Files

T

kfox1111andMarco Franssen 2c360a50fd Add global for image registry (#201 )

This patch enables a user to override all image registry settings all at
once to point to their own registry to enable easy custom mirrors.

partially implements: https://github.com/spiffe/helm-charts/issues/139

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>

2023-04-20 20:08:14 +02:00

templates

Add global for image registry (#201 )

2023-04-20 20:08:14 +02:00

.helmignore

Move spire-agent to dedicated subchart

2023-02-18 13:04:09 +01:00

Chart.yaml

Update to the 1.6.3 spire release

2023-04-13 23:14:50 +02:00

README.md

Update to the 1.6.3 spire release

2023-04-13 23:14:50 +02:00

README.md.gotmpl

Bump spire-agent image to 1.6.0 (arm64 support)

2023-03-01 15:41:47 +01:00

values.yaml

Add podmonitors (#165 )

2023-04-04 09:55:35 +02:00

README.md

spire-agent

A Helm chart to install the SPIRE agent.

Note

: Minimum Spire version is 1.5.3. The recommended version is 1.6.0 to support arm64 nodes. If running with any prior version to 1.6.0 you have to use a nodeSelector to limit to kubernetes.io/arch: amd64.

Values

Key	Type	Default	Description
bundleConfigMap	string	`"spire-bundle"`
clusterName	string	`"example-cluster"`
extraContainers	list	`[]`
extraVolumeMounts	list	`[]`
extraVolumes	list	`[]`
fullnameOverride	string	`""`
healthChecks.port	int	`9980`	override the host port used for health checking
image.pullPolicy	string	`"IfNotPresent"`
image.registry	string	`"ghcr.io"`
image.repository	string	`"spiffe/spire-agent"`
image.version	string	`""`
imagePullSecrets	list	`[]`
initContainers	list	`[]`
logLevel	string	`"info"`
nameOverride	string	`""`
namespaceOverride	string	`""`
nodeSelector	object	`{}`
podAnnotations	object	`{}`
podSecurityContext	object	`{}`
priorityClassName	string	`""`	Priority class assigned to daemonset pods
resources	object	`{}`
securityContext	object	`{}`
server.address	string	`""`
server.namespaceOverride	string	`""`
server.port	int	`8081`
serviceAccount.annotations	object	`{}`
serviceAccount.create	bool	`true`
serviceAccount.name	string	`""`
socketPath	string	`"/run/spire/agent-sockets/spire-agent.sock"`
telemetry.prometheus.enabled	bool	`false`
telemetry.prometheus.podMonitor.enabled	bool	`false`
telemetry.prometheus.podMonitor.labels	object	`{}`
telemetry.prometheus.podMonitor.namespace	string	`""`	Override where to install the podMonitor, if not set will use the same namespace as the spire-agent
telemetry.prometheus.port	int	`9988`
trustDomain	string	`"example.org"`
waitForIt.image.pullPolicy	string	`"IfNotPresent"`
waitForIt.image.registry	string	`"cgr.dev"`
waitForIt.image.repository	string	`"chainguard/wait-for-it"`
waitForIt.image.version	string	`"latest-20230113"`
waitForIt.resources	object	`{}`
workloadAttestors.unix.enabled	bool	`false`	enables the Unix workload attestor