Support federation bundle endpoint profile http_web certificates (#469)

* Support federation bundle endpoint profile http_web certificates Signed-off-by: Kevin Fox <[email protected]> * Fix var Signed-off-by: Kevin Fox <[email protected]> * Fix key Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>
2024-10-10 12:03:54 -07:00
parent cecf51c27c
commit fcbd64e011
8 changed files with 49 additions and 37 deletions
@@ -129,7 +129,7 @@ install_and_test() {
    --values /tmp/dummydns \
    --set spiffe-oidc-discovery-provider.tests.tls.customCA=tls-cert,spire-server.tests.tls.customCA=tls-cert \
    --set spire-agent.server.address=spire-server.production.other,spire-agent.server.port=443 \
-    --set spire-server.federation.ingress.tlsSecret=tls-cert,spiffe-oidc-discovery-provider.ingress.tlsSecret=tls-cert \
+    --set spire-server.federation.tls.externalSecret.secretName=tls-cert,spiffe-oidc-discovery-provider.ingress.tlsSecret=tls-cert \
    --wait

    helm test --namespace "${ns}" spire
@@ -4,10 +4,9 @@ spire-server:
      enabled: true
  federation:
    enabled: true
-    ingress:
-      enabled: true
-      controllerType: ingress-nginx
-
-      # className: nginx
- 
-      tlsSecret: spire-server-federation-tls
+    tls:
+      spire:
+        enabled: false
+      externalSecret:
+        enabled: true
+        secretName: spire-server-federation-tls