panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix keyManager check stopping use of unsupported bulit-in plugin (#715)

Browse Source 
Adds unsupported built-in plugins (built-in plugins that do not have
direct toggles in the helm chart) to the check that exactly one
key manager plugin is enabled - the previous check only allowed usage
of key manager plugins with explicit values in the helm chart.

This still doesn't allow usage of custom key manager plugins - as they
will not be present in the count that is checked.

Signed-off-by: Alec Wilson <[email protected]>
This commit is contained in:
Alec Wilson
2026-02-08 16:13:43 -08:00
committed by GitHub
parent 45fdf9f7c0
commit 7d2664544d
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-server/templates/configmap.yaml
+2
View File
@@ -298,6 +298,8 @@ plugins:
{{- end }} {{- end }}
{{- end }} {{- end }}
{{- $keyManagerUsed = add $keyManagerUsed (len .Values.unsupportedBuiltInPlugins.keyManager) }}
{{- if ne $keyManagerUsed 1 }} {{- if ne $keyManagerUsed 1 }}
{{- fail (printf "You have to enable exactly one Key Manager. There are %d enabled." $keyManagerUsed) }} {{- fail (printf "You have to enable exactly one Key Manager. There are %d enabled." $keyManagerUsed) }}
{{- end }} {{- end }}