panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #74 from spiffe/arm64-support

Browse Source
This commit is contained in:
Marco Franssen
2023-03-01 19:47:12 +01:00
committed by GitHub
parent fea2aa59e2 a3c04c0d22
commit fe7cd731d5
17 changed files with 55 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -1
View File
@@ -19,7 +19,7 @@ Unless otherwise noted in an application chart README, the following dependencie
| Dependency | Supported Versions | | Dependency | Supported Versions |
|:-----------|:-------------------| |:-----------|:-------------------|
| SPIRE | `1.4.x`, `1.5.x` | | SPIRE | `1.5.x`, `1.6.x` |
| Helm | `3.x` | | Helm | `3.x` |
For Kubernetes we will officially try to support the last 3 versions as described in [k8s versioning](https://kubernetes.io/releases/version-skew-policy/#supported-versions). For Kubernetes we will officially try to support the last 3 versions as described in [k8s versioning](https://kubernetes.io/releases/version-skew-policy/#supported-versions).
charts/spire/charts/spiffe-csi-driver/Chart.yaml
+1 -1
View File
@@ -3,4 +3,4 @@ name: spiffe-csi-driver
description: A Helm chart to install the SPIFFE CSI driver. description: A Helm chart to install the SPIFFE CSI driver.
type: application type: application
version: 0.1.0 version: 0.1.0
appVersion: "0.2.1" appVersion: "0.2.3"
charts/spire/charts/spiffe-csi-driver/README.md
+5 -2
View File
@@ -2,10 +2,13 @@
<!-- This README.md is generated. Please edit README.md.gotmpl --> <!-- This README.md is generated. Please edit README.md.gotmpl -->
![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.2.1](https://img.shields.io/badge/AppVersion-0.2.1-informational?style=flat-square) ![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.2.3](https://img.shields.io/badge/AppVersion-0.2.3-informational?style=flat-square)
A Helm chart to install the SPIFFE CSI driver. A Helm chart to install the SPIFFE CSI driver.
> **Note**: The recommended version is `0.2.3` to support arm64 nodes. If running with any
> prior version to `0.2.3` you have to use a `nodeSelector` to limit to `kubernetes.io/arch: amd64`.
## Values ## Values
| Key | Type | Default | Description | | Key | Type | Default | Description |
@@ -23,7 +26,7 @@ A Helm chart to install the SPIFFE CSI driver.
| nodeDriverRegistrar.image.repository | string | `"sig-storage/csi-node-driver-registrar"` | | | nodeDriverRegistrar.image.repository | string | `"sig-storage/csi-node-driver-registrar"` | |
| nodeDriverRegistrar.image.version | string | `"v2.6.2"` | | | nodeDriverRegistrar.image.version | string | `"v2.6.2"` | |
| nodeDriverRegistrar.resources | object | `{}` | | | nodeDriverRegistrar.resources | object | `{}` | |
| nodeSelector."kubernetes.io/arch" | string | `"amd64"` | | | nodeSelector | object | `{}` | |
| podAnnotations | object | `{}` | | | podAnnotations | object | `{}` | |
| podSecurityContext | object | `{}` | | | podSecurityContext | object | `{}` | |
| priorityClassName | string | `""` | Priority class assigned to daemonset pods | | priorityClassName | string | `""` | Priority class assigned to daemonset pods |
charts/spire/charts/spiffe-csi-driver/README.md.gotmpl
+3
View File
@@ -10,6 +10,9 @@
{{ template "chart.homepageLine" . }} {{ template "chart.homepageLine" . }}
> **Note**: The recommended version is `0.2.3` to support arm64 nodes. If running with any
> prior version to `0.2.3` you have to use a `nodeSelector` to limit to `kubernetes.io/arch: amd64`.
