Compare commits
3 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| ea12ec0807 | |||
| e44cf95bb2 | |||
| df6ab28165 |
@@ -10,10 +10,10 @@ spec:
|
|||||||
template:
|
template:
|
||||||
type: Opaque
|
type: Opaque
|
||||||
data:
|
data:
|
||||||
client_id: oauth2-proxy
|
client-id: oauth2-proxy
|
||||||
client_secret: |-
|
client-secret: |-
|
||||||
{{ .client_secret }}
|
{{ .client_secret }}
|
||||||
cookie_secret: |-
|
cookie-secret: |-
|
||||||
{{ .cookie_secret }}
|
{{ .cookie_secret }}
|
||||||
data:
|
data:
|
||||||
- secretKey: client_secret
|
- secretKey: client_secret
|
||||||
@@ -25,7 +25,7 @@ spec:
|
|||||||
conversionStrategy: Default
|
conversionStrategy: Default
|
||||||
decodingStrategy: None
|
decodingStrategy: None
|
||||||
metadataPolicy: None
|
metadataPolicy: None
|
||||||
key: PLACEHOLDER_VAULTWARDEN_ITEM_ID
|
key: e62e8c4d-d538-43b2-a682-9cdf2a5a1165
|
||||||
property: login.password
|
property: login.password
|
||||||
- secretKey: cookie_secret
|
- secretKey: cookie_secret
|
||||||
sourceRef:
|
sourceRef:
|
||||||
@@ -36,5 +36,5 @@ spec:
|
|||||||
conversionStrategy: Default
|
conversionStrategy: Default
|
||||||
decodingStrategy: None
|
decodingStrategy: None
|
||||||
metadataPolicy: None
|
metadataPolicy: None
|
||||||
key: PLACEHOLDER_VAULTWARDEN_ITEM_ID
|
key: e62e8c4d-d538-43b2-a682-9cdf2a5a1165
|
||||||
property: fields[0].value
|
property: fields[0].value
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ resources:
|
|||||||
helmCharts:
|
helmCharts:
|
||||||
- name: oauth2-proxy
|
- name: oauth2-proxy
|
||||||
repo: https://oauth2-proxy.github.io/manifests
|
repo: https://oauth2-proxy.github.io/manifests
|
||||||
version: 7.12.6
|
version: 10.4.3
|
||||||
releaseName: oauth2-proxy
|
releaseName: oauth2-proxy
|
||||||
namespace: oauth2-proxy
|
namespace: oauth2-proxy
|
||||||
valuesFile: values.yaml
|
valuesFile: values.yaml
|
||||||
|
|||||||
@@ -3,7 +3,6 @@ apiVersion: traefik.io/v1alpha1
|
|||||||
kind: Middleware
|
kind: Middleware
|
||||||
metadata:
|
metadata:
|
||||||
name: keycloak-auth
|
name: keycloak-auth
|
||||||
namespace: oauth2-proxy
|
|
||||||
spec:
|
spec:
|
||||||
forwardAuth:
|
forwardAuth:
|
||||||
address: http://oauth2-proxy.oauth2-proxy.svc:80/oauth2/auth
|
address: http://oauth2-proxy.oauth2-proxy.svc:80/oauth2/auth
|
||||||
|
|||||||
@@ -1,6 +1,7 @@
|
|||||||
replicaCount: 1
|
replicaCount: 1
|
||||||
|
|
||||||
config:
|
config:
|
||||||
|
existingSecret: oauth2-proxy-creds
|
||||||
configFile: |-
|
configFile: |-
|
||||||
provider = "keycloak-oidc"
|
provider = "keycloak-oidc"
|
||||||
provider_display_name = "Keycloak"
|
provider_display_name = "Keycloak"
|
||||||
@@ -21,23 +22,6 @@ config:
|
|||||||
code_challenge_method = "S256"
|
code_challenge_method = "S256"
|
||||||
scope = "openid profile email"
|
scope = "openid profile email"
|
||||||
|
|
||||||
extraEnv:
|
|
||||||
- name: OAUTH2_PROXY_CLIENT_ID
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: oauth2-proxy-creds
|
|
||||||
key: client_id
|
|
||||||
- name: OAUTH2_PROXY_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: oauth2-proxy-creds
|
|
||||||
key: client_secret
|
|
||||||
- name: OAUTH2_PROXY_COOKIE_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: oauth2-proxy-creds
|
|
||||||
key: cookie_secret
|
|
||||||
|
|
||||||
ingress:
|
ingress:
|
||||||
enabled: true
|
enabled: true
|
||||||
className: traefik
|
className: traefik
|
||||||
|
|||||||
Reference in New Issue
Block a user