panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Move the k8s-workload-registrar back into same pod as spire-server

Browse Source 
The k8s-workload-registrar needs access to the spire-server socket and
therefore has to run in the same pod to be able to mount the socket
into the container.

Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
This commit is contained in:
Marco Franssen
2023-02-18 13:04:11 +01:00
committed by Marco Franssen
parent 738842de16
commit 0a0ddb4a9b
18 changed files with 129 additions and 396 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-server/README.md
+8
View File
@@ -29,6 +29,14 @@ A Helm chart to install the SPIRE server.
| image.version | string | `""` | |
| imagePullSecrets | list | `[]` | |
| jwtIssuer | string | `"oidc-discovery.example.org"` | |
| k8sWorkloadRegistrar.enabled | bool | `true` | |
| k8sWorkloadRegistrar.image.pullPolicy | string | `"IfNotPresent"` | |
| k8sWorkloadRegistrar.image.registry | string | `"gcr.io"` | |
| k8sWorkloadRegistrar.image.repository | string | `"spiffe-io/k8s-workload-registrar"` | |
| k8sWorkloadRegistrar.image.version | string | `""` | |
| k8sWorkloadRegistrar.logLevel | string | `"info"` | |
| k8sWorkloadRegistrar.resources | object | `{}` | |
| k8sWorkloadRegistrar.securityContext | object | `{}` | |
| logLevel | string | `"info"` | |
| nameOverride | string | `""` | |
| nodeSelector."kubernetes.io/arch" | string | `"amd64"` | |