Remove unused helpers from root
Signed-off-by: Marco Franssen <[email protected]> Signed-off-by: Marco Franssen <[email protected]>
This commit is contained in:
@@ -57,14 +57,11 @@ Kubernetes: `>=1.21.0-0`
|
|||||||
| fullnameOverride | string | `""` | |
|
| fullnameOverride | string | `""` | |
|
||||||
| k8s-workload-registrar.clusterName | string | `"example-cluster"` | |
|
| k8s-workload-registrar.clusterName | string | `"example-cluster"` | |
|
||||||
| k8s-workload-registrar.enabled | bool | `true` | |
|
| k8s-workload-registrar.enabled | bool | `true` | |
|
||||||
| k8s-workload-registrar.fullNameOverride | string | `"k8s-workload-registrar"` | |
|
|
||||||
| k8s-workload-registrar.server.socketPath | string | `"/run/spire/server-sockets/spire-server.sock"` | |
|
| k8s-workload-registrar.server.socketPath | string | `"/run/spire/server-sockets/spire-server.sock"` | |
|
||||||
| k8s-workload-registrar.trustDomain | string | `"example.org"` | |
|
| k8s-workload-registrar.trustDomain | string | `"example.org"` | |
|
||||||
| nameOverride | string | `""` | |
|
| nameOverride | string | `""` | |
|
||||||
| spiffe-csi-driver.agentSocketPath | string | `"/run/spire/agent-sockets/spire-agent.sock"` | |
|
| spiffe-csi-driver.agentSocketPath | string | `"/run/spire/agent-sockets/spire-agent.sock"` | |
|
||||||
| spiffe-csi-driver.fullNameOverride | string | `"spiffe-csi-driver"` | |
|
|
||||||
| spiffe-oidc-discovery-provider.enabled | bool | `false` | |
|
| spiffe-oidc-discovery-provider.enabled | bool | `false` | |
|
||||||
| spiffe-oidc-discovery-provider.fullNameOverride | string | `"spiffe-oidc-discovery-provider"` | |
|
|
||||||
| spiffe-oidc-discovery-provider.trustDomain | string | `"example.org"` | |
|
| spiffe-oidc-discovery-provider.trustDomain | string | `"example.org"` | |
|
||||||
| spire-agent.bundleConfigMap | string | `"spire-bundle"` | |
|
| spire-agent.bundleConfigMap | string | `"spire-bundle"` | |
|
||||||
| spire-agent.clusterName | string | `"example-cluster"` | |
|
| spire-agent.clusterName | string | `"example-cluster"` | |
|
||||||
|
|||||||
@@ -65,9 +65,9 @@ metadata:
|
|||||||
name: {{ include "k8s-workload-registrar.fullname" . }}
|
name: {{ include "k8s-workload-registrar.fullname" . }}
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: {{ include "spire.serviceAccountName" . }}
|
name: {{ include "k8s-workload-registrar.serviceAccountName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
roleRef:
|
roleRef:
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
name: {{ include "spire.fullname" . }}
|
name: {{ include "k8s-workload-registrar.fullname" . }}
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
|||||||
@@ -29,54 +29,3 @@ Create chart name and version as used by the chart label.
