Align more settings to convention (#467)
* Align more settings to convention Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>
This commit is contained in:
kfox1111
@@ -287,13 +287,13 @@ federation:
|
||||
# If Profile Type == https_web:
|
||||
# secretName: spire-server-federation-tls
|
||||
|
||||
ca_subject:
|
||||
## @param ca_subject.country Country for Spire server CA
|
||||
caSubject:
|
||||
## @param caSubject.country Country for Spire server CA
|
||||
country: ARPA
|
||||
## @param ca_subject.organization Organization for Spire server CA
|
||||
## @param caSubject.organization Organization for Spire server CA
|
||||
organization: Example
|
||||
## @param ca_subject.common_name Common Name for Spire server CA
|
||||
common_name: example.org
|
||||
## @param caSubject.commonName Common Name for Spire server CA
|
||||
commonName: example.org
|
||||
|
||||
credentialComposer:
|
||||
uniqueID:
|
||||
@@ -371,16 +371,16 @@ upstreamAuthority:
|
||||
## @param upstreamAuthority.certManager.rbac.create Flag to create RBAC roles
|
||||
rbac:
|
||||
create: true
|
||||
## @param upstreamAuthority.certManager.issuer_name Defaults to the release name, override if CA is provided outside of the chart
|
||||
issuer_name: ""
|
||||
## @param upstreamAuthority.certManager.issuer_kind Defaults to "Issuer", override if CA is provided outside of the chart
|
||||
issuer_kind: "Issuer"
|
||||
## @param upstreamAuthority.certManager.issuer_group Defaults to "cert-manager.io", override if CA is provided outside of the chart
|
||||
issuer_group: "cert-manager.io"
|
||||
## @param upstreamAuthority.certManager.issuerName Defaults to the release name, override if CA is provided outside of the chart
|
||||
issuerName: ""
|
||||
## @param upstreamAuthority.certManager.issuerKind Defaults to "Issuer", override if CA is provided outside of the chart
|
||||
issuerKind: "Issuer"
|
||||
## @param upstreamAuthority.certManager.issuerGroup Defaults to "cert-manager.io", override if CA is provided outside of the chart
|
||||
issuerGroup: "cert-manager.io"
|
||||
## @param upstreamAuthority.certManager.namespace Specify to use a namespace other then the one the chart is installed into
|
||||
namespace: ""
|
||||
## @param upstreamAuthority.certManager.kube_config_file Path to kube_config_file on node to setup cert manager
|
||||
kube_config_file: ""
|
||||
## @param upstreamAuthority.certManager.kubeConfigFile Path to kube config file on node to setup cert manager
|
||||
kubeConfigFile: ""
|
||||
|
||||
ca:
|
||||
## @param upstreamAuthority.certManager.ca.create Creates a Cert-Manager CA
|
||||
@@ -440,10 +440,10 @@ upstreamAuthority:
|
||||
expiry: 7200
|
||||
|
||||
notifier:
|
||||
k8sbundle:
|
||||
## @param notifier.k8sbundle.enabled Enable local k8s bundle uploader
|
||||
k8sBundle:
|
||||
## @param notifier.k8sBundle.enabled Enable local k8s bundle uploader
|
||||
enabled: true
|
||||
## @param notifier.k8sbundle.namespace Namespace to push the bundle into, if blank will default to SPIRE Server namespace
|
||||
## @param notifier.k8sBundle.namespace Namespace to push the bundle into, if blank will default to SPIRE Server namespace
|
||||
namespace: ""
|
||||
externalK8sBundle:
|
||||
## @param notifier.externalK8sBundle.enabled Enable external k8s bundle uploader
|
||||
@@ -795,30 +795,30 @@ defaultX509SvidTTL: 4h
|
||||
defaultJwtSvidTTL: 1h
|
||||
|
||||
nodeAttestor:
|
||||
k8sPsat:
|
||||
## @param nodeAttestor.k8sPsat.enabled Enable Psat k8s nodeattestor
|
||||
k8sPSAT:
|
||||
## @param nodeAttestor.k8sPSAT.enabled Enable PSAT k8s nodeattestor
|
||||
enabled: true
|
||||
## @param nodeAttestor.k8sPsat.serviceAccountAllowList [array] Allowed service accounts for Psat nodeattestor. If namespace isn't specified, release namespace will be used.
