How to install the SPIRE stack using the SPIRE Helm charts

Quick start

To do a quick install suitable for non production environments such as minikube:

helm upgrade --install --create-namespace -n spire spire-crds spire-crds \

helm upgrade --install -n spire spire spire \

Production Deployment

Preparing a production deployment requires a few extra steps.

  1. Save the following to your-values.yaml, ideally in your git repo.
  openshift: false # If running on openshift, set to true
      enabled: true
      create: true
    ingressControllerType: "" # If not openshift, and want to expose services, set to a supported option [ingress-nginx]
    # Update these
    clusterName: example-cluster
      country: ARPA
      organization: Example
  1. If you need a non default storageClass, append the following to the spire-server section and update:
    storageClass: your-storage-class
  1. If your Kubernetes cluster is OpenShift based, use the output of the following command to update the trustDomain setting:
oc get cm -n openshift-config-managed  console-public -o go-template="{{ .data.consoleURL }}" | \
  sed 's@https://@@; s/^[^.]*\.//'
  1. Find any additional values you might want to set based on the documentation on this site or the examples. In particular, consider using an external database.

  2. Deploy

helm upgrade --install --create-namespace -n spire-mgmt spire-crds spire-crds \

helm upgrade --install -n spire-mgmt spire spire \
 --repo \
 -f your-values.yaml