Upgrade Tornjak to new image v1.2.1 (#299)

This upgrade enables the production version of React in Tornjak Frontend
with a smaller footprint and faster startup time.

Using Tornjak v1.2.1 release
https://github.com/spiffe/tornjak/releases/tag/v1.2.1

---------

Signed-off-by: Mariusz Sabath <[email protected]>

charts/spire/charts/spire-server/README.md

@@ -125,8 +125,10 @@ A Helm chart to install the SPIRE server.
 | topologySpreadConstraints | list | `[]` |  |
 | tornjak.config.dataStore | object | `{"driver":"sqlite3","file":"/run/spire/data/tornjak.sqlite3"}` | persistent DB for storing Tornjak specific information |
 | tornjak.enabled | bool | `false` | Deploys Tornjak API (backend) (Not for production) |
-| tornjak.image | object | `{"pullPolicy":"IfNotPresent","registry":"ghcr.io","repository":"spiffe/tornjak-backend","tag":"v1.2.0","version":""}` | Tornjak API image |
-| tornjak.image.tag | string | `"v1.2.0"` | Overrides the image tag |
+| tornjak.image.pullPolicy | string | `"IfNotPresent"` | The Tornjak image pull policy |
+| tornjak.image.registry | string | `"ghcr.io"` | The OCI registry to pull the Tornjak image from |
+| tornjak.image.repository | string | `"spiffe/tornjak-backend"` | The repository within the registry |
+| tornjak.image.tag | string | `"v1.2.1"` | Overrides the image tag |
 | tornjak.image.version | string | `""` | This value is deprecated in favor of tag. (Will be removed in a future release) |
 | tornjak.resources | object | `{}` |  |
 | tornjak.service.annotations | object | `{}` |  |

charts/spire/charts/spire-server/templates/statefulset.yaml

@@ -174,9 +174,9 @@ spec:
             successThreshold: 1
             timeoutSeconds: 5
           args:
-            - -c
+            - --spire-config
             - /run/spire/config/server.conf
-            - -t
+            - --tornjak-config
             - /run/spire/tornjak-config/server.conf
           ports:
             - name: tornjak

charts/spire/charts/spire-server/templates/tornjak-config.yaml

@@ -7,7 +7,12 @@ metadata:
 data:
   server.conf: |
     server {
-      metadata = "insert metadata"
+      spire_socket_path = "unix:///tmp/spire-server/private/api.sock" # socket to communicate with SPIRE server
+
+      http {
+        enabled = true # if true, opens HTTP server
+        port = "10000" # if HTTP enabled, opens HTTP listen port at container port 10000
+      }
     }
 
     plugins {

charts/spire/charts/spire-server/values.yaml

@@ -311,15 +311,17 @@ nodeAttestor:
 tornjak:
   # -- Deploys Tornjak API (backend) (Not for production)
   enabled: false
-  # -- Tornjak API image
   image:
+    # -- The OCI registry to pull the Tornjak image from
     registry: ghcr.io
+    # -- The repository within the registry
     repository: spiffe/tornjak-backend
+    # -- The Tornjak image pull policy
     pullPolicy: IfNotPresent
     # -- This value is deprecated in favor of tag. (Will be removed in a future release)
     version: ""
     # -- Overrides the image tag
-    tag: "v1.2.0"
+    tag: "v1.2.1"
   service:
     type: ClusterIP
     port: 10000