oauth2-proxy helm

No introduction found. Create it?

Install

Install with:

helm repo add bjw-s oci://ghcr.io/bjw-s/helm/
helm install oauth2-proxy bjw-s/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (3 out of 6)

NameRepoStarsVersionTimestamp
oauth2-proxytyriis/home-ops573.7.36 days ago
oauth2-proxytyriis/home-ops573.7.38 days ago
oauth2-proxycarpenike/k8s-gitops2703.2.19 months ago

Values

See the most popular values for this chart:

KeyTypes
controllers.oauth2-proxy.annotations."reloader.stakater.com/auto" (5)
true
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_COOKIE_DOMAINS (4)
holthome.net
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_COOKIE_SECURE (4)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_EMAIL_DOMAINS (4)
*
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_HTTP_ADDRESS (4)
0.0.0.0:4180
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_METRICS_ADDRESS (4)
0.0.0.0:44180
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_PASS_ACCESS_TOKEN (4)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_PASS_AUTHORIZATION_HEADER (4)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_PASS_HOST_HEADER (4)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_PASS_USER_HEADERS (4)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_PREFER_EMAIL_TO_USER (4)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_PROVIDER (4)
google
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_REDIS_CONNECTION_URL (4)
redis://dragonfly.database.svc.cluster.local:6379
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_REVERSE_PROXY (4)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_SCOPE (4)
openid profile email
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_SESSION_STORE_TYPE (4)
redis
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_SET_AUTHORIZATION-HEADER (4)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_SET_XAUTHREQUEST (4)
true
boolean, string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_OIDC_ISSUER_URL.valueFrom.secretKeyRef.key (1)
oidc-issuer-url
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_OIDC_ISSUER_URL.valueFrom.secretKeyRef.name (1)
oauth2-proxy-secrets
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_OIDC_ISSUER_URL (3)
https://accounts.google.com
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_SILENCE_PING_LOGGING (3)
true
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_LOGIN_URL (2)
https://accounts.google.com/o/oauth2/v2/auth?access_type=offline
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_REDEEM_URL (2)
https://oauth2.googleapis.com/token
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_WHITELIST_DOMAINS (2)
.ryho.lt
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_AZURE_TENANT.valueFrom.secretKeyRef.key (1)
azure-tenant
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_AZURE_TENANT.valueFrom.secretKeyRef.name (1)
oauth2-proxy-secrets
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_CLIENT_ID.valueFrom.secretKeyRef.key (1)
client-id
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_CLIENT_ID.valueFrom.secretKeyRef.name (1)
oauth2-proxy-secrets
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_CLIENT_SECRET.valueFrom.secretKeyRef.key (1)
client-secret
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_CLIENT_SECRET.valueFrom.secretKeyRef.name (1)
oauth2-proxy-secrets
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_COOKIE_SECRET.valueFrom.secretKeyRef.key (1)
cookie-secret
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_COOKIE_SECRET.valueFrom.secretKeyRef.name (1)
oauth2-proxy-secrets
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_INSECURE_OIDC_ALLOW_UNVERIFIED_EMAIL (1)
true
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_INSECURE_OIDC_SKIP_ISSUER_VERIFICATION (1)
true
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_REDIS_PASSWORD.valueFrom.secretKeyRef.key (1)
