Helm values we will use for the deployment of oauth2-proxy.

oauth2-proxy-values.yaml

config:
  clientID: xx
  clientSecret: xx
  cookieSecret: xx
  configFile: false

extraArgs:
 provider: oidc
 cookie-secure: true
 cookie-samesite: lax
 cookie-refresh: 1h
 cookie-expire: 4h
 cookie-name: _oauth2_proxy_istio_ingressgateway
 set-authorization-header: true
 email-domain: "*"
 http-address: 0.0.0.0:4180
 upstream: static://200
 skip-provider-button: true
 oidc-issuer-url: {{ .Values | get "charts.oauth2-proxy.issuer" "https://your-okta.com" }}
service:
  portNumber: 4180

serviceAccount:
  enabled: false

resources:
   limits:
     cpu: 100m
     memory: 300Mi
   requests:
     cpu: 100m
     memory: 300Mi

livenessProbe:
  enabled: true
  initialDelaySeconds: 0
  timeoutSeconds: 1

readinessProbe:
  enabled: true
  initialDelaySeconds: 0
  timeoutSeconds: 1
  periodSeconds: 10
  successThreshold: 1

metrics:
  # Enable Prometheus metrics endpoint
  enabled: false

replicaCount: 2

podDisruptionBudget:
  enabled: true
  minAvailable: 1

topologySpreadConstraints:
  - maxSkew: 1
    topologyKey: topology.kubernetes.io/zone
    whenUnsatisfiable: ScheduleAnyway
    labelSelector:
      matchLabels:
        app.kubernetes.io/instance: {{ .Release.Name }}