Restrict OAuth2 Proxy trusted forwarded headers

2026-05-17 11:29:48 +02:00 · 2026-05-17 11:29:48 +02:00 · 8e8c69101e
commit 8e8c69101e
parent 9ef903d163
1 changed files with 2 additions and 1 deletions
--- a/apps/litellm/values.yaml
+++ b/apps/litellm/values.yaml
@ -169,11 +169,12 @@ oauth2-proxy:
      - "*"
    configFile: |-
      provider = "oidc"
-      oidc_issuer_url = "https://sso.noxxos.nl/application/o/litellm/"
+      oidc_issuer_url = "https://sso.noxxos.nl/application/o/litellm"
      redirect_url = "https://litellm.noxxos.nl/oauth2/callback"
      upstreams = [ "http://litellm:4000" ]
      email_domains = [ "*" ]
      reverse_proxy = true
+      trusted_ips = [ "10.244.0.0/16" ]
      pass_authorization_header = true
      pass_access_token = true
      set_xauthrequest = true