05d0f4778d
This PR introduces a simplified version of [Tornjak](https://github.com/spiffe/tornjak) to support UI and SPIRE control plane. It extends the `/charts/spire-server` sub-chart by injecting *tornjak* container to the *spire-server* pod. Tornjak image consists of Tornjak API (Tornjak Backend), Tornjak UI (Frontend), and database for storing Tornjak specific information. Tornjak Backend communicates with SPIRE API via SPIRE Server socket. Since Tornjak UI (Frontend) is a React code that renders in a browser, it needs to communicate with Tornjak APIs, and that requires communication ports to be open, either via Ingress (in Cloud deployment) or via port forwarding in local deployments (e.g. kind, minikube etc). Typically port 10000 is used for HTTP connection to Backend, and port 3000 for the HTTP connection to Frontend. End user management, TLS, and mTLS connections will be addressed by future PRs. This PR resolves issue #31 --------- Signed-off-by: Mariusz Sabath <[email protected]> Signed-off-by: Marco Franssen <[email protected]> Co-authored-by: Kevin Fox <[email protected]> Co-authored-by: Marco Franssen <[email protected]> Co-authored-by: Pete Cable <[email protected]> Co-authored-by: Dennis Gove <[email protected]>
23 lines
599 B
YAML
23 lines
599 B
YAML
{{- if eq (.Values.tornjak.enabled | toString) "true" }}
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: {{ include "spire-tornjak.config" . }}
|
|
namespace: {{ include "spire-server.namespace" . }}
|
|
data:
|
|
server.conf: |
|
|
server {
|
|
metadata = "insert metadata"
|
|
}
|
|
|
|
plugins {
|
|
{{- if .Values.tornjak.config.backend.dataStore }}
|
|
DataStore "sql" {
|
|
plugin_data {
|
|
drivername = "{{ .Values.tornjak.config.backend.dataStore.driver }}"
|
|
filename = "{{ .Values.tornjak.config.backend.dataStore.file }}"
|
|
}
|
|
}
|
|
{{- end }}
|
|
}
|
|
{{- end }} |