Hook Service Operator

Learn about configurations >

• authn_allowed_scope | string

  The allowed OAuth2 scopes that are allowed to access the Group/Authz management APIs.

• authn_allowed_subjects | string

  Comma separated list of allowed subject IDs that are allowed to access the Group/Authz management APIs.

• authn_issuer | string

  The expected issuer of incoming tokens to the Group/Authz management APIs.

  This configuration cannot be used with when the oauth integration exists.

• authn_jwks_url | string

  The URL to fetch JWKS keys for validating incoming tokens to the Group/Authz management APIs.

  This configuration cannot be used with when the oauth integration exists.

• authorization_enabled | boolean

  Default: True

  Whether the access control authorization integration is enabled.

• cpu | string

  K8s cpu resource limit, e.g. "1" or "500m". Default is unset (no limit). This value is used for the "limits" portion of the resource requirements (the "requests" portion is automatically deduced from it). See https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/

• http_proxy | string

  URL of the HTTP proxy eg http://proxy.internal:6666, it will set the HTTP_PROXY var in the workload environment

• https_proxy | string

  URL of the HTTPS proxy eg http://proxy.internal:6666, it will set the HTTPS_PROXY var in the workload environment

• log_level | string

  Default: info

  Configures the log level.

  Acceptable values are: "info", "debug", "warning", "error" and "critical"

• memory | string

  K8s memory resource limit, e.g. "1Gi". Default is unset (no limit). This value is used for the "limits" portion of the resource requirements (the "requests" portion is automatically deduced from it). See https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/

• no_proxy | string

  Domains that need to be excluded from proxying no_proxy="test.com,test.co.uk", it is a comma separate list

• salesforce_consumer_secret | secret

  A secret with the consumer key/secret pair to use when calling the salesforce API.

  The secret must contain the keys consumer-key and consumer-secret

• salesforce_domain | string

  The Salesforce domain URL. E.g. https://login.test.salesfoce.com

• salesforce_enabled | boolean

  Default: True

  Whether the salesforce integration is enabled.