{{ template "chart.maintainersSection" . }} {{ template "chart.maintainersSection" . }}
{{ template "chart.sourcesSection" . }} {{ template "chart.sourcesSection" . }}
charts/spire/charts/spiffe-csi-driver/values.yaml
+1 -2
View File
@@ -43,8 +43,7 @@ securityContext:
# drop: # drop:
# - ALL # - ALL
nodeSelector: nodeSelector: {}
kubernetes.io/arch: amd64
nodeDriverRegistrar: nodeDriverRegistrar:
image: image:
charts/spire/charts/spiffe-oidc-discovery-provider/Chart.yaml
+1 -1
View File
@@ -3,4 +3,4 @@ name: spiffe-oidc-discovery-provider
description: A Helm chart to install the SPIFFE OIDC discovery provider. description: A Helm chart to install the SPIFFE OIDC discovery provider.
type: application type: application
version: 0.1.0 version: 0.1.0
appVersion: "1.5.4" appVersion: "1.6.0"
charts/spire/charts/spiffe-oidc-discovery-provider/README.md
+6 -2
View File
@@ -2,10 +2,14 @@
<!-- This README.md is generated. Please edit README.md.gotmpl --> <!-- This README.md is generated. Please edit README.md.gotmpl -->
![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.5.4](https://img.shields.io/badge/AppVersion-1.5.4-informational?style=flat-square) ![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.6.0](https://img.shields.io/badge/AppVersion-1.6.0-informational?style=flat-square)
A Helm chart to install the SPIFFE OIDC discovery provider. A Helm chart to install the SPIFFE OIDC discovery provider.
> **Note**: Minimum Spire version is `1.5.3`.
> The recommended version is `1.6.0` to support arm64 nodes. If running with any
> prior version to `1.6.0` you have to use a `nodeSelector` to limit to `kubernetes.io/arch: amd64`.
## Values ## Values
| Key | Type | Default | Description | | Key | Type | Default | Description |
@@ -36,7 +40,7 @@ A Helm chart to install the SPIFFE OIDC discovery provider.
| insecureScheme.nginx.image.version | string | `"1.23.2-alpine"` | | | insecureScheme.nginx.image.version | string | `"1.23.2-alpine"` | |
| insecureScheme.nginx.resources | object | `{}` | | | insecureScheme.nginx.resources | object | `{}` | |
| nameOverride | string | `""` | | | nameOverride | string | `""` | |
| nodeSelector."kubernetes.io/arch" | string | `"amd64"` | | | nodeSelector | object | `{}` | |
| podAnnotations | object | `{}` | | | podAnnotations | object | `{}` | |
| podSecurityContext | object | `{}` | | | podSecurityContext | object | `{}` | |
| replicaCount | int | `1` | | | replicaCount | int | `1` | |
charts/spire/charts/spiffe-oidc-discovery-provider/README.md.gotmpl
+4
View File
@@ -10,6 +10,10 @@
{{ template "chart.homepageLine" . }} {{ template "chart.homepageLine" . }}
> **Note**: Minimum Spire version is `1.5.3`.
> The recommended version is `1.6.0` to support arm64 nodes. If running with any
> prior version to `1.6.0` you have to use a `nodeSelector` to limit to `kubernetes.io/arch: amd64`.
{{ template "chart.maintainersSection" . }} {{ template "chart.maintainersSection" . }}
{{ template "chart.sourcesSection" . }} {{ template "chart.sourcesSection" . }}
charts/spire/charts/spiffe-oidc-discovery-provider/values.yaml
+1 -2
View File
@@ -102,8 +102,7 @@ autoscaling:
targetCPUUtilizationPercentage: 80 targetCPUUtilizationPercentage: 80
targetMemoryUtilizationPercentage: 80 targetMemoryUtilizationPercentage: 80
nodeSelector: nodeSelector: {}
kubernetes.io/arch: amd64
tolerations: [] tolerations: []
charts/spire/charts/spire-agent/Chart.yaml
+1 -1
View File
@@ -3,4 +3,4 @@ name: spire-agent
description: A Helm chart to install the SPIRE agent. description: A Helm chart to install the SPIRE agent.
