Move oidc-discovery-provider to sub chart

Signed-off-by: Marco Franssen <[email protected]> Co-authored-by: Gert Jan Kamstra <[email protected]> Signed-off-by: Marco Franssen <[email protected]> Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:09 +01:00
parent 35b8ad3c00
commit 99da500c1c
18 changed files with 438 additions and 226 deletions
@@ -140,93 +140,8 @@ agent:
    logLevel: info
    socketPath: /run/spire/agent-sockets/spire-agent.sock

-oidc:
+spiffe-oidc-discovery-provider:
  enabled: false
-  replicaCount: 1
-
-  image:
-    # registry: gcr.io
-    # repository: spiffe-io/oidc-discovery-provider
-    registry: ghcr.io
-    repository: spiffe/oidc-discovery-provider
-    pullPolicy: IfNotPresent
-    version: ""
-
-  nodeSelector:
-    kubernetes.io/arch: amd64
-
-  resources: {}
-    # We usually recommend not to specify default resources and to leave this as a conscious
-    # choice for the user. This also increases chances charts run on environments with little
-    # resources, such as Minikube. If you do want to specify resources, uncomment the following
-    # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
-    # requests:
-    #   cpu: 50m
-    #   memory: 32Mi
-    # limits:
-    #   cpu: 100m
-    #   memory: 64Mi
-
-  service:
-    type: NodePort
-    port: 80
-    annotations: {}
-      # external-dns.alpha.kubernetes.io/hostname: oidc-discovery.example.org
-
-  podSecurityContext: {}
-    # fsGroup: 2000
-
-  securityContext: {}
-    # capabilities:
-    #   drop:
-    #   - ALL
-    # readOnlyRootFilesystem: true
-    # runAsNonRoot: true
-    # runAsUser: 1000
-
-  tolerations: []
-
-  affinity: {}
-  podAnnotations: {}
-
-  insecureScheme:
-    enabled: false
-
-    nginx:
-      image:
-        registry: docker.io
-        repository: nginx
-        pullPolicy: IfNotPresent
-        version: 1.23.2-alpine
-        # chainguard image does not support the templates feature
-        # https://github.com/chainguard-images/nginx/issues/43
-        # registry: cgr.dev
-        # repository: chainguard/nginx
-        # pullPolicy: IfNotPresent
-        # version: "1.23.2"
-      resources: {}
-        # We usually recommend not to specify default resources and to leave this as a conscious
-        # choice for the user. This also increases chances charts run on environments with little
-        # resources, such as Minikube. If you do want to specify resources, uncomment the following
-        # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
-        # requests:
-        #   cpu: 50m
-        #   memory: 32Mi
-        # limits:
-        #   cpu: 100m
-        #   memory: 64Mi
-
-  config:
-    logLevel: info
-    domains:
-      - localhost
-      - oidc-discovery.example.org
-
-    acme:
-      tosAccepted: false
-      cacheDir: /run/spire
-      directoryUrl: https://acme-v02.api.letsencrypt.org/directory
-      emailAddress: [email protected]

 imagePullSecrets: []
  # - name: my-docker-registry