87 lines
1.7 KiB
YAML
87 lines
1.7 KiB
YAML
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: sandbox-spire-values
|
|
namespace: spire-mgmt
|
|
data:
|
|
values.yaml: |
|
|
global:
|
|
k8s:
|
|
clusterDomain: cluster.local
|
|
spire:
|
|
bundleConfigMap: spire-bundle
|
|
clusterName: sandbox
|
|
trustDomain: ddupan.top
|
|
namespaces:
|
|
create: false
|
|
system:
|
|
name: spire-system
|
|
server:
|
|
name: spire-server
|
|
recommendations:
|
|
enabled: true
|
|
namespaceLayout: true
|
|
namespacePSS: true
|
|
priorityClassName: true
|
|
strictMode: true
|
|
securityContexts: true
|
|
prometheus: false
|
|
|
|
spire-server:
|
|
enabled: false
|
|
|
|
spire-agent:
|
|
enabled: true
|
|
serviceAccount:
|
|
name: spire-agent
|
|
server:
|
|
address: spire-server.ad.ddupan.top
|
|
port: 8081
|
|
nodeAttestor:
|
|
k8sPSAT:
|
|
enabled: true
|
|
workloadAttestors:
|
|
k8s:
|
|
enabled: true
|
|
unix:
|
|
enabled: false
|
|
telemetry:
|
|
prometheus:
|
|
enabled: true
|
|
podMonitor:
|
|
enabled: false
|
|
resources:
|
|
requests:
|
|
cpu: 25m
|
|
memory: 64Mi
|
|
limits:
|
|
cpu: 250m
|
|
memory: 192Mi
|
|
|
|
spiffe-csi-driver:
|
|
enabled: true
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 32Mi
|
|
limits:
|
|
cpu: 100m
|
|
memory: 96Mi
|
|
|
|
spiffe-oidc-discovery-provider:
|
|
enabled: false
|
|
|
|
upstream:
|
|
enabled: false
|
|
tornjak-frontend:
|
|
enabled: false
|
|
spire-identity-exchange:
|
|
enabled: false
|
|
spike-keeper:
|
|
enabled: false
|
|
spike-nexus:
|
|
enabled: false
|
|
spike-pilot:
|
|
enabled: false
|