helm-charts-hardened

Author	SHA1	Message	Date
Kevin Fox	dc689035c7	Bump spire-lib and dependent Helm Chart versions (patch) * `c6381219` feat(gateway): expose gatewayAPI.gateway.infrastructure passthrough (#939) Signed-off-by: Kevin Fox <[email protected]>	2026-09-08 18:40:52 -07:00
Kevin Fox	3b4e7a1bd3	Bump spire-lib and dependent Helm Chart versions (patch) * `ab5e5d86` fix(spiffe-oidc-discovery-provider): run under restricted PSA/SCC on OpenShift (#920) Signed-off-by: Kevin Fox <[email protected]>	2026-08-23 00:11:20 -07:00
Kevin Fox	12269d4f33	Bump spire-lib and dependent Helm Chart versions (minor) * `3cfefb72` Gateway api support (#890) * `76873394` Enable easy plugin loading (#859) Signed-off-by: Kevin Fox <[email protected]>	2026-08-01 20:19:04 -07:00
kfox1111	3cfefb72ba	Gateway api support (#890 ) * Gateway api support Signed-off-by: Kevin Fox <[email protected]> * Update readme Signed-off-by: Kevin Fox <[email protected]> * Fix gateway name. a gateway doesnt need to be named gateway Signed-off-by: Kevin Fox <[email protected]> * Fix naming issue Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2026-07-30 19:38:43 +00:00
Faisal MemonandKevin Fox	98ec4e680b	Bump spire-lib Helm Chart version from 0.1.0 to 0.2.0 (#822 ) * Bump spire-lib and dependent Helm Chart versions (minor) * `3c1dec30` fix casing of svidStore (#787) Signed-off-by: Faisal Memon <[email protected]> * Add missing repo reference Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Faisal Memon <[email protected]> Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Kevin Fox <[email protected]>	2026-06-06 10:33:41 -07:00
Faisal Memon	d334bfde50	Bump spiffe-step-ssh Helm Chart version from 0.1.1 to 0.1.2 (#794 ) * `9273f11f` Support root-level spire-lib chart reuse (#785) Signed-off-by: Faisal Memon <[email protected]>	2026-04-11 08:52:09 -07:00
Faisal Memon	9273f11f0a	Support root-level spire-lib chart reuse (#785 ) * Add root-level spire-lib chart Signed-off-by: Faisal Memon <[email protected]> * Make spire consume root-level spire-lib Signed-off-by: Faisal Memon <[email protected]> * Prepare chart dependencies in CI Signed-off-by: Faisal Memon <[email protected]> * Document DCO requirement in CODEX Signed-off-by: Faisal Memon <[email protected]> * Centralize local chart dependency prep Signed-off-by: Faisal Memon <[email protected]> * Exclude spire-lib from chart-testing install Signed-off-by: Faisal Memon <[email protected]> * Rename CODEX guide to AGENTS Signed-off-by: Faisal Memon <[email protected]> * Add make target for chart dependencies Signed-off-by: Faisal Memon <[email protected]> --------- Signed-off-by: Faisal Memon <[email protected]>	2026-04-09 05:14:05 -07:00
Faisal Memonandkfox1111	8443881250	Bump spiffe-step-ssh Helm Chart version from 0.1.0 to 0.1.1 (#640 ) * Bump spiffe-step-ssh Helm Chart version from 0.1.0 to 0.1.1 * `a7d536c0` tools: Replace rancher/kubectl with registry.k8s.io/kubectl Signed-off-by: Faisal Memon <[email protected]> * Update charts/spiffe-step-ssh/Chart.yaml Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2025-08-05 03:27:50 -07:00
Marco Franssen	a7d536c025	tools: Replace rancher/kubectl with registry.k8s.io/kubectl To have an always up to date kubectl image it is probably better to get kubectl from registry.k8s.io Signed-off-by: Marco Franssen <[email protected]>	2025-07-08 19:24:08 +02:00
Faisal Memonandkfox1111	17d31f1789	Bump spiffe-step-ssh Helm Chart version from 0.0.1 to 0.1.0 (#499 ) Signed-off-by: Faisal Memon <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-11-17 14:48:08 -08:00
kfox1111andFaisal Memon	ec7259699f	spiffe-step-ssh server (#198 ) * Initial prototype of spire-step-ssh integration Signed-off-by: Kevin Fox <[email protected]> * Ingress work, image cleanup and misc cleanup Signed-off-by: Kevin Fox <[email protected]> * More values rework Signed-off-by: Kevin Fox <[email protected]> * Rename chart spiffe-step-ssh Signed-off-by: Kevin Fox <[email protected]> * Update to use shared lib Signed-off-by: Kevin Fox <[email protected]> * Update spiffe-helper Signed-off-by: Kevin Fox <[email protected]> * Use URLSAN rather then CN Signed-off-by: Kevin Fox <[email protected]> * Lookup the sans. Signed-off-by: Kevin Fox <[email protected]> * Make trust domain configurable Signed-off-by: Kevin Fox <[email protected]> * Add flag Signed-off-by: Kevin Fox <[email protected]> * Make driver configurable Signed-off-by: Kevin Fox <[email protected]> * Add more configurables. Fix up docs to pass test. Signed-off-by: Kevin Fox <[email protected]> * Add some metadata Signed-off-by: Kevin Fox <[email protected]> * Fix metadata Signed-off-by: Kevin Fox <[email protected]> * Add default values for lint Signed-off-by: Kevin Fox <[email protected]> * Forgot values