fix(proxy): do not pass unused credentials upstream (#147)

(cherry picked from commit 937470d)
cryostatio · Jun 7, 2024 · e548b57 · e548b57
1 parent a98cd37
commit e548b57
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/charts/cryostat/templates/openshiftOauthProxy.tpl b/charts/cryostat/templates/openshiftOauthProxy.tpl
@@ -5,6 +5,9 @@
   image: "{{ .Values.openshiftOauthProxy.image.repository }}:{{ .Values.openshiftOauthProxy.image.tag }}"
   args:
     - --skip-provider-button={{ not .Values.authentication.basicAuth.enabled }}
+    - --pass-access-token=false
+    - --pass-user-bearer-token=false
+    - --pass-basic-auth=false
     - --upstream=http://localhost:8181/
     - --upstream=http://localhost:3000/grafana/
     - --upstream=http://localhost:8333/storage/