type: application type: application
version: 0.1.0 version: 0.1.0
appVersion: "1.5.4" appVersion: "1.6.0"
charts/spire/charts/spire-agent/README.md
+6 -2
View File
@@ -2,10 +2,14 @@
<!-- This README.md is generated. Please edit README.md.gotmpl --> <!-- This README.md is generated. Please edit README.md.gotmpl -->
![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.5.4](https://img.shields.io/badge/AppVersion-1.5.4-informational?style=flat-square) ![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.6.0](https://img.shields.io/badge/AppVersion-1.6.0-informational?style=flat-square)
A Helm chart to install the SPIRE agent. A Helm chart to install the SPIRE agent.
> **Note**: Minimum Spire version is `1.5.3`.
> The recommended version is `1.6.0` to support arm64 nodes. If running with any
> prior version to `1.6.0` you have to use a `nodeSelector` to limit to `kubernetes.io/arch: amd64`.
## Values ## Values
| Key | Type | Default | Description | | Key | Type | Default | Description |
@@ -21,7 +25,7 @@ A Helm chart to install the SPIRE agent.
| imagePullSecrets | list | `[]` | | | imagePullSecrets | list | `[]` | |
| logLevel | string | `"info"` | | | logLevel | string | `"info"` | |
| nameOverride | string | `""` | | | nameOverride | string | `""` | |
| nodeSelector."kubernetes.io/arch" | string | `"amd64"` | | | nodeSelector | object | `{}` | |
| podAnnotations | object | `{}` | | | podAnnotations | object | `{}` | |
| podSecurityContext | object | `{}` | | | podSecurityContext | object | `{}` | |
| priorityClassName | string | `""` | Priority class assigned to daemonset pods | | priorityClassName | string | `""` | Priority class assigned to daemonset pods |
charts/spire/charts/spire-agent/README.md.gotmpl
+4
View File
@@ -10,6 +10,10 @@
{{ template "chart.homepageLine" . }} {{ template "chart.homepageLine" . }}
> **Note**: Minimum Spire version is `1.5.3`.
> The recommended version is `1.6.0` to support arm64 nodes. If running with any
> prior version to `1.6.0` you have to use a `nodeSelector` to limit to `kubernetes.io/arch: amd64`.
{{ template "chart.maintainersSection" . }} {{ template "chart.maintainersSection" . }}
{{ template "chart.sourcesSection" . }} {{ template "chart.sourcesSection" . }}
charts/spire/charts/spire-agent/values.yaml
+1 -2
View File
@@ -49,8 +49,7 @@ resources: {}
# cpu: 100m # cpu: 100m
# memory: 128Mi # memory: 128Mi
nodeSelector: nodeSelector: {}
kubernetes.io/arch: amd64
logLevel: info logLevel: info
clusterName: example-cluster clusterName: example-cluster
charts/spire/charts/spire-server/Chart.yaml
+1 -1
View File
@@ -3,4 +3,4 @@ name: spire-server
description: A Helm chart to install the SPIRE server. description: A Helm chart to install the SPIRE server.
type: application type: application
version: 0.1.0 version: 0.1.0
appVersion: "1.5.4" appVersion: "1.6.0"
charts/spire/charts/spire-server/README.md
+10 -3
View File
@@ -2,10 +2,17 @@
<!-- This README.md is generated. Please edit README.md.gotmpl --> <!-- This README.md is generated. Please edit README.md.gotmpl -->
![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.5.4](https://img.shields.io/badge/AppVersion-1.5.4-informational?style=flat-square) ![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.6.0](https://img.shields.io/badge/AppVersion-1.6.0-informational?style=flat-square)
A Helm chart to install the SPIRE server. A Helm chart to install the SPIRE server.
> **Note**: Minimum Spire version is `1.5.3`.
> The recommended version is `1.6.0` to support arm64 nodes. If running with any
> prior version to `1.6.0` you have to use a `nodeSelector` to limit to `kubernetes.io/arch: amd64`.
