k8s-workload-registrar.conf

log_level = "debug"
trust_domain = "example.org"
agent_socket_path = "/run/spire/sockets/agent.sock"
server_socket_path = "/tmp/spire-server/private/api.sock"
cluster = "nsm-cluster"
pod_controller = true
add_svc_dns_names = true
mode = "crd"
webhook_enabled = true
identity_template = "ns/{{.Pod.Namespace}}/pod/{{.Pod.Name}}"
identity_template_label = "spiffe.io/spiffe-id"