From b82abab3577c1497b3e01055985e0730c816165e Mon Sep 17 00:00:00 2001 From: kfox1111 Date: Wed, 12 Apr 2023 13:12:07 -0700 Subject: [PATCH] Revert "Switch to persistence" (#210) Reverts spiffe/helm-charts#200 Signed-off-by: Kevin Fox --- charts/spire/charts/spire-server/README.md | 8 ++++---- .../charts/spire-server/templates/statefulset.yaml | 12 ++++++------ charts/spire/charts/spire-server/values.yaml | 2 +- examples/production/values.yaml | 2 +- 4 files changed, 12 insertions(+), 12 deletions(-) diff --git a/charts/spire/charts/spire-server/README.md b/charts/spire/charts/spire-server/README.md index 31b5660..8a6abd7 100644 --- a/charts/spire/charts/spire-server/README.md +++ b/charts/spire/charts/spire-server/README.md @@ -53,6 +53,10 @@ A Helm chart to install the SPIRE server. | controllerManager.validatingWebhookConfiguration.upgradeHook.image.registry | string | `"cgr.dev"` | | | controllerManager.validatingWebhookConfiguration.upgradeHook.image.repository | string | `"chainguard/kubectl"` | | | controllerManager.validatingWebhookConfiguration.upgradeHook.image.version | string | `"latest"` | | +| dataStorage.accessMode | string | `"ReadWriteOnce"` | | +| dataStorage.enabled | bool | `true` | | +| dataStorage.size | string | `"1Gi"` | | +| dataStorage.storageClass | string | `nil` | | | defaultJwtSvidTTL | string | `"1h"` | | | defaultX509SvidTTL | string | `"4h"` | | | extraContainers | list | `[]` | | @@ -76,10 +80,6 @@ A Helm chart to install the SPIRE server. | nodeAttestor.k8sPsat.serviceAccountAllowList | list | `[]` | | | nodeSelector | object | `{}` | | | notifier.k8sbundle.namespace | string | `""` | Namespace to push the bundle into, if blank will default to SPIRE Server namespace | -| persistence.accessMode | string | `"ReadWriteOnce"` | | -| persistence.enabled | bool | `true` | | -| persistence.size | string | `"1Gi"` | | -| persistence.storageClass | string | `nil` | | | podAnnotations | object | `{}` | | | podSecurityContext | object | `{}` | | | replicaCount | int | `1` | SPIRE server currently runs with a sqlite database. Scaling to multiple instances will not work until we use an external database. | diff --git a/charts/spire/charts/spire-server/templates/statefulset.yaml b/charts/spire/charts/spire-server/templates/statefulset.yaml index 9d57a82..2773bf6 100644 --- a/charts/spire/charts/spire-server/templates/statefulset.yaml +++ b/charts/spire/charts/spire-server/templates/statefulset.yaml @@ -91,7 +91,7 @@ spec: - name: spire-config mountPath: /run/spire/config readOnly: true - {{- if eq (.Values.persistence.enabled | toString) "true" }} + {{- if eq (.Values.dataStorage.enabled | toString) "true" }} - name: spire-data mountPath: /run/spire/data readOnly: false @@ -185,16 +185,16 @@ spec: {{- toYaml .Values.extraVolumes | nindent 8 }} {{- end }} volumeClaimTemplates: - {{- if eq (.Values.persistence.enabled | toString) "true" }} + {{- if eq (.Values.dataStorage.enabled | toString) "true" }} - metadata: name: spire-data spec: accessModes: - - {{ .Values.persistence.accessMode | default "ReadWriteOnce" }} + - {{ .Values.dataStorage.accessMode | default "ReadWriteOnce" }} resources: requests: - storage: {{ .Values.persistence.size }} - {{- if .Values.persistence.storageClass }} - storageClassName: {{ .Values.persistence.storageClass }} + storage: {{ .Values.dataStorage.size }} + {{- if .Values.dataStorage.storageClass }} + storageClassName: {{ .Values.dataStorage.storageClass }} {{- end }} {{ end }} diff --git a/charts/spire/charts/spire-server/values.yaml b/charts/spire/charts/spire-server/values.yaml index 277663f..4206c66 100644 --- a/charts/spire/charts/spire-server/values.yaml +++ b/charts/spire/charts/spire-server/values.yaml @@ -73,7 +73,7 @@ affinity: {} topologySpreadConstraints: [] -persistence: +dataStorage: enabled: true size: 1Gi accessMode: ReadWriteOnce diff --git a/examples/production/values.yaml b/examples/production/values.yaml index 1524723..d81d285 100644 --- a/examples/production/values.yaml +++ b/examples/production/values.yaml @@ -24,7 +24,7 @@ spire-server: seccompProfile: type: RuntimeDefault - persistence: + dataStorage: enabled: true logLevel: info