redis-password
string
controllers.oauth2-proxy.containers.app.env.OAUTH2_PROXY_REDIS_PASSWORD.valueFrom.secretKeyRef.name (1)
oauth2-proxy-secrets
string
controllers.oauth2-proxy.containers.app.env.TZ (1)
${TIMEZONE}
string
controllers.oauth2-proxy.containers.app.image.repository (4)
quay.io/oauth2-proxy/oauth2-proxy
string
controllers.oauth2-proxy.containers.app.image.tag (4)
v7.8.2@sha256:6f01695a729a2f88d7bc6e1158797d3cbdc0381c358ba86e1aa5da739586b3e0
string
controllers.oauth2-proxy.containers.app.probes.liveness.custom (4)
true
boolean
controllers.oauth2-proxy.containers.app.probes.liveness.enabled (4)
true
boolean
controllers.oauth2-proxy.containers.app.probes.liveness.spec.failureThreshold (4)
3
number
controllers.oauth2-proxy.containers.app.probes.liveness.spec.httpGet.path (4)
/ping
string
controllers.oauth2-proxy.containers.app.probes.liveness.spec.httpGet.port (4)
4180
number
controllers.oauth2-proxy.containers.app.probes.liveness.spec.initialDelaySeconds (4)
10
number
controllers.oauth2-proxy.containers.app.probes.liveness.spec.periodSeconds (4)
10
number
controllers.oauth2-proxy.containers.app.probes.liveness.spec.timeoutSeconds (4)
1
number
controllers.oauth2-proxy.containers.app.probes.readiness.custom (4)
true
boolean
controllers.oauth2-proxy.containers.app.probes.readiness.enabled (4)
true
boolean
controllers.oauth2-proxy.containers.app.probes.readiness.spec.failureThreshold (4)
3
number
controllers.oauth2-proxy.containers.app.probes.readiness.spec.httpGet.path (4)
/ready
string
controllers.oauth2-proxy.containers.app.probes.readiness.spec.httpGet.port (4)
4180
number
controllers.oauth2-proxy.containers.app.probes.readiness.spec.initialDelaySeconds (4)
10
number
controllers.oauth2-proxy.containers.app.probes.readiness.spec.periodSeconds (4)
10
number
controllers.oauth2-proxy.containers.app.probes.readiness.spec.timeoutSeconds (4)
1
number
controllers.oauth2-proxy.containers.app.probes.startup.enabled (4)
true
boolean
controllers.oauth2-proxy.containers.app.probes.startup.spec.failureThreshold (4)
30
number
controllers.oauth2-proxy.containers.app.probes.startup.spec.periodSeconds (4)
10
number
controllers.oauth2-proxy.containers.app.resources.limits.memory (4)
1Gi
string
controllers.oauth2-proxy.containers.app.resources.requests.cpu (4)
100m
string
controllers.oauth2-proxy.containers.app.envFrom[].secretRef.name (3)
oauth2-proxy-secret
string
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_COOKIE_DOMAINS (1)
kantai.xyz
string
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_COOKIE_SECURE (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_EMAIL_DOMAINS (1)
*
string
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_HTTP_ADDRESS (1)
0.0.0.0:4180
string
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_METRICS_ADDRESS (1)
0.0.0.0:44180
string
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_PASS_ACCESS_TOKEN (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_PASS_AUTHORIZATION_HEADER (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_PASS_USER_HEADERS (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_PREFER_EMAIL_TO_USER (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_PROVIDER (1)
github
string
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_REVERSE_PROXY (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_SESSION_STORE_TYPE (1)
cookie
string
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_SET_AUTHORIZATION-HEADER (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_SET_XAUTHREQUEST (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.env.OAUTH2_PROXY_WHITELIST_DOMAINS (1)
.kantai.xyz
string
controllers.oauth2-proxy.containers.oauth2-proxy.envFrom[].secretRef.name (1)
oauth2-proxy-oidc
string
controllers.oauth2-proxy.containers.oauth2-proxy.image.repository (1)
quay.io/oauth2-proxy/oauth2-proxy
