panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

make audit_log_enabled configurable (#241)

Browse Source 
* make audit_log_enabled configurable

Signed-off-by: Rory Houlihan <[email protected]>

* Update charts/spire/charts/spire-server/values.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: McRors Calhoun <[email protected]>

* Update charts/spire/charts/spire-server/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Rory Houlihan <[email protected]>
Signed-off-by: McRors Calhoun <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
This commit is contained in:
McRors Calhoun
2024-02-12 13:18:41 +00:00
committed by GitHub
co-authored by Faisal Memon kfox1111
parent 34a39cb76e
commit a7060632a0
3 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-server/README.md
+1
View File
@@ -133,6 +133,7 @@ In order to run Tornjak with simple HTTP Connection only, make sure you don't cr
| `dataStore.sql.externalSecret.enabled` | Enable external secret for datastore creds | `false` | | `dataStore.sql.externalSecret.enabled` | Enable external secret for datastore creds | `false` |
| `dataStore.sql.externalSecret.name` | The name of the secret object | `""` | | `dataStore.sql.externalSecret.name` | The name of the secret object | `""` |
| `dataStore.sql.externalSecret.key` | The key of the secret object whose value is the dataStore.sql password | `""` | | `dataStore.sql.externalSecret.key` | The key of the secret object whose value is the dataStore.sql password | `""` |
| `auditLogEnabled` | If true, enables audit logging | `false` |
| `logLevel` | The log level, valid values are "debug", "info", "warn", and "error" | `info` | | `logLevel` | The log level, valid values are "debug", "info", "warn", and "error" | `info` |
| `jwtIssuer` | The JWT issuer domain. Defaults to oidc-discovery.$trustDomain if unset | `""` | | `jwtIssuer` | The JWT issuer domain. Defaults to oidc-discovery.$trustDomain if unset | `""` |
| `clusterName` | Set the name of the Kubernetes cluster. (`kubeadm init --service-dns-domain`) | `example-cluster` | | `clusterName` | Set the name of the Kubernetes cluster. (`kubeadm init --service-dns-domain`) | `example-cluster` |
charts/spire/charts/spire-server/templates/configmap.yaml
+1
View File
@@ -46,6 +46,7 @@ server:
data_dir: "/run/spire/data" data_dir: "/run/spire/data"
log_level: {{ .Values.logLevel | quote }} log_level: {{ .Values.logLevel | quote }}
jwt_issuer: {{ include "spire-lib.jwt-issuer" . | quote }} jwt_issuer: {{ include "spire-lib.jwt-issuer" . | quote }}
audit_log_enabled: {{ .Values.auditLogEnabled }}
ca_key_type: {{ .Values.caKeyType | quote }} ca_key_type: {{ .Values.caKeyType | quote }}
ca_ttl: {{ .Values.caTTL | quote }} ca_ttl: {{ .Values.caTTL | quote }}
charts/spire/charts/spire-server/values.yaml
+2
View File
@@ -173,6 +173,8 @@ dataStore:
## @param dataStore.sql.externalSecret.key The key of the secret object whose value is the dataStore.sql password ## @param dataStore.sql.externalSecret.key The key of the secret object whose value is the dataStore.sql password
key: "" key: ""
## @param auditLogEnabled If true, enables audit logging
auditLogEnabled: false
## @param logLevel The log level, valid values are "debug", "info", "warn", and "error" ## @param logLevel The log level, valid values are "debug", "info", "warn", and "error"
logLevel: info logLevel: info
## @param jwtIssuer The JWT issuer domain. Defaults to oidc-discovery.$trustDomain if unset ## @param jwtIssuer The JWT issuer domain. Defaults to oidc-discovery.$trustDomain if unset