Add support for the new fallback spire-controller-manager feature (#471)

* Add support for the new fallback spire-controller-manager feature Signed-off-by: Kevin Fox <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>
2024-10-17 12:38:25 -07:00
parent 0a6dd19906
commit 01c7227b13
4 changed files with 12 additions and 1 deletions
@@ -628,6 +628,8 @@ controllerManager:
        downstream: false
        ## @param controllerManager.identities.clusterSPIFFEIDs.default.autoPopulateDNSNames Auto populate DNS names from services attached to pods
        autoPopulateDNSNames: false
+        ## @param controllerManager.identities.clusterSPIFFEIDs.default.fallback Apply this ID only if there are no other matching non fallback ClusterSPIFFEIDs
+        fallback: true

      child-servers:
        ## @param controllerManager.identities.clusterSPIFFEIDs.child-servers.enabled Enable this identity for controller manager