MeshIdentity with Spire providerv2.12+
Apply a MeshIdentity policy using the Spire certificate provider to all data plane proxies.
Prerequisites
- A MeshService resource must be configured in your mesh.
Apply a MeshIdentity policy using the Spire certificate provider to all data plane proxies.
apiVersion: kuma.io/v1alpha1
kind: MeshIdentity
metadata:
name: identity-spire
namespace: kong-mesh-demo
labels:
kuma.io/mesh: default
spec:
selector:
dataplane:
matchLabels: {}
spiffeID:
trustDomain: default.us-east.mesh.local
path: "/ns/{{ .Namespace }}/sa/{{ .ServiceAccount }}"
provider:
type: Spire
spire: {}