kfox1111
fce95cb443
* Add example of mysql using spire Signed-off-by: Kevin Fox <[email protected]> * Finish up the implementation Signed-off-by: Kevin Fox <[email protected]> * Update the image Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Update. Restested. Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>
27 lines
953 B
YAML
27 lines
953 B
YAML
spire-server:
|
|
controllerManager:
|
|
identities:
|
|
clusterSPIFFEIDs:
|
|
default:
|
|
enabled: false
|
|
mysql:
|
|
spiffeIDTemplate: spiffe://{{ .TrustDomain }}/ns/{{ .PodMeta.Namespace }}/sa/{{ .PodSpec.ServiceAccountName }}
|
|
namespaceSelector:
|
|
matchLabels:
|
|
kubernetes.io/metadata.name: default
|
|
podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/instance: mysql
|
|
dnsNameTemplates:
|
|
- mysql.default.svc.cluster.local
|
|
mysqlclient:
|
|
spiffeIDTemplate: spiffe://{{ .TrustDomain }}/ns/{{ .PodMeta.Namespace }}/sa/{{ .PodSpec.ServiceAccountName }}
|
|
namespaceSelector:
|
|
matchLabels:
|
|
kubernetes.io/metadata.name: default
|
|
podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/instance: mysqlclient
|
|
dnsNameTemplates:
|
|
- mysqlclient.default.svc.cluster.local
|