panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add pod labels to the SPIRE agent (#273)

Browse Source 
Follow on from https://github.com/spiffe/helm-charts-hardened/pull/271.
This will allow the SPIRE agent to also integrate with Azure Workload
Identity.

Signed-off-by: Rory Houlihan <[email protected]>
This commit is contained in:
Rory Houlihan
2024-03-04 06:45:32 -08:00
committed by GitHub
parent 077f152144
commit beda725369
3 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-agent/README.md
+1
View File
@@ -40,6 +40,7 @@ A Helm chart to install the SPIRE agent.
| `serviceAccount.name` | The name of the service account to use. | `""` | | `serviceAccount.name` | The name of the service account to use. | `""` |
| `configMap.annotations` | Annotations to add to the SPIRE Agent ConfigMap | `{}` | | `configMap.annotations` | Annotations to add to the SPIRE Agent ConfigMap | `{}` |
| `podAnnotations` | Annotations to add to pods | `{}` | | `podAnnotations` | Annotations to add to pods | `{}` |
| `podLabels` | Labels to add to pods | `{}` |
| `podSecurityContext` | Pod security context | `{}` | | `podSecurityContext` | Pod security context | `{}` |
| `securityContext` | Security context | `{}` | | `securityContext` | Security context | `{}` |
| `resources` | Resource requests and limits | `{}` | | `resources` | Resource requests and limits | `{}` |
charts/spire/charts/spire-agent/templates/daemonset.yaml
+3
View File
@@ -40,6 +40,9 @@ spec:
{{- end }} {{- end }}
labels: labels:
{{- include "spire-agent.selectorLabels" . | nindent 8 }} {{- include "spire-agent.selectorLabels" . | nindent 8 }}
{{- with .Values.podLabels }}
{{- toYaml . | nindent 8 }}
{{- end }}
spec: spec:
{{- with .Values.imagePullSecrets }} {{- with .Values.imagePullSecrets }}
imagePullSecrets: imagePullSecrets:
charts/spire/charts/spire-agent/values.yaml
+3
View File
@@ -45,6 +45,9 @@ configMap:
## @param podAnnotations [object] Annotations to add to pods ## @param podAnnotations [object] Annotations to add to pods
podAnnotations: {} podAnnotations: {}
## @param podLabels [object] Labels to add to pods
podLabels: {}
## @param podSecurityContext [object] Pod security context ## @param podSecurityContext [object] Pod security context
podSecurityContext: {} podSecurityContext: {}
# fsGroup: 2000 # fsGroup: 2000