Add a flag to enable recommendations (#121)

* Add a flag to enable recommendations Signed-off-by: Kevin Fox <[email protected]> * Fix merge issue Signed-off-by: Kevin Fox <[email protected]> * Update after reaching consensus. Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>
2023-12-02 05:15:32 -08:00
parent 692d463718
commit 3e8335c0ee
3 changed files with 7 additions and 0 deletions
@@ -158,6 +158,7 @@ Now you can interact with the Spire agent socket from your own application. The
 | `global.spire.jwtIssuer`                     | The issuer for Spire JWT tokens. Defaults to oidc-discovery.$trustDomain if unset                                                                                                                                                      | `""`              |
 | `global.spire.trustDomain`                   | The trust domain for Spire install                                                                                                                                                                                                     | `example.org`     |
 | `global.spire.upstreamServerAddress`         | Set what address to use for the upstream server when using nested spire                                                                                                                                                                | `""`              |
 | `global.spire.recommendations.enabled`       | Use recommended settings for production deployments. Default is off.                                                                                                                                                                   | `false`           |
 | `global.spire.image.registry`                | Override all Spire image registries at once                                                                                                                                                                                            | `""`              |
 | `global.spire.namespaces.system.name`        | Name of the Spire system Namespace.                                                                                                                                                                                                    | `spire-system`    |
 | `global.spire.namespaces.system.create`      | Create a Namespace for Spire system resources.                                                                                                                                                                                         | `false`           |
@@ -21,6 +21,10 @@ global:
    ## @param global.spire.upstreamServerAddress Set what address to use for the upstream server when using nested spire
    upstreamServerAddress: ""
    ## @param global.spire.recommendations.enabled Use recommended settings for production deployments. Default is off.
    recommendations:
      enabled: false
    image:
      ## @param global.spire.image.registry Override all Spire image registries at once
      registry: ""
@@ -4,6 +4,8 @@ global:
      enabled: true
  spire:
    strictMode: true
    recommendations:
      enabled: true
 spire-server:
  nodeAttestor: