Add a spire-agent auto kubelet verification mode (#435)

* Add a spire-agent auto kubelet verification mode Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>
2024-08-23 15:09:55 -07:00
parent 50c741e047
commit 6e8ad569b3
5 changed files with 31 additions and 8 deletions
@@ -106,7 +106,7 @@ plugins:
  {{- if .Values.workloadAttestors.k8s.enabled }}
    k8s:
      plugin_data:
-        {{- if eq .Values.workloadAttestors.k8s.verification.type "hostCert" }}
+        {{- if or (eq .Values.workloadAttestors.k8s.verification.type "hostCert") (eq .Values.workloadAttestors.k8s.verification.type "auto") }}
        kubelet_ca_path: /hostCert/kubelet.crt
        {{- else if eq .Values.workloadAttestors.k8s.verification.type "apiServerCA" }}
        kubelet_ca_path: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt