Revert "Switch to persistence" (#210)

Reverts spiffe/helm-charts#200

Signed-off-by: Kevin Fox <[email protected]>
This commit is contained in:
kfox1111
2023-04-12 16:12:07 -04:00
committed by GitHub
parent 0dec80e1d5
commit b82abab357
4 changed files with 12 additions and 12 deletions
+4 -4
View File
@@ -53,6 +53,10 @@ A Helm chart to install the SPIRE server.
| controllerManager.validatingWebhookConfiguration.upgradeHook.image.registry | string | `"cgr.dev"` | | | controllerManager.validatingWebhookConfiguration.upgradeHook.image.registry | string | `"cgr.dev"` | |
| controllerManager.validatingWebhookConfiguration.upgradeHook.image.repository | string | `"chainguard/kubectl"` | | | controllerManager.validatingWebhookConfiguration.upgradeHook.image.repository | string | `"chainguard/kubectl"` | |
| controllerManager.validatingWebhookConfiguration.upgradeHook.image.version | string | `"latest"` | | | controllerManager.validatingWebhookConfiguration.upgradeHook.image.version | string | `"latest"` | |
| dataStorage.accessMode | string | `"ReadWriteOnce"` | |
| dataStorage.enabled | bool | `true` | |
| dataStorage.size | string | `"1Gi"` | |
| dataStorage.storageClass | string | `nil` | |
| defaultJwtSvidTTL | string | `"1h"` | | | defaultJwtSvidTTL | string | `"1h"` | |
| defaultX509SvidTTL | string | `"4h"` | | | defaultX509SvidTTL | string | `"4h"` | |
| extraContainers | list | `[]` | | | extraContainers | list | `[]` | |
@@ -76,10 +80,6 @@ A Helm chart to install the SPIRE server.
| nodeAttestor.k8sPsat.serviceAccountAllowList | list | `[]` | | | nodeAttestor.k8sPsat.serviceAccountAllowList | list | `[]` | |
| nodeSelector | object | `{}` | | | nodeSelector | object | `{}` | |
| notifier.k8sbundle.namespace | string | `""` | Namespace to push the bundle into, if blank will default to SPIRE Server namespace | | notifier.k8sbundle.namespace | string | `""` | Namespace to push the bundle into, if blank will default to SPIRE Server namespace |
| persistence.accessMode | string | `"ReadWriteOnce"` | |
| persistence.enabled | bool | `true` | |
| persistence.size | string | `"1Gi"` | |
| persistence.storageClass | string | `nil` | |
| podAnnotations | object | `{}` | | | podAnnotations | object | `{}` | |
| podSecurityContext | object | `{}` | | | podSecurityContext | object | `{}` | |
| replicaCount | int | `1` | SPIRE server currently runs with a sqlite database. Scaling to multiple instances will not work until we use an external database. | | replicaCount | int | `1` | SPIRE server currently runs with a sqlite database. Scaling to multiple instances will not work until we use an external database. |
@@ -91,7 +91,7 @@ spec:
- name: spire-config - name: spire-config
mountPath: /run/spire/config mountPath: /run/spire/config
readOnly: true readOnly: true
{{- if eq (.Values.persistence.enabled | toString) "true" }} {{- if eq (.Values.dataStorage.enabled | toString) "true" }}
- name: spire-data - name: spire-data
mountPath: /run/spire/data mountPath: /run/spire/data
readOnly: false readOnly: false
@@ -185,16 +185,16 @@ spec:
{{- toYaml .Values.extraVolumes | nindent 8 }} {{- toYaml .Values.extraVolumes | nindent 8 }}
{{- end }} {{- end }}
volumeClaimTemplates: volumeClaimTemplates:
{{- if eq (.Values.persistence.enabled | toString) "true" }} {{- if eq (.Values.dataStorage.enabled | toString) "true" }}
- metadata: - metadata:
name: spire-data name: spire-data
spec: spec:
accessModes: accessModes:
- {{ .Values.persistence.accessMode | default "ReadWriteOnce" }} - {{ .Values.dataStorage.accessMode | default "ReadWriteOnce" }}
resources: resources:
requests: requests:
storage: {{ .Values.persistence.size }} storage: {{ .Values.dataStorage.size }}
{{- if .Values.persistence.storageClass }} {{- if .Values.dataStorage.storageClass }}
storageClassName: {{ .Values.persistence.storageClass }} storageClassName: {{ .Values.dataStorage.storageClass }}
{{- end }} {{- end }}
{{ end }} {{ end }}
+1 -1
View File
@@ -73,7 +73,7 @@ affinity: {}
topologySpreadConstraints: [] topologySpreadConstraints: []
persistence: dataStorage:
enabled: true enabled: true
size: 1Gi size: 1Gi
accessMode: ReadWriteOnce accessMode: ReadWriteOnce
+1 -1
View File
@@ -24,7 +24,7 @@ spire-server:
seccompProfile: seccompProfile:
type: RuntimeDefault type: RuntimeDefault
persistence: dataStorage:
enabled: true enabled: true
logLevel: info logLevel: info