From 62c8307c08f26bcefa769cac5651f76c46989657 Mon Sep 17 00:00:00 2001
From: unkin-agent <unkin-agent@git.unkin.net>
Date: Mon, 17 Aug 2026 20:43:43 +1000
Subject: [PATCH] quay remote: allowlist oauth2-proxy images

Adds the ^oauth2-proxy/ pattern to the quay.io remote so the
artifactapi caching proxy will serve quay.io/oauth2-proxy/oauth2-proxy.
Needed so the arrproxy oauth2-proxy sidecar can pull the real upstream
quay.io address via the rke2 registries.yaml mirror.
---
 config/remote_docker/quay.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/config/remote_docker/quay.yaml b/config/remote_docker/quay.yaml
index f558b4a..ee9ee9c 100644
--- a/config/remote_docker/quay.yaml
+++ b/config/remote_docker/quay.yaml
@@ -7,3 +7,4 @@ patterns:
   - "^brancz/kube-rbac-proxy"
   - "^cephcsi/cephcsi"
   - "^jetstack/cert-manager-"
+  - "^oauth2-proxy/"