diff --git a/charts/spiffe-step-ssh/Chart.lock b/charts/spiffe-step-ssh/Chart.lock new file mode 100644 index 0000000..fc4b986 --- /dev/null +++ b/charts/spiffe-step-ssh/Chart.lock @@ -0,0 +1,9 @@ +dependencies: +- name: spire-lib + repository: file://../spire-lib + version: 0.2.0 +- name: step-certificates + repository: https://smallstep.github.io/helm-charts/ + version: 1.27.4 +digest: sha256:19fb792ca3e02fca49734ba7028d51767ce3b0f973745bdd636d4751c20d426c +generated: "2026-06-06T08:12:58.836548-07:00" diff --git a/charts/spiffe-step-ssh/Chart.yaml b/charts/spiffe-step-ssh/Chart.yaml index 811fe1b..3766590 100644 --- a/charts/spiffe-step-ssh/Chart.yaml +++ b/charts/spiffe-step-ssh/Chart.yaml @@ -1,7 +1,6 @@ apiVersion: v2 name: spiffe-step-ssh description: sshd signed host certificates using SPIFFE for trust and step CA - # A chart can be either an 'application' or a 'library' chart. # # Application charts are a collection of templates that can be packaged into versioned archives @@ -11,18 +10,15 @@ description: sshd signed host certificates using SPIFFE for trust and step CA # a dependency of application charts to inject those utilities and functions into the rendering # pipeline. Library charts do not define any templates and therefore cannot be deployed. type: application - # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 0.1.2 - +version: 0.2.0 # This is the version number of the application being deployed. This version number should be # incremented each time you make changes to the application. Versions are not expected to # follow Semantic Versioning. They should reflect the version the application is using. # It is recommended to use it with quotes. appVersion: "1.16.0" - keywords: ["spiffe", "step", "step-ca", "ssh"] home: https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spiffe-step-ssh sources: @@ -31,11 +27,10 @@ icon: https://spiffe.io/img/logos/spire/icon/color/spire-icon-color.png maintainers: - name: kfox1111 email: Kevin.Fox@pnnl.gov - dependencies: - name: spire-lib repository: file://../spire-lib - version: 0.1.0 + version: 0.2.0 - name: step-certificates alias: step repository: https://smallstep.github.io/helm-charts/ diff --git a/charts/spire-ha-agent/Chart.lock b/charts/spire-ha-agent/Chart.lock index 23659e9..0724bd5 100644 --- a/charts/spire-ha-agent/Chart.lock +++ b/charts/spire-ha-agent/Chart.lock @@ -1,6 +1,6 @@ dependencies: - name: spire-lib repository: file://../spire-lib - version: 0.1.0 -digest: sha256:0c6454c06ba554747a20ec39b7fee1fe4632eb49ceedb8aafacbc9f0bbc84b78 -generated: "2026-04-05T16:27:01.136911-07:00" + version: 0.2.0 +digest: sha256:f17805c78abdb768f21d46305bfe1f80f014e5c3c8c585ca30d5ec54ad5dab38 +generated: "2026-06-06T08:13:04.718181-07:00" diff --git a/charts/spire-ha-agent/Chart.yaml b/charts/spire-ha-agent/Chart.yaml index fe65224..6a1f5cb 100644 --- a/charts/spire-ha-agent/Chart.yaml +++ b/charts/spire-ha-agent/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: spire-ha-agent description: A Helm chart to install the SPIRE HA agent. type: application -version: 0.1.0 +version: 0.2.0 appVersion: "0.0.17" keywords: ["spiffe", "spire-ha-agent"] home: https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire-ha-agent @@ -20,4 +20,4 @@ maintainers: dependencies: - name: spire-lib repository: file://../spire-lib - version: 0.1.0 + version: 0.2.0 diff --git a/charts/spire-lib/Chart.yaml b/charts/spire-lib/Chart.yaml index 3d4e561..2c21a0c 100644 --- a/charts/spire-lib/Chart.yaml +++ b/charts/spire-lib/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: