panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add connect by hostname to agent cofigmap (#392)

Browse Source 
When setting the kubeletConnectByHostname to "true", the charts update the agent daemonset to define the MY_NODE_NAME environment variable, but it doesn't set the "node_name_env" setting in the WorkloadAttestor:k8s plugin, therefore the agent continues trying to connect to the kubelet using the localhost interface

Signed-off-by: tuxotron <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
This commit is contained in:
tuxotron
2024-07-11 12:47:57 -07:00
committed by GitHub
co-authored by kfox1111
parent 9c77280e6e
commit 199bb6f998
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-agent/templates/configmap.yaml
+3
View File
@@ -116,6 +116,9 @@ plugins:
disable_container_selectors: {{ .Values.workloadAttestors.k8s.disableContainerSelectors }}
use_new_container_locator: {{ .Values.workloadAttestors.k8s.useNewContainerLocator }}
verbose_container_locator_logs: {{ .Values.workloadAttestors.k8s.verboseContainerLocatorLogs }}
{{- if eq (include "spire-agent.connect-by-hostname" .) "true" }}
node_name_env: "MY_NODE_NAME"
{{- end }}
{{- end }}
{{- if .Values.workloadAttestors.unix.enabled }}