From 31091cf5b11045649f5debfa7e04742308b95f59 Mon Sep 17 00:00:00 2001 From: kfox1111 Date: Sun, 23 Nov 2025 13:28:44 -0800 Subject: [PATCH] Add oidc server_path_prefix option (#695) Signed-off-by: Kevin Fox Co-authored-by: Faisal Memon --- charts/spire/charts/spiffe-oidc-discovery-provider/README.md | 1 + .../spiffe-oidc-discovery-provider/templates/configmap.yaml | 4 ++++ .../spire/charts/spiffe-oidc-discovery-provider/values.yaml | 2 ++ 3 files changed, 7 insertions(+) diff --git a/charts/spire/charts/spiffe-oidc-discovery-provider/README.md b/charts/spire/charts/spiffe-oidc-discovery-provider/README.md index b525026..453a2b9 100644 --- a/charts/spire/charts/spiffe-oidc-discovery-provider/README.md +++ b/charts/spire/charts/spiffe-oidc-discovery-provider/README.md @@ -82,6 +82,7 @@ A Helm chart to install the SPIFFE OIDC discovery provider. | `config.logLevel` | The log level, valid values are "debug", "info", "warn", and "error" | `info` | | `config.jwtDomain` | The JWT domain. Defaults to oidc-discovery.$jwtIssuer URL-parsed host if unset | `""` | | `config.jwksUri` | The JWKS URI | `""` | +| `config.serverPathPrefix` | If specified, all endpoints listened to will be prefixed by this value | `""` | | `config.additionalDomains` | Add additional domains that can be used for oidc discovery | `[]` | | `imagePullSecrets` | Image pull secret names | `[]` | | `nameOverride` | Name override | `""` | diff --git a/charts/spire/charts/spiffe-oidc-discovery-provider/templates/configmap.yaml b/charts/spire/charts/spiffe-oidc-discovery-provider/templates/configmap.yaml index 30e970e..1e7d23d 100644 --- a/charts/spire/charts/spiffe-oidc-discovery-provider/templates/configmap.yaml +++ b/charts/spire/charts/spiffe-oidc-discovery-provider/templates/configmap.yaml @@ -47,6 +47,10 @@ serving_cert_file: jwks_uri: {{ .Values.config.jwksUri | quote }} {{- end }} +{{- if .Values.config.serverPathPrefix }} +server_path_prefix: {{ .Values.config.serverPathPrefix | quote }} +{{- end }} + {{- if eq .Values.bundleSource "ConfigMap" }} file: path: /bundle/bundle.spiffe diff --git a/charts/spire/charts/spiffe-oidc-discovery-provider/values.yaml b/charts/spire/charts/spiffe-oidc-discovery-provider/values.yaml index bb4dc50..b455785 100644 --- a/charts/spire/charts/spiffe-oidc-discovery-provider/values.yaml +++ b/charts/spire/charts/spiffe-oidc-discovery-provider/values.yaml @@ -210,6 +210,8 @@ config: jwtDomain: "" ## @param config.jwksUri [string] The JWKS URI jwksUri: "" + ## @param config.serverPathPrefix [string] If specified, all endpoints listened to will be prefixed by this value + serverPathPrefix: "" ## @param config.additionalDomains [array] Add additional domains that can be used for oidc discovery additionalDomains: [] # - localhost