diff --git a/charts/spire/charts/spire-agent/templates/_helpers.tpl b/charts/spire/charts/spire-agent/templates/_helpers.tpl index 0a1db74..5bb2ffe 100644 --- a/charts/spire/charts/spire-agent/templates/_helpers.tpl +++ b/charts/spire/charts/spire-agent/templates/_helpers.tpl @@ -72,7 +72,3 @@ Create the name of the service account to use {{- printf "%s/%s" .image.registry .image.repository -}} {{- end -}} {{- end }} - -{{- define "spire-server-service" -}} -{{ include "spire-agent.fullname" . | trimSuffix "-agent" }}-server -{{- end }} diff --git a/charts/spire/charts/spire-agent/templates/configmap.yaml b/charts/spire/charts/spire-agent/templates/configmap.yaml index b7a8111..0f2fc85 100644 --- a/charts/spire/charts/spire-agent/templates/configmap.yaml +++ b/charts/spire/charts/spire-agent/templates/configmap.yaml @@ -8,7 +8,7 @@ data: agent { data_dir = "/run/spire" log_level = {{ .Values.logLevel | quote }} - server_address = {{ (include "spire-server-service" .) | quote }} + server_address = "{{ .Release.Name }}-server" server_port = {{ .Values.server.port | quote }} socket_path = {{ .Values.socketPath | quote }} trust_bundle_path = "/run/spire/bundle/bundle.crt" diff --git a/charts/spire/charts/spire-server/templates/k8s-workload-registrar-roles.yaml b/charts/spire/charts/spire-server/templates/k8s-workload-registrar-roles.yaml index e4022f3..ec35eab 100644 --- a/charts/spire/charts/spire-server/templates/k8s-workload-registrar-roles.yaml +++ b/charts/spire/charts/spire-server/templates/k8s-workload-registrar-roles.yaml @@ -39,6 +39,9 @@ rules: - apiGroups: [""] resources: ["events"] verbs: ["create"] + - apiGroups: ["coordination.k8s.io"] + resources: ["leases"] + verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding