controllers.oauth2-proxy.containers.oauth2-proxy.image.repository (1)
quay.io/oauth2-proxy/oauth2-proxy
string
controllers.oauth2-proxy.containers.oauth2-proxy.image.tag (1)
v7.7.1@sha256:f6a4aa83a27e316114bf79664302b1ffb2cc8ce697fb479273af4feb3fb16fe3
string
controllers.oauth2-proxy.containers.oauth2-proxy.probes.liveness.custom (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.probes.liveness.enabled (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.probes.liveness.spec.httpGet.path (1)
/ping
string
controllers.oauth2-proxy.containers.oauth2-proxy.probes.liveness.spec.httpGet.port (1)
4180
number
controllers.oauth2-proxy.containers.oauth2-proxy.probes.readiness.custom (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.probes.readiness.enabled (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.probes.readiness.spec.httpGet.path (1)
/ready
string
controllers.oauth2-proxy.containers.oauth2-proxy.probes.readiness.spec.httpGet.port (1)
4180
number
controllers.oauth2-proxy.containers.oauth2-proxy.resources.limits.cpu (1)
50m
string
controllers.oauth2-proxy.containers.oauth2-proxy.resources.limits.memory (1)
64Mi
string
controllers.oauth2-proxy.containers.oauth2-proxy.resources.requests.cpu (1)
15m
string
controllers.oauth2-proxy.containers.oauth2-proxy.resources.requests.memory (1)
16Mi
string
controllers.oauth2-proxy.containers.oauth2-proxy.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.oauth2-proxy.containers.oauth2-proxy.securityContext.readOnlyRootFilesystem (1)
true
boolean
controller.replicas (2)
3
number
controller.strategy (2)
RollingUpdate
string
env.OAUTH2_PROXY_CLIENT_ID.valueFrom.secretKeyRef.key (2)
client-id
string
env.OAUTH2_PROXY_CLIENT_ID.valueFrom.secretKeyRef.name (2)
oauth2-proxy-secrets
string
env.OAUTH2_PROXY_CLIENT_SECRET.valueFrom.secretKeyRef.key (2)
client-secret
string
env.OAUTH2_PROXY_CLIENT_SECRET.valueFrom.secretKeyRef.name (2)
oauth2-proxy-secrets
string
env.OAUTH2_PROXY_COOKIE_DOMAINS (2)
bjw-s.dev
string
env.OAUTH2_PROXY_COOKIE_SECRET.valueFrom.secretKeyRef.key (2)
cookie-secret
string
env.OAUTH2_PROXY_COOKIE_SECRET.valueFrom.secretKeyRef.name (2)
oauth2-proxy-secrets
string
env.OAUTH2_PROXY_COOKIE_SECURE (2)
true
boolean
env.OAUTH2_PROXY_EMAIL_DOMAINS (2)
*
string
env.OAUTH2_PROXY_HTTP_ADDRESS (2)
0.0.0.0:4180
string
env.OAUTH2_PROXY_METRICS_ADDRESS (2)
0.0.0.0:44180
string
env.OAUTH2_PROXY_OIDC_GROUPS_CLAIM (2)
https://bjw-s/groups
string
env.OAUTH2_PROXY_OIDC_ISSUER_URL.valueFrom.secretKeyRef.key (2)
oidc-issuer-url
string
env.OAUTH2_PROXY_OIDC_ISSUER_URL.valueFrom.secretKeyRef.name (2)
oauth2-proxy-secrets
string
env.OAUTH2_PROXY_PASS_ACCESS_TOKEN (2)
true
boolean
env.OAUTH2_PROXY_PASS_AUTHORIZATION_HEADER (2)
true
boolean
env.OAUTH2_PROXY_PASS_USER_HEADERS (2)
true
boolean
env.OAUTH2_PROXY_PREFER_EMAIL_TO_USER (2)
true
boolean
env.OAUTH2_PROXY_PROVIDER (2)
oidc
string
env.OAUTH2_PROXY_REDIS_CONNECTION_URL (2)
redis://oauth2-proxy-redis.security.svc.cluster.local:6379
string
env.OAUTH2_PROXY_REDIS_PASSWORD.valueFrom.secretKeyRef.key (2)
redis-password
string
env.OAUTH2_PROXY_REDIS_PASSWORD.valueFrom.secretKeyRef.name (2)
oauth2-proxy-secrets
string
env.OAUTH2_PROXY_REVERSE_PROXY (2)
true
boolean
env.OAUTH2_PROXY_SCOPE (2)
openid profile email
string
env.OAUTH2_PROXY_SESSION_STORE_TYPE (2)
redis
string
env.OAUTH2_PROXY_SET_AUTHORIZATION-HEADER (2)
true
boolean
env.OAUTH2_PROXY_SET_XAUTHREQUEST (2)
true
boolean
env.OAUTH2_PROXY_WHITELIST_DOMAINS (2)
.bjw-s.dev
string
image.repository (2)
quay.io/oauth2-proxy/oauth2-proxy
string
image.tag (2)
