diff --git a/supabase/helm/knoe-supabase/templates/test/kong.yaml b/supabase/helm/knoe-supabase/templates/test/kong.yaml
deleted file mode 100644
index 5a046f5..0000000
--- a/supabase/helm/knoe-supabase/templates/test/kong.yaml
+++ /dev/null
@@ -1,50 +0,0 @@
-{{- if .Values.deployment.kong.enabled -}}
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: {{ include "supabase.fullname" . }}-test-kong
-  labels:
-    {{- include "supabase.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": test
-spec:
-  ttlSecondsAfterFinished: 100
-  template:
-    spec:
-      containers:
-        - env:
-            - name: DASHBOARD_USERNAME
-              valueFrom:
-                secretKeyRef:
-                  {{- if .Values.secret.dashboard.secretRef }}
-                  name: {{ .Values.secret.dashboard.secretRef }}
-                  key: {{ .Values.secret.dashboard.secretRefKey.username | default "username" }}
-                  {{- else }}
-                  name: {{ include "supabase.secret.dashboard" . }}
-                  key: username
-                  {{- end }}
-            - name: DASHBOARD_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  {{- if .Values.secret.dashboard.secretRef }}
-                  name: {{ .Values.secret.dashboard.secretRef }}
-                  key: {{ .Values.secret.dashboard.secretRefKey.password | default "password" }}
-                  {{- else }}
-                  name: {{ include "supabase.secret.dashboard" . }}
-                  key: password
-                  {{- end }}
-          name: test-kong
-          image: kdevup/curljq
-          imagePullPolicy: IfNotPresent
-          command:
-            - /bin/bash
-            - -c
-            - |
-              echo "Attempting to access dashboard with provided credentials..."
-              curl -sL --fail \
-                -o /dev/null \
-                "http://${DASHBOARD_USERNAME}:${DASHBOARD_PASSWORD}@{{ include "supabase.kong.fullname" . }}:{{ .Values.service.kong.port }}" \
-                || ( echo -e "\e[0;31mFailed to get a valid response." && exit 1 )
-              echo "Successfully connected."
-      restartPolicy: Never
-{{- end }}
diff --git a/supabase/helm/knoe-supabase/values.yaml b/supabase/helm/knoe-supabase/values.yaml
index 7ac31f7..fcbc90c 100644
--- a/supabase/helm/knoe-supabase/values.yaml
+++ b/supabase/helm/knoe-supabase/values.yaml
@@ -114,6 +114,23 @@ secret:
     # secretRefKey:
     #   apiKey: apiKey
 
+  ## oauth2-proxy credentials. **Defaults present only to satisfy template
+  ## guards in `templates/studio/oauth2proxy-{deployment,service}.yaml` and
+  ## `templates/secrets/oauth2proxy.yaml`.**
+  ##
+  ## The deployed oauth2-proxy runs OUTSIDE this chart at
+  ## `deploy/gcp/gke/oauth2-proxy-deployment.yaml` (in FRONT of supabase-kong,
+  ## not as a Kong upstream). The chart templates here reflect an alternate
+  ## architecture that was never deployed; gating `deployment.oauth2proxy.enabled`
+  ## off keeps them dormant. If a fresh deploy of THIS chart's oauth2-proxy
+  ## flavour is ever wanted, populate these values + flip enabled true.
+  oauth2proxy:
+    secretRef: ""
+    secretRefKey: {}
+    clientId: ""
+    clientSecret: ""
+    cookieSecret: ""
+
   ## S3-compatible credentials
   ##
   s3: