Add aws_iid to helm chart (#620)

* Add aws_iid

Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIid

Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIid

Signed-off-by: Eric Cavalcanti <[email protected]>

* update helm

Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIID

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIID

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIID

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIID

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIID

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIID

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* add signed off

Signed-off-by: Eric Cavalcanti <[email protected]>

* Add doc

Signed-off-by: Eric Cavalcanti <[email protected]>

* remove not used config

Signed-off-by: Eric Cavalcanti <[email protected]>

* remove not used config

Signed-off-by: Eric Cavalcanti <[email protected]>

* add example awsiid

Signed-off-by: Eric Cavalcanti <[email protected]>

---------

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>
This commit is contained in:
Eric Cavalcanti
2025-07-10 22:27:07 +00:00
committed by GitHub
parent 9a8e5a8398
commit 57a61438be
7 changed files with 107 additions and 1 deletions
@@ -90,6 +90,7 @@ A Helm chart to install the SPIRE agent.
| `nodeAttestor.tpmDirect.pubHash.image.repository` | The repository within the registry | `spiffe/spire-tpm-plugin-get-tpm-pubhash` |
| `nodeAttestor.tpmDirect.pubHash.image.pullPolicy` | The image pull policy | `IfNotPresent` |
| `nodeAttestor.tpmDirect.pubHash.image.tag` | Overrides the image tag | `v1.9.0` |
| `nodeAttestor.awsIID.enabled` | Enable the aws_iid Node Attestor | `false` |
| `workloadAttestors.unix.enabled` | Enables the Unix workload attestor | `false` |
| `workloadAttestors.k8s.enabled` | Enables the Kubernetes workload attestor | `true` |
| `workloadAttestors.k8s.verification.type` | What kind of verification to do against kubelet. auto will first attempt to use hostCert, and then fall back to apiServerCA. Valid options are [auto, hostCert, apiServerCA, skip] | `skip` |