This patch switches the value to persistence to follow the helm convention. fixes: https://github.com/spiffe/helm-charts/issues/199 Signed-off-by: Kevin Fox <[email protected]>
Recommended production setup
Too install Spire with the least privileges possible we deploy spire accross 2 namespaces.
kubectl create namespace "spire-system"
kubectl label namespace "spire-system" pod-security.kubernetes.io/enforce=privileged
kubectl create namespace "spire-server"
kubectl label namespace "spire-server" pod-security.kubernetes.io/enforce=restricted
helm upgrade --install --namespace spire-server spire charts/spire -f values.yaml
See values.yaml for more details on the chart configurations to achieve this setup.