spiffe-oidc-discovery-provider: enabled: true insecureScheme: enabled: true config: domains: - oidc-discovery.example.org acme: tosAccepted: false