k8s-infra-cluster/linkerd/values-identity.yaml
2026-03-25 11:46:39 +01:00

56 lines
2.3 KiB
YAML

nodeSelector:
kubernetes.io/os: linux
# Add a specific worker label if your cluster uses them
# node-role.kubernetes.io/worker: ""
# Ensure we DON'T tolerate the master node taints
tolerations: []
# Force Linkerd to spread across different worker nodes for HA
# affinity:
# nodeAffinity:
# requiredDuringSchedulingIgnoredDuringExecution:
# nodeSelectorTerms:
# - matchExpressions:
# - key: node-role.kubernetes.io/control-plane
# operator: DoesNotExist
# - key: node-role.kubernetes.io/master
# operator: DoesNotExist
identityTrustAnchorsPEM: |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
identity:
issuer:
tls:
crtPEM: |
-----BEGIN CERTIFICATE-----
MIIBtjCCAVygAwIBAgIUdd/8fSGsrGBI7FrbZ1lA+jS489UwCgYIKoZIzj0EAwIw
JTEjMCEGA1UEAwwacm9vdC5saW5rZXJkLmNsdXN0ZXIubG9jYWwwHhcNMjYwMzEz
MjMwNTI2WhcNMjcwMzEzMjMwNTI2WjApMScwJQYDVQQDDB5pZGVudGl0eS5saW5r
ZXJkLmNsdXN0ZXIubG9jYWwwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQHU88u
R1qhnrxcDySFKz4BqLYs/fjGwvD77PqxLp37K23lzbM5UpXVB06cnCB03plrbxg3
VzM4Y3CTU/OgCN0/o2YwZDASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQE
AwIBhjAdBgNVHQ4EFgQUc3Y9kn7kJpEqFvXxFtE302o289AwHwYDVR0jBBgwFoAU
1uwi63bm3tlO4ajCwZC2lUyfn+EwCgYIKoZIzj0EAwIDSAAwRQIhAPjSBYscyTfN
99dm/or5OxYSPIS6WbaySvHrfar+9ReCAiAMkdZ8P5IrGUERW2kKhzU6jWsPfFbw
ddI8y/PwVTDuRw==
-----END CERTIFICATE-----
keyPEM: |
-----BEGIN EC PRIVATE KEY-----
MHcCAQEEIHxdoj94UpVxEjt+kNoLePmjiyRANZFpMVqQj2wAQdeyoAoGCCqGSM49
AwEHoUQDQgAEB1PPLkdaoZ68XA8khSs+Aai2LP34xsLw++z6sS6d+ytt5c2zOVKV
1QdOnJwgdN6Za28YN1czOGNwk1PzoAjdPw==
-----END EC PRIVATE KEY-----