Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion AGENTS.md
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,7 @@ cp config.env.example config.env # populate with Connect API details
./prerequisites.sh # verify tooling and log in
```

`config.env` must be populated before running any deployment script. It sets `CONNECT_URL`, `CONNECT_TRUST_DOMAIN`, `CONNECT_BUNDLE_HOST`, `AUTHORIZATION_DOMAIN`, `AUTHORIZATION_CLIENT_ID`, `NAMESPACE`, and `LOCAL`.
`config.env` must be populated before running any deployment script. It sets `CONNECT_URL`, `CONNECT_TRUST_DOMAIN`, `CONNECT_BUNDLE_HOST`, `OAUTH_CLIENT_ID`, `NAMESPACE`, and `LOCAL`.

### Running deployments

Expand Down
4 changes: 1 addition & 3 deletions workloads/config.env.example
Original file line number Diff line number Diff line change
Expand Up @@ -4,10 +4,8 @@ CONNECT_URL="<connect host:port>"
CONNECT_TRUST_DOMAIN="<connect trust domain>"
# Bundle endpoint host of Connect API.
CONNECT_BUNDLE_HOST="<connect bundle host>"
# Domain of authorization provider.
AUTHORIZATION_DOMAIN="<authz domain>"
# Client ID for authorization.
AUTHORIZATION_CLIENT_ID="<authz client ID>"
OAUTH_CLIENT_ID="<authz client ID>"
# Kubernetes namespace for validation workload.
NAMESPACE=production
# If the Kubernetes clusters are local (Kind).
Expand Down
3 changes: 1 addition & 2 deletions workloads/federated-cofidectl-tf.sh
Original file line number Diff line number Diff line change
Expand Up @@ -60,8 +60,7 @@ cofidectl connect init \
--connect-url $CONNECT_URL \
--connect-trust-domain $CONNECT_TRUST_DOMAIN \
--connect-bundle-host $CONNECT_BUNDLE_HOST \
--authorization-domain $AUTHORIZATION_DOMAIN \
--authorization-client-id $AUTHORIZATION_CLIENT_ID \
--oauth-client-id $OAUTH_CLIENT_ID \
--use-join-token

set +x
Expand Down
3 changes: 1 addition & 2 deletions workloads/federated-cofidectl.sh
Original file line number Diff line number Diff line change
Expand Up @@ -51,8 +51,7 @@ cofidectl connect init \
--connect-url $CONNECT_URL \
--connect-trust-domain $CONNECT_TRUST_DOMAIN \
--connect-bundle-host $CONNECT_BUNDLE_HOST \
--authorization-domain $AUTHORIZATION_DOMAIN \
--authorization-client-id $AUTHORIZATION_CLIENT_ID \
--oauth-client-id $OAUTH_CLIENT_ID \
--use-join-token

cofidectl trust-zone add \
Expand Down
3 changes: 1 addition & 2 deletions workloads/federated-helm-tf-eks.sh
Original file line number Diff line number Diff line change
Expand Up @@ -92,8 +92,7 @@ cofidectl connect init \
--connect-url $CONNECT_URL \
--connect-trust-domain $CONNECT_TRUST_DOMAIN \
--connect-bundle-host $CONNECT_BUNDLE_HOST \
--authorization-domain $AUTHORIZATION_DOMAIN \
--authorization-client-id $AUTHORIZATION_CLIENT_ID
--oauth-client-id $OAUTH_CLIENT_ID

## Deploy SPIRE components using Helm

Expand Down
4 changes: 1 addition & 3 deletions workloads/login.sh
Original file line number Diff line number Diff line change
Expand Up @@ -13,9 +13,7 @@ cofidectl connect init \
--connect-url $CONNECT_URL \
--connect-trust-domain $CONNECT_TRUST_DOMAIN \
--connect-bundle-host $CONNECT_BUNDLE_HOST \
--authorization-domain $AUTHORIZATION_DOMAIN \
--authorization-client-id $AUTHORIZATION_CLIENT_ID \
--connect-datasource
--oauth-client-id $OAUTH_CLIENT_ID

if ! cofidectl connect login --check; then
cofidectl connect login
Expand Down
3 changes: 1 addition & 2 deletions workloads/multi-mesh-cofidectl.sh
Original file line number Diff line number Diff line change
Expand Up @@ -73,8 +73,7 @@ cofidectl connect init \
--connect-url $CONNECT_URL \
--connect-trust-domain $CONNECT_TRUST_DOMAIN \
--connect-bundle-host $CONNECT_BUNDLE_HOST \
--authorization-domain $AUTHORIZATION_DOMAIN \
--authorization-client-id $AUTHORIZATION_CLIENT_ID \
--oauth-client-id $OAUTH_CLIENT_ID \
--use-join-token

cofidectl trust-zone add \
Expand Down
3 changes: 1 addition & 2 deletions workloads/single-trust-zone-cofidectl-eks.sh
Original file line number Diff line number Diff line change
Expand Up @@ -29,8 +29,7 @@ cofidectl connect init \
--connect-url $CONNECT_URL \
--connect-trust-domain $CONNECT_TRUST_DOMAIN \
--connect-bundle-host $CONNECT_BUNDLE_HOST \
--authorization-domain $AUTHORIZATION_DOMAIN \
--authorization-client-id $AUTHORIZATION_CLIENT_ID
--oauth-client-id $OAUTH_CLIENT_ID

cofidectl trust-zone add \
$WORKLOAD_TRUST_ZONE_1 \
Expand Down
3 changes: 1 addition & 2 deletions workloads/single-trust-zone-cofidectl-tf.sh
Original file line number Diff line number Diff line change
Expand Up @@ -42,8 +42,7 @@ cofidectl connect init \
--connect-url $CONNECT_URL \
--connect-trust-domain $CONNECT_TRUST_DOMAIN \
--connect-bundle-host $CONNECT_BUNDLE_HOST \
--authorization-domain $AUTHORIZATION_DOMAIN \
--authorization-client-id $AUTHORIZATION_CLIENT_ID \
--oauth-client-id $OAUTH_CLIENT_ID \
--use-join-token

set +x
Expand Down
3 changes: 1 addition & 2 deletions workloads/single-trust-zone-cofidectl.sh
Original file line number Diff line number Diff line change
Expand Up @@ -41,8 +41,7 @@ cofidectl connect init \
--connect-url $CONNECT_URL \
--connect-trust-domain $CONNECT_TRUST_DOMAIN \
--connect-bundle-host $CONNECT_BUNDLE_HOST \
--authorization-domain $AUTHORIZATION_DOMAIN \
--authorization-client-id $AUTHORIZATION_CLIENT_ID \
--oauth-client-id $OAUTH_CLIENT_ID \
--use-oss-spire

cofidectl trust-zone add \
Expand Down