Files
helm-charts-hardened/charts/spire/templates/workload-registrar-configmap.yaml
T
Marco Franssen 4d3fb47839 Change socket mounts for more control (readonly)
pods like oidc mount more then one of these sockets, now we can control readonly vs non readonly better

Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:01 +01:00

15 lines
502 B
YAML

apiVersion: v1
kind: ConfigMap
metadata:
name: {{ include "spire.fullname" . }}-workload-registrar
namespace: {{ .Release.Namespace }}
data:
workload-registrar.conf: |
log_level = "debug"
mode = "reconcile"
trust_domain = {{ .Values.spire.trustDomain | quote }}
cluster = {{ .Values.spire.clusterName | quote }}
server_address = "unix:///run/spire/server-sockets/registration.sock"
leader_election = true
metrics_addr = "0.0.0.0:18080"