|
apiVersion: spire.spiffe.io/v1alpha1
|
|
kind: ClusterSPIFFEID
|
|
metadata:
|
|
name: example
|
|
spec:
|
|
spiffeIDTemplate: "spiffe://{{ .TrustDomain }}/ns/{{ .PodMeta.Namespace }}/sa/{{ .PodSpec.ServiceAccountName }}"
|
|
podSelector:
|
|
matchLabels:
|
|
spiffe.io/spire-managed-identity: "true"
|