SPIFFE OIDC Discovery Provider Rework (#152)

Co-authored-by: Faisal Memon <[email protected]>
2024-01-03 11:40:14 +01:00
parent 8f1aba8ad3
commit 183e9aa534
23 changed files with 512 additions and 264 deletions
@@ -14,11 +14,14 @@ spire-server:
      clusterSPIFFEIDs:
        default:
          spiffeIDTemplate: spiffe://{{ .TrustDomain }}/k8s/{{ .ClusterName }}/ns/{{ .PodMeta.Namespace }}/sa/{{ .PodSpec.ServiceAccountName }}
+        oidc-discovery-provider:
+          autoPopulateDNSNames: false

 spiffe-oidc-discovery-provider:
  enabled: true
-  insecureScheme:
-    enabled: true
+  tls:
+    spire:
+      enabled: false

 upstream:
  enabled: true