mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-16 05:20:22 +08:00
Drew Newberry
9b6d904e88
* feat(compute): delegate sandbox authentication to drivers Signed-off-by: Drew Newberry <385+drew@users.noreply.github.com> * fix(kubernetes): align sandbox identity annotation Signed-off-by: Drew Newberry <385+drew@users.noreply.github.com> * test(auth): restore sandbox bootstrap coverage Signed-off-by: Drew Newberry <385+drew@users.noreply.github.com> * fix(kubernetes): satisfy ownership test lint Signed-off-by: Drew Newberry <385+drew@users.noreply.github.com> --------- Signed-off-by: Drew Newberry <385+drew@users.noreply.github.com>
25 lines
866 B
YAML
25 lines
866 B
YAML
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
# SPIRE hardened chart values for the local Helm dev environment.
|
|
global:
|
|
spire:
|
|
clusterName: openshell-dev
|
|
jwtIssuer: https://spire-spiffe-oidc-discovery-provider.spire.svc.cluster.local
|
|
trustDomain: openshell.local
|
|
|
|
spire-server:
|
|
defaultJwtSvidTTL: 5m
|
|
controllerManager:
|
|
identities:
|
|
clusterSPIFFEIDs:
|
|
openshell-sandboxes:
|
|
enabled: true
|
|
spiffeIDTemplate: 'spiffe://{{ .TrustDomain }}/openshell/sandbox/{{ index .PodMeta.Annotations "openshell.ai/sandbox-id" }}'
|
|
namespaceSelector:
|
|
matchLabels:
|
|
kubernetes.io/metadata.name: openshell
|
|
podSelector:
|
|
matchLabels:
|
|
openshell.ai/managed-by: openshell
|