Run oidc insecure on unix socket using Nginx

Signed-off-by: Marco Franssen <[email protected]>

charts/spire/templates/oidc-dp-configmap.yaml

@@ -12,15 +12,36 @@ data:
     {{ else }}
     domains = []
     {{ end }}
+    {{- if .Values.oidc.allowInsecureScheme }}
     allow_insecure_scheme = {{ .Values.oidc.allowInsecureScheme }}
+    listen_socket_path = "/run/spire/oidc-sockets/oidc-server.sock"
+    {{- else }}
     acme {
         directory_url = "{{ .Values.oidc.acme.directoryUrl }}"
         cache_dir = "{{ .Values.oidc.acme.cacheDir }}"
         tos_accepted = {{ .Values.oidc.acme.tosAccepted }}
         email = "{{ .Values.oidc.acme.emailAddress }}"
     }
+    {{- end }}
+
     workload_api {
         socket_path = "/run/spire/agent-sockets/agent.sock"
         trust_domain = "{{ .Values.spire.trustDomain }}"
     }
+  {{- if .Values.oidc.allowInsecureScheme }}
+  default.conf.template: |
+    upstream oidc {
+      server unix:/run/spire/oidc-sockets/oidc-server.sock;
+    }
+
+    server {
+      listen            80;
+      listen       [::]:80;
+
+      location / {
+        proxy_pass http://oidc;
+        proxy_set_header Host $host;
+      }
+    }
+  {{- end }}
 {{ end }}