Use spire csi driver for agent socket

Signed-off-by: Marco Franssen <marco.franssen@philips.com>

Author: marcofranssen

charts/spire-client-example/templates/NOTES.txt

@@ -2,4 +2,4 @@
 
   export CLIENT_EXAMPLE=$(kubectl -n {{ .Release.Namespace }} get pods -o jsonpath="{.items[0].metadata.name}" -l app.kubernetes.io/name={{ .Chart.Name }})
   kubectl -n {{ .Release.Namespace }} exec -it $CLIENT_EXAMPLE -- \
-    bin/spire-agent api fetch -socketPath /run/spire/sockets/agent.sock
+    bin/spire-agent api fetch -socketPath /spiffe-workload-api/spire-agent.sock

charts/spire-client-example/templates/client-deployment.yaml

@@ -51,18 +51,18 @@ spec:
                 - /opt/spire/bin/spire-agent
                 - healthcheck
                 - -socketPath
-                - /run/spire/sockets/agent.sock
+                - /spiffe-workload-api/spire-agent.sock
           resources:
             {{- toYaml .Values.resources | nindent 12 }}
           volumeMounts:
-            - name: spire-agent-socket
-              mountPath: /run/spire/sockets
+            - name: spiffe-workload-api
+              mountPath: /spiffe-workload-api
               readOnly: true
       volumes:
-        - name: spire-agent-socket
-          hostPath:
-            path: /run/spire/sockets
-            type: Directory
+        - name: spiffe-workload-api
+          csi:
+            driver: "csi.spiffe.io"
+            readOnly: true
       {{- with .Values.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}