manifests

For hosting manifests to allow for the deployment of OAuth2 Proxy

Helm Chart

repository: https://oauth2-proxy.github.io/manifests name: oauth2-proxy

The helm chart in this repo is based on the community chart from the deprecated helm/stable repo

Linting/validation uses the helm/chart-testing tool. To run it locally you need to place two schema files in ~/.ct or /etc/ct.

ct lint --all --config ct.yaml
ct install --all --config ct.yaml

Contributing

If you want to contribute to this project, please make yourself familiar with the CONTRIBUTING.md guide before opening a PR or issue. Be aware this is just the Helm chart / manifest repository. Actual problems with the application OAuth2 Proxy itself should be reported in the main project repository.

Verify Signed Helm Charts

With the introduction of cosign for signing artifacts you can verify the integrity of our artifacts using the following command:

VERSION=8.3.0
cosign verify --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository oauth2-proxy/manifests \
    --certificate-github-workflow-name "Release Charts" \
    --certificate-github-workflow-ref refs/heads/main \
    --certificate-identity "https://github.com/oauth2-proxy/manifests/.github/workflows/release.yaml@refs/heads/main" \
    "ghcr.io/oauth2-proxy/charts/oauth2-proxy:${VERSION}" | jq

Note:

We utilize cosign to sign and verify artifacts with the KEYLESS mode. To learn more about how keyless signing is done, visit the official documentation about Keyless Signatures.

Code of Conduct

Participation in the OAuth2 Proxy project is governed by the CNCF Code of Conduct.

License

OAuth2 Proxy is distributed under The MIT License.

The OAuth2 Proxy helm chart is distributed under Apache License 2.0.

Trademarks

OAuth2 Proxy is a Cloud Native Computing Foundation Sandbox project.

The Linux Foundation® (TLF) has registered trademarks and uses trademarks. For a list of TLF trademarks, see Trademark Usage.