Change socket mounts for more control (readonly)

pods like oidc mount more then one of these sockets, now we can control readonly vs non readonly better Signed-off-by: Marco Franssen <[email protected]> Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:01 +01:00
parent f2d7aa1f62
commit 4d3fb47839
9 changed files with 16 additions and 20 deletions
@@ -18,7 +18,7 @@ data:
        email = "{{ .Values.oidc.acme.emailAddress }}"
    }
    workload_api {
-        socket_path = "{{ include "spire.sockets" . }}/agent.sock"
+        socket_path = "/run/spire/agent-sockets/agent.sock"
        trust_domain = "{{ .Values.spire.trustDomain }}"
    }
 {{ end }}