Merge pull request #190 from tomkukral/traffic-policy

configure traffic policy for svc
oauth2-proxy · May 31, 2024 · 756fde5 · 756fde5
2 parents 7a6ec78 + 56e213c
commit 756fde5
Show file tree

Hide file tree

Showing 4 changed files with 16 additions and 4 deletions.
diff --git a/helm/oauth2-proxy/Chart.yaml b/helm/oauth2-proxy/Chart.yaml
@@ -1,5 +1,5 @@
 name: oauth2-proxy
-version: 7.6.3
+version: 7.7.0
 apiVersion: v2
 appVersion: 7.6.0
 home: https://oauth2-proxy.github.io/oauth2-proxy/
@@ -34,8 +34,8 @@ maintainers:
 kubeVersion: ">=1.9.0-0"
 annotations:
   artifacthub.io/changes: |
-    - kind: fixed
-      description: Fix the default configmap name in deployment
+    - kind: added
+      description: option to configure traffic policy for the service
       links:
         - name: Github PR
-          url: https://github.com/oauth2-proxy/manifests/pull/210
+          url: https://github.com/oauth2-proxy/manifests/pull/190
diff --git a/helm/oauth2-proxy/README.md b/helm/oauth2-proxy/README.md
@@ -188,6 +188,8 @@ The following table lists the configurable parameters of the oauth2-proxy chart
 | `revisionHistoryLimit`                                | maximum number of revisions maintained                                                                                                                                                                                                                           | 10                                                                               |
 | `service.portNumber`                                  | port number for the service                                                                                                                                                                                                                                      | `80`                                                                             |
 | `service.appProtocol`                                 | application protocol on the port of the service                                                                                                                                                                                                                  | `http`                                                                           |
+| `service.externalTrafficPolicy`                       | denotes if the service desires to route external traffic to node-local or cluster-wide endpoints                                                                                                                                                                 | `Cluster`                                                                        |
+| `service.internalTrafficPolicy`                       | denotes if the service desires to route internal traffic to node-local or cluster-wide endpoints                                                                                                                                                                 | `Cluster`                                                                        |
 | `service.type`                                        | type of service                                                                                                                                                                                                                                                  | `ClusterIP`                                                                      |
 | `service.clusterIP`                                   | cluster ip address                                                                                                                                                                                                                                               | `nil`                                                                            |
 | `service.loadBalancerIP`                              | ip of load balancer                                                                                                                                                                                                                                              | `nil`                                                                            |

diff --git a/helm/oauth2-proxy/templates/service.yaml b/helm/oauth2-proxy/templates/service.yaml
@@ -27,6 +27,12 @@ spec:
   {{- end -}}
 {{- else }}
   type: {{ .Values.service.type }}
+{{- end }}
+{{- if .Values.service.externalTrafficPolicy }}
+  externalTrafficPolicy: {{ .Values.service.externalTrafficPolicy }}
+{{- end }}
+{{- if .Values.service.internalTrafficPolicy }}
+  internalTrafficPolicy: {{ .Values.service.internalTrafficPolicy }}
 {{- end }}
   ports:
     - port: {{ .Values.service.portNumber }}

diff --git a/helm/oauth2-proxy/values.yaml b/helm/oauth2-proxy/values.yaml
@@ -141,6 +141,10 @@ service:
   appProtocol: http
   annotations: {}
   # foo.io/bar: "true"
+  # configure externalTrafficPolicy
+  externalTrafficPolicy: ""
+  # configure internalTrafficPolicy
+  internalTrafficPolicy: ""
 
 ## Create or use ServiceAccount
 serviceAccount: