Update to latest spire release 1.2.3 (#72)
Signed-off-by: Jiashu Chen <cjs20080808@hotmail.com>
This commit is contained in:
parent
d00bf265c0
commit
989868c288
|
|
@ -18,13 +18,13 @@ services:
|
|||
ports:
|
||||
- "9090:9090"
|
||||
spire-server:
|
||||
image: gcr.io/spiffe-io/spire-server:1.0.0
|
||||
image: gcr.io/spiffe-io/spire-server:1.2.3
|
||||
hostname: spire-server
|
||||
volumes:
|
||||
- ./spire/server:/opt/spire/conf/server
|
||||
command: ["-config", "/opt/spire/conf/server/server.conf"]
|
||||
spire-agent:
|
||||
image: gcr.io/spiffe-io/spire-agent:1.0.0
|
||||
image: gcr.io/spiffe-io/spire-agent:1.2.3
|
||||
depends_on: ["spire-server"]
|
||||
hostname: spire-agent
|
||||
volumes:
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@ version: '3'
|
|||
services:
|
||||
# Root
|
||||
root-server:
|
||||
image: gcr.io/spiffe-io/spire-server:1.0.0
|
||||
image: gcr.io/spiffe-io/spire-server:1.2.3
|
||||
hostname: root-server
|
||||
volumes:
|
||||
- ./root/server:/opt/spire/conf/server
|
||||
|
|
@ -10,7 +10,7 @@ services:
|
|||
root-agent:
|
||||
# Share the host pid namespace so this agent can attest the nested servers
|
||||
pid: "host"
|
||||
image: gcr.io/spiffe-io/spire-agent:1.0.0
|
||||
image: gcr.io/spiffe-io/spire-agent:1.2.3
|
||||
depends_on: ["root-server"]
|
||||
hostname: root-agent
|
||||
volumes:
|
||||
|
|
@ -23,7 +23,7 @@ services:
|
|||
nestedA-server:
|
||||
# Share the host pid namespace so this server can be attested by the root agent
|
||||
pid: "host"
|
||||
image: gcr.io/spiffe-io/spire-server:1.0.0
|
||||
image: gcr.io/spiffe-io/spire-server:1.2.3
|
||||
hostname: nestedA-server
|
||||
labels:
|
||||
# label to attest server against root-agent
|
||||
|
|
@ -35,7 +35,7 @@ services:
|
|||
- ./nestedA/server:/opt/spire/conf/server
|
||||
command: ["-config", "/opt/spire/conf/server/server.conf"]
|
||||
nestedA-agent:
|
||||
image: gcr.io/spiffe-io/spire-agent:1.0.0
|
||||
image: gcr.io/spiffe-io/spire-agent:1.2.3
|
||||
hostname: nestedA-agent
|
||||
depends_on: ["nestedA-server"]
|
||||
volumes:
|
||||
|
|
@ -45,7 +45,7 @@ services:
|
|||
nestedB-server:
|
||||
# Share the host pid namespace so this server can be attested by the root agent
|
||||
pid: "host"
|
||||
image: gcr.io/spiffe-io/spire-server:1.0.0
|
||||
image: gcr.io/spiffe-io/spire-server:1.2.3
|
||||
hostname: nestedB-server
|
||||
depends_on: ["root-server","root-agent"]
|
||||
labels:
|
||||
|
|
@ -57,7 +57,7 @@ services:
|
|||
- ./nestedB/server:/opt/spire/conf/server
|
||||
command: ["-config", "/opt/spire/conf/server/server.conf"]
|
||||
nestedB-agent:
|
||||
image: gcr.io/spiffe-io/spire-agent:1.0.0
|
||||
image: gcr.io/spiffe-io/spire-agent:1.2.3
|
||||
hostname: nestedB-agent
|
||||
depends_on: ["nestedB-server"]
|
||||
volumes:
|
||||
|
|
|
|||
|
|
@ -28,7 +28,7 @@ spec:
|
|||
args: ["-t", "30", "spire-server:8081"]
|
||||
containers:
|
||||
- name: spire-agent
|
||||
image: gcr.io/spiffe-io/spire-agent:1.0.0
|
||||
image: gcr.io/spiffe-io/spire-agent:1.2.3
|
||||
args: ["-config", "/run/spire/config/agent.conf"]
|
||||
volumeMounts:
|
||||
- name: spire-config
|
||||
|
|
|
|||
|
|
@ -21,7 +21,7 @@ spec:
|
|||
shareProcessNamespace: true
|
||||
containers:
|
||||
- name: spire-server
|
||||
image: gcr.io/spiffe-io/spire-server:1.0.0
|
||||
image: gcr.io/spiffe-io/spire-server:1.2.3
|
||||
args:
|
||||
- -config
|
||||
- /run/spire/config/server.conf
|
||||
|
|
|
|||
|
|
@ -21,7 +21,7 @@ spec:
|
|||
shareProcessNamespace: true
|
||||
containers:
|
||||
- name: spire-server
|
||||
image: gcr.io/spiffe-io/spire-server:1.0.0
|
||||
image: gcr.io/spiffe-io/spire-server:1.2.3
|
||||
args:
|
||||
- -config
|
||||
- /run/spire/config/server.conf
|
||||
|
|
|
|||
|
|
@ -28,7 +28,7 @@ spec:
|
|||
args: ["-t", "30", "spire-server:8081"]
|
||||
containers:
|
||||
- name: spire-agent
|
||||
image: gcr.io/spiffe-io/spire-agent:1.0.0
|
||||
image: gcr.io/spiffe-io/spire-agent:1.2.3
|
||||
args: ["-config", "/run/spire/config/agent.conf"]
|
||||
volumeMounts:
|
||||
- name: spire-config
|
||||
|
|
|
|||
|
|
@ -18,7 +18,7 @@ spec:
|
|||
dnsPolicy: ClusterFirstWithHostNet
|
||||
containers:
|
||||
- name: client
|
||||
image: gcr.io/spiffe-io/spire-agent:1.0.0
|
||||
image: gcr.io/spiffe-io/spire-agent:1.2.3
|
||||
command: ["sleep"]
|
||||
args: ["1000000000"]
|
||||
volumeMounts:
|
||||
|
|
|
|||
|
|
@ -20,7 +20,7 @@ spec:
|
|||
serviceAccountName: spire-server
|
||||
containers:
|
||||
- name: spire-server
|
||||
image: gcr.io/spiffe-io/spire-server:1.0.0
|
||||
image: gcr.io/spiffe-io/spire-server:1.2.3
|
||||
args:
|
||||
- -config
|
||||
- /run/spire/config/server.conf
|
||||
|
|
|
|||
Loading…
Reference in New Issue