Add externalTrafficPolicy support for spire-server LoadBalancer service (#906)

Signed-off-by: David Mosyan <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
This commit is contained in:
David Mosyan
2026-08-04 13:36:48 -07:00
committed by GitHub
co-authored by kfox1111
parent 58dab12e55
commit 890ada3e15
3 changed files with 6 additions and 0 deletions
@@ -108,6 +108,7 @@ In order to run Tornjak with simple HTTP Connection only, make sure you don't cr
| `service.port` | Port for the created service | `443` |
| `service.annotations` | Annotations to add to the service object | `{}` |
| `service.loadBalancerIP` | IP address to assign to load balancer (if supported) | `""` |
| `service.externalTrafficPolicy` | Traffic policy applied when service.type is LoadBalancer (e.g. "Local" to preserve client source IP). Defaults to "Cluster" when left empty. | `""` |
| `configMap.annotations` | Annotations to add to the SPIRE Server ConfigMap | `{}` |
| `resources` | Resource requests and limits | `{}` |
| `autoscaling.enabled` | Flag to enable autoscaling | `false` |
@@ -15,6 +15,9 @@ spec:
{{- if and (eq .Values.service.type "LoadBalancer") .Values.service.loadBalancerIP }}
loadBalancerIP: {{ .Values.service.loadBalancerIP }}
{{- end }}
{{- if and (eq .Values.service.type "LoadBalancer") .Values.service.externalTrafficPolicy }}
externalTrafficPolicy: {{ .Values.service.externalTrafficPolicy }}
{{- end }}
ports:
- name: grpc
port: {{ .Values.service.port }}
@@ -90,6 +90,8 @@ service:
annotations: {}
## @param service.loadBalancerIP IP address to assign to load balancer (if supported)
loadBalancerIP: ""
## @param service.externalTrafficPolicy Traffic policy applied when service.type is LoadBalancer (e.g. "Local" to preserve client source IP). Defaults to "Cluster" when left empty.
externalTrafficPolicy: ""
configMap:
## @param configMap.annotations [object] Annotations to add to the SPIRE Server ConfigMap