[Q&A] Is it possible to specify multiple issueer

[thiner]

I want my API to support selected auth providers. Is there a way oidc-guard can support this feature?

[IvanJosipovic]

Multiple issuers can be specified in the helm values, see

OIDC-Guard/charts/oidc-guard/values.yaml

Line 112 in e5a1122

validIssuers: []

Alternatively, if you want to control the issuer per API, disable the issuer validation in the helm values,

OIDC-Guard/charts/oidc-guard/values.yaml

Line 109 in e5a1122

validateIssuer: true

then you can do it in the external auth call:

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: ingress
  annotations:
    nginx.ingress.kubernetes.io/auth-url: https://oidc-guard.company.com/auth?iss=myissuer
    nginx.ingress.kubernetes.io/auth-signin: https://oidc-guard.company.com/signin
spec:

[thiner]

Thanks for your answer. Is there anyway we can set the values as an env in the deployment.yaml or configma?
OK, I found a way to have the configuration in config map.

[thiner]

Now, another problem popping up. How can I set multiple JWKSUrl? Each issuer has its own JWKSUrl, but the values.yaml accepts string rather than array value.