fix(proxy): do not pass unused credentials upstream

cryostatio · Jun 7, 2024 · b6e9ef7 · b6e9ef7
1 parent 4e831e1
commit b6e9ef7
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/charts/cryostat/templates/openshiftOauthProxy.tpl b/charts/cryostat/templates/openshiftOauthProxy.tpl
@@ -5,6 +5,9 @@
   image: "{{ .Values.openshiftOauthProxy.image.repository }}:{{ .Values.openshiftOauthProxy.image.tag }}"
   args:
     - --skip-provider-button={{ not .Values.authentication.basicAuth.enabled }}
+    - --pass-access-token=false
+    - --pass-user-bearer-token=false
+    - --pass-basic-auth=false
     - --upstream=http://localhost:8181/
     - --upstream=http://localhost:3000/grafana/
     - --upstream=http://localhost:8333/storage/