UpstreamAuthority cert-manager support (#82)

2023-03-03 20:48:35 +01:00
parent a82ee694bf
commit d341c5ad58
8 changed files with 95 additions and 0 deletions
@@ -0,0 +1,31 @@
+---
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: selfsigned-issuer
+spec:
+  selfSigned: {}
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: demo-selfsigned-ca
+spec:
+  isCA: true
+  commonName: demo-selfsigned-ca
+  secretName: root-secret
+  privateKey:
+    algorithm: ECDSA
+    size: 256
+  issuerRef:
+    name: selfsigned-issuer
+    kind: Issuer
+    group: cert-manager.io
+---
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: demo-ca
+spec:
+  ca:
+    secretName: root-secret
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+
+helm install cert-manager cert-manager --namespace cert-manager --create-namespace --version v1.11.0 --set installCRDs=true --repo https://charts.jetstack.io --wait
+SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
+kubectl apply -f $SCRIPT_DIR/cert-manager-ca.yaml -n "$VALUES"
@@ -0,0 +1,5 @@
+spire-server:
+  upstreamAuthority:
+    certManager:
+      enabled: true
+      issuer_name: "demo-ca"
@@ -151,7 +151,15 @@ jobs:

      - name: Run chart-testing (install)
        run: |
+          [ "$VALUES" != "default" ] && kubectl create namespace "$VALUES"
+          post-install() {
+            [ -x .github/tests/$VALUES/post-install.sh ] && .github/tests/$VALUES/post-install.sh
+            exit $1
+          }
+          trap 'post-install $? $LINENO' EXIT
+          [ -x .github/tests/$VALUES/pre-install.sh ] && .github/tests/$VALUES/pre-install.sh
          ct install --debug \
+            --namespace $VALUES \
            --target-branch ${{ github.base_ref }} \
            --exclude-deprecated \
            ${{ (matrix.values != 'default' && '--helm-extra-set-args "--values=.github/tests/$VALUES/values.yaml"') || '' }}