spire-lib description: A library of helper templates for SPIRE charts. type: library -version: 0.1.0 +version: 0.2.0 appVersion: "0.1.0" keywords: ["spiffe", "spire", "library"] home: https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire-lib diff --git a/charts/spire-lib/README.md b/charts/spire-lib/README.md index 0fd47f0..a5e5d98 100644 --- a/charts/spire-lib/README.md +++ b/charts/spire-lib/README.md @@ -7,7 +7,7 @@ A [Helm Library Chart](https://helm.sh/docs/topics/library_charts/#helm) for gro ```yaml dependencies: - name: spire-lib - version: 0.1.0 + version: 0.2.0 repository: https://spiffe.github.io/helm-charts-hardened/ ``` diff --git a/charts/spire-nested/Chart.lock b/charts/spire-nested/Chart.lock new file mode 100644 index 0000000..366382a --- /dev/null +++ b/charts/spire-nested/Chart.lock @@ -0,0 +1,72 @@ +dependencies: +- name: spire-lib + repository: file://../spire-lib + version: 0.2.0 +- name: spire-server + repository: file://../spire/charts/spire-server + version: 0.1.0 +- name: spire-server + repository: file://../spire/charts/spire-server + version: 0.1.0 +- name: spire-server + repository: file://../spire/charts/spire-server + version: 0.1.0 +- name: spire-server + repository: file://../spire/charts/spire-server + version: 0.1.0 +- name: spire-server + repository: file://../spire/charts/spire-server + version: 0.1.0 +- name: spire-agent + repository: file://../spire/charts/spire-agent + version: 0.1.0 +- name: spire-agent + repository: file://../spire/charts/spire-agent + version: 0.1.0 +- name: spire-agent + repository: file://../spire/charts/spire-agent + version: 0.1.0 +- name: spiffe-csi-driver + repository: file://../spire/charts/spiffe-csi-driver + version: 0.1.0 +- name: spiffe-csi-driver + repository: file://../spire/charts/spiffe-csi-driver + version: 0.1.0 +- name: spiffe-oidc-discovery-provider + repository: file://../spire/charts/spiffe-oidc-discovery-provider + version: 0.1.0 +- name: tornjak-frontend + repository: file://../spire/charts/tornjak-frontend + version: 0.1.0 +- name: spiffe-csi-driver + repository: file://../spire/charts/spiffe-csi-driver + version: 0.1.0 +- name: spire-ha-agent + repository: file://../spire-ha-agent + version: 0.2.0 +- name: spire-server + repository: file://../spire/charts/spire-server + version: 0.1.0 +- name: spire-agent + repository: file://../spire/charts/spire-agent + version: 0.1.0 +- name: spiffe-csi-driver + repository: file://../spire/charts/spiffe-csi-driver + version: 0.1.0 +- name: spiffe-csi-driver + repository: file://../spire/charts/spiffe-csi-driver + version: 0.1.0 +- name: spire-server + repository: file://../spire/charts/spire-server + version: 0.1.0 +- name: spire-agent + repository: file://../spire/charts/spire-agent + version: 0.1.0 +- name: spiffe-csi-driver + repository: file://../spire/charts/spiffe-csi-driver + version: 0.1.0 +- name: spiffe-csi-driver + repository: file://../spire/charts/spiffe-csi-driver + version: 0.1.0 +digest: sha256:31c9c0410c08f27c65d38dc78967699b65ed289aa9064b7167673abfe6d219d6 +generated: "2026-06-06T08:13:06.564494-07:00" diff --git a/charts/spire-nested/Chart.yaml b/charts/spire-nested/Chart.yaml index e12c36a..b5f3a00 100644 --- a/charts/spire-nested/Chart.yaml +++ b/charts/spire-nested/Chart.yaml @@ -2,8 +2,9 @@ apiVersion: v2 name: spire-nested description: > A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager. + type: application -version: 0.28.5 +version: 0.29.0 appVersion: "1.15.1" keywords: ["spiffe", "spire", "spire-server", "spire-agent", "oidc", "spire-controller-manager"] home: https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire @@ -22,90 +23,90 @@ kubeVersion: ">=1.21.0-0" dependencies: - name: spire-lib repository: file://../spire-lib - version: 0.1.0 + version: 0.2.0 - name: spire-server alias: root-spire-server condition: root-spire-server.enabled tags: - - nestedRoot + - nestedRoot repository: file://../spire/charts/spire-server version: 0.1.0 - name: spire-server alias: external-root-spire-server-full condition: external-root-spire-server-full.enabled tags: - - nestedChildFull + - nestedChildFull repository: file://../spire/charts/spire-server version: 0.1.0 - name: spire-server alias: external-root-spire-server-security condition: external-root-spire-server-security.enabled tags: - - nestedChildSecurity + - nestedChildSecurity repository: file://../spire/charts/spire-server version: 0.1.0 - name: spire-server alias: internal-spire-server condition: internal-spire-server.enabled tags: - - nestedRoot - - nestedChildFull + - nestedRoot + - nestedChildFull repository: file://../spire/charts/spire-server version: 0.1.0 - name: spire-server alias: external-spire-server condition: external-spire-server.enabled tags: - - nestedRoot + - nestedRoot repository: file://../spire/charts/spire-server version: 0.1.0 - name: spire-agent alias: downstream-spire-agent-full condition: downstream-spire-agent-full.enabled tags: - - nestedRoot - - nestedChildFull + - nestedRoot + - nestedChildFull repository: file://../spire/charts/spire-agent version: 0.1.0 - name: spire-agent alias: downstream-spire-agent-security condition: downstream-spire-agent-security.enabled tags: - - nestedChildSecurity + - nestedChildSecurity repository: file://../spire/charts/spire-agent version: 0.1.0 - name: spire-agent alias: upstream-spire-agent condition: upstream-spire-agent.enabled tags: - - nestedRoot - - nestedChildFull + - nestedRoot + - nestedChildFull repository: file://../spire/charts/spire-agent version: 0.1.0 - name: spiffe-csi-driver alias: downstream-spiffe-csi-driver condition: downstream-spiffe-csi-driver.enabled tags: - - nestedRoot - - nestedChildFull - - nestedChildSecurity + - nestedRoot + - nestedChildFull + - nestedChildSecurity repository: file://../spire/charts/spiffe-csi-driver version: 0.1.0 - name: spiffe-csi-driver alias: upstream-spiffe-csi-driver condition: upstream-spiffe-csi-driver.enabled tags: - - nestedRoot - - nestedChildFull + - nestedRoot + - nestedChildFull repository: file://../spire/charts/spiffe-csi-driver version: 0.1.0 - name: spiffe-oidc-discovery-provider condition: spiffe-oidc-discovery-provider.enabled tags: - - nestedRoot - - nestedChildFull - - nestedChildSecurity - - haAgentCommon + - nestedRoot + - nestedChildFull + - nestedChildSecurity + - haAgentCommon repository: file://../spire/charts/spiffe-oidc-discovery-provider version: 0.1.0 - name: tornjak-frontend @@ -117,67 +118,67 @@ dependencies: version: 0.1.0 condition: spiffe-csi-driver.enabled tags: - - haAgentCommon + - haAgentCommon - name: spire-ha-agent repository: file://../spire-ha-agent - version: 0.1.0 + version: 0.2.0 condition: spire-ha-agent.enabled tags: - - haAgentCommon + - haAgentCommon - name: spire-server alias: internal-spire-server-bottom-turtle-ha-a condition: internal-spire-server-bottom-turtle-ha-a.enabled tags: - - bottomTurtleHAA + - bottomTurtleHAA repository: file://../spire/charts/spire-server version: 0.1.0 - name: spire-agent alias: downstream-spire-agent-bottom-turtle-ha-a