SPIRE Agent support for Broker API (#876)

* SPIRE Agent support for Broker API Signed-off-by: Kevin Fox <[email protected]> * SPIRE Agent support for Broker API Signed-off-by: Kevin Fox <[email protected]> * SPIRE Agent support for Broker API Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-agent/templates/configmap.yaml Co-authored-by: Matheus Pimenta <[email protected]> Signed-off-by: Kevin Fox <[email protected]> * Remove the istio entry Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Matheus Pimenta <[email protected]>
2026-07-14 13:46:19 -07:00
parent cc164bad6b
commit bf6b36c807
4 changed files with 219 additions and 152 deletions
@@ -81,9 +81,26 @@ agent:
    disable_spiffe_cert_validation: {{ eq .Values.sds.disableSPIFFECertValidation true }}
  {{- end }}

-  {{- with .Values.experimental }}
-  {{- if eq (.enabled | toString) "true" }}
+  {{- if or (eq (.enabled | toString) "true") .Values.sockets.broker.enabled .Values.brokerAPI.tcp.enabled }}
  experimental:
+    broker:
+      {{- if .Values.sockets.broker.enabled }}
+      socket_path: "/tmp/spire-agent/broker/broker.sock" }}
+      {{- end }}
+      {{- if .Values.brokerAPI.tcp.enabled }}
+      bind_address: {{ .Values.brokerAPI.tcp.bindAddress | quote }}
+      {{- end }}
+      brokers:
+        {{- range .Values.brokerAPI.brokers }}
+        - id: {{ tpl .idTemplate (dict "trustDomain" $trustDomain) }}
+          {{- with .allowedReferenceTypes }}
+          allowed_reference_types:
+            - type_url: {{ .typeURL | quote }}
+              allow_over_tcp: {{ .allowOverTCP }}
+        {{- end }}
+      {{- end }}
+    {{- with .Values.experimental }}
+    {{- if eq (.enabled | toString) "true" }}
    sync_interval: {{ .syncInterval | quote }}
    require_pq_kem: {{ .requirePQKEM }}
    {{- if gt (len .featureFlags) 0 }}
@@ -92,7 +109,8 @@ agent:
        - {{ . | quote }}
      {{- end }}
    {{- end }}
-  {{- end }}
+    {{- end }}
+    {{- end }}
  {{- end }}

 {{- $nodeAttestorUsed := add (len .Values.customPlugins.nodeAttestor) (len .Values.unsupportedBuiltInPlugins.nodeAttestor) }}