From be560d95d89148426c76e6ae38d1706927fb2bdd Mon Sep 17 00:00:00 2001 From: kfox1111 Date: Tue, 7 May 2024 20:38:04 -0700 Subject: [PATCH] Check for a misconfiguration of bundle endpoint profiles (#348) * Check for a misconfiguration of bundle endpoint profiles Signed-off-by: Kevin Fox * Update charts/spire/charts/spire-server/templates/configmap.yaml Co-authored-by: Faisal Memon Signed-off-by: kfox1111 --------- Signed-off-by: Kevin Fox Signed-off-by: kfox1111 Co-authored-by: Faisal Memon --- charts/spire/charts/spire-server/templates/configmap.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/charts/spire/charts/spire-server/templates/configmap.yaml b/charts/spire/charts/spire-server/templates/configmap.yaml index a4e07a5..dc12108 100644 --- a/charts/spire/charts/spire-server/templates/configmap.yaml +++ b/charts/spire/charts/spire-server/templates/configmap.yaml @@ -38,6 +38,9 @@ {{- if and (eq (.Values.keyManager.awsKMS.keyIdentifierFile.enabled | toString) "true") (eq (.Values.keyManager.awsKMS.keyIdentifierValue.enabled | toString ) "true") }} {{- fail "You can only enable one of keyIdentifierFile or keyIdentifierValue at a time" }} {{- end }} +{{- if hasKey .Values.federation.bundleEndpoint "profile" }} +{{- fail "Configuring the federation bundle endpoint profile directly isn't supported. You can specify the settings via federation.tls" }} +{{- end }} {{- define "spire-server.yaml-config" -}} {{- $upstreamAuthorityUsed := 0 }} {{- $keyManagerUsed := 0 }}