panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove region from awsiid node attestor (#630)

Browse Source 
* Remove spire-server.nodeAttestor.awsIID.region

Signed-off-by: Eric Cavalcanti <[email protected]>

* Remove spire-server.nodeAttestor.awsIID.region

Signed-off-by: Eric Cavalcanti <[email protected]>

* Remove spire-server.nodeAttestor.awsIID.region

Signed-off-by: Eric Cavalcanti <[email protected]>

* Update README.md

Signed-off-by: Eric Cavalcanti <[email protected]>

---------

Signed-off-by: Eric Cavalcanti <[email protected]>
This commit is contained in:
Eric Cavalcanti
2025-07-15 16:23:18 -07:00
committed by GitHub
parent 3218db7bbb
commit d2913ffca0
4 changed files with 0 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-server/README.md
-1
View File
@@ -398,7 +398,6 @@ In order to run Tornjak with simple HTTP Connection only, make sure you don't cr
| `nodeAttestor.tpmDirect.cas` | A dictionary of TPM CA PEM or DER files that are allowed to connect. | `{}` | | `nodeAttestor.tpmDirect.cas` | A dictionary of TPM CA PEM or DER files that are allowed to connect. | `{}` |
| `nodeAttestor.tpmDirect.hashes` | A list of TPM hashes that are allowed to connect. | `[]` | | `nodeAttestor.tpmDirect.hashes` | A list of TPM hashes that are allowed to connect. | `[]` |
| `nodeAttestor.awsIID.enabled` | Enable the aws_iid node attestor | `false` | | `nodeAttestor.awsIID.enabled` | Enable the aws_iid node attestor | `false` |
| `nodeAttestor.awsIID.region` | AWS region to use for the attestation | `""` |
| `nodeAttestor.awsIID.assumeRole` | AWS IAM Role NAME to use for the attestation | `""` | | `nodeAttestor.awsIID.assumeRole` | AWS IAM Role NAME to use for the attestation | `""` |
| `bundlePublisher.k8sConfigMap.enabled` | Enable local k8s bundle uploader | `true` | | `bundlePublisher.k8sConfigMap.enabled` | Enable local k8s bundle uploader | `true` |
| `bundlePublisher.k8sConfigMap.namespace` | Namespace to push the bundle into, if blank will default to SPIRE Server namespace | `""` | | `bundlePublisher.k8sConfigMap.namespace` | Namespace to push the bundle into, if blank will default to SPIRE Server namespace | `""` |
charts/spire/charts/spire-server/templates/configmap.yaml
-1
View File
@@ -226,7 +226,6 @@ plugins:
{{- if eq (.enabled | toString) "true" }} {{- if eq (.enabled | toString) "true" }}
aws_iid: aws_iid:
plugin_data: plugin_data:
region: {{ .region | quote }}
{{- if ne .assumeRole "" }} {{- if ne .assumeRole "" }}
assume_role: {{ .assumeRole | quote }} assume_role: {{ .assumeRole | quote }}
{{- end }} {{- end }}
charts/spire/charts/spire-server/values.yaml
-2
View File
@@ -980,8 +980,6 @@ nodeAttestor:
awsIID: awsIID:
## @param nodeAttestor.awsIID.enabled Enable the aws_iid node attestor ## @param nodeAttestor.awsIID.enabled Enable the aws_iid node attestor
enabled: false enabled: false
## @param nodeAttestor.awsIID.region AWS region to use for the attestation
region: ""
## @param nodeAttestor.awsIID.assumeRole AWS IAM Role NAME to use for the attestation ## @param nodeAttestor.awsIID.assumeRole AWS IAM Role NAME to use for the attestation
assumeRole: "" assumeRole: ""
examples/aws-iid/README.md
-1
View File
@@ -9,7 +9,6 @@ The AWS IID node attestor can be configured with the following properties:
| Parameter | Description | Default | | Parameter | Description | Default |
|-------------------------------|-----------------------------------------------------|---------| |-------------------------------|-----------------------------------------------------|---------|
| **nodeAttestor.awsIID.enabled** | Enable the AWS IID node attestor | false | | **nodeAttestor.awsIID.enabled** | Enable the AWS IID node attestor | false |
| **nodeAttestor.awsIID.region** | AWS region to use for the attestation | "" |
| **nodeAttestor.awsIID.assumeRole** | AWS IAM Role NAME to use for the attestation | "" | | **nodeAttestor.awsIID.assumeRole** | AWS IAM Role NAME to use for the attestation | "" |
### Sample Configuration ### Sample Configuration