panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Move the k8s-workload-registrar back into same pod as spire-server

Browse Source 
The k8s-workload-registrar needs access to the spire-server socket and
therefore has to run in the same pod to be able to mount the socket
into the container.

Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
This commit is contained in:
Marco Franssen
2023-02-18 13:04:11 +01:00
committed by Marco Franssen
parent 738842de16
commit 0a0ddb4a9b
18 changed files with 129 additions and 396 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/README.md
-5
View File
@@ -46,7 +46,6 @@ Kubernetes: `>=1.21.0-0`
| Repository | Name | Version |
|------------|------|---------|
| file://./charts/k8s-workload-registrar | k8s-workload-registrar | 0.1.0 |
| file://./charts/spiffe-csi-driver | spiffe-csi-driver | 0.1.0 |
| file://./charts/spiffe-oidc-discovery-provider | spiffe-oidc-discovery-provider | 0.1.0 |
| file://./charts/spire-agent | spire-agent | 0.1.0 |
@@ -57,10 +56,6 @@ Kubernetes: `>=1.21.0-0`
| Key | Type | Default | Description |
|-----|------|---------|-------------|
| fullnameOverride | string | `""` | |
| k8s-workload-registrar.clusterName | string | `"example-cluster"` | |
| k8s-workload-registrar.enabled | bool | `true` | |
| k8s-workload-registrar.server.socketPath | string | `"/run/spire/server-sockets/spire-server.sock"` | |
| k8s-workload-registrar.trustDomain | string | `"example.org"` | |
| nameOverride | string | `""` | |
| spiffe-csi-driver.agentSocketPath | string | `"/run/spire/agent-sockets/spire-agent.sock"` | |
| spiffe-oidc-discovery-provider.enabled | bool | `false` | |