apiVersion: spire.spiffe.io/v1alpha1
kind: ClusterSPIFFEID
metadata:
  name: dynamic-runner-controller
spec:
  className: spire-mgmt-spire
  spiffeIDTemplate: spiffe://ddupan.top/ns/dynamic-runner/sa/dynamic-runner-controller
  namespaceSelector:
    matchLabels:
      kubernetes.io/metadata.name: dynamic-runner
  podSelector:
    matchLabels:
      app.kubernetes.io/name: dynamic-runner-controller
  workloadSelectorTemplates:
    - k8s:ns:dynamic-runner
    - k8s:sa:dynamic-runner-controller