Update spire-controller-manager to 0.6.2 and add its staticManifest support (#563)

* Update spire-controller-manager to 0.6.2 and add its staticManifest support Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> * Fix indent Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>
2025-04-23 10:56:55 -07:00
parent 4dee6ca72e
commit 1169dd5692
16 changed files with 197 additions and 81 deletions
@@ -0,0 +1,31 @@
+spire-server:
+  nodeAttestor:
+    k8sPSAT:
+      enabled: false
+    joinToken:
+      enabled: true
+    tpmDirect:
+      enabled: true
+  controllerManager:
+    enabled: true
+    staticManifestMode: internal
+    identities:
+      clusterStaticEntries:
+        foo-node:
+           parentID: spiffe://example.org/spire/server
+           spiffeID: spiffe://example.org/hosts/foo
+           selectors:
+           - tpm:pub_hash:12345
+        foo-kubelet:
+           parentID: spiffe://example.org/foo
+           spiffeID: spiffe://example.org/k8s/one/node/foo
+           selectors:
+           - systemd:id:kubelet.service
+  ingress:
+    enabled: true
+spire-agent:
+  enabled: false
+spiffe-csi-driver:
+  enabled: false
+spiffe-oidc-discovery-provider:
+  enabled: false