Marco Franssen
5c8f1a7c9b
Signed-off-by: Marco Franssen <[email protected]> Signed-off-by: Marco Franssen <[email protected]>
56 lines
1.8 KiB
YAML
56 lines
1.8 KiB
YAML
apiVersion: v2
|
|
name: spire
|
|
description: |
|
|
A Helm chart for deploying spire-server and spire-agent.
|
|
|
|
> **Warning**: Please note this chart requires Projected Service Account Tokens which has to be enabled on your k8s api server.
|
|
|
|
> **Note**: Minimum Spire version is `v1.5.3`.
|
|
|
|
To enable Projected Service Account Tokens on Docker for Mac/Windows run the following
|
|
command to SSH into the Docker Desktop K8s VM.
|
|
|
|
```bash
|
|
docker run -it --privileged --pid=host debian nsenter -t 1 -m -u -n -i sh
|
|
```
|
|
|
|
Then add the following to `/etc/kubernetes/manifests/kube-apiserver.yaml`
|
|
|
|
```yaml
|
|
spec:
|
|
containers:
|
|
- command:
|
|
- kube-apiserver
|
|
- --api-audiences=api,spire-server
|
|
- --service-account-issuer=api,spire-agent
|
|
- --service-account-key-file=/run/config/pki/sa.pub
|
|
- --service-account-signing-key-file=/run/config/pki/sa.key
|
|
```
|
|
type: application
|
|
version: 0.1.0
|
|
appVersion: "1.5.4"
|
|
keywords: ["spiffe", "spire", "spire-server", "spire-agent", "oidc", "spire-controller-manager"]
|
|
home: https://github.com/philips-labs/helm-charts/tree/main/charts/spire
|
|
sources:
|
|
- https://github.com/philips-labs/helm-charts/tree/main/charts/spire
|
|
icon: https://spiffe.io/img/logos/spire/icon/color/spire-icon-color.png
|
|
maintainers:
|
|
- name: marcofranssen
|
|
email: [email protected]
|
|
url: https://marcofranssen.nl
|
|
kubeVersion: ">=1.21.0-0"
|
|
dependencies:
|
|
- name: spire-server
|
|
repository: file://./charts/spire-server
|
|
version: 0.1.0
|
|
- name: spire-agent
|
|
repository: file://./charts/spire-agent
|
|
version: 0.1.0
|
|
- name: spiffe-csi-driver
|
|
repository: file://./charts/spiffe-csi-driver
|
|
version: 0.1.0
|
|
- name: spiffe-oidc-discovery-provider
|
|
condition: spiffe-oidc-discovery-provider.enabled
|
|
repository: file://./charts/spiffe-oidc-discovery-provider
|
|
version: 0.1.0
|