spire

Spire

Run

To apply spire deployments following the next command:

kubectl apply -k .

Wait for PODs status ready:

kubectl wait -n spire --timeout=1m --for=condition=ready pod -l app=spire-agent

kubectl wait -n spire --timeout=1m --for=condition=ready pod -l app=spire-server

Register spire agents in the spire server:

kubectl exec -n spire spire-server-0 -- \
/opt/spire/bin/spire-server entry create \
-spiffeID spiffe://example.org/ns/spire/sa/spire-agent \
-selector k8s_sat:cluster:nsm-cluster \
-selector k8s_sat:agent_ns:spire \
-selector k8s_sat:agent_sa:spire-agent \
-node

Cleanup

Delete ns:

kubectl delete ns spire