panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Move oidc-discovery-provider to sub chart

Browse Source 
Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Gert Jan Kamstra <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
This commit is contained in:
Marco Franssen
2023-02-18 13:04:09 +01:00
committed by Marco Franssen
co-authored by Gert Jan Kamstra
parent 35b8ad3c00
commit 99da500c1c
18 changed files with 438 additions and 226 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/README.md
+2 -29
View File
@@ -47,6 +47,7 @@ Kubernetes: `>=1.21.0-0`
| Repository | Name | Version |
|------------|------|---------|
| file://./charts/spiffe-csi-driver | spiffe-csi-driver | 0.1.0 |
| file://./charts/spiffe-oidc-discovery-provider | spiffe-oidc-discovery-provider | 0.1.0 |
## Values
@@ -64,35 +65,6 @@ Kubernetes: `>=1.21.0-0`
| fullnameOverride | string | `""` | |
| imagePullSecrets | list | `[]` | |
| nameOverride | string | `""` | |
| oidc.affinity | object | `{}` | |
| oidc.config.acme.cacheDir | string | `"/run/spire"` | |
| oidc.config.acme.directoryUrl | string | `"https://acme-v02.api.letsencrypt.org/directory"` | |
| oidc.config.acme.emailAddress | string | `"[email protected]"` | |
| oidc.config.acme.tosAccepted | bool | `false` | |
| oidc.config.domains[0] | string | `"localhost"` | |
| oidc.config.domains[1] | string | `"oidc-discovery.example.org"` | |
| oidc.config.logLevel | string | `"info"` | |
| oidc.enabled | bool | `false` | |
| oidc.image.pullPolicy | string | `"IfNotPresent"` | |
| oidc.image.registry | string | `"ghcr.io"` | |
| oidc.image.repository | string | `"spiffe/oidc-discovery-provider"` | |
| oidc.image.version | string | `""` | |
| oidc.insecureScheme.enabled | bool | `false` | |
| oidc.insecureScheme.nginx.image.pullPolicy | string | `"IfNotPresent"` | |
| oidc.insecureScheme.nginx.image.registry | string | `"docker.io"` | |
| oidc.insecureScheme.nginx.image.repository | string | `"nginx"` | |
| oidc.insecureScheme.nginx.image.version | string | `"1.23.2-alpine"` | |
| oidc.insecureScheme.nginx.resources | object | `{}` | |
| oidc.nodeSelector."kubernetes.io/arch" | string | `"amd64"` | |
| oidc.podAnnotations | object | `{}` | |
| oidc.podSecurityContext | object | `{}` | |
| oidc.replicaCount | int | `1` | |
| oidc.resources | object | `{}` | |
| oidc.securityContext | object | `{}` | |
| oidc.service.annotations | object | `{}` | |
| oidc.service.port | int | `80` | |
| oidc.service.type | string | `"NodePort"` | |
| oidc.tolerations | list | `[]` | |
| server.config.ca_subject.common_name | string | `"example.org"` | |
| server.config.ca_subject.country | string | `"NL"` | |
| server.config.ca_subject.organization | string | `"Example"` | |
@@ -124,6 +96,7 @@ Kubernetes: `>=1.21.0-0`
| serviceAccount.annotations | object | `{}` | |
| serviceAccount.create | bool | `true` | |
| serviceAccount.name | string | `""` | |
| spiffe-oidc-discovery-provider.enabled | bool | `false` | |
| spire.clusterName | string | `"example-cluster"` | |
| spire.trustDomain | string | `"example.org"` | |
| waitForIt.image.pullPolicy | string | `"IfNotPresent"` | |