kfox1111
1169dd5692
* Update spire-controller-manager to 0.6.2 and add its staticManifest support Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> * Fix indent Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>
32 lines
761 B
YAML
32 lines
761 B
YAML
spire-server:
|
|
nodeAttestor:
|
|
k8sPSAT:
|
|
enabled: false
|
|
joinToken:
|
|
enabled: true
|
|
tpmDirect:
|
|
enabled: true
|
|
controllerManager:
|
|
enabled: true
|
|
staticManifestMode: internal
|
|
identities:
|
|
clusterStaticEntries:
|
|
foo-node:
|
|
parentID: spiffe://example.org/spire/server
|
|
spiffeID: spiffe://example.org/hosts/foo
|
|
selectors:
|
|
- tpm:pub_hash:12345
|
|
foo-kubelet:
|
|
parentID: spiffe://example.org/foo
|
|
spiffeID: spiffe://example.org/k8s/one/node/foo
|
|
selectors:
|
|
- systemd:id:kubelet.service
|
|
ingress:
|
|
enabled: true
|
|
spire-agent:
|
|
enabled: false
|
|
spiffe-csi-driver:
|
|
enabled: false
|
|
spiffe-oidc-discovery-provider:
|
|
enabled: false
|