Add join_token server nodeattestor support (#187)

Signed-off-by: Kevin Fox <[email protected]>
2024-01-16 14:52:39 -08:00
parent 81e9523e03
commit c7ab1319cc
3 changed files with 13 additions and 1 deletions
@@ -74,9 +74,10 @@ plugins:
      plugin_data:
        {{ include "spire-server.datastore-config" . | nindent 10 }}

+  {{- if or .Values.nodeAttestor.k8sPsat.enabled .Values.nodeAttestor.joinToken.enabled }}
+  NodeAttestor:
  {{- with .Values.nodeAttestor.k8sPsat }}
  {{- if eq (.enabled | toString) "true" }}
-  NodeAttestor:
    k8s_psat:
      plugin_data:
        clusters:
@@ -84,6 +85,13 @@ plugins:
            service_account_allow_list: {{ include "spire-server.serviceAccountAllowedList" $root | trim }}
  {{- end }}
  {{- end }}
+  {{- with .Values.nodeAttestor.joinToken }}
+  {{- if eq (.enabled | toString) "true" }}
+    join_token:
+      plugin_data: {}
+  {{- end }}
+  {{- end }}
+  {{- end }}

  {{- with .Values.keyManager.disk }}
  {{- if eq (.enabled | toString) "true" }}