string
controllers.oauth2-proxy.containers.oauth2-proxy.image.tag (1)
v7.8.2@sha256:6f01695a729a2f88d7bc6e1158797d3cbdc0381c358ba86e1aa5da739586b3e0
string
controllers.oauth2-proxy.containers.oauth2-proxy.probes.liveness.custom (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.probes.liveness.enabled (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.probes.liveness.spec.httpGet.path (1)
/ping
string
controllers.oauth2-proxy.containers.oauth2-proxy.probes.liveness.spec.httpGet.port (1)
4180
number
controllers.oauth2-proxy.containers.oauth2-proxy.probes.readiness.custom (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.probes.readiness.enabled (1)
true
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.probes.readiness.spec.httpGet.path (1)
/ready
string
controllers.oauth2-proxy.containers.oauth2-proxy.probes.readiness.spec.httpGet.port (1)
4180
number
controllers.oauth2-proxy.containers.oauth2-proxy.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.oauth2-proxy.containers.oauth2-proxy.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.oauth2-proxy.containers.oauth2-proxy.securityContext.readOnlyRootFilesystem (1)
true
boolean
controllers.oauth2-proxy.replicas (2)
3
number
controllers.oauth2-proxy.strategy (1)
RollingUpdate
string
controllers.${APP}.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.${APP}.containers.app.env.OAUTH2_PROXY_BANNER (1)
-
string
controllers.${APP}.containers.app.env.OAUTH2_PROXY_COOKIE_SECURE (1)
true
boolean
controllers.${APP}.containers.app.env.OAUTH2_PROXY_FOOTER (1)
-
string
controllers.${APP}.containers.app.env.OAUTH2_PROXY_HTTP_ADDRESS (1)
0.0.0.0:4180
string
controllers.${APP}.containers.app.env.OAUTH2_PROXY_METRICS_ADDRESS (1)
0.0.0.0:44180
string
controllers.${APP}.containers.app.env.OAUTH2_PROXY_PASS_ACCESS_TOKEN (1)
true
boolean
controllers.${APP}.containers.app.env.OAUTH2_PROXY_PASS_AUTHORIZATION_HEADER (1)
true
boolean
controllers.${APP}.containers.app.env.OAUTH2_PROXY_PASS_HOST_HEADER (1)
true
boolean
controllers.${APP}.containers.app.env.OAUTH2_PROXY_PASS_USER_HEADERS (1)
true
boolean
controllers.${APP}.containers.app.env.OAUTH2_PROXY_PREFER_EMAIL_TO_USER (1)
true
boolean
controllers.${APP}.containers.app.env.OAUTH2_PROXY_PROVIDER (1)
azure
string
controllers.${APP}.containers.app.env.OAUTH2_PROXY_REDIS_USE_SENTINEL (1)
true
string
controllers.${APP}.containers.app.env.OAUTH2_PROXY_REVERSE_PROXY (1)
true
boolean
controllers.${APP}.containers.app.env.OAUTH2_PROXY_SCOPE (1)
openid profile email
string
controllers.${APP}.containers.app.env.OAUTH2_PROXY_SESSION_STORE_TYPE (1)
redis
string
controllers.${APP}.containers.app.env.OAUTH2_PROXY_SET_AUTHORIZATION_HEADER (1)
true
boolean
controllers.${APP}.containers.app.env.OAUTH2_PROXY_SET_XAUTHREQUEST (1)
true
boolean
controllers.${APP}.containers.app.env.OAUTH2_PROXY_SKIP_PROVIDER_BUTTON (1)
true
boolean
controllers.${APP}.containers.app.env.OAUTH2_PROXY_TLS_MIN_VERSION (1)
TLS1.3
string
controllers.${APP}.containers.app.env.TZ (1)
${TIMEZONE}
string
controllers.${APP}.containers.app.envFrom[].secretRef.name (1)
oauth2-proxy-secret
string
controllers.${APP}.containers.app.image.repository (1)
quay.io/oauth2-proxy/oauth2-proxy
string
controllers.${APP}.containers.app.image.tag (1)
v7.7.1
string
controllers.${APP}.containers.app.probes.liveness.custom (1)
true
boolean
controllers.${APP}.containers.app.probes.liveness.enabled (1)
true
boolean
controllers.${APP}.containers.app.probes.liveness.spec.failureThreshold (1)
3
number
controllers.${APP}.containers.app.probes.liveness.spec.httpGet.path (1)
/ping
string
controllers.${APP}.containers.app.probes.liveness.spec.httpGet.port (1)
4180
number
controllers.${APP}.containers.app.probes.liveness.spec.initialDelaySeconds (1)
10
number
controllers.${APP}.containers.app.probes.liveness.spec.periodSeconds (1)
10
number
