ztwim-chart/values.yaml at main · validatedpatterns/ztwim-chart · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
global:
  localClusterDomain: local.example.com
  hubClusterDomain: hub.example.com

spiffe:
  csi:
    agentSocketPath: "/run/spire/agent-sockets"

spire:
  trustDomain: "{{ .Values.global.localClusterDomain }}"
  clusterName: "cluster"
  bundleConfigMap: "spire-bundle"

  agent:
    nodeAttestor:
      k8sPSATEnabled: "true"
    workloadAttestors:
      k8sEnabled: "true"
      workloadAttestorsVerification:
        type: "auto"
        hostCertBasePath: /var/lib/kubelet/pki
        hostCertFileName: ""

  oidcDiscoveryProvider:
    ingress:
      operatorManaged: "true"
      annotations:
        route.openshift.io/termination: reencrypt
      host: "spire-spiffe-oidc-discovery-provider.{{ .Values.global.localClusterDomain }}"
    service:
      name: spire-spiffe-oidc-discovery-provider
      port: 443

  server:
    ca:
      commonName: redhat.com
      country: US
      organization: Red Hat
    service:
      name: spire-server
      port: 443
    persistence:
      size: 5Gi
      accessMode: ReadWriteOnce
      storageClass: ""
    datastore:
      databaseType: sqlite3
      connectionString: /run/spire/data/datastore.sqlite3
      maxOpenConns: 100
      maxIdleConns: 10
      connMaxLifetime: 0
    federation:
      enabled: "false"
      federatesWith: []
      bundleEndpoint:
        profile: "https_spiffe"
      ingress:
        operatorManaged: "true"
        annotations:
          route.openshift.io/termination: passthrough
        host: "spire-server.{{ .Values.global.localClusterDomain }}"