spire-server:
  tests:
    tls:
      enabled: true
  federation:
    enabled: true
    ingress:
      enabled: true
      annotations:
        nginx.ingress.kubernetes.io/ssl-redirect: "true"
        nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
        nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"

        # Optional settings you may put in your own values.
        # kubernetes.io/ingress.class: nginx
        # kubernetes.io/tls-acme: "true"

      # className: nginx
 
      hosts:
        - host: spire-server-federation.example.org
          paths:
            - path: /
              pathType: Prefix
      tls:
        - hosts:
            - spire-server-federation.example.org
          secretName: spire-server-federation-tls