From 5260633103888fc6055cf5202e15c1b9079a429f Mon Sep 17 00:00:00 2001
From: Vinay Chandrasekharan <the_vinaynair@yahoo.com>
Date: Sat, 4 Jan 2025 13:09:36 -0500
Subject: [PATCH] doc: fix dex helm chart values for k8s example (#2880)

---------

Co-authored-by: vinay chandrasekharan <vinay.cn@gmail.com>
Co-authored-by: Jan Larwig <jan@larwig.com>
---
 contrib/local-environment/kubernetes/README.md   |  1 +
 contrib/local-environment/kubernetes/values.yaml | 16 +++++++++++-----
 2 files changed, 12 insertions(+), 5 deletions(-)

diff --git a/contrib/local-environment/kubernetes/README.md b/contrib/local-environment/kubernetes/README.md
index d9d3aa45..a5ea2347 100644
--- a/contrib/local-environment/kubernetes/README.md
+++ b/contrib/local-environment/kubernetes/README.md
@@ -16,6 +16,7 @@ Then:
 * `make deploy`
 
 Visit http://httpbin.localtest.me or http://hello-world.localtest.me/
+Note: When accessing the service for the first time you will need to authenticate with Dex. It is configured using static credentials for testing. With username `admin@example.com` and password set to `password`.
 
 ## Uninstall
 
diff --git a/contrib/local-environment/kubernetes/values.yaml b/contrib/local-environment/kubernetes/values.yaml
index 9181266f..6838988e 100644
--- a/contrib/local-environment/kubernetes/values.yaml
+++ b/contrib/local-environment/kubernetes/values.yaml
@@ -2,8 +2,12 @@ dex:
   ingress:
     enabled: true
     hosts:
-      - dex.localtest.me
-  grpc: false
+      - host: dex.localtest.me
+        paths:
+        - path: /
+          pathType: ImplementationSpecific
+  grpc: 
+    enabled: false
   certs:
     grpc:
       create: false
@@ -12,6 +16,11 @@ dex:
 
   config:
     issuer: http://dex.localtest.me
+    storage:
+      type: kubernetes
+      config:
+        inCluster: true
+    enablePasswordDB: true
     expiry:
       signingKeys: "4h"
       idTokens: "1h"
@@ -35,9 +44,6 @@ oauth2-proxy:
     enabled: true
     hosts:
       - oauth2-proxy.localtest.me
-    annotations:
-      nginx.ingress.kubernetes.io/server-snippet: |
-        large_client_header_buffers 4 32k;
   # pick up client_id and client_secret from configFile as opposed to helm .Values.config.clientID and .Values.config.clientSecret
   proxyVarsAsSecrets: false
   config: