Skip to content

Harden Chat2DB for shared OIDC proxy hosting - #3

Merged
PaleHazy merged 1 commit into
mainfrom
hazyforge/oidc-proxy
Jul 26, 2026
Merged

PaleHazy merged 1 commit into
mainfrom
hazyforge/oidc-proxy

Conversation

@PaleHazy

Copy link
Copy Markdown

Summary

  • make the hosted CORS origin an exact validated HTTPS setting
  • keep the application on port 10825 behind a namespace-and-workload-scoped NetworkPolicy
  • extend the private image smoke test with allowed and denied origins
  • document the shared oauth2-proxy security boundary

Verification

  • focused CorsFilter test: 5 passed
  • helm lint and render passed

The proxy, ZITADEL client, public route, and External Secrets remain cluster/platform desired state; this PR keeps Chat2DB private and proxy-ready.

@PaleHazy
PaleHazy merged commit ffc6a41 into main Jul 26, 2026
7 of 8 checks passed
@PaleHazy
PaleHazy deleted the hazyforge/oidc-proxy branch July 26, 2026 03:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant