Fix missing permission and add ability to set Deployment update strategy.

Signed-off-by: Nik Hodgkinson <nik.hodgkinson@starburstdata.com>

Author: Nik Hodgkinson

deploy/charts/kube-oidc-proxy/templates/clusterrole.yaml

@@ -17,6 +17,7 @@ rules:
   - "authentication.k8s.io"
   resources:
   - "userextras/scopes"
+  - "userextras/remote-client-ip"
   - "tokenreviews"
   verbs:
   - "create"

deploy/charts/kube-oidc-proxy/templates/deployment.yaml

@@ -13,6 +13,9 @@ spec:
     matchLabels:
       app.kubernetes.io/name: {{ include "kube-oidc-proxy.name" . }}
       app.kubernetes.io/instance: {{ .Release.Name }}
+  {{- if .Values.rollingUpdateStrategy }}
+  strategy: {{ .Values.rollingUpdateStrategy | nindent 4}}
+  {{ end }}
   template:
     metadata:
       labels:

deploy/charts/kube-oidc-proxy/values.yaml

@@ -91,6 +91,13 @@ ingress:
   #    hosts:
   #      - chart-example.local
 
+# Allows setting the Deployment update strategy
+#rollingUpdateStrategy:
+#  type: RollingUpdate
+#  rollingUpdate:
+#    maxSurge: 34%
+#    maxUnavailable: 33%
+
 # Enable Pod Disruption Budget
 podDisruptionBudget:
   enabled: false