panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add support for experimental flags (#492)

Browse Source 
Add support for the experimental section of the config. Needed for
developers. This PR doesnt add support for the `auth_opa_policy_engine`
experimental config.

---------

Signed-off-by: Faisal Memon <[email protected]>
This commit is contained in:
Faisal Memon
2023-09-22 14:55:03 -07:00
committed by GitHub
parent 7cdae92333
commit f04bdc3618
4 changed files with 30 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-server/README.md
+3
View File
@@ -279,6 +279,9 @@ In order to run Tornjak with simple HTTP Connection only, make sure you don't cr
| `tornjak.config.clientCA.type` | Type of delivery for the user CA for TLS client verification. Options are `Secret` or `ConfigMap` (required for `mtls` connectionType) | `Secret` | | `tornjak.config.clientCA.type` | Type of delivery for the user CA for TLS client verification. Options are `Secret` or `ConfigMap` (required for `mtls` connectionType) | `Secret` |
| `tornjak.config.clientCA.name` | Name of the resource secret or configMap with user CA for TLS | `tornjak-client-ca` | | `tornjak.config.clientCA.name` | Name of the resource secret or configMap with user CA for TLS | `tornjak-client-ca` |
| `tornjak.resources` | Resource requests and limits | `{}` | | `tornjak.resources` | Resource requests and limits | `{}` |
| `experimental.enabled` | Allow configuration of experimental features | `false` |
| `experimental.cacheReloadInterval` | The amount of time between two reloads of the in-memory entry cache. | `5s` |
| `experimental.featureFlags` | List of developer feature flags | `[]` |
| `tests.hostAliases` | List of host aliases for testing | `[]` | | `tests.hostAliases` | List of host aliases for testing | `[]` |
| `tests.tls.enabled` | Flag for enabling tls for tests | `false` | | `tests.tls.enabled` | Flag for enabling tls for tests | `false` |
| `tests.tls.customCA` | Custom CA value for tests | `""` | | `tests.tls.customCA` | Custom CA value for tests | `""` |
charts/spire/charts/spire-server/templates/configmap.yaml
+13
View File
@@ -49,6 +49,19 @@ server:
{{- end }} {{- end }}
{{- end }} {{- end }}
{{- with .Values.experimental }}
{{- if eq (.enabled | toString) "true" }}
experimental:
cache_reload_interval: {{ .cacheReloadInterval | quote }}
{{- if gt (len .featureFlags) 0 }}
feature_flags:
{{- range .featureFlags }}
- {{ . | quote }}
{{- end }}
{{- end }}
{{- end }}
{{- end }}
plugins: plugins:
DataStore: DataStore:
sql: sql:
charts/spire/charts/spire-server/values.yaml
+8
View File
@@ -628,6 +628,14 @@ customPlugins:
upstreamAuthority: {} upstreamAuthority: {}
notifier: {} notifier: {}
experimental:
## @param experimental.enabled Allow configuration of experimental features
enabled: false
## @param experimental.cacheReloadInterval The amount of time between two reloads of the in-memory entry cache.
cacheReloadInterval: 5s
## @param experimental.featureFlags [array] List of developer feature flags
featureFlags: []
tests: tests:
## @param tests.hostAliases [array] List of host aliases for testing ## @param tests.hostAliases [array] List of host aliases for testing
hostAliases: [] hostAliases: []
charts/spire/templates/NOTES.txt
+6 -2
View File
@@ -3,6 +3,10 @@ Installed {{ .Chart.Name }}…
{{- $s := add (len $up.keyManager) (len $up.nodeAttestor) (len $up.upstreamAuthority) (len $up.notifier) }} {{- $s := add (len $up.keyManager) (len $up.nodeAttestor) (len $up.upstreamAuthority) (len $up.notifier) }}
{{- if gt $s 0 }} {{- if gt $s 0 }}
Warning: Warning: You're using an unsupported plugin. Functionality of this release and future upgrades aren't guaranteed to work smoothly.
You are using an unsupported plugin. Functionality of this release and future upgrades are not guaranteed to work smoothly. {{- end }}
{{- if eq ((index .Values "spire-server").experimental.enabled | toString) "true" }}
Warning: You're using an experimental config. Functionality of this release and future upgrades aren't guaranteed to work smoothly.
{{- end }} {{- end }}