{"id":20168734,"url":"https://github.com/kostiantyn-matsebora/helm-simple-oauth2-proxy","last_synced_at":"2026-03-06T15:32:27.581Z","repository":{"id":220276549,"uuid":"750790905","full_name":"kostiantyn-matsebora/helm-simple-oauth2-proxy","owner":"kostiantyn-matsebora","description":"Helm chart for deploying oauth2-proxy using OIDC provider","archived":false,"fork":false,"pushed_at":"2024-10-04T06:06:04.000Z","size":52,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2026-02-15T06:25:02.406Z","etag":null,"topics":["helm","helm-chart","oauth2","oauth2-proxy","oidc"],"latest_commit_sha":null,"homepage":"","language":"Smarty","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kostiantyn-matsebora.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-01-31T10:24:49.000Z","updated_at":"2024-10-04T06:06:06.000Z","dependencies_parsed_at":null,"dependency_job_id":"6ae53542-2815-46c8-8789-87ce215b30d7","html_url":"https://github.com/kostiantyn-matsebora/helm-simple-oauth2-proxy","commit_stats":null,"previous_names":["kostiantyn-matsebora/oauth2-proxy-oidc-chart","kostiantyn-matsebora/helm-simple-oauth2-proxy"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/kostiantyn-matsebora/helm-simple-oauth2-proxy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kostiantyn-matsebora%2Fhelm-simple-oauth2-proxy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kostiantyn-matsebora%2Fhelm-simple-oauth2-proxy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kostiantyn-matsebora%2Fhelm-simple-oauth2-proxy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kostiantyn-matsebora%2Fhelm-simple-oauth2-proxy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kostiantyn-matsebora","download_url":"https://codeload.github.com/kostiantyn-matsebora/helm-simple-oauth2-proxy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kostiantyn-matsebora%2Fhelm-simple-oauth2-proxy/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30183473,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-06T14:42:24.748Z","status":"ssl_error","status_checked_at":"2026-03-06T14:42:14.925Z","response_time":250,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["helm","helm-chart","oauth2","oauth2-proxy","oidc"],"created_at":"2024-11-14T01:09:37.927Z","updated_at":"2026-03-06T15:32:27.555Z","avatar_url":"https://github.com/kostiantyn-matsebora.png","language":"Smarty","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Simple OAuth2 Proxy Helm Chart\n [![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=kostiantyn-matsebora_helm-oauth2-proxy-oidc\u0026metric=alert_status)](https://sonarcloud.io/summary/new_code?id=kostiantyn-matsebora_helm-oauth2-proxy-oidc)\n \nSimplified helm chart for deploying and configuring [oauth2-proxy] provides a way to configure `OIDC provider` as any other OAuth2 provider supported by application.\n\n## Configuration\n\nThe following table lists the main configurable parameters of the oauth2-proxy chart and their default values.\n\n```yaml\n\nauth:\n  # OIDC configuration, all fields are required.\n  # Following command line arguments are used to configure OIDC provider.\n  oidc:\n    enabled: false\n    # Set it true if you are using Keycloak as OIDC provider.\n    isKeyCloak: false\n    # Issuer URL\n    # For Authentik application looks like https://[authentik base uri]/application/o/[application name]/\n    # For Hashicorp Vault looks like https://[vault url]/v1/identity/oidc/provider/[provider name]\n    issuerUrl: \n\n  # Configuration  passed to toml file\n  config:\n    # Application Client ID. Required for OAuth2 providers.\n    clientId: \n    # Application  Client Secret. Required for OAuth2 providers.\n    clientSecret:\n    # OAuth2 scope to request. Required for OAuth2 providers.\n    scope:\n    # Cookie secret. Required. https://oauth2-proxy.github.io/oauth2-proxy/docs/configuration/overview/#config-file\n    cookieSecret:\n    # Set Authorization Bearer response header (useful in Nginx auth_request mode). Default false.\n    setAuthorizationHeader:\n    #  Authenticate emails with the specified domain (may be given multiple times).\n    #  Use * to authenticate any email. Default empty.\n    emailDomain:\n    # Refresh the cookie after this duration; 0 to disable; not supported by all providers. Default empty\n    cookieRefresh:\n    # Expire the cookie after this duration; 0 to expire with browser session; not supported by all providers. Default 168h0m0s\n    cookieExpire:\n    # use PKCE code challenges with the specified method. Either 'plain' or 'S256' (recommended). Default empty\n    codeChallengeMethod:\n\n# Extra configuration added to toml configuration file, more information you can find here https://oauth2-proxy.github.io/oauth2-proxy/configuration/overview,\n# Example: \n# extraConfig: |\n#   cookie_domain = \"example.com\"\n#   cookie_path = \"/\"\n#   ...\n#\n# Consider using it if you can use it to define any other provider than OIDC\n  extraConfig:\n\n# Name of the runtime class to use for this pod https://kubernetes.io/docs/concepts/containers/runtime-class/  \nruntimeClassName:\n```\n\nMore configuration options can be found in [chart/values.yaml](./chart/values.yaml).\n\n## Example\n\nFollowing example reflects configuration used to deploy [oauth2-proxy] configured to use [Hashicorp Vault](https://www.vaultproject.io/) `OIDC provider`:\n\n```yaml\ningress:\n  host: example.com\nauth:\n  oidc:\n    enabled: true\n    issuerUrl: https://[vault base URL]/v1/identity/oidc/provider/[provider name]\n  config:\n    clientId: 3XGHWI6gaONw9DMRqER6dcGRDZnxCwXs\n    clientSecret: hvo_secret_T6lWmnnpdtpeLOWS3QX0tk3PzMGhrM4WbvJ9IygE6W3q0USsVsOsfUKuZ8MqZOo6\n    cookieSecret: TOw1sHArkcOYi4Ler85-ogL-ZYmkklc2AahcuBPVT1s=\n    setAuthorizationHeader: true\n    emailDomain: example.com\n    cookieRefresh: 1m \n    cookieExpire: 30m\n    codeChallengeMethod: S256\n    scope: openid user groups\n  extraConfig: |\n     cookie_name = \"_grandmas_delicious_cookie\"\n```\n\n## Usage\n\nAdd helm [repository](https://kostiantyn-matsebora.github.io/helm-charts/) first:\n\n```bash\nhelm repo add kostiantyn-matsebora https://kostiantyn-matsebora.github.io/helm-charts/\n```\n\nInstall/upgrade helm chart using your custom values:\n\n```bash\n\n# oauth2-proxy\nhelm upgrade oauth2-proxy kostiantyn-matsebora/simple-oauth2-proxy --install --values ./custom-values.yaml\n\n```\n\n## Contributing\n\nIf you experience any issues, have a question or a suggestion, or if you wish\nto contribute, feel free to [open an issue][issues] or\n[start a discussion][discussions].\n\n[issues]: https://github.com/kostiantyn-matsebora/helm-simple-oauth2-proxy/issues\n[discussions]: https://github.com/kostiantyn-matsebora/helm-simple-oauth2-proxy/discussions\n\n## License\n\n[`MIT License`](../LICENSE)\n\n\n[oauth2-proxy]:https://github.com/oauth2-proxy/oauth2-proxy\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkostiantyn-matsebora%2Fhelm-simple-oauth2-proxy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkostiantyn-matsebora%2Fhelm-simple-oauth2-proxy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkostiantyn-matsebora%2Fhelm-simple-oauth2-proxy/lists"}