Enable running the oidc discovery provider without cluster-admin/CSI (#570)

* Update for 1.12.3

Signed-off-by: Kevin Fox <[email protected]>

* Fix typo. Use test image

Signed-off-by: Kevin Fox <[email protected]>

* Fix lint

Signed-off-by: Kevin Fox <[email protected]>

* Fix format flag. Update config location for k8s configmap bp

Signed-off-by: Kevin Fox <[email protected]>

* Fix role

Signed-off-by: Kevin Fox <[email protected]>

* Update rbac

Signed-off-by: Kevin Fox <[email protected]>

* Fix key

Signed-off-by: Kevin Fox <[email protected]>

* Fix format

Signed-off-by: Kevin Fox <[email protected]>

* Fix the bundle format for the fetchca bits

Signed-off-by: Kevin Fox <[email protected]>

* Update key

Signed-off-by: Kevin Fox <[email protected]>

* Fix test rather then reconfigure

Signed-off-by: Kevin Fox <[email protected]>

* Add namespace

Signed-off-by: Kevin Fox <[email protected]>

* Update to follow the new patch

Signed-off-by: Kevin Fox <[email protected]>

* Fix formatting

Signed-off-by: Kevin Fox <[email protected]>

* Fix formatting

Signed-off-by: Kevin Fox <[email protected]>

* Update filename based on format

Signed-off-by: Kevin Fox <[email protected]>

* Add upgrade notes

Signed-off-by: Kevin Fox <[email protected]>

* Enable running the oidc discovery provider without cluster-admin/CSI

Signed-off-by: Kevin Fox <[email protected]>

* Calm lint

Signed-off-by: Kevin Fox <[email protected]>

* Switch to testing nightly. Dont manage bundle configmap.

Signed-off-by: Kevin Fox <[email protected]>

* Update permissions

Signed-off-by: Kevin Fox <[email protected]>

* Update permissions

Signed-off-by: Kevin Fox <[email protected]>

* Update permissions

Signed-off-by: Kevin Fox <[email protected]>

* Update for final release

Signed-off-by: Kevin Fox <[email protected]>

* Update for final 1.12.4 release

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>

examples/static-manifest-server/values.yaml

@@ -17,7 +17,7 @@ spire-server:
            selectors:
            - tpm:pub_hash:12345
         foo-kubelet:
-           parentID: spiffe://example.org/foo
+           parentID: spiffe://example.org/hosts/foo
            spiffeID: spiffe://example.org/k8s/one/node/foo
            selectors:
            - systemd:id:kubelet.service
@@ -28,4 +28,8 @@ spire-agent:
 spiffe-csi-driver:
   enabled: false
 spiffe-oidc-discovery-provider:
-  enabled: false
+  enabled: true
+  bundleSource: ConfigMap
+  tls:
+    spire:
+      enabled: false