mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-02-18 13:54:23 -05:00

Bumping Cilium to also enable node-to-node encryption and node-to-node strict mode. Since the second is not upstream we use our fork.
26 lines
641 B
YAML
26 lines
641 B
YAML
{{- if ne .Values.clustermesh.apiserver.tls.authMode "legacy" }}
|
|
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: clustermesh-remote-users
|
|
namespace: {{ .Release.Namespace }}
|
|
{{- with .Values.clustermesh.annotations }}
|
|
annotations:
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
labels:
|
|
app.kubernetes.io/part-of: cilium
|
|
data:
|
|
users.yaml: |
|
|
users:
|
|
{{- if .Values.clustermesh.apiserver.kvstoremesh.enabled }}
|
|
- name: remote-{{ .Values.cluster.name }}
|
|
role: remote
|
|
{{- end }}
|
|
{{- range .Values.clustermesh.config.clusters }}
|
|
- name: remote-{{ .name }}
|
|
role: remote
|
|
{{- end }}
|
|
{{- end }}
|