Add initial spire-ha-agent support to the spire-nested chart (#790)

* Add initial spire-ha-agent support to the spire-nested chart Signed-off-by: Kevin Fox <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> * Fix lint issue Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>
2026-04-10 08:46:28 +00:00
parent c71ffc3c4e
commit 86787b5912
3 changed files with 59 additions and 26 deletions
@@ -101,6 +101,8 @@ tags:
  nestedChildFull: false
  ## @param tags.nestedChildSecurity Set the chart mode to a child cluster for use with a security cluster
  nestedChildSecurity: false
+  ## @param tags.haAgentCommon Set the chart mode to deploy the common portion of a spire-ha-agent setup
+  haAgentCommon: false

 ## subcharts

@@ -197,7 +199,7 @@ upstream-spiffe-csi-driver:
 ## @section SPIFFE oidc discovery provider parameters
 ## Parameter values for spiffe-oidc-discovery-provider
 ##
-# Used with tags [nestedRoot, nestedChildFull, nestedChildSecurity]
+# Used with tags [nestedRoot, nestedChildFull, nestedChildSecurity, haAgentCommon]
 spiffe-oidc-discovery-provider:
  # enabled: true
  ## @param spiffe-oidc-discovery-provider.fullnameOverride Fullname override
@@ -395,3 +397,17 @@ external-spire-server:
    joinToken:
      ## @param external-spire-server.nodeAttestor.joinToken.enabled Enable the join_token nodeattestor
      enabled: true
+
+# Used with tags [haAgentCommon]
+spiffe-csi-driver:
+  # enabled: true
+  ## @param spiffe-csi-driver.agentSocketPath The socket path where Spiffe CSI driver mounts agent socket
+  agentSocketPath: /var/run/spire/agent-sockets/spire-agent.sock
+  healthChecks:
+    ## @param spiffe-csi-driver.healthChecks.port Health check port number for upstream Spire agent
+    port: 9814
+
+## @param spire-ha-agent The configuration overrides for a spire-ha-agent
+# Used with tags [haAgentCommon]
+spire-ha-agent: {}
+  # enabled: true