📝 adding docs

carverauto · Dec 18, 2024 · 9649b35 · 9649b35
1 parent e544345
commit 9649b35
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/k8s/spire/base/README.md b/k8s/spire/base/README.md
@@ -0,0 +1,24 @@
+# spire server setup
+
+## Create server
+
+```shell
+kubectl exec -n spire spire-server-0 -- \
+    /opt/spire/bin/spire-server entry create \
+    -spiffeID spiffe://tunnel.threadr.ai/ns/spire/sa/spire-agent \
+    -selector k8s_sat:cluster:threadr-cluster \
+    -selector k8s_sat:agent_ns:spire \
+    -selector k8s_sat:agent_sa:spire-agent \
+    -node
+```
+
+## Setup workload
+
+```shell
+kubectl exec -n spire spire-server-0 -- \
+    /opt/spire/bin/spire-server entry create \
+    -spiffeID spiffe://tunnel.threadr.ai/ns/default/sa/default \
+    -parentID spiffe://tunnel.threadr.ai/ns/spire/sa/spire-agent \
+    -selector k8s:ns:default \
+    -selector k8s:sa:default
+```