kfox1111
3cfefb72ba
* Gateway api support Signed-off-by: Kevin Fox <[email protected]> * Update readme Signed-off-by: Kevin Fox <[email protected]> * Fix gateway name. a gateway doesnt need to be named gateway Signed-off-by: Kevin Fox <[email protected]> * Fix naming issue Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>
16 lines
563 B
YAML
16 lines
563 B
YAML
# Expose the OIDC discovery provider via Gateway API with HTTPS termination at
|
|
# the edge. The provider's SPIRE TLS is disabled so it serves plaintext behind
|
|
# the Gateway; the Gateway terminates TLS with tls-cert (set gatewayAPI.tlsSecret)
|
|
# => HTTPRoute + a terminating SNI listener. The helm test curls the discovery
|
|
# document over HTTPS and validates the gateway cert against the tls-cert CA.
|
|
spiffe-oidc-discovery-provider:
|
|
tls:
|
|
spire:
|
|
enabled: false
|
|
tests:
|
|
tls:
|
|
enabled: true
|
|
gatewayAPI:
|
|
enabled: true
|
|
tlsSecret: tls-cert
|