Add the option to disable unix workloadattestor (#26)

Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: Marco Franssen <[email protected]>
2023-02-23 10:32:35 +01:00
parent 115d9bdf80
commit 8a3ae10da5
3 changed files with 10 additions and 0 deletions
@@ -35,5 +35,6 @@ A Helm chart to install the SPIRE agent.
 | waitForIt.image.repository | string | `"chainguard/wait-for-it"` |  |
 | waitForIt.image.version | string | `"latest-20230113"` |  |
 | waitForIt.resources | object | `{}` |  |
+| workloadAttestors.unix.enabled | bool | `false` | enables the Unix workload attestor |

 ----------------------------------------------
@@ -36,10 +36,12 @@ data:
        }
      }

+      {{- if .Values.workloadAttestors.unix.enabled }}
      WorkloadAttestor "unix" {
          plugin_data {
          }
      }
+      {{- end }}
    }

    health_checks {
@@ -68,3 +68,10 @@ waitForIt:
    pullPolicy: IfNotPresent
    version: latest-20230113
  resources: {}
+
+# workloadAttestors determine a workload's properties and then generate a set of selectors associated with it.
+workloadAttestors:
+  # unix is a workload attestor which generates unix-based selectors like 'uid' and 'gid'.
+  unix:
+    # -- enables the Unix workload attestor
+    enabled: false