apiVersion: spire.spiffe.io/v1alpha1
kind: ClusterStaticEntry
metadata:
  name: node4-image-pull
spec:
  parentID: spiffe://${SPIFFE_TRUST_DOMAIN}/agent/node1
  spiffeID: spiffe://${SPIFFE_TRUST_DOMAIN}/kubelet
  hint: image-pull
  selectors:
  - systemd:id:spiffe-socat-unix@k8s-kubelet-4.service