This repository was archived by the owner on May 17, 2024. It is now read-only.
File tree Expand file tree Collapse file tree 3 files changed +2
-16
lines changed
deploy/charts/kube-oidc-proxy Expand file tree Collapse file tree 3 files changed +2
-16
lines changed Original file line number Diff line number Diff line change 59
59
{{- if .Values.oidc.requiredClaims }}
60
60
- " --oidc-signing-algs=$(OIDC_REQUIRED_CLAIMS)"
61
61
{{ end }}
62
- {{- if .Values.oidc.apiAudiences }}
63
- - " --api-audiences=$(API_AUDIENCES)"
64
- {{ end }}
65
62
{{- if .Values.tokenPassthrough.enabled }}
66
63
- " --token-passthrough"
67
64
{{- if .Values.tokenPassthrough.audiences }}
@@ -130,13 +127,6 @@ spec:
130
127
name : {{ include "kube-oidc-proxy.fullname" . }}-config
131
128
key : oidc.required-claims
132
129
{{ end }}
133
- {{- if .Values.oidc.apiAudiences }}
134
- - name : API_AUDIENCES
135
- valueFrom :
136
- secretKeyRef :
137
- name : {{ include "kube-oidc-proxy.fullname" . }}-config
138
- key : api-audiences
139
- {{ end }}
140
130
volumeMounts :
141
131
{{- if .Values.oidc.caPEM }}
142
132
- name : kube-oidc-proxy-config
Original file line number Diff line number Diff line change 21
21
{{ if .Values.oidc.requiredClaims }}
22
22
oidc.required-claims : {{ include "requiredClaims" . | b64enc }}
23
23
{{- end }}
24
- {{- if .Values.oidc.apiAudiences -}}
25
- api-audiences : {{ join "," .Values.oidc.apiAudiences | b64enc }}
26
- {{- end }}
27
24
kind : Secret
28
25
metadata :
29
26
name : {{ include "kube-oidc-proxy.fullname" . }}-config
30
27
labels :
31
28
{{ include "kube-oidc-proxy.labels" . | indent 4 }}
32
- type : Opaque
29
+ type : Opaque
Original file line number Diff line number Diff line change 36
36
usernameClaim : " "
37
37
38
38
# PEM encoded value of CA cert that will verify TLS connection to
39
- # OIDC issuer URL. If not provided default hosts root CA's will be used.
39
+ # OIDC issuer URL. If not provided, default hosts root CA's will be used.
40
40
caPEM :
41
41
42
42
usernamePrefix :
46
46
signingAlgs :
47
47
- RS256
48
48
requiredClaims : {}
49
- apiAudiences : []
50
49
51
50
# To enable token passthrough feature
52
51
# https://github.com/jetstack/kube-oidc-proxy/blob/master/docs/tasks/token-passthrough.md
You can’t perform that action at this time.
0 commit comments