panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Cleanup values.yaml

Browse Source 
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
This commit is contained in:
Marco Franssen
2023-02-18 13:04:10 +01:00
committed by Marco Franssen
parent b3d5b7d80a
commit cdbee1bc1b
5 changed files with 45 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/README.md
+14 -11
View File
@@ -55,24 +55,27 @@ Kubernetes: `>=1.21.0-0`
| Key | Type | Default | Description |
|-----|------|---------|-------------|
| fullnameOverride | string | `""` | |
| imagePullSecrets | list | `[]` | |
| k8s-workload-registrar.clusterName | string | `"example-cluster"` | |
| k8s-workload-registrar.enabled | bool | `true` | |
| k8s-workload-registrar.fullNameOverride | string | `"k8s-workload-registrar"` | |
| k8s-workload-registrar.server.socketPath | string | `"/run/spire/server-sockets/spire-server.sock"` | |
| k8s-workload-registrar.trustDomain | string | `"example.org"` | |
| nameOverride | string | `""` | |
| serviceAccount.annotations | object | `{}` | |
| serviceAccount.create | bool | `true` | |
| serviceAccount.name | string | `""` | |
| spiffe-csi-driver.agentSocketPath | string | `"/run/spire/agent-sockets/spire-agent.sock"` | |
| spiffe-csi-driver.fullNameOverride | string | `"spiffe-csi-driver"` | |
| spiffe-oidc-discovery-provider.enabled | bool | `false` | |
| spiffe-oidc-discovery-provider.fullNameOverride | string | `"spiffe-oidc-discovery-provider"` | |
| spiffe-oidc-discovery-provider.trustDomain | string | `"example.org"` | |
| spire-agent.bundleConfigMap | string | `"spire-bundle"` | |
| spire-agent.clusterName | string | `"example-cluster"` | |
| spire-agent.nameOverride | string | `"agent"` | |
| spire-agent.socketPath | string | `"/run/spire/agent-sockets/spire-agent.sock"` | |
| spire-agent.trustDomain | string | `"example.org"` | |
| spire-server.bundleConfigMap | string | `"spire-bundle"` | |
| spire-server.clusterName | string | `"example-cluster"` | |
| spire-server.nameOverride | string | `"server"` | |
| spire.clusterName | string | `"example-cluster"` | |
| spire.trustDomain | string | `"example.org"` | |
| waitForIt.image.pullPolicy | string | `"IfNotPresent"` | |
| waitForIt.image.registry | string | `"cgr.dev"` | |
| waitForIt.image.repository | string | `"chainguard/wait-for-it"` | |
| waitForIt.image.version | string | `"latest-20221223"` | |
| waitForIt.resources | object | `{}` | |
| spire-server.socketPath | string | `"/run/spire/server-sockets/spire-server.sock"` | |
| spire-server.trustDomain | string | `"example.org"` | |
----------------------------------------------
Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0)
charts/spire/charts/k8s-workload-registrar/values.yaml
+1 -1
View File
@@ -76,5 +76,5 @@ waitForIt:
registry: cgr.dev
repository: chainguard/wait-for-it
pullPolicy: IfNotPresent
version: latest-20221215
version: latest-20221223
resources: {}
charts/spire/charts/spire-agent/README.md
+3 -2
View File
@@ -1,7 +1,5 @@
# spire-agent
<!-- This README.md is generated. -->
![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.5.3](https://img.shields.io/badge/AppVersion-1.5.3-informational?style=flat-square)
A Helm chart to install the SPIRE agent.
@@ -37,3 +35,6 @@ A Helm chart to install the SPIRE agent.
| waitForIt.image.repository | string | `"chainguard/wait-for-it"` | |
| waitForIt.image.version | string | `"latest-20221215"` | |
| waitForIt.resources | object | `{}` | |
----------------------------------------------
Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0)
charts/spire/charts/spire-server/README.md
+3 -2
View File
@@ -1,7 +1,5 @@
# spire-server
<!-- This README.md is generated. -->
![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.5.3](https://img.shields.io/badge/AppVersion-1.5.3-informational?style=flat-square)
A Helm chart to install the SPIRE server.
@@ -53,3 +51,6 @@ A Helm chart to install the SPIRE server.
| upstreamAuthority.disk.secret.create | bool | `true` | If disabled requires you to create a secret with the given keys (certificate, key and optional bundle) yourself. |
| upstreamAuthority.disk.secret.data | object | `{"bundle":"","certificate":"","key":""}` | If secret creation is enabled, will create a secret with following certificate info |
| upstreamAuthority.disk.secret.name | string | `"spiffe-upstream-ca"` | If secret creation is disabled, the secret with this name will be used. |
----------------------------------------------
Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0)
charts/spire/values.yaml
+24 -29
View File
@@ -1,45 +1,40 @@
nameOverride: ""
fullnameOverride: ""
waitForIt:
image:
registry: cgr.dev
repository: chainguard/wait-for-it
pullPolicy: IfNotPresent
version: latest-20221223
resources: {}
k8s-workload-registrar:
enabled: true
# subcharts
spire-server:
nameOverride: server
bundleConfigMap: &bundleConfigMap spire-bundle
clusterName: &clusterName "example-cluster"
trustDomain: &trustDomain "example.org"
socketPath: &serverSocketPath /run/spire/server-sockets/spire-server.sock
spire-agent:
nameOverride: agent
bundleConfigMap: *bundleConfigMap
clusterName: *clusterName
trustDomain: *trustDomain
socketPath: &agentSocketPath /run/spire/agent-sockets/spire-agent.sock
spiffe-csi-driver:
fullNameOverride: spiffe-csi-driver
agentSocketPath: *agentSocketPath
spiffe-oidc-discovery-provider:
fullNameOverride: spiffe-oidc-discovery-provider
enabled: false
trustDomain: *trustDomain
imagePullSecrets: []
# - name: my-docker-registry
# username: my-docker-user
# password: my-docker-password
# registryURL: my-private.docker-registry.com
k8s-workload-registrar:
fullNameOverride: k8s-workload-registrar
enabled: true
serviceAccount:
# Specifies whether a service account should be created
create: true
# Annotations to add to the service account
annotations: {}
# The name of the service account to use.
# If not set and create is true, a name is generated using the fullname template
name: ""
clusterName: *clusterName
trustDomain: *trustDomain
# spireSettings
spire:
clusterName: "example-cluster"
trustDomain: "example.org"
server:
socketPath: *serverSocketPath