Run oidc discovery provider as separate pod using workload api

Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:01 +01:00
parent 31bce3b09e
commit f2d7aa1f62
5 changed files with 112 additions and 40 deletions
@@ -17,7 +17,8 @@ data:
        tos_accepted = {{ .Values.oidc.acme.tosAccepted }}
        email = "{{ .Values.oidc.acme.emailAddress }}"
    }
-    server_api {
-        address = "unix://{{ include "spire.sockets" . }}/registration.sock"
+    workload_api {
+        socket_path = "{{ include "spire.sockets" . }}/agent.sock"
+        trust_domain = "{{ .Values.spire.trustDomain }}"
    }
 {{ end }}