|
|||||||
{{- define "spire.chart" -}}
|
{{- define "spire.chart" -}}
|
||||||
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
|
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
{{/*
|
|
||||||
Common labels
|
|
||||||
*/}}
|
|
||||||
{{- define "spire.labels" -}}
|
|
||||||
helm.sh/chart: {{ include "spire.chart" . }}
|
|
||||||
{{ include "spire.selectorLabels" . }}
|
|
||||||
{{- if .Chart.AppVersion }}
|
|
||||||
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
|
||||||
{{- end }}
|
|
||||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
|
||||||
{{- end }}
|
|
||||||
|
|
||||||
{{/*
|
|
||||||
Selector labels
|
|
||||||
*/}}
|
|
||||||
{{- define "spire.selectorLabels" -}}
|
|
||||||
app.kubernetes.io/name: {{ include "spire.name" . }}
|
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
||||||
{{- end }}
|
|
||||||
|
|
||||||
{{/*
|
|
||||||
Common oidc labels
|
|
||||||
*/}}
|
|
||||||
{{- define "spire.oidc.labels" -}}
|
|
||||||
helm.sh/chart: {{ include "spire.chart" . }}
|
|
||||||
{{ include "spire.oidc.selectorLabels" . }}
|
|
||||||
{{- if .Chart.AppVersion }}
|
|
||||||
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
|
||||||
{{- end }}
|
|
||||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
|
||||||
{{- end }}
|
|
||||||
|
|
||||||
{{/*
|
|
||||||
Selector oidc labels
|
|
||||||
*/}}
|
|
||||||
{{- define "spire.oidc.selectorLabels" -}}
|
|
||||||
app.kubernetes.io/name: {{ include "spire.name" . }}-oidc
|
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
||||||
{{- end }}
|
|
||||||
|
|
||||||
{{/*
|
|
||||||
Create the name of the service account to use
|
|
||||||
*/}}
|
|
||||||
{{- define "spire.serviceAccountName" -}}
|
|
||||||
{{- if .Values.serviceAccount.create }}
|
|
||||||
{{- default (include "spire.fullname" .) .Values.serviceAccount.name }}
|
|
||||||
{{- else }}
|
|
||||||
{{- default "default" .Values.serviceAccount.name }}
|
|
||||||
{{- end }}
|
|
||||||
{{- end }}
|
|
||||||
|
|||||||
@@ -1,21 +0,0 @@
|
|||||||
{{- $fullname := include "spire.fullname" . }}
|
|
||||||
{{- $ns := .Release.Namespace }}
|
|
||||||
{{- $labels := include "spire.labels" . }}
|
|
||||||
{{- range .Values.imagePullSecrets }}
|
|
||||||
{{- $registryAuthDocument := dict -}}
|
|
||||||
{{- $authMessage := printf "%s:%s" .username .password | b64enc }}
|
|
||||||
{{- $_ := set $registryAuthDocument "auth" $authMessage }}
|
|
||||||
{{- $dockerAuthDocument := dict .registryURL $registryAuthDocument }}
|
|
||||||
{{- $dockerConfigJSONDocument := dict "auths" $dockerAuthDocument -}}
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Secret
|
|
||||||
metadata:
|
|
||||||
name: {{ (printf "%s-%s" $fullname .name) }}
|
|
||||||
namespace: {{ $ns }}
|
|
||||||
labels:
|
|
||||||
{{- $labels | nindent 4 }}
|
|
||||||
data:
|
|
||||||
.dockerconfigjson: {{ $dockerConfigJSONDocument | toJson | b64enc | quote }}
|
|
||||||
type: kubernetes.io/dockerconfigjson
|
|
||||||
{{- end }}
|
|
||||||
@@ -21,16 +21,13 @@ spire-agent:
|
|||||||
socketPath: &agentSocketPath /run/spire/agent-sockets/spire-agent.sock
|
socketPath: &agentSocketPath /run/spire/agent-sockets/spire-agent.sock
|
||||||
|
|
||||||
spiffe-csi-driver:
|
spiffe-csi-driver:
|
||||||
fullNameOverride: spiffe-csi-driver
|
|
||||||
agentSocketPath: *agentSocketPath
|
agentSocketPath: *agentSocketPath
|
||||||
|
|
||||||
spiffe-oidc-discovery-provider:
|
spiffe-oidc-discovery-provider:
|
||||||
fullNameOverride: spiffe-oidc-discovery-provider
|
|
||||||
enabled: false
|
enabled: false
|
||||||
trustDomain: *trustDomain
|
trustDomain: *trustDomain
|
||||||
|
|
||||||
k8s-workload-registrar:
|
k8s-workload-registrar:
|
||||||
fullNameOverride: k8s-workload-registrar
|
|
||||||
enabled: true
|
enabled: true
|
||||||
|
|
||||||
clusterName: *clusterName
|
clusterName: *clusterName
|
||||||
|
|||||||
Reference in New Issue
Block a user