|
||||
## @param nodeAttestor.k8sPSAT.serviceAccountAllowList [array] Allowed service accounts for PSAT nodeattestor. If namespace isn't specified, release namespace will be used.
|
||||
serviceAccountAllowList: []
|
||||
## @param nodeAttestor.k8sPsat.audience [array] Audience for token validation. If set to [] (empty array), Kubernetes API server audience is used
|
||||
## @param nodeAttestor.k8sPSAT.audience [array] Audience for token validation. If set to [] (empty array), Kubernetes API server audience is used
|
||||
audience: ["spire-server"]
|
||||
## @param nodeAttestor.k8sPsat.allowedNodeLabelKeys [array] Node label keys considered for selectors
|
||||
## @param nodeAttestor.k8sPSAT.allowedNodeLabelKeys [array] Node label keys considered for selectors
|
||||
allowedNodeLabelKeys: []
|
||||
## @param nodeAttestor.k8sPsat.allowedPodLabelKeys [array] Pod label keys considered for selectors
|
||||
## @param nodeAttestor.k8sPSAT.allowedPodLabelKeys [array] Pod label keys considered for selectors
|
||||
allowedPodLabelKeys: []
|
||||
externalK8sPsat:
|
||||
## @param nodeAttestor.externalK8sPsat.enabled Enable PSAT k8s nodeattestor for external Kubernetes clusters
|
||||
externalK8sPSAT:
|
||||
## @param nodeAttestor.externalK8sPSAT.enabled Enable PSAT k8s nodeattestor for external Kubernetes clusters
|
||||
enabled: true
|
||||
defaults:
|
||||
## @param nodeAttestor.externalK8sPsat.defaults.serviceAccountAllowList [array] Allowed service accounts for PSAT node attestor
|
||||
## @param nodeAttestor.externalK8sPSAT.defaults.serviceAccountAllowList [array] Allowed service accounts for PSAT node attestor
|
||||
serviceAccountAllowList: ["spire-system:spire-agent-upstream"]
|
||||
## @param nodeAttestor.externalK8sPsat.defaults.audience [array] Audience for token validation. If it is set to an empty array ([]), Kubernetes API server audience is used
|
||||
## @param nodeAttestor.externalK8sPSAT.defaults.audience [array] Audience for token validation. If it is set to an empty array ([]), Kubernetes API server audience is used
|
||||
audience: ["spire-server"]
|
||||
## @param nodeAttestor.externalK8sPsat.defaults.allowedNodeLabelKeys [array] Node label keys considered for selectors
|
||||
## @param nodeAttestor.externalK8sPSAT.defaults.allowedNodeLabelKeys [array] Node label keys considered for selectors
|
||||
allowedNodeLabelKeys: []
|
||||
## @param nodeAttestor.externalK8sPsat.defaults.allowedPodLabelKeys [array] Pod label keys considered for selectors
|
||||
## @param nodeAttestor.externalK8sPSAT.defaults.allowedPodLabelKeys [array] Pod label keys considered for selectors
|
||||
allowedPodLabelKeys: []
|
||||
## @param nodeAttestor.externalK8sPsat.clusters [object] A dictionary of clusters to add with optional overrides. If empty, all clusters defined in kubeConfigs will be used.
|
||||
## @param nodeAttestor.externalK8sPSAT.clusters [object] A dictionary of clusters to add with optional overrides. If empty, all clusters defined in kubeConfigs will be used.
|
||||
clusters: {}
|
||||
# clustera:
|
||||
# kubeConfigName: foo
|
||||
|
||||
Reference in New Issue
Block a user