Updates helm chart for auditing options

Signed-off-by: JoshVanL <[email protected]>

Author: JoshVanL

deploy/charts/kube-oidc-proxy/templates/deployment.yaml

@@ -74,6 +74,9 @@ spec:
           {{- if .Values.extraImpersonationHeaders.headers }}
           - "--extra-user-headers={{ .Values.extraImpersonationHeaders.headers }}"
           {{ end }}
+          {{- range $key, $value := .Values.extraArgs -}}
+          - "--{{ $key }}={{ $value -}}"
+          {{ end }}
         resources:
           {{- toYaml .Values.resources | nindent 12 }}
         env:
@@ -135,14 +138,15 @@ spec:
               key: api-audiences
         {{ end }}
         volumeMounts:
-          {{ if .Values.oidc.caPEM }}
+          {{- if .Values.oidc.caPEM }}
           - name: kube-oidc-proxy-config
             mountPath: /etc/oidc
             readOnly: true
           {{ end }}
           - name: kube-oidc-proxy-tls
             mountPath: /etc/oidc/tls
             readOnly: true
+          {{- if .Values.extraVolumeMounts }}{{ toYaml .Values.extraVolumeMounts | trim | nindent 10 }}{{ end }}
       volumes:
         {{ if .Values.oidc.caPEM }}
         - name: kube-oidc-proxy-config
@@ -152,6 +156,7 @@ spec:
             - key: oidc.ca-pem
               path: oidc-ca.pem
         {{ end }}
+        {{- if .Values.extraVolumes }}{{ toYaml .Values.extraVolumes | trim | nindent 8 }}{{ end }}
         - name: kube-oidc-proxy-tls
           secret:
             secretName: {{ $tlsSecretName }}

deploy/charts/kube-oidc-proxy/values.yaml

@@ -60,6 +60,20 @@ extraImpersonationHeaders:
   clientIP: false
   #headers: key1=foo,key2=bar,key1=bar
 
+extraArgs: {}
+  #audit-log-path: /audit-log
+  #audit-policy-file: /audit/audit.yaml
+
+extraVolumeMounts: {}
+  #- name: audit
+  #  mountPath: /audit
+  #  readOnly: true
+
+extraVolumes: {}
+  #- configMap:
+      #defaultMode: 420
+      #name: kube-oidc-proxy-policy
+    #name: audit
 
 ingress:
   enabled: false
@@ -91,6 +105,7 @@ resources: {}
   # requests:
   #   cpu: 100m
   #   memory: 128Mi
+  #
 
 initContainers: []