diff --git a/examples/heal/spire-server-restart/README.md b/examples/heal/spire-server-restart/README.md index 33077ee32863..a7565d9720ef 100644 --- a/examples/heal/spire-server-restart/README.md +++ b/examples/heal/spire-server-restart/README.md @@ -57,20 +57,6 @@ Ping from NSE to NSC: kubectl exec deployments/nse-kernel -n ns-spire-server-restart -- ping -c 4 172.16.1.101 ``` -Find SPIRE Agents: -```bash -AGENTS=$(kubectl get pods -l app=spire-agent -n spire --template '{{range .items}}{{.metadata.name}}{{" "}}{{end}}') -``` - -Back to initial state, restart SPIRE agents and wait for them to start: -```bash -kubectl delete pod $AGENTS -n spire -``` - -```bash -kubectl wait --for=condition=ready --timeout=1m pod -l app=spire-agent -n spire -``` - ## Cleanup Delete ns: diff --git a/examples/spire/base/server-statefulset.yaml b/examples/spire/base/server-statefulset.yaml index d96f0917b158..79b312049c93 100644 --- a/examples/spire/base/server-statefulset.yaml +++ b/examples/spire/base/server-statefulset.yaml @@ -34,6 +34,9 @@ spec: readOnly: true - name: spire-server-socket mountPath: /tmp/spire-server/private + - name: spire-data + mountPath: /run/spire/data + readOnly: false livenessProbe: exec: command: @@ -69,3 +72,13 @@ spec: - name: spire-controller-manager-config configMap: name: spire-controller-manager-config + volumeClaimTemplates: + - metadata: + name: spire-data + namespace: spire + spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 1Gi