panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update spike to the newest version (#665)

Browse Source 
* Update spike bits

Signed-off-by: Kevin Fox <[email protected]>

* Update

Signed-off-by: Kevin Fox <[email protected]>

* Update

Signed-off-by: Kevin Fox <[email protected]>

* Add trust roots.

SPIKE SDK uses the appropriate trust root from the environment which makes SDK usage easier, but it requires additional env vars on the pod meta.

Signed-off-by: Volkan Özçelik <[email protected]>

* Chart updates to make it work with the new SDK changes of SPIKE.

Signed-off-by: Volkan Özçelik <[email protected]>

* Making the self-reference more evident.

Signed-off-by: Volkan Özçelik <[email protected]>

* Documentation update.

Signed-off-by: Volkan Özçelik <[email protected]>

* Documentation update.

Signed-off-by: Volkan Özçelik <[email protected]>

* updates to align with recent SPIKE.

* SPIKE assumes all trust roots can be arrays (for distributed setups), modified values accordingly.
* Added cross-references between bootstrap and keeper job/statefulsets for PoP validation to work.
* other possible minor updates.

Signed-off-by: Volkan Özçelik <[email protected]>

* minor changes.

Signed-off-by: Volkan Özçelik <[email protected]>

* Update docs

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: Volkan Özçelik <[email protected]>
Co-authored-by: Volkan Özçelik <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
This commit is contained in:
kfox1111
2026-01-23 12:32:18 -08:00
committed by GitHub
co-authored by Volkan Özçelik Faisal Memon
parent 97c383b1cb
commit 813203a4d2
16 changed files with 268 additions and 78 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spike-keeper/Chart.yaml
+1 -1
View File
@@ -3,7 +3,7 @@ name: spike-keeper
description: A Helm chart to deploy SPIKE Keeper
type: application
version: 0.1.0
appVersion: "0.4.2"
appVersion: "0.5.0"
home: https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire
sources:
- https://github.com/spiffe/spike
charts/spire/charts/spike-keeper/README.md
+3 -1
View File
@@ -35,7 +35,9 @@ A Helm chart to deploy spike keepers
| `image.pullPolicy` | The image pull policy | `IfNotPresent` |
| `image.tag` | Overrides the image tag whose default is the chart appVersion | `""` |
| `replicas` | The number of keepers to launch | `3` |
| `trustRoot.nexus` | Override which trustRoot Nexus is in | `""` |
| `trustRoot.nexus` | Override which trustRoot(s) Nexus is in (array) | `[]` |
| `trustRoot.bootstrap` | Override which trustRoot(s) Bootstrap is in (array) | `[]` |
| `trustRoot.self` | Override which trustRoot(s) this Keeper instance is in (array) | `[]` |
| `logLevel` | The log level, valid values are "debug", "info", "warn", and "error" | `debug` |
| `agentSocketName` | The name of the spire-agent unix socket | `spire-agent.sock` |
| `csiDriverName` | The csi driver to use | `csi.spiffe.io` |
charts/spire/charts/spike-keeper/templates/statefulset.yaml
+6 -1
View File
@@ -43,8 +43,13 @@ spec:
value: {{ .Values.logLevel | upper }}
- name: SPIKE_TRUST_ROOT
value: {{ include "spire-lib.trust-domain" . }}
- name: SPIKE_TRUST_ROOT_KEEPER
value: {{ if gt (len .Values.trustRoot.self) 0 }}{{ .Values.trustRoot.self | join "," | quote }}{{ else }}{{ include "spire-lib.trust-domain" . }}{{ end }}
- name: SPIKE_TRUST_ROOT_NEXUS
value: {{if eq .Values.trustRoot.nexus "" }}{{ include "spire-lib.trust-domain" . }}{{ else }}{{.Values.trustRoot.nexus }}{{ end }}
value: {{ if gt (len .Values.trustRoot.nexus) 0 }}{{ .Values.trustRoot.nexus | join "," | quote }}{{ else }}{{ include "spire-lib.trust-domain" . }}{{ end }}
- name: SPIKE_TRUST_ROOT_BOOTSTRAP
value: {{ if gt (len .Values.trustRoot.bootstrap) 0 }}{{ .Values.trustRoot.bootstrap | join "," | quote }}{{ else }}{{ include "spire-lib.trust-domain" . }}{{ end }}
- name: SPIKE_KEEPER_TLS_PORT
value: ":8443"
{{- if .Values.startupProbe.enabled }}
charts/spire/charts/spike-keeper/values.yaml
+6 -2
View File
@@ -21,8 +21,12 @@ image:
replicas: 3
trustRoot:
## @param trustRoot.nexus Override which trustRoot Nexus is in
nexus: ""
## @param trustRoot.nexus Override which trustRoot(s) Nexus is in (array)
nexus: []
## @param trustRoot.bootstrap Override which trustRoot(s) Bootstrap is in (array)
bootstrap: []
## @param trustRoot.self Override which trustRoot(s) this Keeper instance is in (array)
self: []
## @param logLevel The log level, valid values are "debug", "info", "warn", and "error"
logLevel: debug