Revert "Switch to persistence" (#210)
Reverts spiffe/helm-charts#200 Signed-off-by: Kevin Fox <[email protected]>
This commit is contained in:
@@ -53,6 +53,10 @@ A Helm chart to install the SPIRE server.
|
||||
| controllerManager.validatingWebhookConfiguration.upgradeHook.image.registry | string | `"cgr.dev"` | |
|
||||
| controllerManager.validatingWebhookConfiguration.upgradeHook.image.repository | string | `"chainguard/kubectl"` | |
|
||||
| controllerManager.validatingWebhookConfiguration.upgradeHook.image.version | string | `"latest"` | |
|
||||
| dataStorage.accessMode | string | `"ReadWriteOnce"` | |
|
||||
| dataStorage.enabled | bool | `true` | |
|
||||
| dataStorage.size | string | `"1Gi"` | |
|
||||
| dataStorage.storageClass | string | `nil` | |
|
||||
| defaultJwtSvidTTL | string | `"1h"` | |
|
||||
| defaultX509SvidTTL | string | `"4h"` | |
|
||||
| extraContainers | list | `[]` | |
|
||||
@@ -76,10 +80,6 @@ A Helm chart to install the SPIRE server.
|
||||
| nodeAttestor.k8sPsat.serviceAccountAllowList | list | `[]` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| notifier.k8sbundle.namespace | string | `""` | Namespace to push the bundle into, if blank will default to SPIRE Server namespace |
|
||||
| persistence.accessMode | string | `"ReadWriteOnce"` | |
|
||||
| persistence.enabled | bool | `true` | |
|
||||
| persistence.size | string | `"1Gi"` | |
|
||||
| persistence.storageClass | string | `nil` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| replicaCount | int | `1` | SPIRE server currently runs with a sqlite database. Scaling to multiple instances will not work until we use an external database. |
|
||||
|
||||
@@ -91,7 +91,7 @@ spec:
|
||||
- name: spire-config
|
||||
mountPath: /run/spire/config
|
||||
readOnly: true
|
||||
{{- if eq (.Values.persistence.enabled | toString) "true" }}
|
||||
{{- if eq (.Values.dataStorage.enabled | toString) "true" }}
|
||||
- name: spire-data
|
||||
mountPath: /run/spire/data
|
||||
readOnly: false
|
||||
@@ -185,16 +185,16 @@ spec:
|
||||
{{- toYaml .Values.extraVolumes | nindent 8 }}
|
||||
{{- end }}
|
||||
volumeClaimTemplates:
|
||||
{{- if eq (.Values.persistence.enabled | toString) "true" }}
|
||||
{{- if eq (.Values.dataStorage.enabled | toString) "true" }}
|
||||
- metadata:
|
||||
name: spire-data
|
||||
spec:
|
||||
accessModes:
|
||||
- {{ .Values.persistence.accessMode | default "ReadWriteOnce" }}
|
||||
- {{ .Values.dataStorage.accessMode | default "ReadWriteOnce" }}
|
||||
resources:
|
||||
requests:
|
||||
storage: {{ .Values.persistence.size }}
|
||||
{{- if .Values.persistence.storageClass }}
|
||||
storageClassName: {{ .Values.persistence.storageClass }}
|
||||
storage: {{ .Values.dataStorage.size }}
|
||||
{{- if .Values.dataStorage.storageClass }}
|
||||
storageClassName: {{ .Values.dataStorage.storageClass }}
|
||||
{{- end }}
|
||||
{{ end }}
|
||||
|
||||
@@ -73,7 +73,7 @@ affinity: {}
|
||||
|
||||
topologySpreadConstraints: []
|
||||
|
||||
persistence:
|
||||
dataStorage:
|
||||
enabled: true
|
||||
size: 1Gi
|
||||
accessMode: ReadWriteOnce
|
||||
|
||||
@@ -24,7 +24,7 @@ spire-server:
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
|
||||
persistence:
|
||||
dataStorage:
|
||||
enabled: true
|
||||
|
||||
logLevel: info
|
||||
|
||||
Reference in New Issue
Block a user