Deny production runs of example.org trust domains (#229)

2023-09-25 12:06:48 -07:00
parent 712a0f6fbe
commit 50825d9fc9
16 changed files with 101 additions and 19 deletions
@@ -1,3 +1,9 @@
+global:
+  spire:
+    clusterName: production
+    trustDomain: production.other
+    jwtIssuer: oidc-discovery.production.other
+
 spire-server:
  controllerManager:
    enabled: false
@@ -43,8 +43,8 @@ metadata:
  name: oidc
 spec:
  dnsNames:
-    - oidc-discovery.example.org
-    - spire-server-federation.example.org
+    - oidc-discovery.production.other
+    - spire-server-federation.production.other
  secretName: tls-cert
  issuerRef:
    name: demo-ca