diff --git a/charts/spire/charts/spire-agent/README.md b/charts/spire/charts/spire-agent/README.md index 4ee7454..157e890 100644 --- a/charts/spire/charts/spire-agent/README.md +++ b/charts/spire/charts/spire-agent/README.md @@ -23,7 +23,6 @@ A Helm chart to install the SPIRE agent. | podSecurityContext | object | `{}` | | | resources | object | `{}` | | | securityContext | object | `{}` | | -| server.host | string | `"spire-server"` | | | server.port | int | `8081` | | | serviceAccount.annotations | object | `{}` | | | serviceAccount.create | bool | `true` | | diff --git a/charts/spire/charts/spire-agent/templates/_helpers.tpl b/charts/spire/charts/spire-agent/templates/_helpers.tpl index 5bb2ffe..0a1db74 100644 --- a/charts/spire/charts/spire-agent/templates/_helpers.tpl +++ b/charts/spire/charts/spire-agent/templates/_helpers.tpl @@ -72,3 +72,7 @@ Create the name of the service account to use {{- printf "%s/%s" .image.registry .image.repository -}} {{- end -}} {{- end }} + +{{- define "spire-server-service" -}} +{{ include "spire-agent.fullname" . | trimSuffix "-agent" }}-server +{{- end }} diff --git a/charts/spire/charts/spire-agent/templates/configmap.yaml b/charts/spire/charts/spire-agent/templates/configmap.yaml index 54b2dfa..b7a8111 100644 --- a/charts/spire/charts/spire-agent/templates/configmap.yaml +++ b/charts/spire/charts/spire-agent/templates/configmap.yaml @@ -8,7 +8,7 @@ data: agent { data_dir = "/run/spire" log_level = {{ .Values.logLevel | quote }} - server_address = {{ .Values.server.host | quote }} + server_address = {{ (include "spire-server-service" .) | quote }} server_port = {{ .Values.server.port | quote }} socket_path = {{ .Values.socketPath | quote }} trust_bundle_path = "/run/spire/bundle/bundle.crt" diff --git a/charts/spire/charts/spire-agent/templates/daemonset.yaml b/charts/spire/charts/spire-agent/templates/daemonset.yaml index 0614690..248e824 100644 --- a/charts/spire/charts/spire-agent/templates/daemonset.yaml +++ b/charts/spire/charts/spire-agent/templates/daemonset.yaml @@ -35,7 +35,7 @@ spec: # from https://github.com/vishnubob/wait-for-it image: {{ template "spire-agent.image" .Values.waitForIt }} imagePullPolicy: {{ .Values.waitForIt.image.pullPolicy }} - args: ["-t", "30", "-h", {{ .Values.server.host | quote }}, "-p", {{ .Values.server.port | quote }}] + args: ["-t", "30", "-h", "{{ .Release.Name }}-server", "-p", {{ .Values.server.port | quote }}] resources: {{- toYaml .Values.waitForIt.resources | nindent 12 }} containers: diff --git a/charts/spire/charts/spire-agent/values.yaml b/charts/spire/charts/spire-agent/values.yaml index 31299ba..e636778 100644 --- a/charts/spire/charts/spire-agent/values.yaml +++ b/charts/spire/charts/spire-agent/values.yaml @@ -60,7 +60,6 @@ trustDomain: example.org bundleConfigMap: spire-bundle server: - host: spire-server port: 8081 waitForIt: diff --git a/charts/spire/charts/spire-server/templates/configmap.yaml b/charts/spire/charts/spire-server/templates/configmap.yaml index 1b69148..52de751 100644 --- a/charts/spire/charts/spire-server/templates/configmap.yaml +++ b/charts/spire/charts/spire-server/templates/configmap.yaml @@ -40,7 +40,7 @@ data: plugin_data { clusters = { {{ .Values.clusterName | quote }} = { - service_account_allow_list = ["{{ .Release.Namespace }}:spire-agent"] + service_account_allow_list = ["{{ .Release.Namespace }}:{{ .Release.Name }}-agent"] } } }