From bbab1550a052326d617419e0f0c1ef163b018f74 Mon Sep 17 00:00:00 2001
From: Balazs Zachar <zachar.balazs@gmail.com>
Date: Wed, 23 Apr 2025 07:14:16 +0000
Subject: [PATCH] Add extra arguments to the kube-rbac-proxy through helm chart
 values.

---
 chart/templates/deployment.yaml | 3 +++
 chart/values.yaml               | 9 +++++++++
 2 files changed, 12 insertions(+)

diff --git a/chart/templates/deployment.yaml b/chart/templates/deployment.yaml
index 6ae11b08b..6708ce251 100644
--- a/chart/templates/deployment.yaml
+++ b/chart/templates/deployment.yaml
@@ -52,6 +52,9 @@ spec:
         - --upstream=http://127.0.0.1:8080/
         - --logtostderr=true
         - --v=0
+        {{- with .Values.controller.kubeRbacProxy.extraArgs }}
+        {{- toYaml . | nindent 8 }}
+        {{- end }}
         env:
         - name: KUBERNETES_CLUSTER_DOMAIN
           value: {{ .Values.controller.kubernetesClusterDomain }}
diff --git a/chart/values.yaml b/chart/values.yaml
index 36862d2c9..e5c6f3f01 100644
--- a/chart/values.yaml
+++ b/chart/values.yaml
@@ -136,6 +136,15 @@ controller:
         cpu: 5m
         memory: 64Mi
 
+    # Defines additional commandline arguments to be passed to the kube-rbac-proxy container.
+    # Example:
+    # ```yaml
+    # extraArgs:
+    #   - --client-ca-file=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
+    # ```
+    # @type: array
+    extraArgs: []
+
   # Image pull secret to use for private container registry authentication which will be applied to the controllers
   # service account. Alternatively, the value may be specified as an array of strings.
   # Example: