27 lines
903 B
YAML
27 lines
903 B
YAML
{{- if eq (.Values.oidc.enabled | toString) "true" }}
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: {{ include "spire.fullname" . }}-oidc-discovery-provider
|
|
namespace: {{ .Release.Namespace }}
|
|
data:
|
|
oidc-discovery-provider.conf: |
|
|
log_level = "{{ .Values.oidc.logLevel }}"
|
|
{{ if gt (len .Values.oidc.domains) 0 }}
|
|
domains = ["{{- join "\", \"" .Values.oidc.domains }}"]
|
|
{{ else }}
|
|
domains = []
|
|
{{ end }}
|
|
allow_insecure_scheme = {{ .Values.oidc.allowInsecureScheme }}
|
|
acme {
|
|
directory_url = "{{ .Values.oidc.acme.directoryUrl }}"
|
|
cache_dir = "{{ .Values.oidc.acme.cacheDir }}"
|
|
tos_accepted = {{ .Values.oidc.acme.tosAccepted }}
|
|
email = "{{ .Values.oidc.acme.emailAddress }}"
|
|
}
|
|
workload_api {
|
|
socket_path = "/run/spire/agent-sockets/agent.sock"
|
|
trust_domain = "{{ .Values.spire.trustDomain }}"
|
|
}
|
|
{{ end }}
|