为宿主机开发启用 SPIRE workload identity

2026-09-16 16:57:33 +00:00
parent f36e8a1733
commit 7703b5d21e
4 changed files with 36 additions and 1 deletions
@@ -72,7 +72,10 @@ spire-agent:
    k8s:
      enabled: true
    unix:
-      enabled: false
+      # The node Agent also exposes its Workload API socket on the host. Enable
+      # Unix attestation so local development processes can receive an identity
+      # through an explicitly scoped ClusterStaticEntry.
+      enabled: true

 spiffe-csi-driver:
  enabled: true