panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add externalTrafficPolicy support for spire-server LoadBalancer service (#906)

Browse Source 
Signed-off-by: David Mosyan <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
This commit is contained in:
David Mosyan
2026-08-04 13:36:48 -07:00
committed by GitHub
co-authored by kfox1111
parent 58dab12e55
commit 890ada3e15
3 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-server/README.md
+1
View File
@@ -108,6 +108,7 @@ In order to run Tornjak with simple HTTP Connection only, make sure you don't cr
| `service.port` | Port for the created service | `443` | | `service.port` | Port for the created service | `443` |
| `service.annotations` | Annotations to add to the service object | `{}` | | `service.annotations` | Annotations to add to the service object | `{}` |
| `service.loadBalancerIP` | IP address to assign to load balancer (if supported) | `""` | | `service.loadBalancerIP` | IP address to assign to load balancer (if supported) | `""` |
| `service.externalTrafficPolicy` | Traffic policy applied when service.type is LoadBalancer (e.g. "Local" to preserve client source IP). Defaults to "Cluster" when left empty. | `""` |
| `configMap.annotations` | Annotations to add to the SPIRE Server ConfigMap | `{}` | | `configMap.annotations` | Annotations to add to the SPIRE Server ConfigMap | `{}` |
| `resources` | Resource requests and limits | `{}` | | `resources` | Resource requests and limits | `{}` |
| `autoscaling.enabled` | Flag to enable autoscaling | `false` | | `autoscaling.enabled` | Flag to enable autoscaling | `false` |
charts/spire/charts/spire-server/templates/service.yaml
+3
View File
@@ -15,6 +15,9 @@ spec:
{{- if and (eq .Values.service.type "LoadBalancer") .Values.service.loadBalancerIP }} {{- if and (eq .Values.service.type "LoadBalancer") .Values.service.loadBalancerIP }}
loadBalancerIP: {{ .Values.service.loadBalancerIP }} loadBalancerIP: {{ .Values.service.loadBalancerIP }}
{{- end }} {{- end }}
{{- if and (eq .Values.service.type "LoadBalancer") .Values.service.externalTrafficPolicy }}
externalTrafficPolicy: {{ .Values.service.externalTrafficPolicy }}
{{- end }}
ports: ports:
- name: grpc - name: grpc
port: {{ .Values.service.port }} port: {{ .Values.service.port }}
charts/spire/charts/spire-server/values.yaml
+2
View File
@@ -90,6 +90,8 @@ service:
annotations: {} annotations: {}
## @param service.loadBalancerIP IP address to assign to load balancer (if supported) ## @param service.loadBalancerIP IP address to assign to load balancer (if supported)
loadBalancerIP: "" loadBalancerIP: ""
## @param service.externalTrafficPolicy Traffic policy applied when service.type is LoadBalancer (e.g. "Local" to preserve client source IP). Defaults to "Cluster" when left empty.
externalTrafficPolicy: ""
configMap: configMap:
## @param configMap.annotations [object] Annotations to add to the SPIRE Server ConfigMap ## @param configMap.annotations [object] Annotations to add to the SPIRE Server ConfigMap