diff --git a/charts/spire/README.md b/charts/spire/README.md index 7e98f7b..cd76f03 100644 --- a/charts/spire/README.md +++ b/charts/spire/README.md @@ -55,24 +55,27 @@ Kubernetes: `>=1.21.0-0` | Key | Type | Default | Description | |-----|------|---------|-------------| | fullnameOverride | string | `""` | | -| imagePullSecrets | list | `[]` | | +| k8s-workload-registrar.clusterName | string | `"example-cluster"` | | | k8s-workload-registrar.enabled | bool | `true` | | +| k8s-workload-registrar.fullNameOverride | string | `"k8s-workload-registrar"` | | +| k8s-workload-registrar.server.socketPath | string | `"/run/spire/server-sockets/spire-server.sock"` | | +| k8s-workload-registrar.trustDomain | string | `"example.org"` | | | nameOverride | string | `""` | | -| serviceAccount.annotations | object | `{}` | | -| serviceAccount.create | bool | `true` | | -| serviceAccount.name | string | `""` | | +| spiffe-csi-driver.agentSocketPath | string | `"/run/spire/agent-sockets/spire-agent.sock"` | | +| spiffe-csi-driver.fullNameOverride | string | `"spiffe-csi-driver"` | | | spiffe-oidc-discovery-provider.enabled | bool | `false` | | +| spiffe-oidc-discovery-provider.fullNameOverride | string | `"spiffe-oidc-discovery-provider"` | | +| spiffe-oidc-discovery-provider.trustDomain | string | `"example.org"` | | | spire-agent.bundleConfigMap | string | `"spire-bundle"` | | +| spire-agent.clusterName | string | `"example-cluster"` | | | spire-agent.nameOverride | string | `"agent"` | | +| spire-agent.socketPath | string | `"/run/spire/agent-sockets/spire-agent.sock"` | | +| spire-agent.trustDomain | string | `"example.org"` | | | spire-server.bundleConfigMap | string | `"spire-bundle"` | | +| spire-server.clusterName | string | `"example-cluster"` | | | spire-server.nameOverride | string | `"server"` | | -| spire.clusterName | string | `"example-cluster"` | | -| spire.trustDomain | string | `"example.org"` | | -| waitForIt.image.pullPolicy | string | `"IfNotPresent"` | | -| waitForIt.image.registry | string | `"cgr.dev"` | | -| waitForIt.image.repository | string | `"chainguard/wait-for-it"` | | -| waitForIt.image.version | string | `"latest-20221223"` | | -| waitForIt.resources | object | `{}` | | +| spire-server.socketPath | string | `"/run/spire/server-sockets/spire-server.sock"` | | +| spire-server.trustDomain | string | `"example.org"` | | ---------------------------------------------- Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0) diff --git a/charts/spire/charts/k8s-workload-registrar/values.yaml b/charts/spire/charts/k8s-workload-registrar/values.yaml index 7acb677..d6d0999 100644 --- a/charts/spire/charts/k8s-workload-registrar/values.yaml +++ b/charts/spire/charts/k8s-workload-registrar/values.yaml @@ -76,5 +76,5 @@ waitForIt: registry: cgr.dev repository: chainguard/wait-for-it pullPolicy: IfNotPresent - version: latest-20221215 + version: latest-20221223 resources: {} diff --git a/charts/spire/charts/spire-agent/README.md b/charts/spire/charts/spire-agent/README.md index 0f41f31..8e86746 100644 --- a/charts/spire/charts/spire-agent/README.md +++ b/charts/spire/charts/spire-agent/README.md @@ -1,7 +1,5 @@ # spire-agent - - ![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.5.3](https://img.shields.io/badge/AppVersion-1.5.3-informational?style=flat-square) A Helm chart to install the SPIRE agent. @@ -37,3 +35,6 @@ A Helm chart to install the SPIRE agent. | waitForIt.image.repository | string | `"chainguard/wait-for-it"` | | | waitForIt.image.version | string | `"latest-20221215"` | | | waitForIt.resources | object | `{}` | | + +---------------------------------------------- +Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0) diff --git a/charts/spire/charts/spire-server/README.md b/charts/spire/charts/spire-server/README.md index 860f0c4..421c4b5 100644 --- a/charts/spire/charts/spire-server/README.md +++ b/charts/spire/charts/spire-server/README.md @@ -1,7 +1,5 @@ # spire-server - - ![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.5.3](https://img.shields.io/badge/AppVersion-1.5.3-informational?style=flat-square) A Helm chart to install the SPIRE server. @@ -53,3 +51,6 @@ A Helm chart to install the SPIRE server. | upstreamAuthority.disk.secret.create | bool | `true` | If disabled requires you to create a secret with the given keys (certificate, key and optional bundle) yourself. | | upstreamAuthority.disk.secret.data | object | `{"bundle":"","certificate":"","key":""}` | If secret creation is enabled, will create a secret with following certificate info | | upstreamAuthority.disk.secret.name | string | `"spiffe-upstream-ca"` | If secret creation is disabled, the secret with this name will be used. | + +---------------------------------------------- +Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0) diff --git a/charts/spire/values.yaml b/charts/spire/values.yaml index a4c9646..05011ef 100644 --- a/charts/spire/values.yaml +++ b/charts/spire/values.yaml @@ -1,45 +1,40 @@ nameOverride: "" fullnameOverride: "" -waitForIt: - image: - registry: cgr.dev - repository: chainguard/wait-for-it - pullPolicy: IfNotPresent - version: latest-20221223 - resources: {} - -k8s-workload-registrar: - enabled: true - +# subcharts spire-server: nameOverride: server bundleConfigMap: &bundleConfigMap spire-bundle + clusterName: &clusterName "example-cluster" + trustDomain: &trustDomain "example.org" + + socketPath: &serverSocketPath /run/spire/server-sockets/spire-server.sock + spire-agent: nameOverride: agent bundleConfigMap: *bundleConfigMap + clusterName: *clusterName + trustDomain: *trustDomain + + socketPath: &agentSocketPath /run/spire/agent-sockets/spire-agent.sock + +spiffe-csi-driver: + fullNameOverride: spiffe-csi-driver + agentSocketPath: *agentSocketPath + spiffe-oidc-discovery-provider: + fullNameOverride: spiffe-oidc-discovery-provider enabled: false + trustDomain: *trustDomain -imagePullSecrets: [] - # - name: my-docker-registry - # username: my-docker-user - # password: my-docker-password - # registryURL: my-private.docker-registry.com +k8s-workload-registrar: + fullNameOverride: k8s-workload-registrar + enabled: true -serviceAccount: - # Specifies whether a service account should be created - create: true - # Annotations to add to the service account - annotations: {} - # The name of the service account to use. - # If not set and create is true, a name is generated using the fullname template - name: "" + clusterName: *clusterName + trustDomain: *trustDomain -# spireSettings - -spire: - clusterName: "example-cluster" - trustDomain: "example.org" + server: + socketPath: *serverSocketPath