Merge pull request #420 from spiffe/release-patch-0-11-1
Cut patch release 0.11.1
This commit is contained in:
Faisal Memon
@@ -1,18 +0,0 @@
|
||||
dependencies:
|
||||
- name: spire-server
|
||||
repository: file://./charts/spire-server
|
||||
version: 0.1.0
|
||||
- name: spire-agent
|
||||
repository: file://./charts/spire-agent
|
||||
version: 0.1.0
|
||||
- name: spiffe-csi-driver
|
||||
repository: file://./charts/spiffe-csi-driver
|
||||
version: 0.1.0
|
||||
- name: spiffe-oidc-discovery-provider
|
||||
repository: file://./charts/spiffe-oidc-discovery-provider
|
||||
version: 0.1.0
|
||||
- name: tornjak-frontend
|
||||
repository: file://./charts/tornjak-frontend
|
||||
version: 0.1.0
|
||||
digest: sha256:0119361a3dd54d1cf088f299ce9adbee55a96c832cb675f57e5e115acf7b17c7
|
||||
generated: "2023-07-19T19:13:59.722106+02:00"
|
||||
@@ -3,8 +3,8 @@ name: spire
|
||||
description: >
|
||||
A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager.
|
||||
type: application
|
||||
version: 0.11.0
|
||||
appVersion: "1.7.0"
|
||||
version: 0.11.1
|
||||
appVersion: "1.7.1"
|
||||
keywords: ["spiffe", "spire", "spire-server", "spire-agent", "oidc", "spire-controller-manager"]
|
||||
home: https://github.com/spiffe/helm-charts/tree/main/charts/spire
|
||||
sources:
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|
||||
<!-- This README.md is generated. Please edit README.md.gotmpl -->
|
||||
|
||||
  
|
||||
  
|
||||
[](https://github.com/spiffe/spiffe/blob/main/MATURITY.md#development)
|
||||
|
||||
A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager.
|
||||
@@ -156,6 +156,7 @@ Now you can interact with the Spire agent socket from your own application. The
|
||||
| spiffe-csi-driver.tolerations | list | `[]` | |
|
||||
| spiffe-oidc-discovery-provider.affinity | object | `{}` | |
|
||||
| spiffe-oidc-discovery-provider.agentSocketName | string | `"spire-agent.sock"` | The name of the spire-agent unix socket |
|
||||
| spiffe-oidc-discovery-provider.annotations | object | `{}` | Annotations for the deployment |
|
||||
| spiffe-oidc-discovery-provider.autoscaling.enabled | bool | `false` | |
|
||||
| spiffe-oidc-discovery-provider.autoscaling.maxReplicas | int | `5` | |
|
||||
| spiffe-oidc-discovery-provider.autoscaling.minReplicas | int | `1` | |
|
||||
@@ -283,6 +284,7 @@ Now you can interact with the Spire agent socket from your own application. The
|
||||
| spire-agent.waitForIt.image.tag | string | `"latest-20230517"` | Overrides the image tag |
|
||||
| spire-agent.waitForIt.image.version | string | `""` | This value is deprecated in favor of tag. (Will be removed in a future release) |
|
||||
| spire-agent.waitForIt.resources | object | `{}` | |
|
||||
| spire-agent.workloadAttestors.k8s.disableContainerSelectors | bool | `false` | Set to true if using holdApplicationUntilProxyStarts in Istio |
|
||||
| spire-agent.workloadAttestors.k8s.skipKubeletVerification | bool | `true` | If true, kubelet certificate verification is skipped |
|
||||
| spire-agent.workloadAttestors.unix.enabled | bool | `false` | enables the Unix workload attestor |
|
||||
| spire-server.affinity | object | `{}` | |
|
||||
|
||||
@@ -3,7 +3,7 @@ name: spiffe-oidc-discovery-provider
|
||||
description: A Helm chart to install the SPIFFE OIDC discovery provider.
|
||||
type: application
|
||||
version: 0.1.0
|
||||
appVersion: "1.7.0"
|
||||
appVersion: "1.7.1"
|
||||
keywords: ["spiffe", "oidc"]
|
||||
home: https://github.com/spiffe/helm-charts/tree/main/charts/spire
|
||||
sources:
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|
||||
<!-- This README.md is generated. Please edit README.md.gotmpl -->
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
A Helm chart to install the SPIFFE OIDC discovery provider.
|
||||
|
||||
@@ -31,6 +31,7 @@ A Helm chart to install the SPIFFE OIDC discovery provider.
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| agentSocketName | string | `"spire-agent.sock"` | The name of the spire-agent unix socket |
|
||||
| annotations | object | `{}` | Annotations for the deployment |
|
||||
| autoscaling.enabled | bool | `false` | |
|
||||
| autoscaling.maxReplicas | int | `5` | |
|
||||
| autoscaling.minReplicas | int | `1` | |
|
||||
|
||||
@@ -6,6 +6,10 @@ metadata:
|
||||
namespace: {{ include "spiffe-oidc-discovery-provider.namespace" . }}
|
||||
labels:
|
||||
{{- include "spiffe-oidc-discovery-provider.labels" . | nindent 4 }}
|
||||
annotations:
|
||||
{{- with .Values.annotations }}
|
||||
{{- toYaml . | nindent 4 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- if not .Values.autoscaling.enabled }}
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
|
||||
@@ -12,6 +12,9 @@ replicaCount: 1
|
||||
|
||||
namespaceOverride: ""
|
||||
|
||||
# -- Annotations for the deployment
|
||||
annotations: {}
|
||||
|
||||
image:
|
||||
# -- The OCI registry to pull the image from
|
||||
registry: ghcr.io
|
||||
|
||||
@@ -3,7 +3,7 @@ name: spire-agent
|
||||
description: A Helm chart to install the SPIRE agent.
