Co-authored-by: Marco Franssen <[email protected]> Co-authored-by: Faisal Memon <[email protected]>
32 lines
691 B
YAML
32 lines
691 B
YAML
global:
|
|
spire:
|
|
clusterName: production
|
|
trustDomain: production.other
|
|
jwtIssuer: oidc-discovery.production.other
|
|
|
|
spire-server:
|
|
controllerManager:
|
|
identities:
|
|
namespaceSelector:
|
|
kubernetes.io/metadata.name: spire-server
|
|
podSelector:
|
|
app.kubernetes.io/component: server
|
|
app.kubernetes.io/instance: spire
|
|
app.kubernetes.io/name: server
|
|
downstream: true
|
|
nodeAttestor:
|
|
k8sPsat:
|
|
serviceAccountAllowList:
|
|
- spire-system:spire-agent-upstream
|
|
bundleConfigMap: spire-bundle-upstream
|
|
notifier:
|
|
k8sbundle:
|
|
namespace: spire-system
|
|
|
|
spire-agent:
|
|
enabled: false
|
|
|
|
spiffe-csi-driver:
|
|
enabled: false
|
|
|