panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add support for experimental flags (#492)

Browse Source 
Add support for the experimental section of the config. Needed for
developers. This PR doesnt add support for the `auth_opa_policy_engine`
experimental config.

---------

Signed-off-by: Faisal Memon <[email protected]>
This commit is contained in:
Faisal Memon
2023-09-22 14:55:03 -07:00
committed by GitHub
parent 7cdae92333
commit f04bdc3618
4 changed files with 30 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-server/README.md
+3
View File
@@ -279,6 +279,9 @@ In order to run Tornjak with simple HTTP Connection only, make sure you don't cr
| `tornjak.config.clientCA.type` | Type of delivery for the user CA for TLS client verification. Options are `Secret` or `ConfigMap` (required for `mtls` connectionType) | `Secret` |
| `tornjak.config.clientCA.name` | Name of the resource secret or configMap with user CA for TLS | `tornjak-client-ca` |
| `tornjak.resources` | Resource requests and limits | `{}` |
| `experimental.enabled` | Allow configuration of experimental features | `false` |
| `experimental.cacheReloadInterval` | The amount of time between two reloads of the in-memory entry cache. | `5s` |
| `experimental.featureFlags` | List of developer feature flags | `[]` |
| `tests.hostAliases` | List of host aliases for testing | `[]` |
| `tests.tls.enabled` | Flag for enabling tls for tests | `false` |
| `tests.tls.customCA` | Custom CA value for tests | `""` |
charts/spire/charts/spire-server/templates/configmap.yaml
+13
View File
@@ -49,6 +49,19 @@ server:
{{- end }}
{{- end }}
{{- with .Values.experimental }}
{{- if eq (.enabled | toString) "true" }}
experimental:
cache_reload_interval: {{ .cacheReloadInterval | quote }}
{{- if gt (len .featureFlags) 0 }}
feature_flags:
{{- range .featureFlags }}
- {{ . | quote }}
{{- end }}
{{- end }}
{{- end }}
{{- end }}
plugins:
DataStore:
sql:
charts/spire/charts/spire-server/values.yaml
+8
View File
@@ -628,6 +628,14 @@ customPlugins:
upstreamAuthority: {}
notifier: {}
experimental:
## @param experimental.enabled Allow configuration of experimental features
enabled: false
## @param experimental.cacheReloadInterval The amount of time between two reloads of the in-memory entry cache.
cacheReloadInterval: 5s
## @param experimental.featureFlags [array] List of developer feature flags
featureFlags: []
tests:
## @param tests.hostAliases [array] List of host aliases for testing
hostAliases: []
charts/spire/templates/NOTES.txt
+6 -2
View File
@@ -3,6 +3,10 @@ Installed {{ .Chart.Name }}…
{{- $s := add (len $up.keyManager) (len $up.nodeAttestor) (len $up.upstreamAuthority) (len $up.notifier) }}
{{- if gt $s 0 }}
Warning:
You are using an unsupported plugin. Functionality of this release and future upgrades are not guaranteed to work smoothly.
Warning: You're using an unsupported plugin. Functionality of this release and future upgrades aren't guaranteed to work smoothly.
{{- end }}
{{- if eq ((index .Values "spire-server").experimental.enabled | toString) "true" }}
Warning: You're using an experimental config. Functionality of this release and future upgrades aren't guaranteed to work smoothly.
{{- end }}