51cba5b530
This patch enables end users to configure external plugins in the spire-server config. Unsupported internal plugins are not able to be set. --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Edwin Buck <[email protected]> Co-authored-by: Faisal Memon <[email protected]>
26 lines
637 B
YAML
26 lines
637 B
YAML
spire-server:
|
|
initContainers:
|
|
- name: tpm-init
|
|
image: busybox
|
|
command:
|
|
- sh
|
|
- -c
|
|
- |
|
|
mkdir -p /run/spire/data/certs
|
|
mkdir -p /run/spire/data/hashes
|
|
volumeMounts:
|
|
- mountPath: /run/spire/data
|
|
name: spire-data
|
|
image:
|
|
registry: docker.io
|
|
repository: kfox1111/misc
|
|
version: tpm-server-test
|
|
customPlugins:
|
|
nodeAttestor:
|
|
tpm:
|
|
plugin_cmd: /bin/tpm_attestor_server
|
|
plugin_checksum: 97442358ae946e3fb8f2464432b8c23efdc0b5d44ec1eea27babe59ef646cc2f
|
|
plugin_data:
|
|
- ca_path: /run/spire/data/certs
|
|
hash_path: /run/spire/data/hashes
|