Application access control with OAuth2 Proxy deployed by Argo CD on Kubernetes

mongo-express-oauth2-proxy.yaml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: mongo-express-oauth2-proxy
  namespace: argo-cd
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: https://kubernetes-charts.storage.googleapis.com/
    chart: oauth2-proxy
    targetRevision: 2.4.1
    helm:
      values: |
        config:
          clientID: ********.apps.googleusercontent.com
          clientSecret: ********
          cookieSecret: ********
          configFile: |
            pass_basic_auth = false
            provider = "google"
            silence_ping_logging = true
            skip_provider_button = true
            upstreams = [ "http://mongo-express:8081" ]
        authenticatedEmailsFile:
          enabled: true
          restricted_access: |
            ********@gmail.com
        ingress:
          enabled: true
          annotations:
            cert-manager.io/cluster-issuer: letsencrypt
          hosts:
            - mongo.example.com
          tls:
            - secretName: mongo-tls
              hosts:
                - mongo.example.com
  destination:
    server: https://kubernetes.default.svc
    namespace: mongo-express