# To update run:
# kubectl apply -f configmap.yaml
# kubectl scale --replicas=0 deployment/proxy
# kubectl scale --replicas=1 deployment/proxy

apiVersion: v1
kind: ConfigMap
metadata:
  name: authproxy
data:
  authproxy.cfg: |-
    # Google Auth Proxy Config File
    ## https://github.com/bitly/google_auth_proxy

    ## <addr>:<port> to listen on for HTTP clients
    http_address = "0.0.0.0:4180"

    ## the OAuth Redirect URL.
    redirect_url = "https://auth.example.com/oauth2/callback"

    ## the http url(s) of the upstream endpoint. If multiple, routing is based on path
    upstreams = [
        # frontend
        "http://frontend-waiter:7080/dpr/",
        "http://frontend-maitred:7080/ui/",
        "http://frontend-maitred:7080/ui",
        "http://frontend-maitred:7080/report/",
        "http://frontend-maitred:7080/report",
        "http://frontend-maitred:7080/static/",
        # kitchen
        "http://kitchen-chef:8080/visit",
        # infrastructure
        "http://download:7080/file/",
        "http://download:7080/archive",
        "http://tasks:7080/tasks",
        "http://tasks:7080/tasks/",
    ]

    ## pass HTTP Basic Auth, X-Forwarded-User and X-Forwarded-Email information to upstream
    pass_basic_auth = true
    request_logging = true

    ## Google Apps Domains to allow authentication for
    google_apps_domains = [
        "example.com",
    ]

    email_domains = [
        "example.com",
    ]

    ## The Google OAuth Client ID, Secret
    client_id = "---"
    client_secret = "---"

    ## Cookie Settings
    ## Secret - the seed string for secure cookies
    ## Domain - optional cookie domain to force cookies to (ie: .yourcompany.com)
    ## Expire - expire timeframe for cookie
    cookie_secret = "won't tell you"
    cookie_domain = ".example.com"
    cookie_https_only = true