Update spiffe-helper (#453)
* Update spiffe-helper Signed-off-by: Kevin Fox <[email protected]> * Update .github/tests/images.json Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>
This commit is contained in:
kfox1111
@@ -63,6 +63,11 @@
|
|||||||
"query": "tests.busybox.image",
|
"query": "tests.busybox.image",
|
||||||
"filter": "^[0-9]\\+\\.[0-9]\\+\\.[0-9]\\+-uclibc$",
|
"filter": "^[0-9]\\+\\.[0-9]\\+\\.[0-9]\\+-uclibc$",
|
||||||
"sort-flags": ["-t", ".", "-k1,1n", "-k2,2n", "-k3,3n"]
|
"sort-flags": ["-t", ".", "-k1,1n", "-k2,2n", "-k3,3n"]
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"query": "spiffeHelper.image",
|
||||||
|
"filter": "LATESTSHA",
|
||||||
|
"sort-flags": []
|
||||||
}
|
}
|
||||||
],
|
],
|
||||||
"tornjak-frontend/values.yaml": [
|
"tornjak-frontend/values.yaml": [
|
||||||
|
|||||||
@@ -26,7 +26,7 @@ A Helm chart to install the SPIFFE OIDC discovery provider.
|
|||||||
### Chart parameters
|
### Chart parameters
|
||||||
|
|
||||||
| Name | Description | Value |
|
| Name | Description | Value |
|
||||||
| ----------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------- |
|
| ----------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------- |
|
||||||
| `agentSocketName` | The name of the spire-agent unix socket | `spire-agent.sock` |
|
| `agentSocketName` | The name of the spire-agent unix socket | `spire-agent.sock` |
|
||||||
| `csiDriverName` | The csi driver to use | `csi.spiffe.io` |
|
| `csiDriverName` | The csi driver to use | `csi.spiffe.io` |
|
||||||
| `replicaCount` | Replica count | `1` |
|
| `replicaCount` | Replica count | `1` |
|
||||||
@@ -39,7 +39,7 @@ A Helm chart to install the SPIFFE OIDC discovery provider.
|
|||||||
| `spiffeHelper.image.registry` | The OCI registry to pull the image from | `ghcr.io` |
|
| `spiffeHelper.image.registry` | The OCI registry to pull the image from | `ghcr.io` |
|
||||||
| `spiffeHelper.image.repository` | The repository within the registry | `spiffe/spiffe-helper` |
|
| `spiffeHelper.image.repository` | The repository within the registry | `spiffe/spiffe-helper` |
|
||||||
| `spiffeHelper.image.pullPolicy` | The image pull policy | `IfNotPresent` |
|
| `spiffeHelper.image.pullPolicy` | The image pull policy | `IfNotPresent` |
|
||||||
| `spiffeHelper.image.tag` | Overrides the image tag whose default is the chart appVersion | `nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6` |
|
| `spiffeHelper.image.tag` | Overrides the image tag whose default is the chart appVersion | `0.8.0` |
|
||||||
| `spiffeHelper.resources` | Resource requests and limits | `{}` |
|
| `spiffeHelper.resources` | Resource requests and limits | `{}` |
|
||||||
| `resources` | Resource requests and limits | `{}` |
|
| `resources` | Resource requests and limits | `{}` |
|
||||||
| `service.type` | Service type | `ClusterIP` |
|
| `service.type` | Service type | `ClusterIP` |
|
||||||
|
|||||||
@@ -50,7 +50,7 @@ spec:
|
|||||||
args:
|
args:
|
||||||
- -config
|
- -config
|
||||||
- /etc/spiffe-helper.conf
|
- /etc/spiffe-helper.conf
|
||||||
- -exitWhenReady
|
- -daemon-mode=false
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: spiffe-workload-api
|
- name: spiffe-workload-api
|
||||||
mountPath: {{ include "spiffe-oidc-discovery-provider.workload-api-socket-path" . | dir }}
