Merge branch 'main' into chore/update-to-v7.10.0

Author: pierluigilenoci

helm/oauth2-proxy/Chart.yaml

@@ -1,5 +1,5 @@
 name: oauth2-proxy
-version: 7.14.0
+version: 7.14.1
 apiVersion: v2
 appVersion: 7.10.0
 home: https://oauth2-proxy.github.io/oauth2-proxy/

helm/oauth2-proxy/README.md

@@ -200,6 +200,9 @@ The following table lists the configurable parameters of the oauth2-proxy chart
 | `service.loadBalancerSourceRanges`                    | allowed source ranges in load balancer                                                                                                                                                                                                                           | `nil`                                                                                                |
 | `service.nodePort`                                    | external port number for the service when service.type is `NodePort`                                                                                                                                                                                             | `nil`                                                                                                |
 | `service.targetPort`                                  | (optional) a numeric port number (e.g., 80) or a port name defined in the pod's container(s) (e.g., http)                                                                                                                                                        | `""`                                                                                                 |
+| `service.ipDualStack.enabled`                         | enable IPv4/IPv6 dual-stack for the service                                                                                                                                                                                                                      | `false`                                                                                              |
+| `service.ipDualStack.ipFamilies`                      | ip families for the service if IPv4/IPv6 dual-stack is enabled                                                                                                                                                                                                   | `["IPv6", "IPv4"]`                                                                                   |
+| `service.ipDualStack.ipFamilyPolicy`                  | ip family policy for the service if IPv4/IPv6 dual-stack is enabled                                                                                                                                                                                              | `"PreferDualStack"`                                                                                  |
 | `serviceAccount.enabled`                              | create a service account                                                                                                                                                                                                                                         | `true`                                                                                               |
 | `serviceAccount.name`                                 | the service account name                                                                                                                                                                                                                                         | ``                                                                                                   |
 | `serviceAccount.annotations`                          | (optional) annotations for the service account                                                                                                                                                                                                                   | `{}`                                                                                                 |

helm/oauth2-proxy/templates/service.yaml

@@ -59,3 +59,7 @@ spec:
     {{- end }}
   selector:
     {{- include "oauth2-proxy.selectorLabels" . | indent 4 }}
+{{- if .Values.service.ipDualStack.enabled }}
+  ipFamilies: {{ toYaml .Values.service.ipDualStack.ipFamilies | nindent 4 }}
+  ipFamilyPolicy: {{ .Values.service.ipDualStack.ipFamilyPolicy }}
+{{- end }}

helm/oauth2-proxy/values.yaml

@@ -155,6 +155,12 @@ service:
   internalTrafficPolicy: ""
   # configure service target port
   targetPort: ""
+  # Configures the service to use IPv4/IPv6 dual-stack.
+  # Ref: https://kubernetes.io/docs/concepts/services-networking/dual-stack/
+  ipDualStack:
+    enabled: false
+    ipFamilies: ["IPv6", "IPv4"]
+    ipFamilyPolicy: "PreferDualStack"
 
 ## Create or use ServiceAccount
 serviceAccount: