Run oidc discovery provider as separate pod using workload api

Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:01 +01:00
parent 31bce3b09e
commit f2d7aa1f62
5 changed files with 112 additions and 40 deletions
@@ -90,6 +90,26 @@ app.kubernetes.io/name: {{ include "spire.name" . }}-agent
 app.kubernetes.io/instance: {{ .Release.Name }}
 {{- end }}

+{{/*
+Common oidc labels
+*/}}
+{{- define "spire.oidc.labels" -}}
+helm.sh/chart: {{ include "spire.chart" . }}
+{{ include "spire.oidc.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector oidc labels
+*/}}
+{{- define "spire.oidc.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "spire.name" . }}-oidc
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
 {{/*
 Create the name of the service account to use
 */}}