Change svid_ttl to default_svid_ttl and remove upstream_bundle config.

Signed-off-by: Eugene Weiss <eugene@scytale.io>
This commit is contained in:
Eugene Weiss 2020-04-15 14:20:46 -07:00
parent 183329f024
commit 9b7b64f577
4 changed files with 4 additions and 5 deletions

View File

@ -28,7 +28,7 @@ spec:
args: ["-t", "30", "spire-server:8081"] args: ["-t", "30", "spire-server:8081"]
containers: containers:
- name: spire-agent - name: spire-agent
image: gcr.io/spiffe-io/spire-agent:a211e075c1f44026efdeb89e9a9081e1898d5214 image: gcr.io/spiffe-io/spire-agent:429286051c1e0d729be2bec8d7ee26204494cf7a
args: ["-config", "/run/spire/config/agent.conf"] args: ["-config", "/run/spire/config/agent.conf"]
volumeMounts: volumeMounts:
- name: spire-config - name: spire-config

View File

@ -18,7 +18,7 @@ spec:
dnsPolicy: ClusterFirstWithHostNet dnsPolicy: ClusterFirstWithHostNet
containers: containers:
- name: client - name: client
image: gcr.io/spiffe-io/spire-agent:a211e075c1f44026efdeb89e9a9081e1898d5214 image: gcr.io/spiffe-io/spire-agent:429286051c1e0d729be2bec8d7ee26204494cf7a
command: ["sleep"] command: ["sleep"]
args: ["1000000000"] args: ["1000000000"]
volumeMounts: volumeMounts:

View File

@ -15,8 +15,7 @@ data:
#AWS requires the use of RSA. EC cryptography is not supported #AWS requires the use of RSA. EC cryptography is not supported
ca_key_type = "rsa-2048" ca_key_type = "rsa-2048"
upstream_bundle = true default_svid_ttl = "1h"
svid_ttl = "1h"
ca_subject = { ca_subject = {
country = ["US"], country = ["US"],
organization = ["SPIFFE"], organization = ["SPIFFE"],

View File

@ -20,7 +20,7 @@ spec:
serviceAccountName: spire-server serviceAccountName: spire-server
containers: containers:
- name: spire-server - name: spire-server
image: gcr.io/spiffe-io/spire-server:a211e075c1f44026efdeb89e9a9081e1898d5214 image: gcr.io/spiffe-io/spire-server:429286051c1e0d729be2bec8d7ee26204494cf7a
args: args:
- -config - -config
- /run/spire/config/server.conf - /run/spire/config/server.conf