diff --git a/charts/spire/charts/spire-server/README.md b/charts/spire/charts/spire-server/README.md index 70c6366..5924854 100644 --- a/charts/spire/charts/spire-server/README.md +++ b/charts/spire/charts/spire-server/README.md @@ -368,6 +368,7 @@ In order to run Tornjak with simple HTTP Connection only, make sure you don't cr | `initContainers` | Additional init containers to create | `[]` | | `caKeyType` | The CA key type to use, possible values are rsa-2048, rsa-4096, ec-p256, ec-p384 (AWS requires the use of RSA. EC cryptography is not supported) | `rsa-2048` | | `caTTL` | TTL for CA | `24h` | +| `agentTTL` | The TTL to use for agent SVIDs. If unset, the defaultX509SvidTTL will be used. | `""` | | `defaultX509SvidTTL` | TTL for X509 Svids | `4h` | | `defaultJwtSvidTTL` | TTL for JWT Svids | `1h` | | `nodeAttestor.k8sPSAT.enabled` | Enable PSAT k8s nodeattestor | `true` | diff --git a/charts/spire/charts/spire-server/templates/configmap.yaml b/charts/spire/charts/spire-server/templates/configmap.yaml index 8b0b923..12659b6 100644 --- a/charts/spire/charts/spire-server/templates/configmap.yaml +++ b/charts/spire/charts/spire-server/templates/configmap.yaml @@ -58,6 +58,9 @@ server: ca_key_type: {{ .Values.caKeyType | quote }} ca_ttl: {{ .Values.caTTL | quote }} + {{- if .Values.agentTTL }} + agent_ttl: {{ .Values.agentTTL | quote }} + {{- end }} default_x509_svid_ttl: {{ .Values.defaultX509SvidTTL | quote }} default_jwt_svid_ttl: {{ .Values.defaultJwtSvidTTL | quote }} diff --git a/charts/spire/charts/spire-server/values.yaml b/charts/spire/charts/spire-server/values.yaml index e9ed90c..237143c 100644 --- a/charts/spire/charts/spire-server/values.yaml +++ b/charts/spire/charts/spire-server/values.yaml @@ -905,6 +905,8 @@ initContainers: [] caKeyType: rsa-2048 ## @param caTTL TTL for CA caTTL: 24h +## @param agentTTL The TTL to use for agent SVIDs. If unset, the defaultX509SvidTTL will be used. +agentTTL: "" ## @param defaultX509SvidTTL TTL for X509 Svids defaultX509SvidTTL: 4h ## @param defaultJwtSvidTTL TTL for JWT Svids