Update to latest spire release 1.2.3 (#72)

Signed-off-by: Jiashu Chen <cjs20080808@hotmail.com>
This commit is contained in:
jiashuChen 2022-05-07 01:03:17 +10:00 committed by GitHub
parent d00bf265c0
commit 989868c288
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
8 changed files with 14 additions and 14 deletions

View File

@ -18,13 +18,13 @@ services:
ports: ports:
- "9090:9090" - "9090:9090"
spire-server: spire-server:
image: gcr.io/spiffe-io/spire-server:1.0.0 image: gcr.io/spiffe-io/spire-server:1.2.3
hostname: spire-server hostname: spire-server
volumes: volumes:
- ./spire/server:/opt/spire/conf/server - ./spire/server:/opt/spire/conf/server
command: ["-config", "/opt/spire/conf/server/server.conf"] command: ["-config", "/opt/spire/conf/server/server.conf"]
spire-agent: spire-agent:
image: gcr.io/spiffe-io/spire-agent:1.0.0 image: gcr.io/spiffe-io/spire-agent:1.2.3
depends_on: ["spire-server"] depends_on: ["spire-server"]
hostname: spire-agent hostname: spire-agent
volumes: volumes:

View File

@ -2,7 +2,7 @@ version: '3'
services: services:
# Root # Root
root-server: root-server:
image: gcr.io/spiffe-io/spire-server:1.0.0 image: gcr.io/spiffe-io/spire-server:1.2.3
hostname: root-server hostname: root-server
volumes: volumes:
- ./root/server:/opt/spire/conf/server - ./root/server:/opt/spire/conf/server
@ -10,7 +10,7 @@ services:
root-agent: root-agent:
# Share the host pid namespace so this agent can attest the nested servers # Share the host pid namespace so this agent can attest the nested servers
pid: "host" pid: "host"
image: gcr.io/spiffe-io/spire-agent:1.0.0 image: gcr.io/spiffe-io/spire-agent:1.2.3
depends_on: ["root-server"] depends_on: ["root-server"]
hostname: root-agent hostname: root-agent
volumes: volumes:
@ -23,7 +23,7 @@ services:
nestedA-server: nestedA-server:
# Share the host pid namespace so this server can be attested by the root agent # Share the host pid namespace so this server can be attested by the root agent
pid: "host" pid: "host"
image: gcr.io/spiffe-io/spire-server:1.0.0 image: gcr.io/spiffe-io/spire-server:1.2.3
hostname: nestedA-server hostname: nestedA-server
labels: labels:
# label to attest server against root-agent # label to attest server against root-agent
@ -35,7 +35,7 @@ services:
- ./nestedA/server:/opt/spire/conf/server - ./nestedA/server:/opt/spire/conf/server
command: ["-config", "/opt/spire/conf/server/server.conf"] command: ["-config", "/opt/spire/conf/server/server.conf"]
nestedA-agent: nestedA-agent:
image: gcr.io/spiffe-io/spire-agent:1.0.0 image: gcr.io/spiffe-io/spire-agent:1.2.3
hostname: nestedA-agent hostname: nestedA-agent
depends_on: ["nestedA-server"] depends_on: ["nestedA-server"]
volumes: volumes:
@ -45,7 +45,7 @@ services:
nestedB-server: nestedB-server:
# Share the host pid namespace so this server can be attested by the root agent # Share the host pid namespace so this server can be attested by the root agent
pid: "host" pid: "host"
image: gcr.io/spiffe-io/spire-server:1.0.0 image: gcr.io/spiffe-io/spire-server:1.2.3
hostname: nestedB-server hostname: nestedB-server
depends_on: ["root-server","root-agent"] depends_on: ["root-server","root-agent"]
labels: labels:
@ -57,7 +57,7 @@ services:
- ./nestedB/server:/opt/spire/conf/server - ./nestedB/server:/opt/spire/conf/server
command: ["-config", "/opt/spire/conf/server/server.conf"] command: ["-config", "/opt/spire/conf/server/server.conf"]
nestedB-agent: nestedB-agent:
image: gcr.io/spiffe-io/spire-agent:1.0.0 image: gcr.io/spiffe-io/spire-agent:1.2.3
hostname: nestedB-agent hostname: nestedB-agent
depends_on: ["nestedB-server"] depends_on: ["nestedB-server"]
volumes: volumes:

View File

@ -28,7 +28,7 @@ spec:
args: ["-t", "30", "spire-server:8081"] args: ["-t", "30", "spire-server:8081"]
containers: containers:
- name: spire-agent - name: spire-agent
image: gcr.io/spiffe-io/spire-agent:1.0.0 image: gcr.io/spiffe-io/spire-agent:1.2.3
args: ["-config", "/run/spire/config/agent.conf"] args: ["-config", "/run/spire/config/agent.conf"]
volumeMounts: volumeMounts:
- name: spire-config - name: spire-config

View File

@ -21,7 +21,7 @@ spec:
shareProcessNamespace: true shareProcessNamespace: true
containers: containers:
- name: spire-server - name: spire-server
image: gcr.io/spiffe-io/spire-server:1.0.0 image: gcr.io/spiffe-io/spire-server:1.2.3
args: args:
- -config - -config
- /run/spire/config/server.conf - /run/spire/config/server.conf

View File

@ -21,7 +21,7 @@ spec:
shareProcessNamespace: true shareProcessNamespace: true
containers: containers:
- name: spire-server - name: spire-server
image: gcr.io/spiffe-io/spire-server:1.0.0 image: gcr.io/spiffe-io/spire-server:1.2.3
args: args:
- -config - -config
- /run/spire/config/server.conf - /run/spire/config/server.conf

View File

@ -28,7 +28,7 @@ spec:
args: ["-t", "30", "spire-server:8081"] args: ["-t", "30", "spire-server:8081"]
containers: containers:
- name: spire-agent - name: spire-agent
image: gcr.io/spiffe-io/spire-agent:1.0.0 image: gcr.io/spiffe-io/spire-agent:1.2.3
args: ["-config", "/run/spire/config/agent.conf"] args: ["-config", "/run/spire/config/agent.conf"]
volumeMounts: volumeMounts:
- name: spire-config - name: spire-config

View File

@ -18,7 +18,7 @@ spec:
dnsPolicy: ClusterFirstWithHostNet dnsPolicy: ClusterFirstWithHostNet
containers: containers:
- name: client - name: client
image: gcr.io/spiffe-io/spire-agent:1.0.0 image: gcr.io/spiffe-io/spire-agent:1.2.3
command: ["sleep"] command: ["sleep"]
args: ["1000000000"] args: ["1000000000"]
volumeMounts: volumeMounts:

View File

@ -20,7 +20,7 @@ spec:
serviceAccountName: spire-server serviceAccountName: spire-server
containers: containers:
- name: spire-server - name: spire-server
image: gcr.io/spiffe-io/spire-server:1.0.0 image: gcr.io/spiffe-io/spire-server:1.2.3
args: args:
- -config - -config
- /run/spire/config/server.conf - /run/spire/config/server.conf