Add jwtIssuer configuration

Signed-off-by: Marco Franssen <[email protected]>

charts/spire/README.md

@@ -71,6 +71,7 @@ Kubernetes: `>=1.19.0-0`
 | oidc.image.pullPolicy | string | `"IfNotPresent"` |  |
 | oidc.image.repository | string | `"gcr.io/spiffe-io/oidc-discovery-provider"` |  |
 | oidc.image.tag | string | `""` |  |
+| oidc.jwtIssuer | string | `"oidc-discovery.example.org"` |  |
 | oidc.logLevel | string | `"INFO"` |  |
 | oidc.service.annotations | object | `{}` |  |
 | oidc.service.port | int | `80` |  |

charts/spire/templates/server-configmap.yaml

@@ -16,7 +16,7 @@ data:
       ca_key_type = "rsa-2048"
 
       {{- if eq (.Values.oidc.enabled | toString) "true" }}
-      jwt_issuer = "{{ .Values.oidc.domain }}"
+      jwt_issuer = "{{ .Values.oidc.jwtIssuer }}"
       {{ end }}
       default_svid_ttl = "1h"
       ca_subject = {

charts/spire/values.yaml

@@ -44,6 +44,8 @@ oidc:
     annotations: {}
       # external-dns.alpha.kubernetes.io/hostname: oidc-discovery.example.org
 
+  jwtIssuer: oidc-discovery.example.org
+
   domains:
     - localhost
     - spire-oidc.spire