add istio workload sds (#1332)

alibaba · Sep 24, 2024 · dc61bfc · dc61bfc
1 parent b247315
commit dc61bfc
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/helm/core/templates/_pod.tpl b/helm/core/templates/_pod.tpl
@@ -167,6 +167,12 @@ template:
           {{- toYaml .Values.gateway.resources | nindent 10 }}
         {{- end }}
         volumeMounts:
+        - mountPath: /var/run/secrets/workload-spiffe-uds
+          name: workload-socket
+        - mountPath: /var/run/secrets/credential-uds
+          name: credential-socket
+        - mountPath: /var/run/secrets/workload-spiffe-credentials
+          name: workload-certs
         {{- if eq (include "controller.jwtPolicy" .) "third-party-jwt" }}
         - name: istio-token
           mountPath: /var/run/secrets/tokens
@@ -245,6 +251,12 @@ template:
       {{- toYaml . | nindent 6 }}
     {{- end }}
     volumes:
+    - emptyDir: {}
+      name: workload-socket
+    - emptyDir: {}
+      name: credential-socket
+    - emptyDir: {}
+      name: workload-certs
     {{- if eq (include "controller.jwtPolicy" .) "third-party-jwt" }}
     - name: istio-token
       projected: