3 Commits
Author SHA1 Message Date
Bronson Mirafuentesanddependabot[bot] 86c60b186f feat(spire-server): add terminationGracePeriodSeconds (#835)
* feat(spire-server): add terminationGracePeriodSeconds and lifecycle support

Adds two new top-level values to the spire-server chart:

- `terminationGracePeriodSeconds` (nullable, pod-spec level): overrides the
  default 30s termination grace period. Useful when the server is behind a
  load balancer that needs time to deregister the target (e.g. AWS NLB with
  a deregistration delay > 30s).

- `lifecycle` (object, container level): lifecycle hooks for the spire-server
  container. The primary use case is a preStop hook to hold the pod alive
  while the load balancer deregisters the target before SIGTERM is sent:

  lifecycle:
    preStop:
      sleep:
        seconds: 60

Both fields default to their absent/empty equivalents (null and {}) so
existing deployments are unaffected.

Signed-off-by: Bronson Mirafuentes <[email protected]>

* Bump docker/login-action from 4.1.0 to 4.2.0 (#836)

Bumps [docker/login-action](https://github.com/docker/login-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v4.1.0...v4.2.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Bronson Mirafuentes <[email protected]>

* feat(spire-server): remove lifecycle hook support

Lifecycle hooks are not needed for the terminationGracePeriodSeconds
use case; preStop semantics can be handled outside the chart.

Signed-off-by: Bronson Mirafuentes <[email protected]>

* update README

Signed-off-by: Bronson Mirafuentes <[email protected]>

* update README

Signed-off-by: Bronson Mirafuentes <[email protected]>

---------

Signed-off-by: Bronson Mirafuentes <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-11 12:12:33 -07:00
Bronson Mirafuentes 7c532f10bb feat(spire-server): add maxAttestedNodeInfoStaleness config option (#828)
* feat(spire-server): add maxAttestedNodeInfoStaleness configuration option

Wire max_attested_node_info_staleness into the spire-server ConfigMap.
When unset (default ""), the SPIRE server uses its built-in default of 0s.

Signed-off-by: Bronson Mirafuentes <[email protected]>

* docs: regenerate spire-server README via helm-docs.sh

Fixes trailing whitespace in the maxAttestedNodeInfoStaleness table row.

Signed-off-by: Bronson Mirafuentes <[email protected]>

---------

Signed-off-by: Bronson Mirafuentes <[email protected]>
2026-05-19 08:00:53 -07:00
Bronson Mirafuentesandkfox1111 9bdfc10ffe wire ratelimit configuration option in spire-server configMap (#826)
* feat(spire-server): add ratelimit.attestation and ratelimit.signing values

Signed-off-by: Bronson Mirafuentes <[email protected]>

* feat(spire-server): render ratelimit block in server config from values

Signed-off-by: Bronson Mirafuentes <[email protected]>

* chore: bump spire-server and spire chart versions for ratelimit feature

Signed-off-by: Bronson Mirafuentes <[email protected]>

* revert version bumps, use camelcase for rateLimit

Signed-off-by: Bronson Mirafuentes <[email protected]>

* update readme

Signed-off-by: Bronson Mirafuentes <[email protected]>

---------

Signed-off-by: Bronson Mirafuentes <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2026-05-14 13:18:56 -07:00