Bumped chart version and added missing configuration value

helm/oauth2-proxy/Chart.yaml

@@ -1,5 +1,5 @@
 name: oauth2-proxy
-version: 6.7.3
+version: 6.7.4
 apiVersion: v2
 appVersion: 7.4.0
 home: https://oauth2-proxy.github.io/oauth2-proxy/

helm/oauth2-proxy/README.md

@@ -111,6 +111,7 @@ Parameter | Description | Default
 `customLabels` | Custom labels to add into metadata | `{}` |
 `config.google.adminEmail` | user impersonated by the google service account | `""`
 `config.google.useApplicationDefaultCredentials` | use the application-default credentials (i.e. Workload Identity on GKE) instead of providing a service account json | `false`
+`config.google.targetPrincipal` | service account to use/impersonate | `""`
 `config.google.serviceAccountJson` | google service account json contents | `""`
 `config.google.existingConfig` | existing Kubernetes configmap to use for the service account file. See [google secret template](https://github.com/oauth2-proxy/manifests/blob/master/helm/oauth2-proxy/templates/google-secret.yaml) for the required values | `nil`
 `config.google.groups` | restrict logins to members of these google groups | `[]`

helm/oauth2-proxy/templates/deployment.yaml

@@ -102,6 +102,9 @@ spec:
         {{- else }}
           - --google-service-account-json=/google/service-account.json
         {{- end }}
+        {{- if .targetPrincipal }}
+          - --google-target-principal={{ .targetPrincipal }}
+        {{- end }}
         {{- end }}
         {{- if .groups }}
         {{- range $group := .groups }}

helm/oauth2-proxy/values.yaml

@@ -23,6 +23,7 @@ config:
   google: {}
     # adminEmail: xxxx
     # useApplicationDefaultCredentials: true
+    # targetPrincipal: xxxx
     # serviceAccountJson: xxxx
     # Alternatively, use an existing secret (see google-secret.yaml for required fields)
     # Example: