panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bump spire to 1.5.3 to fix oidc healthchecks

Browse Source 
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
This commit is contained in:
Marco Franssen
2023-02-18 13:04:07 +01:00
committed by Marco Franssen
parent aff50434fa
commit 94318b02a6
4 changed files with 20 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/Chart.yaml
+1 -1
View File
@@ -28,7 +28,7 @@ description: |
``` ```
type: application type: application
version: 0.1.0 version: 0.1.0
appVersion: "1.5.2" appVersion: "1.5.3"
keywords: ["spiffe", "spire", "spire-server", "spire-agent", "oidc"] keywords: ["spiffe", "spire", "spire-server", "spire-agent", "oidc"]
home: https://github.com/philips-labs/helm-charts/charts/spire home: https://github.com/philips-labs/helm-charts/charts/spire
sources: sources:
charts/spire/README.md
+3 -3
View File
@@ -1,6 +1,6 @@
# spire # spire
![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.5.2](https://img.shields.io/badge/AppVersion-1.5.2-informational?style=flat-square) ![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.5.3](https://img.shields.io/badge/AppVersion-1.5.3-informational?style=flat-square)
A Helm chart for deploying spire-server and spire-agent. A Helm chart for deploying spire-server and spire-agent.
@@ -80,8 +80,8 @@ Kubernetes: `>=1.21.0-0`
| oidc.config.logLevel | string | `"info"` | | | oidc.config.logLevel | string | `"info"` | |
| oidc.enabled | bool | `false` | | | oidc.enabled | bool | `false` | |
| oidc.image.pullPolicy | string | `"IfNotPresent"` | | | oidc.image.pullPolicy | string | `"IfNotPresent"` | |
| oidc.image.registry | string | `"ghcr.io"` | | | oidc.image.registry | string | `"gcr.io"` | |
| oidc.image.repository | string | `"spiffe/spire-oidc-provider"` | | | oidc.image.repository | string | `"spiffe-io/oidc-discovery-provider"` | |
| oidc.image.version | string | `""` | | | oidc.image.version | string | `""` | |
| oidc.insecureScheme.enabled | bool | `false` | | | oidc.insecureScheme.enabled | bool | `false` | |
| oidc.insecureScheme.nginx.image.pullPolicy | string | `"IfNotPresent"` | | | oidc.insecureScheme.nginx.image.pullPolicy | string | `"IfNotPresent"` | |
charts/spire/templates/oidc-deployment.yaml
+12 -13
View File
@@ -55,19 +55,18 @@ spec:
- name: spire-oidc-config - name: spire-oidc-config
mountPath: /run/spire/oidc/config/ mountPath: /run/spire/oidc/config/
readOnly: true readOnly: true
# Needs new release of spire to fix the http healthchecks readinessProbe:
# readinessProbe: httpGet:
# httpGet: path: /ready
# path: /ready port: health
# port: health initialDelaySeconds: 5
# initialDelaySeconds: 5 periodSeconds: 5
# periodSeconds: 5 livenessProbe:
# livenessProbe: httpGet:
# httpGet: path: /live
# path: /live port: health
# port: health initialDelaySeconds: 5
# initialDelaySeconds: 5 periodSeconds: 5
# periodSeconds: 5
resources: resources:
{{- toYaml .Values.oidc.resources | nindent 12 }} {{- toYaml .Values.oidc.resources | nindent 12 }}
{{- if .Values.oidc.insecureScheme.enabled }} {{- if .Values.oidc.insecureScheme.enabled }}
charts/spire/values.yaml
+4 -4
View File
@@ -165,10 +165,10 @@ oidc:
replicaCount: 1 replicaCount: 1
image: image:
# registry: gcr.io registry: gcr.io
# repository: spiffe-io/oidc-discovery-provider repository: spiffe-io/oidc-discovery-provider
registry: ghcr.io # registry: ghcr.io
repository: spiffe/spire-oidc-provider # repository: spiffe/oidc-discovery-provider
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
version: "" version: ""