Update to latest spire release 1.2.3 (#72)
Signed-off-by: Jiashu Chen <cjs20080808@hotmail.com>
This commit is contained in:
parent
d00bf265c0
commit
989868c288
|
|
@ -18,13 +18,13 @@ services:
|
||||||
ports:
|
ports:
|
||||||
- "9090:9090"
|
- "9090:9090"
|
||||||
spire-server:
|
spire-server:
|
||||||
image: gcr.io/spiffe-io/spire-server:1.0.0
|
image: gcr.io/spiffe-io/spire-server:1.2.3
|
||||||
hostname: spire-server
|
hostname: spire-server
|
||||||
volumes:
|
volumes:
|
||||||
- ./spire/server:/opt/spire/conf/server
|
- ./spire/server:/opt/spire/conf/server
|
||||||
command: ["-config", "/opt/spire/conf/server/server.conf"]
|
command: ["-config", "/opt/spire/conf/server/server.conf"]
|
||||||
spire-agent:
|
spire-agent:
|
||||||
image: gcr.io/spiffe-io/spire-agent:1.0.0
|
image: gcr.io/spiffe-io/spire-agent:1.2.3
|
||||||
depends_on: ["spire-server"]
|
depends_on: ["spire-server"]
|
||||||
hostname: spire-agent
|
hostname: spire-agent
|
||||||
volumes:
|
volumes:
|
||||||
|
|
|
||||||
|
|
@ -2,7 +2,7 @@ version: '3'
|
||||||
services:
|
services:
|
||||||
# Root
|
# Root
|
||||||
root-server:
|
root-server:
|
||||||
image: gcr.io/spiffe-io/spire-server:1.0.0
|
image: gcr.io/spiffe-io/spire-server:1.2.3
|
||||||
hostname: root-server
|
hostname: root-server
|
||||||
volumes:
|
volumes:
|
||||||
- ./root/server:/opt/spire/conf/server
|
- ./root/server:/opt/spire/conf/server
|
||||||
|
|
@ -10,7 +10,7 @@ services:
|
||||||
root-agent:
|
root-agent:
|
||||||
# Share the host pid namespace so this agent can attest the nested servers
|
# Share the host pid namespace so this agent can attest the nested servers
|
||||||
pid: "host"
|
pid: "host"
|
||||||
image: gcr.io/spiffe-io/spire-agent:1.0.0
|
image: gcr.io/spiffe-io/spire-agent:1.2.3
|
||||||
depends_on: ["root-server"]
|
depends_on: ["root-server"]
|
||||||
hostname: root-agent
|
hostname: root-agent
|
||||||
volumes:
|
volumes:
|
||||||
|
|
@ -23,7 +23,7 @@ services:
|
||||||
nestedA-server:
|
nestedA-server:
|
||||||
# Share the host pid namespace so this server can be attested by the root agent
|
# Share the host pid namespace so this server can be attested by the root agent
|
||||||
pid: "host"
|
pid: "host"
|
||||||
image: gcr.io/spiffe-io/spire-server:1.0.0
|
image: gcr.io/spiffe-io/spire-server:1.2.3
|
||||||
hostname: nestedA-server
|
hostname: nestedA-server
|
||||||
labels:
|
labels:
|
||||||
# label to attest server against root-agent
|
# label to attest server against root-agent
|
||||||
|
|
@ -35,7 +35,7 @@ services:
|
||||||
- ./nestedA/server:/opt/spire/conf/server
|
- ./nestedA/server:/opt/spire/conf/server
|
||||||
command: ["-config", "/opt/spire/conf/server/server.conf"]
|
command: ["-config", "/opt/spire/conf/server/server.conf"]
|
||||||
nestedA-agent:
|
nestedA-agent:
|
||||||
image: gcr.io/spiffe-io/spire-agent:1.0.0
|
image: gcr.io/spiffe-io/spire-agent:1.2.3
|
||||||
hostname: nestedA-agent
|
hostname: nestedA-agent
|
||||||
depends_on: ["nestedA-server"]
|
depends_on: ["nestedA-server"]
|
||||||
volumes:
|
volumes:
|
||||||
|
|
@ -45,7 +45,7 @@ services:
|
||||||
nestedB-server:
|
nestedB-server:
|
||||||
# Share the host pid namespace so this server can be attested by the root agent
|
# Share the host pid namespace so this server can be attested by the root agent
|
||||||
pid: "host"
|
pid: "host"
|
||||||
image: gcr.io/spiffe-io/spire-server:1.0.0
|
image: gcr.io/spiffe-io/spire-server:1.2.3
|
||||||
hostname: nestedB-server
|
hostname: nestedB-server
|
||||||
