diff --git a/examples/openshift/openshift-values.yaml b/examples/openshift/openshift-values.yaml index 44efaca..7b219c0 100644 --- a/examples/openshift/openshift-values.yaml +++ b/examples/openshift/openshift-values.yaml @@ -1,8 +1,5 @@ global: openshift: true - telemetry: - prometheus: - enabled: true spire: namespaces: system: @@ -19,12 +16,6 @@ global: pod-security.kubernetes.io/audit: privileged spire-server: - nodeAttestor: - k8sPsat: - serviceAccountAllowList: ["spire-system:spire-agent"] - notifier: - k8sbundle: - namespace: spire-system podSecurityContext: # These are unset so that openshift can automatically assign its own restricted uids to the pods runAsUser: null diff --git a/examples/production/values.yaml b/examples/production/values.yaml index 4868ae7..fb5c4cc 100644 --- a/examples/production/values.yaml +++ b/examples/production/values.yaml @@ -28,8 +28,6 @@ spire-server: seccompProfile: type: RuntimeDefault - logLevel: info - controllerManager: securityContext: allowPrivilegeEscalation: false @@ -40,21 +38,13 @@ spire-server: seccompProfile: type: RuntimeDefault - ignoreNamespaces: - - kube-system - - kube-public - - local-path-storage - spiffe-csi-driver: - enabled: true namespaceOverride: spire-system - upstream-spiffe-csi-driver: namespaceOverride: spire-system spire-agent: - enabled: true namespaceOverride: spire-system serviceAccount: name: spire-agent @@ -73,8 +63,6 @@ spire-agent: seccompProfile: type: RuntimeDefault - logLevel: info - upstream-spire-agent: namespaceOverride: spire-system podSecurityContext: @@ -90,8 +78,6 @@ upstream-spire-agent: seccompProfile: type: RuntimeDefault - logLevel: info - spiffe-oidc-discovery-provider: enabled: true insecureScheme: