Files
helm-charts-hardened/examples/production
kfox1111 0dec80e1d5 Switch to persistence (#200)
This patch switches the value to persistence to follow the helm
convention.

fixes: https://github.com/spiffe/helm-charts/issues/199

Signed-off-by: Kevin Fox <[email protected]>
2023-04-12 08:56:10 -07:00
..
2023-04-12 08:56:10 -07:00

Recommended production setup

Too install Spire with the least privileges possible we deploy spire accross 2 namespaces.

kubectl create namespace "spire-system"
kubectl label namespace "spire-system" pod-security.kubernetes.io/enforce=privileged
kubectl create namespace "spire-server"
kubectl label namespace "spire-server" pod-security.kubernetes.io/enforce=restricted

helm upgrade --install --namespace spire-server spire charts/spire -f values.yaml

See values.yaml for more details on the chart configurations to achieve this setup.