46 lines
1.6 KiB
YAML
46 lines
1.6 KiB
YAML
{{- $root := . }}
|
|
{{- range $key, $value := .Values.controllerManager.identities.clusterFederatedTrustDomains }}
|
|
{{- range $skey, $svalue := $value }}
|
|
{{- if not (has $skey (list "name" "annotations" "labels" "enabled" "bundleEndpointProfile" "bundleEndpointURL" "trustDomain" "trustDomainBundle")) }}
|
|
{{- fail (printf "Unsupported property specified: %s" $skey) }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- range $rprop := list "bundleEndpointProfile" "bundleEndpointURL" "trustDomain" }}
|
|
{{- if not (hasKey $value $rprop) }}
|
|
{{- fail (printf "Required property %s was not specified" $rprop) }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- if eq ($root.Values.controllerManager.enabled | toString) "true" }}
|
|
{{- if or (not (hasKey $value "enabled")) (eq ($value.enabled | toString) "true") }}
|
|
---
|
|
apiVersion: spire.spiffe.io/v1alpha1
|
|
kind: ClusterFederatedTrustDomain
|
|
metadata:
|
|
name: {{ $root.Release.Namespace }}-{{ default $root.Release.Name $root.Values.crNameOverride }}-{{ $key }}
|
|
{{- with $value.annotations }}
|
|
annotations:
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with $value.labels }}
|
|
labels:
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
spec:
|
|
className: {{ include "spire-server.controller-manager-class-name" $root | quote }}
|
|
{{- with $value.bundleEndpointProfile }}
|
|
bundleEndpointProfile:
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with $value.bundleEndpointURL }}
|
|
bundleEndpointURL: {{ . | quote }}
|
|
{{- end }}
|
|
{{- with $value.trustDomain }}
|
|
trustDomain: {{ . | quote }}
|
|
{{- end }}
|
|
{{- with $value.trustDomainBundle }}
|
|
trustDomainBundle: {{ . | quote }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|