Commit Graph
12 Commits
Author SHA1 Message Date
Marco Franssen 093c593ff6 spire-server: Replace chown image with busybox
This reduces the footprint for this initContainer to just 4.04MB.

The cgr.dev/chainguard/bash image is 35.2MB in size.

I have used the same tag as the busybox value to ensure no additional
versions have to be pulled on the node running spire-server components.

Signed-off-by: Marco Franssen <[email protected]>
2025-07-08 23:43:53 +02:00
kfox1111 858eb2e4f6 Fix update pattern (#603)
Signed-off-by: Kevin Fox <[email protected]>
2025-06-02 12:21:09 -07:00
kfox1111andFaisal Memon d6684bce19 Add spire-credentialcomposer-cel support (#587)
* Add spire-credentialcomposer-cel support

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Bump version

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2025-05-21 11:59:26 -07:00
kfox1111 ee7aacf61b Fix autoupdate patterns for spiffe-helper (#460)
Signed-off-by: Kevin Fox <[email protected]>
2024-09-17 08:27:01 -07:00
kfox1111 3bc70255e7 Update spiffe-helper (#453)
* Update spiffe-helper

Signed-off-by: Kevin Fox <[email protected]>

* Update .github/tests/images.json

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
2024-09-12 09:49:14 -07:00
kfox1111andFaisal Memon b96e07e349 Enable more forms of kubelet certificate verification (#426)
* Enable kubelet certificate verification by default

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/README.md

Signed-off-by: kfox1111 <[email protected]>

* Update charts/spire/charts/spire-agent/templates/configmap.yaml

Signed-off-by: kfox1111 <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Fix image

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-agent/templates/configmap.yaml

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-08-20 22:08:39 -07:00
kfox1111 9b2d72f6a2 Fix permission issue with 1.10 and defaults when upgraded (#423)
* Fix permission issue with 1.10 and defaults when upgraded

Signed-off-by: Kevin Fox <[email protected]>

* Fix indenting

Signed-off-by: Kevin Fox <[email protected]>

* incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2024-08-13 22:21:20 -07:00
Faisal Memon d418ee16f8 Update to SPIRE 1.9.2, use retry_bootstrap, remove wait for it (#301)
* Update to SPIRE 1.9.2, use retry_bootstrap, remove wait for it

Signed-off-by: Faisal Memon <[email protected]>

* Remove waitfor it in values.yaml

Signed-off-by: Faisal Memon <[email protected]>

* Update docs

Signed-off-by: Faisal Memon <[email protected]>

* Remove wait for it from images.json

Signed-off-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
2024-03-27 18:55:22 +00:00
kfox1111andFaisal Memon 8adbb89890 Add alternate name support for the socket (#181)
* Add alternate name support for the socket

Signed-off-by: Kevin Fox <[email protected]>

* Fix missing image reference

Signed-off-by: Kevin Fox <[email protected]>

* Make user changing socket work smoothly.

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Update charts/spire/charts/spire-agent/values.yaml

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-02-05 11:40:19 -08:00
Drew Wellsandkfox1111 e6300087b7 Update jwt test to work with newer slim images (#139)
* install newer version of slim debug

  - switch to step tool for jwt verification against jwk public keys

Signed-off-by: Drew Wells <[email protected]>

* use step-cli image

Signed-off-by: Drew Wells <[email protected]>

* Fix image tag and add upgrade logic

Signed-off-by: Kevin Fox <[email protected]>

* use registry for consistency

Signed-off-by: Kevin Fox <[email protected]>

* Fix merge conflicts

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Drew Wells <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2023-12-20 19:14:54 -08:00
kfox1111andMarco Franssen d91403af3a Scan for updates to new images (#466)
Co-authored-by: Marco Franssen <[email protected]>
2023-08-22 12:05:44 -07:00
kfox1111andMarco Franssen 77fe43f37d Cron job to check for and update images (#249)
Co-authored-by: Marco Franssen <[email protected]>
2023-08-18 09:49:50 +02:00