global:
  openshift: false
  spire:
    recommendations:
      enabled: true
    namespaces:
      create: true
    ingressControllerType: ingress-nginx
    clusterName: a
    trustDomain: a-org.local
    bundleConfigMap: spire-bundle-a

spire-server:
  ca_subject:
    country: US
    organization: A
    common_name: a.local
  federation:
    enabled: true
    ingress:
      enabled: true
  controllerManager:
    identities:
      clusterSPIFFEIDs:
        default:
          federatesWith:
          - b-org.local
      clusterFederatedTrustDomains:
        b:
          bundleEndpointProfile:
            endpointSPIFFEID: spiffe://b-org.local/spire/server
            type: https_spiffe
          bundleEndpointURL: https://spire-server-federation.b-org.local
          trustDomain: b-org.local

spiffe-oidc-discovery-provider:
  enabled: true
  tls:
    spire:
      enabled: false
  csiDriverName: a.csi.spiffe.io
  ingress:
    enabled: true

spire-agent:
  socketPath: /run/spire/agent-sockets-a/spire-agent.sock

spiffe-csi-driver:
  pluginName: a.csi.spiffe.io
  agentSocketPath: /run/spire/agent-sockets-a/spire-agent.sock