|
||||
type: application
|
||||
version: 0.1.0
|
||||
appVersion: "1.7.0"
|
||||
appVersion: "1.7.1"
|
||||
keywords: ["spiffe", "spire-agent"]
|
||||
home: https://github.com/spiffe/helm-charts/tree/main/charts/spire
|
||||
sources:
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|
||||
<!-- This README.md is generated. Please edit README.md.gotmpl -->
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
A Helm chart to install the SPIRE agent.
|
||||
|
||||
@@ -85,6 +85,7 @@ A Helm chart to install the SPIRE agent.
|
||||
| waitForIt.image.tag | string | `"latest-20230517"` | Overrides the image tag |
|
||||
| waitForIt.image.version | string | `""` | This value is deprecated in favor of tag. (Will be removed in a future release) |
|
||||
| waitForIt.resources | object | `{}` | |
|
||||
| workloadAttestors.k8s.disableContainerSelectors | bool | `false` | Set to true if using holdApplicationUntilProxyStarts in Istio |
|
||||
| workloadAttestors.k8s.skipKubeletVerification | bool | `true` | If true, kubelet certificate verification is skipped |
|
||||
| workloadAttestors.unix.enabled | bool | `false` | enables the Unix workload attestor |
|
||||
|
||||
|
||||
@@ -30,6 +30,7 @@ plugins:
|
||||
# Minikube does not have a cert in the cluster CA bundle that
|
||||
# can authenticate the kubelet cert, so skip validation.
|
||||
skip_kubelet_verification: {{ .Values.workloadAttestors.k8s.skipKubeletVerification }}
|
||||
disable_container_selectors: {{ .Values.workloadAttestors.k8s.disableContainerSelectors }}
|
||||
|
||||
{{- if .Values.workloadAttestors.unix.enabled }}
|
||||
- unix:
|
||||
|
||||
@@ -137,6 +137,8 @@ workloadAttestors:
|
||||
k8s:
|
||||
# -- If true, kubelet certificate verification is skipped
|
||||
skipKubeletVerification: true
|
||||
# -- Set to true if using holdApplicationUntilProxyStarts in Istio
|
||||
disableContainerSelectors: false
|
||||
|
||||
telemetry:
|
||||
prometheus:
|
||||
|
||||
@@ -3,7 +3,7 @@ name: spire-server
|
||||
description: A Helm chart to install the SPIRE server.
|
||||
type: application
|
||||
version: 0.1.0
|
||||
appVersion: "1.7.0"
|
||||
appVersion: "1.7.1"
|
||||
keywords: ["spiffe", "spire-server", "spire-controller-manager"]
|
||||
home: https://github.com/spiffe/helm-charts/tree/main/charts/spire
|
||||
sources:
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|
||||
<!-- This README.md is generated. Please edit README.md.gotmpl -->
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
A Helm chart to install the SPIRE server.
|
||||
|
||||
|
||||
@@ -78,7 +78,7 @@ plugins:
|
||||
UpstreamAuthority:
|
||||
- cert-manager:
|
||||
plugin_data:
|
||||
issuer_name: {{ default (include "spire-server.fullname" $root) .issuer_name }}
|
||||
issuer_name: {{ default (include "spire-server.fullname" $root) .issuer_name }}-ca
|
||||
issuer_kind: {{ .issuer_kind | quote }}
|
||||
issuer_group: {{ .issuer_group | quote }}
|
||||
namespace: {{ default $root.Release.Namespace .namespace | quote }}
|
||||
|
||||
@@ -1,12 +1,13 @@
|
||||
{{- with .Values.upstreamAuthority.certManager }}
|
||||
{{ if and .enabled .ca.create }}
|
||||
{{ $issuerName := printf "%s-selfsigned" (default (include "spire-server.fullname" $) .issuer_name) }}
|
||||
{{/*
|
||||
Configuring CA Issuer: https://cert-manager.io/docs/configuration/ca/
|
||||
*/}}
|
||||
apiVersion: cert-manager.io/v1
|
||||
kind: Issuer
|
||||
metadata:
|
||||
name: {{ include "spire-server.fullname" $ }}-selfsigned
|
||||
name: {{ $issuerName }}
|
||||
namespace: {{ include "spire-server.namespace" $ }}
|
||||
labels:
|
||||
{{- include "spire-server.labels" $ | nindent 4}}
|
||||
@@ -38,14 +39,14 @@ spec:
|
||||
renewBefore: {{ . }}
|
||||
{{- end }}
|
||||
issuerRef:
|
||||
name: {{ include "spire-server.fullname" $ }}-selfsigned
|
||||
name: {{ $issuerName }}
|
||||
kind: Issuer
|
||||
group: cert-manager.io
|
||||
---
|
||||
apiVersion: cert-manager.io/v1
|
||||
kind: Issuer
|
||||
metadata:
|
||||
name: {{ include "spire-server.fullname" $ }}
|
||||
name: {{ include "spire-server.fullname" $ }}-ca
|
||||
namespace: {{ include "spire-server.namespace" $ }}
|
||||
spec:
|
||||
ca:
|
||||
|
||||
@@ -55,7 +55,7 @@ spec:
|
||||
- --timeout=3m
|
||||
- --for=condition=ready
|
||||
- issuer
|
||||
- {{ include "spire-server.fullname" $ }}
|
||||
- {{ include "spire-server.fullname" $ }}-ca
|
||||
imagePullPolicy: {{ .Values.tools.kubectl.image.pullPolicy }}
|
||||
{{- end }}
|
||||
{{- if gt (len .Values.initContainers) 0 }}
|
||||
|
||||
Reference in New Issue
Block a user