panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add broker suport to the spire-ha-agent (#884)

Browse Source 
* Add broker suport to the spire-ha-agent

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
This commit is contained in:
kfox1111
2026-07-30 13:15:55 -07:00
committed by GitHub
co-authored by Faisal Memon
parent 3cfefb72ba
commit f4c7df239e
10 changed files with 322 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire-ha-agent/values.yaml
+24 -3
View File
@@ -17,22 +17,43 @@ image:
pullPolicy: IfNotPresent
tag: ""
## @param mode If the spire-ha-agent will run in delegated or broker mode
mode: delegated
## @param singleSocket If in singleSocket mode, only one driver is used
singleSocket: false
## @param sockets.single.admin.hostPath Where the sockets are on disk when in single socket mode
## @param sockets.a.admin.hostPath Where the sockets are on disk
## @param sockets.b.admin.hostPath Where the sockets are on disk
## @param sockets.single.admin.hostPath Where the admin socket is on disk when in single socket mode
## @param sockets.a.admin.hostPath Where the a admin socket is on disk
## @param sockets.b.admin.hostPath Where the b admin sockets is on disk
## @param sockets.single.broker.hostPath Where the broker socket is on disk when in single socket mode
## @param sockets.a.broker.hostPath Where the a broker socket is on disk
## @param sockets.b.broker.hostPath Where the b broker socket is on disk
## @param sockets.single.workload.hostPath Where the broker socket is on disk when in single socket mode
## @param sockets.a.workload.hostPath Where the a workload socket is on disk
## @param sockets.b.workload.hostPath Where the b workload socket is on disk
sockets:
single:
admin:
hostPath: /var/run/spire/agent/sockets/main/csi.spiffe.io/admin
broker:
hostPath: /var/run/spire/agent/sockets/main/csi.spiffe.io/broker
workload:
hostPath: /var/run/spire/agent-sockets
a:
admin:
hostPath: /var/run/spire/agent/sockets/a/csi.spiffe.io/admin
broker:
hostPath: /var/run/spire/agent/sockets/a/csi.spiffe.io/broker
workload:
hostPath: /var/run/spire/agent/sockets/a/csi.spiffe.io/public
b:
admin:
hostPath: /var/run/spire/agent/sockets/b/csi.spiffe.io/admin
broker:
hostPath: /var/run/spire/agent/sockets/b/csi.spiffe.io/broker
workload:
hostPath: /var/run/spire/agent/sockets/b/csi.spiffe.io/public
## @param vsock Use a vsockets to expose the service rather then a unix socket
vsock: false