feature: add awsSecretsManager upstreamAuthority (#772)

* feature: add awsSecretsManager upstreamAuthority

Signed-off-by: gcavalcante8808 <[email protected]>

* Bump test chart dependencies (#773)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Signed-off-by: gcavalcante8808 <[email protected]>

* Fix docs (#1)

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: gcavalcante8808 <[email protected]>

---------

Signed-off-by: gcavalcante8808 <[email protected]>
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: spire-helm-version-checker[bot] <161522935+spire-helm-version-checker[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
This commit is contained in:
Gabriel Abdalla Cavalcante
2026-03-26 11:43:19 -07:00
committed by GitHub
co-authored by marcofranssen spire-helm-version-checker[bot] kfox1111
parent f78c1d4246
commit bf4bd8199e
3 changed files with 36 additions and 0 deletions
@@ -448,6 +448,19 @@ upstreamAuthority:
endpoint: ""
## @param upstreamAuthority.awsPCA.supplementalBundlePath (Optional) Path to a file containing PEM-encoded CA certificates that should be additionally included in the bundle.
supplementalBundlePath: ""
awsSecret:
## @param upstreamAuthority.awsSecret.enabled Flag to enable upstream authority plugin with AWS Secrets Manager
enabled: false
## @param upstreamAuthority.awsSecret.region AWS Region to use
region: ""
## @param upstreamAuthority.awsSecret.certFileArn ARN or name of the secret containing the intermediate CA certificate
certFileArn: ""
## @param upstreamAuthority.awsSecret.keyFileArn ARN or name of the secret containing the intermediate CA private key
keyFileArn: ""
## @param upstreamAuthority.awsSecret.bundleFileArn (Optional) ARN or name of the secret containing the root CA bundle
bundleFileArn: ""
## @param upstreamAuthority.awsSecret.assumeRoleArn (Optional) ARN of an IAM role to assume
assumeRoleArn: ""
certManager:
## @param upstreamAuthority.certManager.enabled Flag to enable upstream authority plugin with cert manager
enabled: false