panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix upstream ca name suffix issue (#361)

Browse Source 
* Fix upstream ca name suffix issue

Signed-off-by: Kevin Fox <[email protected]>

* Fix quoting

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
This commit is contained in:
kfox1111
2024-05-23 09:43:19 -07:00
committed by GitHub
parent f613d1ad5b
commit d2361549db
2 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/README.md
+5
View File
@@ -75,6 +75,11 @@ kubectl delete crds clusterfederatedtrustdomains.spire.spiffe.io clusterspiffeid
We only support upgrading one major version at a time. Version skipping isn't supported. We only support upgrading one major version at a time. Version skipping isn't supported.
### 0.21.X
- In previous versions, spire-server.upstreamAuthority.certManager.issuer_name would incorrectly have '-ca' appended. Starting with this version, that is no longer the case. If you previously set this
value, you likely want to update your value to include the '-ca' suffix in the value to have your deployment continue to function properly.
### 0.20.X ### 0.20.X
- The default service port for the spire-server was changed to be port 443 to allow easier switching between internal access and external access through an ingress controller. For most users, this will be a transparent - The default service port for the spire-server was changed to be port 443 to allow easier switching between internal access and external access through an ingress controller. For most users, this will be a transparent
charts/spire/charts/spire-server/templates/configmap.yaml
+1 -1
View File
@@ -269,7 +269,7 @@ plugins:
UpstreamAuthority: UpstreamAuthority:
cert-manager: cert-manager:
plugin_data: plugin_data:
issuer_name: {{ default (include "spire-server.fullname" $root) .issuer_name }}-ca issuer_name: {{ default (printf "%s-ca" (include "spire-server.fullname" $root)) .issuer_name }}
issuer_kind: {{ .issuer_kind | quote }} issuer_kind: {{ .issuer_kind | quote }}
issuer_group: {{ .issuer_group | quote }} issuer_group: {{ .issuer_group | quote }}
namespace: {{ default $root.Release.Namespace .namespace | quote }} namespace: {{ default $root.Release.Namespace .namespace | quote }}