panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update spiffe-helper (#453)

Browse Source 
* Update spiffe-helper

Signed-off-by: Kevin Fox <[email protected]>

* Update .github/tests/images.json

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
This commit is contained in:
kfox1111
2024-09-12 09:49:14 -07:00
committed by GitHub
parent 98b332b63e
commit 3bc70255e7
6 changed files with 125 additions and 120 deletions
Download Patch File Download Diff File Expand all files Collapse all files
examples/mysql-using-spire/mysql-values.yaml
+3 -3
View File
@@ -19,7 +19,7 @@ primary:
- name: spiffe-helper
mountPath: /helper
- name: setup-helper-volume-p2
image: ghcr.io/spiffe/spiffe-helper:nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6
image: ghcr.io/spiffe/spiffe-helper:0.8.0
imagePullPolicy: IfNotPresent
command:
- /helper/busybox
@@ -31,13 +31,13 @@ primary:
- name: spiffe-helper
mountPath: /helper
- name: init-tls
image: ghcr.io/spiffe/spiffe-helper:nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6
image: ghcr.io/spiffe/spiffe-helper:0.8.0
imagePullPolicy: Always
command:
- /spiffe-helper
- -config
- /etc/spiffe-helper.conf
- -exitWhenReady
- -daemon-mode=false
securityContext: {{- omit .Values.primary.containerSecurityContext "enabled" | toYaml | nindent 8 }}
volumeMounts:
- name: spiffe-workload-api
examples/mysql-using-spire/mysqlclient-statefulset.yaml
+3 -3
View File
@@ -16,13 +16,13 @@ spec:
terminationGracePeriodSeconds: 0
initContainers:
- name: init-tls
image: ghcr.io/spiffe/spiffe-helper:nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6
image: ghcr.io/spiffe/spiffe-helper:0.8.0
imagePullPolicy: Always
command:
- /spiffe-helper
- -config
- /etc/spiffe-helper.conf
- -exitWhenReady
- -daemon-mode=false
securityContext:
runAsUser: 1001
runAsGroup: 1001
@@ -47,7 +47,7 @@ spec:
- name: certdir
mountPath: /certs
- name: refresh-tls
image: ghcr.io/spiffe/spiffe-helper:nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6
image: ghcr.io/spiffe/spiffe-helper:0.8.0
imagePullPolicy: Always
command:
- /spiffe-helper