diff --git a/charts/spire/README.md b/charts/spire/README.md index 7c08dae..00186ef 100644 --- a/charts/spire/README.md +++ b/charts/spire/README.md @@ -87,6 +87,7 @@ Kubernetes: `>=1.21.0-0` | oidc.insecureScheme.nginx.image.registry | string | `"docker.io"` | | | oidc.insecureScheme.nginx.image.repository | string | `"nginx"` | | | oidc.insecureScheme.nginx.image.version | string | `"1.23.2-alpine"` | | +| oidc.insecureScheme.nginx.resources | object | `{}` | | | oidc.nodeSelector."kubernetes.io/arch" | string | `"amd64"` | | | oidc.podAnnotations | object | `{}` | | | oidc.podSecurityContext | object | `{}` | | diff --git a/charts/spire/templates/oidc-deployment.yaml b/charts/spire/templates/oidc-deployment.yaml index 8cb24f2..a117eb1 100644 --- a/charts/spire/templates/oidc-deployment.yaml +++ b/charts/spire/templates/oidc-deployment.yaml @@ -87,6 +87,8 @@ spec: mountPath: /etc/nginx/templates/default.conf.template subPath: default.conf.template readOnly: true + resources: + {{- toYaml .Values.oidc.insecureScheme.nginx.resources | nindent 12 }} {{- end }} volumes: - name: spiffe-workload-api diff --git a/charts/spire/values.yaml b/charts/spire/values.yaml index 4158201..576cdc7 100644 --- a/charts/spire/values.yaml +++ b/charts/spire/values.yaml @@ -214,6 +214,17 @@ oidc: # repository: chainguard/nginx # pullPolicy: IfNotPresent # version: "1.23.2" + resources: {} + # We usually recommend not to specify default resources and to leave this as a conscious + # choice for the user. This also increases chances charts run on environments with little + # resources, such as Minikube. If you do want to specify resources, uncomment the following + # lines, adjust them as necessary, and remove the curly braces after 'resources:'. + # requests: + # cpu: 50m + # memory: 32Mi + # limits: + # cpu: 100m + # memory: 64Mi config: logLevel: info