v7.4.0
string
ingress.app.className (2)
external-nginx
string
ingress.app.hosts[].host (2)
auth.holthome.net
string
ingress.app.hosts[].paths[].path (2)
/oauth2
string
ingress.app.hosts[].paths[].service.identifier (2)
app
string
ingress.app.hosts[].paths[].service.port (2)
http
string
ingress.app.annotations."cert-manager.io/cluster-issuer" (1)
letsencrypt-production
string
ingress.app.annotations."external-dns.alpha.kubernetes.io/target" (1)
external.holthome.net
string
ingress.app.annotations."kubernetes.io/tls-acme" (1)
true
string
ingress.app.annotations."nginx.ingress.kubernetes.io/force-ssl-redirect" (1)
true
string
ingress.app.annotations."nginx.ingress.kubernetes.io/ssl-redirect" (1)
true
string
ingress.app.tls[].hosts[] (1)
- auth.tyriis.dev
string
ingress.app.tls[].secretName (1)
{{ .Release.Name }}-tls
string
ingress.main.enabled (2)
true
boolean
ingress.main.hosts[].host (2)
auth.bjw-s.dev
string
ingress.main.hosts[].paths[].path (2)
/oauth2
string
ingress.main.hosts[].paths[].pathType (2)
Prefix
string
ingress.main.ingressClassName (2)
internal-nginx
string
ingress.main.annotations."external-dns.alpha.kubernetes.io/target" (1)
ingress-ext.greyrock.casa
string
ingress.main.tls[].hosts[] (1)
- auth.bjw-s.dev
string
ingress.oauth2-proxy.className (1)
internal
string
ingress.oauth2-proxy.hosts[].host (1)
oauth2-proxy.${PUBLIC_DOMAIN0}
string
ingress.oauth2-proxy.hosts[].paths[].path (1)
/oauth2
string
ingress.oauth2-proxy.hosts[].paths[].service.identifier (1)
oauth2-proxy
string
ingress.oauth2-proxy.hosts[].paths[].service.port (1)
http
string
podAnnotations."secret.reloader.stakater.com/reload" (2)
oauth2-proxy-secrets
string
resources.limits.cpu (2)
20m
string
resources.limits.memory (2)
105M
string
resources.requests.cpu (2)
15m
string
resources.requests.memory (2)
105M
string
service.app.controller (2)
oauth2-proxy
string
service.app.ports.http.port (2)
4180
number
service.main.ports.http.port (2)
4180
number
service.main.ports.metrics.enabled (2)
true
boolean
service.main.ports.metrics.port (2)
44180
number
service.oauth2-proxy.controller (1)
oauth2-proxy
string
service.oauth2-proxy.ipFamilyPolicy (1)
PreferDualStack
string
service.oauth2-proxy.ports.http.port (1)
4180
number
service.oauth2-proxy.ports.metrics.port (1)
44180
number
service.oauth2-proxy.type (1)
ClusterIP
string
defaultPodOptions.securityContext.fsGroup (1)
2000
number
defaultPodOptions.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
defaultPodOptions.securityContext.runAsGroup (1)
2000
number
defaultPodOptions.securityContext.runAsNonRoot (1)
true
boolean
defaultPodOptions.securityContext.runAsUser (1)
2000
number
defaultPodOptions.securityContext.seccompProfile.type (1)
RuntimeDefault
string
defaultPodOptions.securityContext.supplementalGroups[] (1)
- "4000"
number
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
oauth2-proxy
string
defaultPodOptions.topologySpreadConstraints[].maxSkew (1)
1
number
defaultPodOptions.topologySpreadConstraints[].topologyKey (1)
kubernetes.io/hostname
string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (1)
DoNotSchedule
string
serviceMonitor.oauth2-proxy.enabled (1)
true
boolean
serviceMonitor.oauth2-proxy.endpoints[].interval (1)
1m
string
serviceMonitor.oauth2-proxy.endpoints[].path (1)
/metrics
string
serviceMonitor.oauth2-proxy.endpoints[].port (1)
metrics
string
serviceMonitor.oauth2-proxy.endpoints[].scheme (1)
http
string
serviceMonitor.oauth2-proxy.endpoints[].scrapeTimeout (1)
10s
string
serviceMonitor.oauth2-proxy.serviceName (1)
oauth2-proxy
string