|
mountPath: {{ include "spiffe-oidc-discovery-provider.workload-api-socket-path" . | dir }}
|
||||||
|
|||||||
@@ -41,7 +41,7 @@ spiffeHelper:
|
|||||||
registry: ghcr.io
|
registry: ghcr.io
|
||||||
repository: spiffe/spiffe-helper
|
repository: spiffe/spiffe-helper
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
tag: nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6
|
tag: 0.8.0
|
||||||
## @param spiffeHelper.resources [object] Resource requests and limits
|
## @param spiffeHelper.resources [object] Resource requests and limits
|
||||||
resources: {}
|
resources: {}
|
||||||
|
|
||||||
|
|||||||
@@ -19,7 +19,7 @@ primary:
|
|||||||
- name: spiffe-helper
|
- name: spiffe-helper
|
||||||
mountPath: /helper
|
mountPath: /helper
|
||||||
- name: setup-helper-volume-p2
|
- name: setup-helper-volume-p2
|
||||||
image: ghcr.io/spiffe/spiffe-helper:nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6
|
image: ghcr.io/spiffe/spiffe-helper:0.8.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
command:
|
command:
|
||||||
- /helper/busybox
|
- /helper/busybox
|
||||||
@@ -31,13 +31,13 @@ primary:
|
|||||||
- name: spiffe-helper
|
- name: spiffe-helper
|
||||||
mountPath: /helper
|
mountPath: /helper
|
||||||
- name: init-tls
|
- name: init-tls
|
||||||
image: ghcr.io/spiffe/spiffe-helper:nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6
|
image: ghcr.io/spiffe/spiffe-helper:0.8.0
|
||||||
imagePullPolicy: Always
|
imagePullPolicy: Always
|
||||||
command:
|
command:
|
||||||
- /spiffe-helper
|
- /spiffe-helper
|
||||||
- -config
|
- -config
|
||||||
- /etc/spiffe-helper.conf
|
- /etc/spiffe-helper.conf
|
||||||
- -exitWhenReady
|
- -daemon-mode=false
|
||||||
securityContext: {{- omit .Values.primary.containerSecurityContext "enabled" | toYaml | nindent 8 }}
|
securityContext: {{- omit .Values.primary.containerSecurityContext "enabled" | toYaml | nindent 8 }}
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: spiffe-workload-api
|
- name: spiffe-workload-api
|
||||||
|
|||||||
@@ -16,13 +16,13 @@ spec:
|
|||||||
terminationGracePeriodSeconds: 0
|
terminationGracePeriodSeconds: 0
|
||||||
initContainers:
|
initContainers:
|
||||||
- name: init-tls
|
- name: init-tls
|
||||||
image: ghcr.io/spiffe/spiffe-helper:nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6
|
image: ghcr.io/spiffe/spiffe-helper:0.8.0
|
||||||
imagePullPolicy: Always
|
imagePullPolicy: Always
|
||||||
command:
|
command:
|
||||||
- /spiffe-helper
|
- /spiffe-helper
|
||||||
- -config
|
- -config
|
||||||
- /etc/spiffe-helper.conf
|
- /etc/spiffe-helper.conf
|
||||||
- -exitWhenReady
|
- -daemon-mode=false
|
||||||
securityContext:
|
securityContext:
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsGroup: 1001
|
runAsGroup: 1001
|
||||||
@@ -47,7 +47,7 @@ spec:
|
|||||||
- name: certdir
|
- name: certdir
|
||||||
mountPath: /certs
|
mountPath: /certs
|
||||||
- name: refresh-tls
|
- name: refresh-tls
|
||||||
image: ghcr.io/spiffe/spiffe-helper:nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6
|
image: ghcr.io/spiffe/spiffe-helper:0.8.0
|
||||||
imagePullPolicy: Always
|
imagePullPolicy: Always
|
||||||
command:
|
command:
|
||||||
- /spiffe-helper
|
- /spiffe-helper
|
||||||
|
|||||||
Reference in New Issue
Block a user