chore(kube-oidc-proxy): bump oidc proxy to v1.0.6 (#1970)

* chore(kube-oidc-proxy): bump oidc proxy to v1.0.6

* fix: license info

licenses.d2iq.yaml

@@ -497,11 +497,11 @@ resources:
       - license_path: LICENSE
         ref: ${image_tag}
         url: https://github.com/cert-manager/cert-manager
-  - container_image: quay.io/jetstack/kube-oidc-proxy:v0.3.0
+  - container_image: ghcr.io/mesosphere/dkp-container-images/kube-oidc-proxy:1.0.6
     sources:
       - license_path: LICENSE
-        ref: ${image_tag}
-        url: https://github.com/jetstack/kube-oidc-proxy
+        ref: v${image_tag}
+        url: https://github.com/TremoloSecurity/kube-oidc-proxy
   - container_image: quay.io/kiali/kiali-operator:v1.79.0
     sources:
       - license_path: LICENSE

services/kube-oidc-proxy/0.3.2/defaults/cm.yaml → services/kube-oidc-proxy/0.3.4/defaults/cm.yaml

@@ -2,11 +2,15 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: kube-oidc-proxy-0.3.2-d2iq-defaults
+  name: kube-oidc-proxy-0.3.4-d2iq-defaults
   namespace: ${releaseNamespace}
 data:
   values.yaml: |-
     ---
+    # See: https://github.com/mesosphere/dkp-container-images/tree/main/kube-oidc-proxy
+    image:
+      repository: ghcr.io/mesosphere/dkp-container-images/kube-oidc-proxy
+      tag: 1.0.6
     priorityClassName: "dkp-critical-priority"
     deploymentAnnotations:
       # Config changes and certificate rotation by cert-manager need a reload
@@ -29,6 +33,8 @@ data:
       usernameClaim: email
       groupsClaim: groups
       groupsPrefix: "oidc:"
+      # This must be set when using custom built image which is based on alpine.
+      caSystemDefaultPath: "/etc/ssl/certs/ca-certificates.crt"
     tokenPassthrough:
       enabled: true
     certIssuerRef:

services/kube-oidc-proxy/0.3.2/kube-oidc-proxy.yaml → services/kube-oidc-proxy/0.3.4/kube-oidc-proxy.yaml

@@ -21,7 +21,7 @@ spec:
         kind: HelmRepository
         name: mesosphere.github.io-charts-staging
         namespace: kommander-flux
-      version: 0.3.2
+      version: 0.3.4
   interval: 15s
   install:
     crds: CreateReplace
@@ -34,5 +34,5 @@ spec:
   releaseName: kube-oidc-proxy
   valuesFrom:
     - kind: ConfigMap
-      name: kube-oidc-proxy-0.3.2-d2iq-defaults
+      name: kube-oidc-proxy-0.3.4-d2iq-defaults
   targetNamespace: ${releaseNamespace}