Marco Franssen
0a0ddb4a9b
The k8s-workload-registrar needs access to the spire-server socket and therefore has to run in the same pod to be able to mount the socket into the container. Signed-off-by: Marco Franssen <[email protected]> Signed-off-by: Marco Franssen <[email protected]>
17 lines
601 B
YAML
17 lines
601 B
YAML
{{- if eq (.Values.k8sWorkloadRegistrar.enabled | toString) "true" }}
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: {{ include "spire-server.fullname" . }}-k8s-workload-registrar
|
|
namespace: {{ .Release.Namespace }}
|
|
data:
|
|
workload-registrar.conf: |
|
|
log_level = "{{ .Values.k8sWorkloadRegistrar.logLevel }}"
|
|
mode = "reconcile"
|
|
trust_domain = {{ .Values.trustDomain | quote }}
|
|
cluster = {{ .Values.clusterName | quote }}
|
|
server_address = "unix://{{ .Values.socketPath }}"
|
|
leader_election = true
|
|
metrics_addr = "0.0.0.0:18080"
|
|
{{- end }}
|