panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added support for specifying Kubelet CA Path (#415)

Browse Source 
Signed-off-by: Andrew Block <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
This commit is contained in:
Andrew Block
2024-08-09 04:56:11 +00:00
committed by GitHub
co-authored by Faisal Memon
parent 41dce8c32f
commit abcf01958a
3 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-agent/values.yaml
+2
View File
@@ -208,6 +208,8 @@ workloadAttestors:
enabled: true
## @param workloadAttestors.k8s.skipKubeletVerification If true, kubelet certificate verification is skipped
skipKubeletVerification: true
## @param workloadAttestors.k8s.kubeletCaPath Path to the file containing CA certificates used to verify the kubelet certificate
kubeletCaPath: /run/secrets/kubernetes.io/serviceaccount/ca.crt
## @param workloadAttestors.k8s.disableContainerSelectors Set to true if using holdApplicationUntilProxyStarts in Istio
disableContainerSelectors: false
## @param workloadAttestors.k8s.useNewContainerLocator If true, enables the new container locator algorithm that has support for cgroups v2. Defaults to false