Add Tornjak Tests (#220)

Signed-off-by: Mariusz Sabath <[email protected]> Signed-off-by: Marco Franssen <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Marco Franssen <[email protected]> Co-authored-by: kfox1111 <[email protected]>
2023-05-16 19:31:38 +02:00
parent bdba97b629
commit 5e827ee45e
8 changed files with 127 additions and 0 deletions
@@ -0,0 +1,19 @@
+# Recommended setup to deploy Tornjak
+
+To install Spire with the least privileges possible we deploy spire across 2 namespaces.
+
+```shell
+kubectl create namespace "spire-system"
+kubectl label namespace "spire-system" pod-security.kubernetes.io/enforce=privileged
+kubectl create namespace "spire-server"
+kubectl label namespace "spire-server" pod-security.kubernetes.io/enforce=restricted
+
+# deploy SPIRE with Tornjak enabled
+helm upgrade --install --namespace spire-server --values ../production/values.yaml \
+ --values ./values.yaml spire charts/spire
+
+# test the Tornjak deployment
+helm test spire -n spire-server
+```
+
+See [values.yaml](./values.yaml) for more details on the chart configurations to achieve this setup.
@@ -0,0 +1,10 @@
+spire-server:
+  tornjak:
+    enabled: true
+
+tornjak-frontend:
+  enabled: true
+  service:
+    type: ClusterIP
+    port: 3000
+  apiServerURL: "http://localhost:10000/"