Skip to content

add endSessionEndpoint URL #24

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jessebot merged 1 commit into from
Aug 30, 2023
Merged

add endSessionEndpoint URL #24

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion charts/vouch/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ keywords:
- sso
- sso-login

version: 4.1.1
version: 4.1.2

# renovate: image=quay.io/vouch/vouch-proxy
appVersion: "0.39"
Expand Down
4 changes: 3 additions & 1 deletion charts/vouch/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# vouch

![Version: 4.1.1](https://img.shields.io/badge/Version-4.1.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.39](https://img.shields.io/badge/AppVersion-0.39-informational?style=flat-square)
![Version: 4.1.2](https://img.shields.io/badge/Version-4.1.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.39](https://img.shields.io/badge/AppVersion-0.39-informational?style=flat-square)

An SSO and OAuth login solution for nginx using the auth_request module.

Expand All @@ -27,6 +27,7 @@ An SSO and OAuth login solution for nginx using the auth_request module.
| config.oauth.callbackUrls | list | `[]` | valid callback urls to use, example https://vouch.example.com/auth |
| config.oauth.clientId | string | `""` | clientID from your provider |
| config.oauth.clientSecret | string | `""` | clientSecret from your provider |
| config.oauth.endSessionEndpoint | string | `""` | end session endpoint is usually the IdP's logout URL |
| config.oauth.existingSecret | string | `""` | existingSecret for clientId, clientSecret, authUrl, tokenUrl, userInfoUrl, scopes, callbackUrls, and preferredDomain. If this value is not empty, we will ignore all of those plain text values and only use your secret keys |
| config.oauth.preferredDomain | string | `""` | preferred domain |
| config.oauth.provider | string | `""` | oauth2 provider, such as keycloak |
Expand All @@ -35,6 +36,7 @@ An SSO and OAuth login solution for nginx using the auth_request module.
| config.oauth.secretKeys.callbackUrls | string | `"callbackUrls"` | secret key in oauth.existingSecret for commas seperated list of valid callback urls to use, example value for your key in your existing secert: 'https://vouch.example.com/auth,https://vouch.example.com/login' |
| config.oauth.secretKeys.clientId | string | `"clientId"` | secret key in oauth.existingSecret for the clientID from your provider |
| config.oauth.secretKeys.clientSecret | string | `"clientSecret"` | secret key in oauth.existingSecret for clientSecret from your provider |
| config.oauth.secretKeys.endSessionEndpoint | string | `"endSessionEndpoint"` | secret key in oauth.existingSecret for your end session end_session_endpoint |
| config.oauth.secretKeys.preferredDomain | string | `"preferredDomain"` | secret key in oauth.existingSecret for your preferred domain |
| config.oauth.secretKeys.tokenUrl | string | `"tokenUrl"` | secret key in oauth.existingSecret for token url from your oidc provider |
| config.oauth.secretKeys.userInfoUrl | string | `"userInfoUrl"` | secret key in oauth.existingSecret for userInfoUrl from your oidc provider |
Expand Down
7 changes: 7 additions & 0 deletions charts/vouch/templates/deployment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -136,6 +136,13 @@ spec:
name: {{ template "vouch.oauth.secret.name" . }}
key: {{ .Values.config.oauth.secretKeys.callbackUrls }}
{{- end }}
{{- if or .Values.config.oauth.endSessionEndpoint (and .Values.config.oauth.existingSecret .Values.config.oauth.secretKeys.endSessionEndpoint) }}
- name: OAUTH_END_SESSION_ENDPOINT
valueFrom:
secretKeyRef:
name: {{ template "vouch.oauth.secret.name" . }}
key: {{ .Values.config.oauth.secretKeys.endSessionEndpoint }}
{{- end }}
{{- if .Values.config.oauth.scopes }}
- name: OAUTH_SCOPES
value: {{ join "," .Values.config.oauth.scopes }}
Expand Down
1 change: 1 addition & 0 deletions charts/vouch/templates/secret.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,7 @@ data:
tokenUrl: {{ .Values.config.oauth.tokenUrl | b64enc | quote }}
userInfoUrl: {{ .Values.config.oauth.userInfoUrl | b64enc | quote }}
callbackUrls: {{ join "," .Values.config.oauth.callbackUrls | b64enc | quote }}
endSessionEndpoint: {{ .Values.config.oauth.endSessionEndpoint | b64enc | quote }}
preferredDomain: {{ .Values.config.oauth.preferredDomain | b64enc | quote }}
{{- end }}
{{- end }}
4 changes: 4 additions & 0 deletions charts/vouch/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -165,6 +165,8 @@ config:
userInfoUrl: ''
# -- array of scopes to get from the provider e.g. [openid, email, profile]
scopes: []
# -- end session endpoint is usually the IdP's logout URL
endSessionEndpoint: ""
# -- valid callback urls to use, example https://vouch.example.com/auth
callbackUrls: []
# -- preferred domain
Expand All @@ -190,6 +192,8 @@ config:
# callback urls to use, example value for your key in your existing secert:
# 'https://vouch.example.com/auth,https://vouch.example.com/login'
callbackUrls: 'callbackUrls'
# -- secret key in oauth.existingSecret for your end session end_session_endpoint
endSessionEndpoint: 'endSessionEndpoint'
# -- secret key in oauth.existingSecret for your preferred domain
preferredDomain: 'preferredDomain'

Expand Down