Files
home-argocd/archive/oauth2-proxy.yaml
T
2025-11-24 12:48:30 +11:00

58 lines
1.6 KiB
YAML

# Oauth credentials https://console.cloud.google.com/apis/credentials?project=wahyd4
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: oauth2-proxy
namespace: argocd
spec:
project: default
source:
chart: oauth2-proxy
repoURL: https://oauth2-proxy.github.io/manifests
path: oauth2-proxy
targetRevision: 7.11.0
helm:
releaseName: oauth2-proxy
values: |
config:
existingSecret: my-google-oauth2-proxy-creds
# github credentials
# existingSecret: oauth2-proxy-creds
extraArgs:
whitelist-domain: .junv.cc
cookie-domain: .junv.cc
provider: google
silence-ping-logging: true
email-domain: ".gmail.com"
authenticatedEmailsFile:
enabled: true
restricted_access: |-
ncjunv@gmail.com
wahyd4@gmail.com
tangyanhua9@gmail.com
wwwheygo@gmail.com
maxzhaomax@gmail.com
ingress:
enabled: true
path: /
hosts:
- id.junv.cc
annotations:
kubernetes.io/ingress.class: nginx
cert-manager.io/cluster-issuer: letsencrypt-prod
kubernetes.io/tls-acme: "true"
tls:
- secretName: oauth2-proxy
hosts:
- id.junv.cc
erviceAccount:
enable: false
replicaCount: 1
destination:
server: https://kubernetes.default.svc
namespace: nginx-ingress
syncPolicy:
automated:
prune: true
selfHeal: true