From 7d2664544d82735ebe135a4e64b455081fd9dc0e Mon Sep 17 00:00:00 2001 From: Alec Wilson Date: Mon, 9 Feb 2026 00:13:43 +0000 Subject: [PATCH] Fix keyManager check stopping use of unsupported bulit-in plugin (#715) Adds unsupported built-in plugins (built-in plugins that do not have direct toggles in the helm chart) to the check that exactly one key manager plugin is enabled - the previous check only allowed usage of key manager plugins with explicit values in the helm chart. This still doesn't allow usage of custom key manager plugins - as they will not be present in the count that is checked. Signed-off-by: Alec Wilson --- charts/spire/charts/spire-server/templates/configmap.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/charts/spire/charts/spire-server/templates/configmap.yaml b/charts/spire/charts/spire-server/templates/configmap.yaml index 4e22858..0d297c6 100644 --- a/charts/spire/charts/spire-server/templates/configmap.yaml +++ b/charts/spire/charts/spire-server/templates/configmap.yaml @@ -298,6 +298,8 @@ plugins: {{- end }} {{- end }} +{{- $keyManagerUsed = add $keyManagerUsed (len .Values.unsupportedBuiltInPlugins.keyManager) }} + {{- if ne $keyManagerUsed 1 }} {{- fail (printf "You have to enable exactly one Key Manager. There are %d enabled." $keyManagerUsed) }} {{- end }}