controllers.${APP}.containers.app.probes.liveness.spec.timeoutSeconds (1)
1
number
controllers.${APP}.containers.app.probes.readiness.custom (1)
true
boolean
controllers.${APP}.containers.app.probes.readiness.enabled (1)
true
boolean
controllers.${APP}.containers.app.probes.readiness.spec.failureThreshold (1)
3
number
controllers.${APP}.containers.app.probes.readiness.spec.httpGet.path (1)
/ready
string
controllers.${APP}.containers.app.probes.readiness.spec.httpGet.port (1)
4180
number
controllers.${APP}.containers.app.probes.readiness.spec.initialDelaySeconds (1)
10
number
controllers.${APP}.containers.app.probes.readiness.spec.periodSeconds (1)
10
number
controllers.${APP}.containers.app.probes.readiness.spec.timeoutSeconds (1)
1
number
controllers.${APP}.containers.app.probes.startup.enabled (1)
true
boolean
controllers.${APP}.containers.app.probes.startup.spec.failureThreshold (1)
30
number
controllers.${APP}.containers.app.probes.startup.spec.periodSeconds (1)
10
number
controllers.${APP}.containers.app.resources.limits.cpu (1)
16m
string
controllers.${APP}.containers.app.resources.limits.memory (1)
105M
string
controllers.${APP}.containers.app.resources.requests.cpu (1)
15m
string
controllers.${APP}.containers.app.resources.requests.memory (1)
105M
string
ingress.app.className (5)
nginx
string
ingress.app.hosts[].host (5)
auth.${SECRET_DOMAIN}
string
ingress.app.hosts[].paths[].path (5)
/oauth2
string
ingress.app.hosts[].paths[].service.identifier (5)
app
string
ingress.app.hosts[].paths[].service.port (5)
http
string
ingress.app.hosts[].paths[].pathType (1)
Prefix
string
ingress.app.tls[].hosts[] (4)
- auth.${SECRET_DOMAIN}
string
ingress.app.tls[].secretName (2)
{{ .Release.Name }}-tls
string
ingress.app.annotations."external-dns.alpha.kubernetes.io/target" (3)
external.holthome.net
string
ingress.app.annotations."cert-manager.io/cluster-issuer" (2)
letsencrypt-production
string
ingress.app.annotations."kubernetes.io/tls-acme" (2)
true
string
ingress.app.annotations."nginx.ingress.kubernetes.io/force-ssl-redirect" (2)
true
string
ingress.app.annotations."nginx.ingress.kubernetes.io/ssl-redirect" (2)
true
string
ingress.app.annotations.external-dns/cloudflare (1)
true
string
ingress.app.enabled (1)
true
boolean
service.app.controller (5)
oauth2-proxy
string
service.app.ports.http.port (5)
4180
number
service.app.ports.metrics.port (2)
44180
number
service.oauth2-proxy.controller (1)
oauth2-proxy
string
service.oauth2-proxy.ports.http.port (1)
4180
number
service.oauth2-proxy.ports.metrics.port (1)
44180
number
service.oauth2-proxy.type (1)
ClusterIP
string
serviceMonitor.app.endpoints[].interval (2)
30s
string
serviceMonitor.app.endpoints[].port (2)
metrics
string
serviceMonitor.app.endpoints[].scheme (2)
http
string
serviceMonitor.app.endpoints[].scrapeTimeout (2)
5s
string
serviceMonitor.app.serviceName (2)
oauth2-proxy
string
serviceMonitor.oauth2-proxy.enabled (1)
true
boolean
serviceMonitor.oauth2-proxy.endpoints[].interval (1)
1m
string
serviceMonitor.oauth2-proxy.endpoints[].metricRelabelings[].action (1)
labeldrop
string
serviceMonitor.oauth2-proxy.endpoints[].metricRelabelings[].regex (1)
(pod)
string
serviceMonitor.oauth2-proxy.endpoints[].path (1)
/metrics
string
serviceMonitor.oauth2-proxy.endpoints[].port (1)
metrics
string
serviceMonitor.oauth2-proxy.endpoints[].scheme (1)
http
string
serviceMonitor.oauth2-proxy.endpoints[].scrapeTimeout (1)
10s
string
serviceMonitor.oauth2-proxy.serviceName (1)
oauth2-proxy
string
defaultPodOptions.securityContext.fsGroup (1)
2000
number
defaultPodOptions.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
defaultPodOptions.securityContext.runAsGroup (1)
2000
number
defaultPodOptions.securityContext.runAsNonRoot (1)
true
boolean
defaultPodOptions.securityContext.runAsUser (1)
2000
number
defaultPodOptions.securityContext.supplementalGroups[] (1)
- "4000"
number