Add pod labels to the SPIRE agent (#273)

Follow on from #271. This will allow the SPIRE agent to also integrate with Azure Workload Identity. Signed-off-by: Rory Houlihan <rhoulihan@protonmail.com>
spiffe · Mar 4, 2024 · beda725 · beda725
1 parent 077f152
commit beda725
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 0 deletions.
diff --git a/charts/spire/charts/spire-agent/README.md b/charts/spire/charts/spire-agent/README.md
@@ -40,6 +40,7 @@ A Helm chart to install the SPIRE agent.
 | `serviceAccount.name`                             | The name of the service account to use.                                                                                                                                                           | `""`                                                                             |
 | `configMap.annotations`                           | Annotations to add to the SPIRE Agent ConfigMap                                                                                                                                                   | `{}`                                                                             |
 | `podAnnotations`                                  | Annotations to add to pods                                                                                                                                                                        | `{}`                                                                             |
+| `podLabels`                                       | Labels to add to pods                                                                                                                                                                             | `{}`                                                                             |
 | `podSecurityContext`                              | Pod security context                                                                                                                                                                              | `{}`                                                                             |
 | `securityContext`                                 | Security context                                                                                                                                                                                  | `{}`                                                                             |
 | `resources`                                       | Resource requests and limits                                                                                                                                                                      | `{}`                                                                             |

diff --git a/charts/spire/charts/spire-agent/templates/daemonset.yaml b/charts/spire/charts/spire-agent/templates/daemonset.yaml
@@ -40,6 +40,9 @@ spec:
         {{- end }}
       labels:
         {{- include "spire-agent.selectorLabels" . | nindent 8 }}
+        {{- with .Values.podLabels }}
+          {{- toYaml . | nindent 8 }}
+        {{- end }}
     spec:
       {{- with .Values.imagePullSecrets }}
       imagePullSecrets:

diff --git a/charts/spire/charts/spire-agent/values.yaml b/charts/spire/charts/spire-agent/values.yaml
@@ -45,6 +45,9 @@ configMap:
 ## @param podAnnotations [object] Annotations to add to pods
 podAnnotations: {}
 
+## @param podLabels [object] Labels to add to pods
+podLabels: {}
+
 ## @param podSecurityContext [object] Pod security context
 podSecurityContext: {}
   # fsGroup: 2000