panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

option to configure agent sds (#479)

Browse Source 
Co-authored-by: Marco Franssen <[email protected]>
This commit is contained in:
grameshtwilio
2023-09-11 11:42:27 +00:00
committed by GitHub
co-authored by Marco Franssen
parent 693ce08425
commit 9ad2ed59b1
3 changed files with 24 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-agent/values.yaml
+12
View File
@@ -170,6 +170,18 @@ workloadAttestors:
## @param workloadAttestors.k8s.disableContainerSelectors Set to true if using holdApplicationUntilProxyStarts in Istio
disableContainerSelectors: false
sds:
## @param sds.enabled Enables Envoy SDS configuration
enabled: false
## @param sds.defaultSvidName The TLS Certificate resource name to use for the default X509-SVID with Envoy SDS
defaultSvidName: "default"
## @param sds.defaultBundleName The Validation Context resource name to use for the default X.509 bundle with Envoy SDS
defaultBundleName: "ROOTCA"
## @param sds.defaultAllBundlesName The Validation Context resource name to use for all bundles (including federated) with Envoy SDS
defaultAllBundlesName: "ALL"
## @param sds.disableSpiffeCertValidation Disable Envoy SDS custom validation
disableSpiffeCertValidation: false
telemetry:
prometheus:
## @param telemetry.prometheus.enabled Flag to enable prometheus monitoring