condition: downstream-spire-agent-bottom-turtle-ha-a.enabled tags: - - bottomTurtleHAA + - bottomTurtleHAA repository: file://../spire/charts/spire-agent version: 0.1.0 - name: spiffe-csi-driver alias: downstream-spiffe-csi-driver-bottom-turtle-ha-a condition: downstream-spiffe-csi-driver-bottom-turtle-ha-a.enabled tags: - - bottomTurtleHAA + - bottomTurtleHAA repository: file://../spire/charts/spiffe-csi-driver version: 0.1.0 - name: spiffe-csi-driver alias: upstream-spiffe-csi-driver-bottom-turtle-ha-a condition: upstream-spiffe-csi-driver-bottom-turtle-ha-a.enabled tags: - - bottomTurtleHAA + - bottomTurtleHAA repository: file://../spire/charts/spiffe-csi-driver version: 0.1.0 - name: spire-server alias: internal-spire-server-bottom-turtle-ha-b condition: internal-spire-server-bottom-turtle-ha-b.enabled tags: - - bottomTurtleHAB + - bottomTurtleHAB repository: file://../spire/charts/spire-server version: 0.1.0 - name: spire-agent alias: downstream-spire-agent-bottom-turtle-ha-b condition: downstream-spire-agent-bottom-turtle-ha-b.enabled tags: - - bottomTurtleHAB + - bottomTurtleHAB repository: file://../spire/charts/spire-agent version: 0.1.0 - name: spiffe-csi-driver alias: downstream-spiffe-csi-driver-bottom-turtle-ha-b condition: downstream-spiffe-csi-driver-bottom-turtle-ha-b.enabled tags: - - bottomTurtleHAB + - bottomTurtleHAB repository: file://../spire/charts/spiffe-csi-driver version: 0.1.0 - name: spiffe-csi-driver alias: upstream-spiffe-csi-driver-bottom-turtle-ha-b condition: upstream-spiffe-csi-driver-bottom-turtle-ha-b.enabled tags: - - bottomTurtleHAB + - bottomTurtleHAB repository: file://../spire/charts/spiffe-csi-driver version: 0.1.0 annotations: diff --git a/charts/spire/Chart.lock b/charts/spire/Chart.lock index e80fbb5..23a8843 100644 --- a/charts/spire/Chart.lock +++ b/charts/spire/Chart.lock @@ -1,7 +1,7 @@ dependencies: - name: spire-lib repository: file://../spire-lib - version: 0.1.0 + version: 0.2.0 - name: spire-server repository: file://./charts/spire-server version: 0.1.0 @@ -32,5 +32,5 @@ dependencies: - name: spike-pilot repository: file://./charts/spike-pilot version: 0.1.0 -digest: sha256:59ed273c48633e8a1ae07be0e1628c9f21849b865dae10195ce46d68c093b4b2 -generated: "2026-04-05T16:48:18.584331-07:00" +digest: sha256:c93438bb4c5317a25ffef1ce93dbd6c9dbd07295e101377e9a2bb8320ee14622 +generated: "2026-06-06T08:13:02.92098-07:00" diff --git a/charts/spire/Chart.yaml b/charts/spire/Chart.yaml index 86a96c3..bacf1df 100644 --- a/charts/spire/Chart.yaml +++ b/charts/spire/Chart.yaml @@ -2,8 +2,9 @@ apiVersion: v2 name: spire description: > A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager. + type: application -version: 0.28.5 +version: 0.29.0 appVersion: "1.14.5" keywords: ["spiffe", "spire", "spire-server", "spire-agent", "oidc", "spire-controller-manager"] home: https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire @@ -24,7 +25,7 @@ kubeVersion: ">=1.21.0-0" dependencies: - name: spire-lib repository: file://../spire-lib - version: 0.1.0 + version: 0.2.0 - name: spire-server condition: spire-server.enabled repository: file://./charts/spire-server diff --git a/ct.yaml b/ct.yaml index d796424..a877ef4 100644 --- a/ct.yaml +++ b/ct.yaml @@ -6,6 +6,7 @@ chart-repos: - spiffe=https://spiffe.github.io/helm-charts-hardened/ - bitnami=https://charts.bitnami.com/bitnami - ingress-nginx=https://kubernetes.github.io/ingress-nginx + - smallstep=https://smallstep.github.io/helm-charts/ exclude-deprecated: true debug: true helm-extra-args: "--timeout 15m"