oauth2-proxy.yaml

_: &hostname host.example.com

oauth2proxy:
  enabled: true
  values:
    config:
      clientID: ""
      existingSecret: secretname
      Custom configuration file: oauth2_proxy.cfg
      configFile: |-
        provider = "azure"
        oidc_issuer_url = "https://sts.windows.net/01234567-8912-3456-7890/"
        redirect_url = "https://host.example.com/oauth2/callback"
        reverse_proxy = true
        email_domains = [
          "example.com"
        ]
    service:
      portNumber: 8080
    ingress:
      enabled: true
      path: /oauth2
      pathType: prefix
      annotations:
        kubernetes.io/ingress.class: nginx
        kubernetes.io/tls-acme: "true"
      hosts:
      - *hostname
    tls:
      - secretName: host-oauth2-proxy-cert
        hosts:
         - *hostname