sync repos

OWNERS

@@ -1,5 +1,6 @@
 approvers:
 - desimone
+- travisgroth
 reviewers:
 - desimone
 - victornoel

ci/default-values.yaml

@@ -0,0 +1,21 @@
+config:
+  policy:
+    - from: httpbin.corp.pomerium.io
+      to: http://httpbin
+      allowed_domains:
+      - pomerium.io
+    - from: external-httpbin.corp.pomerium.io
+      to: httpbin.org
+      allowed_domains:
+      - gmail.com
+    - from: weirdlyssl.corp.pomerium.io
+      to: http://neverssl.com
+      allowed_users:
+      - [email protected]
+      allowed_groups:
+      - admins
+      - developers
+    - from: hello.corp.pomerium.io
+      to: http://hello:8080
+      allowed_groups:
+      - admins

templates/configmap.yaml

@@ -9,7 +9,7 @@ metadata:
     app.kubernetes.io/managed-by: {{ .Release.Service }}
     app.kubernetes.io/instance: {{ .Release.Name }}
 data:
-  config.yaml: 
+  config.yaml: |
 {{- if and .Values.config.existingPolicy .Values.config.extraOpts }}
 {{ fail "Cannot use config.extraOpts with config.existingPolicy" }}
 {{- end }}

values.yaml

@@ -13,26 +13,6 @@ config:
   extraOpts: {}
   existingPolicy: ""
   policy: {}
-  # policy:
-  #   - from: httpbin.corp.pomerium.io
-  #     to: http://httpbin
-  #     allowed_domains:
-  #     - pomerium.io
-  #   - from: external-httpbin.corp.pomerium.io
-  #     to: httpbin.org
-  #     allowed_domains:
-  #     - gmail.com
-  #   - from: weirdlyssl.corp.pomerium.io
-  #     to: http://neverssl.com
-  #     allowed_users:
-  #     - [email protected]
-  #     allowed_groups:
-  #     - admins
-  #     - developers
-  #   - from: hello.corp.pomerium.io
-  #     to: http://hello:8080
-  #     allowed_groups:
-  #     - admins
 
 authenticate:
   # fullnameOverride: authenticate
@@ -79,7 +59,7 @@ service:
   externalPort: 443
   annotations:
     {}
-    # ===  GKE load balancer tweaks; default on until I can figure out 
+    # ===  GKE load balancer tweaks; default on until I can figure out
     # how the hell to escape this string from the helm CLI
     # cloud.google.com/app-protocols: '{"https":"HTTPS"}'
   labels: {}
@@ -97,7 +77,7 @@ ingress:
     # kubernetes.io/ingress.class: nginx
     # nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
     # nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"
-    # ===  GKE load balancer tweaks; default on until I can figure out 
+    # ===  GKE load balancer tweaks; default on until I can figure out
     # how the hell to escape this string from the helm CLI
     # kubernetes.io/ingress.allow-http: "false"
 resources: