f2758a8b2b
* Autogen jwtIssuer Unset a default for jwtIssuer and global.spire.jwtIssuer. When unset, generate it to the default of oidc-discovery.$trustDomain so in many cases the user doesn't need to set it at all. Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Mariusz Sabath <[email protected]> Co-authored-by: Faisal Memon <[email protected]>
31 lines
644 B
YAML
31 lines
644 B
YAML
global:
|
|
spire:
|
|
clusterName: production
|
|
trustDomain: production.other
|
|
|
|
spire-server:
|
|
controllerManager:
|
|
identities:
|
|
namespaceSelector:
|
|
kubernetes.io/metadata.name: spire-server
|
|
podSelector:
|
|
app.kubernetes.io/component: server
|
|
app.kubernetes.io/instance: spire
|
|
app.kubernetes.io/name: server
|
|
downstream: true
|
|
nodeAttestor:
|
|
k8sPsat:
|
|
serviceAccountAllowList:
|
|
- spire-system:spire-agent-upstream
|
|
bundleConfigMap: spire-bundle-upstream
|
|
notifier:
|
|
k8sbundle:
|
|
namespace: spire-system
|
|
|
|
spire-agent:
|
|
enabled: false
|
|
|
|
spiffe-csi-driver:
|
|
enabled: false
|
|
|