Add spire agent experimental flags (#26)

* Add spire agent experimental flags Signed-off-by: Kevin Fox <[email protected]> * Fix nested test Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-agent/templates/configmap.yaml Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Regen docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>
2023-10-09 16:09:28 -07:00
parent 11072780ca
commit afba33f179
4 changed files with 25 additions and 1 deletions
@@ -96,3 +96,6 @@ A Helm chart to install the SPIRE agent.
 | `extraContainers`                                 | Additional containers to create with Spire Agent pods                                                               | `[]`                                                                             |
 | `initContainers`                                  | Additional init containers to create with Spire Agent pods                                                          | `[]`                                                                             |
 | `hostAliases`                                     | Customize /etc/hosts file as described here https://kubernetes.io/docs/tasks/network/customize-hosts-file-for-pods/ | `[]`                                                                             |
+| `experimental.enabled`                            | Allow configuration of experimental features                                                                        | `false`                                                                          |
+| `experimental.syncInterval`                       | Sync interval with SPIRE server with exponential backoff                                                            | `5s`                                                                             |
+| `experimental.featureFlags`                       | List of developer feature flags                                                                                     | `[]`                                                                             |
@@ -22,6 +22,19 @@ agent:
    disable_spiffe_cert_validation: {{ .Values.sds.disableSpiffeCertValidation }}
  {{- end }}

+  {{- with .Values.experimental }}
+  {{- if eq (.enabled | toString) "true" }}
+  experimental:
+  sync_interval: {{ .syncInterval | quote }}
+    {{- if gt (len .featureFlags) 0 }}
+    feature_flags:
+      {{- range .featureFlags }}
+        - {{ . | quote }}
+      {{- end }}
+    {{- end }}
+  {{- end }}
+  {{- end }}
+
 plugins:
  NodeAttestor:
    - k8s_psat:
@@ -215,3 +215,11 @@ extraContainers: []
 initContainers: []
 ## @param hostAliases [array] Customize /etc/hosts file as described here https://kubernetes.io/docs/tasks/network/customize-hosts-file-for-pods/
 hostAliases: []
+
+experimental:
+  ## @param experimental.enabled Allow configuration of experimental features
+  enabled: false
+  ## @param experimental.syncInterval Sync interval with SPIRE server with exponential backoff
+  syncInterval: 5s
+  ## @param experimental.featureFlags [array] List of developer feature flags
+  featureFlags: []
@@ -6,7 +6,7 @@ Installed {{ .Chart.Name }}…
 Warning: You're using an unsupported plugin. Functionality of this release and future upgrades aren't guaranteed to work smoothly.
 {{- end }}

-{{- if eq ((index .Values "spire-server").experimental.enabled | toString) "true" }}
+{{- if or (eq (((index .Values "spire-server").experimental).enabled | toString) "true") (eq (((index .Values "spire-agent").experimental).enabled | toString) "true") }}

 Warning: You're using an experimental config. Functionality of this release and future upgrades aren't guaranteed to work smoothly.
 {{- end }}