Files

T

Marco Franssen 5fdd35b426 Improve Chart API (#119 )

Because we are already in the context of spire-agent the API looks more
logical to not have another 'agent' part in the name.

Furthermore to make it more clear the oidc provider only requires the
name of the socket as opposed to the entire path like in the other
charts I made that more explicit in the name of the value.

---------

Signed-off-by: Marco Franssen <[email protected]>

2023-03-14 09:55:24 -07:00

templates

Improve Chart API (#119 )

2023-03-14 09:55:24 -07:00

.helmignore

Move spire-agent to dedicated subchart

2023-02-18 13:04:09 +01:00

Chart.yaml

Bump spire-agent image to 1.6.0 (arm64 support)

2023-03-01 15:41:47 +01:00

README.md

Improve Chart API (#119 )

2023-03-14 09:55:24 -07:00

README.md.gotmpl

Bump spire-agent image to 1.6.0 (arm64 support)

2023-03-01 15:41:47 +01:00

values.yaml

Improve Chart API (#119 )

2023-03-14 09:55:24 -07:00

README.md

spire-agent

A Helm chart to install the SPIRE agent.

Note

: Minimum Spire version is 1.5.3. The recommended version is 1.6.0 to support arm64 nodes. If running with any prior version to 1.6.0 you have to use a nodeSelector to limit to kubernetes.io/arch: amd64.

Values

Key	Type	Default	Description
bundleConfigMap	string	`"spire-bundle"`
clusterName	string	`"example-cluster"`
extraContainers	list	`[]`
extraVolumeMounts	list	`[]`
extraVolumes	list	`[]`
fullnameOverride	string	`""`
healthChecks.port	int	`9980`	override the host port used for health checking
image.pullPolicy	string	`"IfNotPresent"`
image.registry	string	`"ghcr.io"`
image.repository	string	`"spiffe/spire-agent"`
image.version	string	`""`
imagePullSecrets	list	`[]`
initContainers	list	`[]`
logLevel	string	`"info"`
nameOverride	string	`""`
namespaceOverride	string	`""`
nodeSelector	object	`{}`
podAnnotations	object	`{}`
podSecurityContext	object	`{}`
priorityClassName	string	`""`	Priority class assigned to daemonset pods
resources	object	`{}`
securityContext	object	`{}`
server.address	string	`""`
server.namespaceOverride	string	`""`
server.port	int	`8081`
serviceAccount.annotations	object	`{}`
serviceAccount.create	bool	`true`
serviceAccount.name	string	`""`
socketPath	string	`"/run/spire/agent-sockets/spire-agent.sock"`
telemetry.prometheus.enabled	bool	`false`
telemetry.prometheus.port	int	`9988`
trustDomain	string	`"example.org"`
waitForIt.image.pullPolicy	string	`"IfNotPresent"`
waitForIt.image.registry	string	`"cgr.dev"`
waitForIt.image.repository	string	`"chainguard/wait-for-it"`
waitForIt.image.version	string	`"latest-20230113"`
waitForIt.resources	object	`{}`
workloadAttestors.unix.enabled	bool	`false`	enables the Unix workload attestor