helm-release.yaml

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: oauth2-proxy
  namespace: oauth2-proxy
  labels:
    helm.toolkit.fluxcd.io/crds: enabled
    helm.toolkit.fluxcd.io/helm-test: enabled
    helm.toolkit.fluxcd.io/remediation: enabled
spec:
  interval: 10m
  chart:
    spec:
      chart: oauth2-proxy
      version: 7.9.0
      sourceRef:
        kind: HelmRepository
        name: oauth2-proxy
  # https://github.com/oauth2-proxy/manifests/blob/main/helm/oauth2-proxy/values.yaml
  values:
    deploymentAnnotations:
      configmap.reloader.stakater.com/reload: oauth2-proxy
    ingress:
      enabled: true
      className: ${ingress_class_name:=}
      hosts:
        - oauth2-proxy.${cluster_domain}
    config:
      clientID: ${github_client_id}
      clientSecret: ${github_client_secret}
      cookieSecret: ${oauth2_proxy_cookie_secret}
      cookieName: oauth2_proxy_cookie
      configFile: |-
        cookie_domains=[".${cluster_domain}"]
        email_domains=["*"]
        github_users=["devantler"]
        provider="github"
        redirect_url="https://oauth2-proxy.${cluster_domain}/oauth2/callback"
        reverse_proxy=true
        skip_provider_button=true
        upstreams=["static://202"]