Change socket mounts for more control (readonly)

pods like oidc mount more then one of these sockets, now we can control readonly vs non readonly better Signed-off-by: Marco Franssen <[email protected]> Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:01 +01:00
parent f2d7aa1f62
commit 4d3fb47839
9 changed files with 16 additions and 20 deletions
@@ -38,8 +38,8 @@ spec:
            - name: spire-bundle
              mountPath: /run/spire/bundle
              readOnly: true
-            - name: spire-agent-socket
-              mountPath: /run/spire/sockets
+            - name: spire-agent-sockets
+              mountPath: /run/spire/agent-sockets
              readOnly: false
            - name: spire-token
              mountPath: /var/run/secrets/tokens
@@ -62,9 +62,9 @@ spec:
        - name: spire-bundle
          configMap:
            name: {{ include "spire.fullname" . }}-bundle
-        - name: spire-agent-socket
+        - name: spire-agent-sockets
          hostPath:
-            path: /run/spire/sockets
+            path: /run/spire/agent-sockets
            type: DirectoryOrCreate
        - name: spire-token
          projected: