Make the namespace the bundle is dropped into configurable

When the server and agent are not in the same namespace, the bundle needs to be uploadable in the agent's namespace. Signed-off-by: Kevin Fox <[email protected]>
2023-03-09 12:00:41 -08:00
parent 7d1f8217ce
commit 9e22d2c303
5 changed files with 37 additions and 15 deletions
@@ -69,6 +69,7 @@ A Helm chart to install the SPIRE server.
 | nodeAttestor.k8sPsat.enabled | bool | `true` |  |
 | nodeAttestor.k8sPsat.serviceAccountAllowList | list | `[]` |  |
 | nodeSelector | object | `{}` |  |
+| notifier.k8sbundle.namespace | string | `""` | Namespace to push the bundle into, if blank will default to SPIRE Server namespace |
 | podAnnotations | object | `{}` |  |
 | podSecurityContext | object | `{}` |  |
 | replicaCount | int | `1` | SPIRE server currently runs with a sqlite database. Scaling to multiple instances will not work until we use an external database. |