pods like oidc mount more then one of these sockets, now we can control readonly vs non readonly better Signed-off-by: Marco Franssen <[email protected]> Signed-off-by: Marco Franssen <[email protected]>
15 lines
502 B
YAML
15 lines
502 B
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: {{ include "spire.fullname" . }}-workload-registrar
|
|
namespace: {{ .Release.Namespace }}
|
|
data:
|
|
workload-registrar.conf: |
|
|
log_level = "debug"
|
|
mode = "reconcile"
|
|
trust_domain = {{ .Values.spire.trustDomain | quote }}
|
|
cluster = {{ .Values.spire.clusterName | quote }}
|
|
server_address = "unix:///run/spire/server-sockets/registration.sock"
|
|
leader_election = true
|
|
metrics_addr = "0.0.0.0:18080"
|