kfox1111andFaisal Memon
f37d681bc2
* Update for 1.12.3 Signed-off-by: Kevin Fox <[email protected]> * Fix typo. Use test image Signed-off-by: Kevin Fox <[email protected]> * Fix lint Signed-off-by: Kevin Fox <[email protected]> * Fix format flag. Update config location for k8s configmap bp Signed-off-by: Kevin Fox <[email protected]> * Fix role Signed-off-by: Kevin Fox <[email protected]> * Update rbac Signed-off-by: Kevin Fox <[email protected]> * Fix key Signed-off-by: Kevin Fox <[email protected]> * Fix format Signed-off-by: Kevin Fox <[email protected]> * Fix the bundle format for the fetchca bits Signed-off-by: Kevin Fox <[email protected]> * Update key Signed-off-by: Kevin Fox <[email protected]> * Fix test rather then reconfigure Signed-off-by: Kevin Fox <[email protected]> * Add namespace Signed-off-by: Kevin Fox <[email protected]> * Update to follow the new patch Signed-off-by: Kevin Fox <[email protected]> * Fix formatting Signed-off-by: Kevin Fox <[email protected]> * Fix formatting Signed-off-by: Kevin Fox <[email protected]> * Update filename based on format Signed-off-by: Kevin Fox <[email protected]> * Add upgrade notes Signed-off-by: Kevin Fox <[email protected]> * Enable running the oidc discovery provider without cluster-admin/CSI Signed-off-by: Kevin Fox <[email protected]> * Calm lint Signed-off-by: Kevin Fox <[email protected]> * Switch to testing nightly. Dont manage bundle configmap. Signed-off-by: Kevin Fox <[email protected]> * Update permissions Signed-off-by: Kevin Fox <[email protected]> * Update permissions Signed-off-by: Kevin Fox <[email protected]> * Update permissions Signed-off-by: Kevin Fox <[email protected]> * Update for final release Signed-off-by: Kevin Fox <[email protected]> * Update for final 1.12.4 release Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>
36 lines
831 B
YAML
36 lines
831 B
YAML
spire-server:
|
|
nodeAttestor:
|
|
k8sPSAT:
|
|
enabled: false
|
|
joinToken:
|
|
enabled: true
|
|
tpmDirect:
|
|
enabled: true
|
|
controllerManager:
|
|
enabled: true
|
|
staticManifestMode: internal
|
|
identities:
|
|
clusterStaticEntries:
|
|
foo-node:
|
|
parentID: spiffe://example.org/spire/server
|
|
spiffeID: spiffe://example.org/hosts/foo
|
|
selectors:
|
|
- tpm:pub_hash:12345
|
|
foo-kubelet:
|
|
parentID: spiffe://example.org/hosts/foo
|
|
spiffeID: spiffe://example.org/k8s/one/node/foo
|
|
selectors:
|
|
- systemd:id:kubelet.service
|
|
ingress:
|
|
enabled: true
|
|
spire-agent:
|
|
enabled: false
|
|
spiffe-csi-driver:
|
|
enabled: false
|
|
spiffe-oidc-discovery-provider:
|
|
enabled: true
|
|
bundleSource: ConfigMap
|
|
tls:
|
|
spire:
|
|
enabled: false
|