From 8788bc531a60e5cd56c15123396e407f2666e579 Mon Sep 17 00:00:00 2001
From: Josh Soref <2119212+jsoref@users.noreply.github.com>
Date: Tue, 2 Jun 2026 14:50:16 -0400
Subject: [PATCH] feat: add optional runtimeclassname

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
---
 helm/oauth2-proxy/Chart.yaml                | 6 +++---
 helm/oauth2-proxy/README.md                 | 1 +
 helm/oauth2-proxy/templates/deployment.yaml | 3 +++
 helm/oauth2-proxy/values.yaml               | 2 ++
 4 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/helm/oauth2-proxy/Chart.yaml b/helm/oauth2-proxy/Chart.yaml
index cd414b8f..95491903 100644
--- a/helm/oauth2-proxy/Chart.yaml
+++ b/helm/oauth2-proxy/Chart.yaml
@@ -1,5 +1,5 @@
 name: oauth2-proxy
-version: 10.6.0
+version: 10.6.1
 apiVersion: v2
 appVersion: 7.15.2
 home: https://oauth2-proxy.github.io/oauth2-proxy/
@@ -31,7 +31,7 @@ kubeVersion: ">=1.16.0-0"
 annotations:
   artifacthub.io/changes: |
     - kind: added
-      description: Added name attribute for HTTPRoute rules
+      description: Added runtimeClassName for deployment
       links:
         - name: GitHub PR
-          url: https://github.com/oauth2-proxy/manifests/pull/407
+          url: https://github.com/oauth2-proxy/manifests/pull/410
diff --git a/helm/oauth2-proxy/README.md b/helm/oauth2-proxy/README.md
index 1d023f33..b7115830 100644
--- a/helm/oauth2-proxy/README.md
+++ b/helm/oauth2-proxy/README.md
@@ -279,6 +279,7 @@ The following table lists the configurable parameters of the oauth2-proxy chart
 | `resizePolicy`                                        | Container resize policy for runtime resource updates. See [Kubernetes docs](https://kubernetes.io/docs/tasks/configure-pod-container/resize-container-resources/)                                                                                                | `[]`                                                                                                 |
 | `resources`                                           | pod resource requests & limits                                                                                                                                                                                                                                   | `{}`                                                                                                 |
 | `revisionHistoryLimit`                                | maximum number of revisions maintained                                                                                                                                                                                                                           | 10                                                                                                   |
+| `runtimeClassName`                                    | runtimeClassName                                                                                                                                                                                                                                                 | ``.                                                                                                  |
 | `securityContext.enabled`                             | enable Kubernetes security context on container                                                                                                                                                                                                                  | `true`                                                                                               |
 | `service.appProtocol`                                 | application protocol on the port of the service                                                                                                                                                                                                                  | `http`                                                                                               |
 | `service.clusterIP`                                   | cluster ip address                                                                                                                                                                                                                                               | `nil`                                                                                                |
diff --git a/helm/oauth2-proxy/templates/deployment.yaml b/helm/oauth2-proxy/templates/deployment.yaml
index 6d12c5af..30051dad 100644
--- a/helm/oauth2-proxy/templates/deployment.yaml
+++ b/helm/oauth2-proxy/templates/deployment.yaml
@@ -428,3 +428,6 @@ spec:
       topologySpreadConstraints:
         {{- toYaml . | nindent 8 }}
     {{- end }}
+    {{- if .Values.runtimeClassName }}
+      runtimeClassName: {{ .Values.runtimeClassName }}
+    {{- end }}
diff --git a/helm/oauth2-proxy/values.yaml b/helm/oauth2-proxy/values.yaml
index 5998795d..f24d5121 100644
--- a/helm/oauth2-proxy/values.yaml
+++ b/helm/oauth2-proxy/values.yaml
@@ -417,6 +417,8 @@ extraInitContainers: []
 
 priorityClassName: ""
 
+runtimeClassName: ""
+
 # hostAliases is a list of aliases to be added to /etc/hosts for network name resolution
 hostAliases: []
 # - ip: "10.xxx.xxx.xxx"