depends_on: ["root-server","root-agent"]
|
depends_on: ["root-server","root-agent"]
|
||||||
labels:
|
labels:
|
||||||
|
|
@ -57,7 +57,7 @@ services:
|
||||||
- ./nestedB/server:/opt/spire/conf/server
|
- ./nestedB/server:/opt/spire/conf/server
|
||||||
command: ["-config", "/opt/spire/conf/server/server.conf"]
|
command: ["-config", "/opt/spire/conf/server/server.conf"]
|
||||||
nestedB-agent:
|
nestedB-agent:
|
||||||
image: gcr.io/spiffe-io/spire-agent:1.0.0
|
image: gcr.io/spiffe-io/spire-agent:1.2.3
|
||||||
hostname: nestedB-agent
|
hostname: nestedB-agent
|
||||||
depends_on: ["nestedB-server"]
|
depends_on: ["nestedB-server"]
|
||||||
volumes:
|
volumes:
|
||||||
|
|
|
||||||
|
|
@ -28,7 +28,7 @@ spec:
|
||||||
args: ["-t", "30", "spire-server:8081"]
|
args: ["-t", "30", "spire-server:8081"]
|
||||||
containers:
|
containers:
|
||||||
- name: spire-agent
|
- name: spire-agent
|
||||||
image: gcr.io/spiffe-io/spire-agent:1.0.0
|
image: gcr.io/spiffe-io/spire-agent:1.2.3
|
||||||
args: ["-config", "/run/spire/config/agent.conf"]
|
args: ["-config", "/run/spire/config/agent.conf"]
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: spire-config
|
- name: spire-config
|
||||||
|
|
|
||||||
|
|
@ -21,7 +21,7 @@ spec:
|
||||||
shareProcessNamespace: true
|
shareProcessNamespace: true
|
||||||
containers:
|
containers:
|
||||||
- name: spire-server
|
- name: spire-server
|
||||||
image: gcr.io/spiffe-io/spire-server:1.0.0
|
image: gcr.io/spiffe-io/spire-server:1.2.3
|
||||||
args:
|
args:
|
||||||
- -config
|
- -config
|
||||||
- /run/spire/config/server.conf
|
- /run/spire/config/server.conf
|
||||||
|
|
|
||||||
|
|
@ -21,7 +21,7 @@ spec:
|
||||||
shareProcessNamespace: true
|
shareProcessNamespace: true
|
||||||
containers:
|
containers:
|
||||||
- name: spire-server
|
- name: spire-server
|
||||||
image: gcr.io/spiffe-io/spire-server:1.0.0
|
image: gcr.io/spiffe-io/spire-server:1.2.3
|
||||||
args:
|
args:
|
||||||
- -config
|
- -config
|
||||||
- /run/spire/config/server.conf
|
- /run/spire/config/server.conf
|
||||||
|
|
|
||||||
|
|
@ -28,7 +28,7 @@ spec:
|
||||||
args: ["-t", "30", "spire-server:8081"]
|
args: ["-t", "30", "spire-server:8081"]
|
||||||
containers:
|
containers:
|
||||||
- name: spire-agent
|
- name: spire-agent
|
||||||
image: gcr.io/spiffe-io/spire-agent:1.0.0
|
image: gcr.io/spiffe-io/spire-agent:1.2.3
|
||||||
args: ["-config", "/run/spire/config/agent.conf"]
|
args: ["-config", "/run/spire/config/agent.conf"]
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: spire-config
|
- name: spire-config
|
||||||
|
|
|
||||||
|
|
@ -18,7 +18,7 @@ spec:
|
||||||
dnsPolicy: ClusterFirstWithHostNet
|
dnsPolicy: ClusterFirstWithHostNet
|
||||||
containers:
|
containers:
|
||||||
- name: client
|
- name: client
|
||||||
image: gcr.io/spiffe-io/spire-agent:1.0.0
|
image: gcr.io/spiffe-io/spire-agent:1.2.3
|
||||||
command: ["sleep"]
|
command: ["sleep"]
|
||||||
args: ["1000000000"]
|
args: ["1000000000"]
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
|
|
|
||||||
|
|
@ -20,7 +20,7 @@ spec:
|
||||||
serviceAccountName: spire-server
|
serviceAccountName: spire-server
|
||||||
containers:
|
containers:
|
||||||
- name: spire-server
|
- name: spire-server
|
||||||
image: gcr.io/spiffe-io/spire-server:1.0.0
|
image: gcr.io/spiffe-io/spire-server:1.2.3
|
||||||
args:
|
args:
|
||||||
- -config
|
- -config
|
||||||
- /run/spire/config/server.conf
|
- /run/spire/config/server.conf
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue