Include spire namespace to fix oidc-provider

Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Gert Jan Kamstra <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>

charts/spire/charts/spire-server/README.md

@@ -23,7 +23,9 @@ A Helm chart to install the SPIRE server.
 | controllerManager.identities.enabled | bool | `true` |  |
 | controllerManager.identities.podSelector | object | `{}` |  |
 | controllerManager.identities.spiffeIDTemplate | string | `"spiffe://{{ .TrustDomain }}/ns/{{ .PodMeta.Namespace }}/sa/{{ .PodSpec.ServiceAccountName }}"` |  |
-| controllerManager.ignoreNamespaces | list | `[]` |  |
+| controllerManager.ignoreNamespaces[0] | string | `"kube-system"` |  |
+| controllerManager.ignoreNamespaces[1] | string | `"kube-public"` |  |
+| controllerManager.ignoreNamespaces[2] | string | `"local-path-storage"` |  |
 | controllerManager.image.pullPolicy | string | `"IfNotPresent"` |  |
 | controllerManager.image.registry | string | `"ghcr.io"` |  |
 | controllerManager.image.repository | string | `"spiffe/spire-controller-manager"` |  |

charts/spire/charts/spire-server/templates/controller-manager-configmap.yaml

@@ -24,10 +24,6 @@ data:
     clusterName: {{ .Values.clusterName }}
     trustDomain: {{ .Values.trustDomain }}
     ignoreNamespaces:
-      - kube-system
-      - kube-public
-      - {{ .Release.Namespace }}
-      - local-path-storage
       {{- with .Values.controllerManager.ignoreNamespaces }}
       {{- toYaml . | nindent 6 }}
       {{- end }}

charts/spire/charts/spire-server/values.yaml

@@ -142,7 +142,10 @@ controllerManager:
     port: 443
     annotations: {}
 
-  ignoreNamespaces: []
+  ignoreNamespaces:
+    - kube-system
+    - kube-public
+    - local-path-storage
 
   identities:
     enabled: true