updates Signed-off-by: Kevin Fox <[email protected]> * Fix metadata Signed-off-by: Kevin Fox <[email protected]> * Start working on integration test Signed-off-by: Kevin Fox <[email protected]> * Test Signed-off-by: Kevin Fox <[email protected]> * Test Signed-off-by: Kevin Fox <[email protected]> * Fix names Signed-off-by: Kevin Fox <[email protected]> * More test bits Signed-off-by: Kevin Fox <[email protected]> * More test bits Signed-off-by: Kevin Fox <[email protected]> * More test bits Signed-off-by: Kevin Fox <[email protected]> * More test bits Signed-off-by: Kevin Fox <[email protected]> * More test bits Signed-off-by: Kevin Fox <[email protected]> * More test bits Signed-off-by: Kevin Fox <[email protected]> * More fixes Signed-off-by: Kevin Fox <[email protected]> * More fixes Signed-off-by: Kevin Fox <[email protected]> * More fixes Signed-off-by: Kevin Fox <[email protected]> * Fix name conflict. Align naming Signed-off-by: Kevin Fox <[email protected]> * Fix name Signed-off-by: Kevin Fox <[email protected]> * Add more logging Signed-off-by: Kevin Fox <[email protected]> * Disable unneeded test. Add missing file. Signed-off-by: Kevin Fox <[email protected]> * Setup more things Signed-off-by: Kevin Fox <[email protected]> * Add missing conf file Signed-off-by: Kevin Fox <[email protected]> * Fix multiple svids Signed-off-by: Kevin Fox <[email protected]> * Fix ci defaults Signed-off-by: Kevin Fox <[email protected]> * Fix filename Signed-off-by: Kevin Fox <[email protected]> * Try and get the linter to stop complaining... Signed-off-by: Kevin Fox <[email protected]> * Fix perms Signed-off-by: Kevin Fox <[email protected]> * More logs Signed-off-by: Kevin Fox <[email protected]> * More setup Signed-off-by: Kevin Fox <[email protected]> * Fixes Signed-off-by: Kevin Fox <[email protected]> * Fixes Signed-off-by: Kevin Fox <[email protected]> * Add wait Signed-off-by: Kevin Fox <[email protected]> * More logging Signed-off-by: Kevin Fox <[email protected]> * Test ssh Signed-off-by: Kevin Fox <[email protected]> * Restart fetchca on updates too Signed-off-by: Kevin Fox <[email protected]> * Fix formating Signed-off-by: Kevin Fox <[email protected]> * Add missing file flag Signed-off-by: Kevin Fox <[email protected]> * Increase timeout Signed-off-by: Kevin Fox <[email protected]> * More flags Signed-off-by: Kevin Fox <[email protected]> * Fix name Signed-off-by: Kevin Fox <[email protected]> * Finish end to end test Signed-off-by: Kevin Fox <[email protected]> * Fix ingress setting Signed-off-by: Kevin Fox <[email protected]> * More logging/tests Signed-off-by: Kevin Fox <[email protected]> * More testing Signed-off-by: Kevin Fox <[email protected]> * Fix namespace Signed-off-by: Kevin Fox <[email protected]> * Fetch correct bundle Signed-off-by: Kevin Fox <[email protected]> * Chart testing will fail as it depends on spire to be preinstalled. Weird dependency loop. Signed-off-by: Kevin Fox <[email protected]> * Dont skip tls for testing Signed-off-by: Kevin Fox <[email protected]> * More logging Signed-off-by: Kevin Fox <[email protected]> * More debug Signed-off-by: Kevin Fox <[email protected]> * More debug Signed-off-by: Kevin Fox <[email protected]> * Pass intermediates Signed-off-by: Kevin Fox <[email protected]> * Fix trustdomain Signed-off-by: Kevin Fox <[email protected]> * Add ca authority prefix Signed-off-by: Kevin Fox <[email protected]> * fix Signed-off-by: Kevin Fox <[email protected]> * fix Signed-off-by: Kevin Fox <[email protected]> * fix Signed-off-by: Kevin Fox <[email protected]> * ci test is just broken. Revert trying to fix it. Signed-off-by: Kevin Fox <[email protected]> * Update charts/spiffe-step-ssh/files/ssh_x5c.tpl Signed-off-by: kfox1111 <[email protected]> * Self review feedback Signed-off-by: Kevin Fox <[email protected]> * Switch ingress to our more functional/easy type Signed-off-by: Kevin Fox <[email protected]> * Simplify the template Signed-off-by: Kevin Fox <[email protected]> * Add cast Signed-off-by: Kevin Fox <[email protected]> * Add install notes Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Update tests for updated client Signed-off-by: Kevin Fox <[email protected]> * Fix logging and entry Signed-off-by: Kevin Fox <[email protected]> * Add missing dir Signed-off-by: Kevin Fox <[email protected]> * Fix file location Signed-off-by: Kevin Fox <[email protected]> * Update timeout Signed-off-by: Kevin Fox <[email protected]> * More logging Signed-off-by: Kevin Fox <[email protected]> * Fix filename Signed-off-by: Kevin Fox <[email protected]> * Fix perms Signed-off-by: Kevin Fox <[email protected]> * Update charts/spiffe-step-ssh/README.md Signed-off-by: kfox1111 <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-11-07 23:43:26 -08:00