Update spire-agent daemonset to use node IP from downward API (#4147). (#117)

krishnakv · web-flow · commit d27c579eb4f4 · 2023-06-09T22:58:30.000-07:00
* Update spire-agent daemonset to use node IP from downward API (#4147).

Signed-off-by: Krishnakumar Venkataraman &lt;krishna_kumar08@infosys.com&gt;
diff --git a/k8s/quickstart/agent-configmap.yaml b/k8s/quickstart/agent-configmap.yaml
@@ -34,6 +34,7 @@ data:
           # Minikube does not have a cert in the cluster CA bundle that
           # can authenticate the kubelet cert, so skip validation.
           skip_kubelet_verification = true
+          node_name_env = "MY_NODE_NAME"
         }
       }
 
diff --git a/k8s/quickstart/agent-daemonset.yaml b/k8s/quickstart/agent-daemonset.yaml
@@ -30,6 +30,11 @@ spec:
         - name: spire-agent
           image: ghcr.io/spiffe/spire-agent:1.5.1
           args: ["-config", "/run/spire/config/agent.conf"]
+          env:
+          - name: MY_NODE_NAME
+            valueFrom:
+              fieldRef:
+                fieldPath: status.podIP
           volumeMounts:
             - name: spire-config
               mountPath: /run/spire/config

Original file line number	Diff line number	Diff line change
`@@ -34,6 +34,7 @@ data:`
`34`	`34`	`# Minikube does not have a cert in the cluster CA bundle that`
`35`	`35`	`# can authenticate the kubelet cert, so skip validation.`
`36`	`36`	`skip_kubelet_verification = true`
	`37`	`+ node_name_env = "MY_NODE_NAME"`
`37`	`38`	`}`
`38`	`39`	`}`
`39`	`40`