>
> The recommended spire-controller-manager version is `0.2.2` to support arm64 nodes. If running with any
> prior version to `0.2.2` you have to use a `nodeSelector` to limit to `kubernetes.io/arch: amd64`.
## Values ## Values
| Key | Type | Default | Description | | Key | Type | Default | Description |
@@ -32,7 +39,7 @@ A Helm chart to install the SPIRE server.
| controllerManager.image.pullPolicy | string | `"IfNotPresent"` | | | controllerManager.image.pullPolicy | string | `"IfNotPresent"` | |
| controllerManager.image.registry | string | `"ghcr.io"` | | | controllerManager.image.registry | string | `"ghcr.io"` | |
| controllerManager.image.repository | string | `"spiffe/spire-controller-manager"` | | | controllerManager.image.repository | string | `"spiffe/spire-controller-manager"` | |
| controllerManager.image.version | string | `"0.2.1"` | | | controllerManager.image.version | string | `"0.2.2"` | |
| controllerManager.resources | object | `{}` | | | controllerManager.resources | object | `{}` | |
| controllerManager.securityContext | object | `{}` | | | controllerManager.securityContext | object | `{}` | |
| controllerManager.service.annotations | object | `{}` | | | controllerManager.service.annotations | object | `{}` | |
@@ -51,7 +58,7 @@ A Helm chart to install the SPIRE server.
| jwtIssuer | string | `"oidc-discovery.example.org"` | | | jwtIssuer | string | `"oidc-discovery.example.org"` | |
| logLevel | string | `"info"` | | | logLevel | string | `"info"` | |
| nameOverride | string | `""` | | | nameOverride | string | `""` | |
| nodeSelector."kubernetes.io/arch" | string | `"amd64"` | | | nodeSelector | object | `{}` | |
| podAnnotations | object | `{}` | | | podAnnotations | object | `{}` | |
| podSecurityContext | object | `{}` | | | podSecurityContext | object | `{}` | |
| replicaCount | int | `1` | SPIRE server currently runs with a sqlite database. Scaling to multiple instances will not work until we use an external database. | | replicaCount | int | `1` | SPIRE server currently runs with a sqlite database. Scaling to multiple instances will not work until we use an external database. |
charts/spire/charts/spire-server/README.md.gotmpl
+7
View File
@@ -10,6 +10,13 @@
{{ template "chart.homepageLine" . }} {{ template "chart.homepageLine" . }}
> **Note**: Minimum Spire version is `1.5.3`.
> The recommended version is `1.6.0` to support arm64 nodes. If running with any
> prior version to `1.6.0` you have to use a `nodeSelector` to limit to `kubernetes.io/arch: amd64`.
>
> The recommended spire-controller-manager version is `0.2.2` to support arm64 nodes. If running with any
> prior version to `0.2.2` you have to use a `nodeSelector` to limit to `kubernetes.io/arch: amd64`.
{{ template "chart.maintainersSection" . }} {{ template "chart.maintainersSection" . }}
{{ template "chart.sourcesSection" . }} {{ template "chart.sourcesSection" . }}
charts/spire/charts/spire-server/values.yaml
+2 -3
View File
@@ -64,8 +64,7 @@ autoscaling:
targetCPUUtilizationPercentage: 80 targetCPUUtilizationPercentage: 80
# targetMemoryUtilizationPercentage: 80 # targetMemoryUtilizationPercentage: 80
nodeSelector: nodeSelector: {}
kubernetes.io/arch: amd64
tolerations: [] tolerations: []
@@ -114,7 +113,7 @@ controllerManager:
repository: spiffe/spire-controller-manager repository: spiffe/spire-controller-manager
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
# Overrides the image tag whose default is the chart appVersion. # Overrides the image tag whose default is the chart appVersion.
version: "0.2.1" version: "0.2.2"
resources: {} resources: {}
# We usually recommend not to specify default resources and to leave this as a conscious # We usually recommend not to specify default resources and to leave this as a conscious