oauth2-proxy.yaml

---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: oauth2-proxy
  namespace: kube-system
spec:
  interval: 5m
  chart:
    spec:
      # renovate: registryUrl=https://oauth2-proxy.github.io/manifests
      chart: oauth2-proxy
      version: 6.9.1
      sourceRef:
        kind: HelmRepository
        name: oauth2-proxy-charts
        namespace: flux-system
      interval: 5m
  values:
    image:
      repository: "quay.io/oauth2-proxy/oauth2-proxy"
      tag: "v7.4.0"
    replicaCount: 2
    tolerations:
      - key: "arm"
        operator: "Exists"
    ingress:
      enabled: true
      # annotations:
      #   kubernetes.io/ingress.class: nginx
      path: /oauth2
      hosts: [auth.eviljungle.com]
      tls:
      - hosts:
        - auth.eviljungle.com
    extraArgs:
      provider: oidc
      oidc-issuer-url: https://billimek.auth0.com/
      skip-provider-button:
      pass-authorization-header:
      email-domain: "*"
      cookie-domain: .eviljungle.com
      whitelist-domain: .eviljungle.com
    affinity:
      podAntiAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
        - labelSelector:
            matchExpressions:
            - key: app.kubernetes.io/name
              operator: In
              values:
              - oauth2-proxy
          topologyKey: "kubernetes.io/hostname"
  valuesFrom:
  - targetPath: config.clientID
    kind: Secret
    name: oauth2-proxy-secret
    valuesKey: AUTH0_CLIENT_ID
  - targetPath: config.clientSecret
    kind: Secret
    name: oauth2-proxy-secret
    valuesKey: AUTH0_CLIENT_SECRET
  - targetPath: config.cookieSecret
    kind: Secret
    name: oauth2-proxy-secret
    valuesKey: OAUTH2_PROXY_COOKIE_SECRET