123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213
global:
imageRegistry: reg.mini.dev
imagePullSecrets:
- minimus-registry
defaultStorageClass: ""
storageClass: ""
security:
allowInsecureImages: true
compatibility:
openshift:
adaptSecurityContext: auto
oauth2-proxy:
global:
imageRegistry: ""
imagePullSecrets: []
compatibility:
openshift:
adaptSecurityContext: auto
kubeVersion: ""
nameOverride: ""
fullnameOverride: ""
namespaceOverride: ""
clusterDomain: cluster.local
extraDeploy: []
commonLabels: {}
commonAnnotations: {}
diagnosticMode:
enabled: false
command:
- sleep
args:
- infinity
image:
registry: reg.mini.dev
repository: oauth2-proxy-advanced
tag: 7.14.2
digest: ""
pullPolicy: Always
pullSecrets:
- minimus-registry
debug: false
replicaCount: 1
containerPorts:
http: 4180
metrics: 9090
command: []
args: []
extraEnvVars: []
extraEnvVarsCM: ""
extraEnvVarsSecret: ""
podSecurityContext:
enabled: true
fsGroupChangePolicy: Always
sysctls: []
supplementalGroups: []
fsGroup: 1001
containerSecurityContext:
enabled: true
seLinuxOptions: {}
runAsUser: 1001
runAsGroup: 1001
runAsNonRoot: true
privileged: false
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
automountServiceAccountToken: false
hostAliases: []
hostNetwork: false
hostIPC: false
labels: {}
annotations: {}
podLabels: {}
podAnnotations: {}
podAffinityPreset: ""
podAntiAffinityPreset: soft
nodeAffinityPreset:
type: ""
key: ""
values: []
affinity: {}
nodeSelector: {}
tolerations: []
topologySpreadConstraints: []
priorityClassName: ""
schedulerName: ""
terminationGracePeriodSeconds: ""
updateStrategy:
type: RollingUpdate
rollingUpdate: {}
emptyDir:
medium: ""
extraVolumes: []
extraVolumeMounts: []
sidecars: []
initContainers: []
enableServiceLinks: true
resourcesPreset: nano
resources: {}
livenessProbe:
enabled: true
initialDelaySeconds: 30
periodSeconds: 10
timeoutSeconds: 5
failureThreshold: 6
successThreshold: 1
readinessProbe:
enabled: true
initialDelaySeconds: 5
periodSeconds: 5
timeoutSeconds: 3
failureThreshold: 6
successThreshold: 1
startupProbe:
enabled: false
initialDelaySeconds: 30
periodSeconds: 10
timeoutSeconds: 1
failureThreshold: 15
successThreshold: 1
customLivenessProbe: {}
customReadinessProbe: {}
customStartupProbe: {}
lifecycleHooks: {}
extraPodSpec: {}
networkPolicy:
enabled: true
allowExternal: true
allowExternalEgress: true
addExternalClientAccess: true
extraIngress: []
extraEgress: []
ingressNSMatchLabels: {}
ingressNSPodMatchLabels: {}
ingressPodMatchLabels: {}
service:
type: ClusterIP
ports:
http: 4180
metrics: 9090
nodePorts:
http: ""
metrics: ""
sessionAffinity: ""
sessionAffinityConfig: {}
trafficDistribution: ""
clusterIP: ""
loadBalancerIP: ""
loadBalancerSourceRanges: []
externalTrafficPolicy: Cluster
annotations: {}
extraPorts: []
autoscaling:
enabled: false
minReplicas: 3
maxReplicas: 6
targetCPU: 50
targetMemory: 50
pdb:
create: true
minAvailable: null
maxUnavailable: null
config:
clientID: ""
clientSecret: ""
cookieSecret: ""
configFile: ""
existingSecret: ""
provider: ""
emailDomains: []
upstreams: []
skipAuthRegex: []
skipProviderButton: false
passBasicAuth: true
passHostHeader: true
passUserHeaders: true
setXForwardedFor: true
setXForwardedProto: true
setXForwardedHost: true
setXRealIP: true
whitelistDomains: []
cookie:
name: ""
secret: ""
domain: ""
path: ""
expiry: ""
refresh: ""
secure: true
httponly: true
samesite: ""
redis:
enabled: false
host: ""
port: 6379
password: ""
db: 0
existingSecret: ""
existingSecretPasswordKey: ""
serviceAccount:
create: true
name: ""
automountServiceAccountToken: false
annotations: {}
rbac:
create: false
rules: []
psp:
create: false
oauth2-proxy-advanced 7.14.2