panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
864 Commits 1 Branch 2 Tags
0a6dd199063aea34f0f61c92ef7efb872c1855cf
Commit Graph
864 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Faisal Memon c6d57fc750 Bump spire Helm Chart version from 0.18.1 to 0.18.2 
* fd3b7d5 Fix duplicate securityContext section in spire-agent (#279)

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-07 10:48:09 -08:00
kfox1111 fd3b7d5fc7 Fix duplicate securityContext section in spire-agent (#279) 
A duplicate section was added due to incorrect merge conflict resolution.
Helm seems ok with it but Kustomize + FluxCD has issues with it.

Signed-off-by: Kevin Fox <[email protected]>
 2024-03-07 09:52:00 -08:00
Faisal Memon 058e841881 Bump spire Helm Chart version from 0.18.0 to 0.18.1 
* aea37a9 Update SPIRE to 1.9.1 (#277)
* 99044ef Fix error message typo 'county' -> 'country' (#275)

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-06 06:29:00 -08:00
kfox1111 aea37a9cd0 Update SPIRE to 1.9.1 (#277) 
Signed-off-by: Kevin Fox <[email protected]>
 2024-03-05 17:49:26 -08:00
dependabot[bot] 2a2e8611b6 Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.16.0 in /tests (#276) 
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.15.0 to 2.16.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.15.0...v2.16.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-03-05 14:29:33 -08:00
Eric 99044eff64 Fix error message typo 'county' -> 'country' (#275) 2024-03-05 01:32:21 +00:00
Faisal Memon cf2e213f31 Bump spire Helm Chart version from 0.17.2 to 0.18.0 (#274) 
* beda725 Add pod labels to the SPIRE agent (#273)
* 077f152 Bump test chart dependencies (#272)
* 5849ea2 add pod labels to spire server values (#271)
* f512b06 Configurable daemonsets updateStrategy (#212)
* a539065 Add direct tpm support for spire-agent (#216)
* fcd0c11 Add direct tpm support for spire-server (#211)
* c570174 Enable CA settings via global (#268)
* ac83694 Initial SPIRE 1.9.0 support (#262)
* ddb4eff Bump test chart dependencies (#263)
* bfbafbc Fix OpenShift Federation Ingress bug (#260)
* a0baace Upgrade to spire-controller-manager 0.4.3 (#258)
* 1446f7e Add support for specifying agent authorized_delegates (#255)
* 0b6cd88 Add support for specifying server admin_ids (#254)
* 07a1c39 Add global override for kubectl tag (#251)
* b82a84d Bump test chart dependencies (#252)
* 7a1e731 Bump test chart dependencies (#246)
* a706063 make audit_log_enabled configurable (#241)
* 34a39cb Added emptyDir volume to spire-agent SCC (#243)
* a2e5a4e Add support for enabling the spire-agent admin socket (#234)
* febdcbf Fix whitespace in spire-agent daemonset

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-04 17:51:48 +00:00
Rory Houlihan beda725369 Add pod labels to the SPIRE agent (#273) 
Follow on from https://github.com/spiffe/helm-charts-hardened/pull/271.
This will allow the SPIRE agent to also integrate with Azure Workload
Identity.

Signed-off-by: Rory Houlihan <[email protected]>
 2024-03-04 06:45:32 -08:00
github-actions[bot]andmarcofranssen 077f152144 Bump test chart dependencies (#272) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2024-03-04 08:41:33 +00:00
McRors Calhoun 5849ea2c82 add pod labels to spire server values (#271) 
* add pod labels to spire server values

The reason for this change is to be able to integrate spire with Azure
Workload Idenity. To enable this, a label of `azure.workload.identity/use: "true"` needs
to be added to the pods metadata.

https://learn.microsoft.com/en-us/azure/aks/learn/tutorial-kubernetes-workload-identity#deploy-the-workload

Signed-off-by: Rory Houlihan <[email protected]>

* trim whitespace from podLabels
Signed-off-by: Rory Houlihan <[email protected]>

---------

Signed-off-by: Rory Houlihan <[email protected]>
 2024-03-01 08:37:38 -08:00
Marco FranssenKevin FoxFaisal Memon
 		f512b06419 Configurable daemonsets updateStrategy (#212) 
* Configure daemonsets updateStrategy

This allows more deamonset pods to be rotated in the same time. This speeds up the updates

Signed-off-by: Marco Franssen <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-02-29 14:42:52 -08:00
kfox1111andFaisal Memon a539065c02 Add direct tpm support for spire-agent (#216) 
* Add direct tpm support for spire-agent

Signed-off-by: Kevin Fox <[email protected]>

* Add fingerprinting support

Signed-off-by: Kevin Fox <[email protected]>

* Add example

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-agent/templates/configmap.yaml

Signed-off-by: kfox1111 <[email protected]>

* Update charts/spire/charts/spire-agent/templates/configmap.yaml

Signed-off-by: kfox1111 <[email protected]>

* Fix broken tests

Signed-off-by: Kevin Fox <[email protected]>

* Fix hardcoded nodeAttestor and keyManager in spire-agent

Fixes: https://github.com/spiffe/helm-charts-hardened/issues/220

Signed-off-by: Kevin Fox <[email protected]>

* Fix merge issues

Signed-off-by: Kevin Fox <[email protected]>

* Fix unit tests

Signed-off-by: Kevin Fox <[email protected]>

* Pass the agent's securityContext on to Kubernetes

Currently its ignored.

Signed-off-by: Kevin Fox <[email protected]>

* Update example to be usable

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Update to the newest release

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-02-29 20:33:57 +00:00
kfox1111andFaisal Memon fcd0c11e14 Add direct tpm support for spire-server (#211) 
* Add direct tpm support

Signed-off-by: Kevin Fox <[email protected]>

* Add agent support

Signed-off-by: Kevin Fox <[email protected]>

* Add missing condition

Signed-off-by: Kevin Fox <[email protected]>

* Add missing condition

Signed-off-by: Kevin Fox <[email protected]>

* Remove agent bits from this pr

Signed-off-by: Kevin Fox <[email protected]>

* Plugin needs to write to /tmp

Signed-off-by: Kevin Fox <[email protected]>

* Fix tmp mount

Signed-off-by: Kevin Fox <[email protected]>

* Make it possible to manage cas/hashes via values

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Update to the newest release

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-02-29 11:41:25 -08:00
kfox1111 c57017425e Enable CA settings via global (#268) 
Adds a global.spire.caSubject section where you can set the CA
subject information for all spire-server instances.

Signed-off-by: Kevin Fox <[email protected]>
 2024-02-28 11:47:24 -08:00
kfox1111 ac83694970 Initial SPIRE 1.9.0 support (#262) 2024-02-28 17:54:53 +00:00
dependabot[bot] 40d5fefcfe Bump peter-evans/create-pull-request from 6.0.0 to 6.0.1 (#267) 
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v6.0.0...v6.0.1)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-27 20:22:58 -08:00
github-actions[bot]andmarcofranssen ddb4effda6 Bump test chart dependencies (#263) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2024-02-26 06:28:45 -08:00
Maia Iyer bfbafbc94f Fix OpenShift Federation Ingress bug (#260) 
* Fix OpenShift Federation Ingress bug

Signed-off-by: Maia Iyer <[email protected]>

* Remove duplicate line

Signed-off-by: Maia Iyer <[email protected]>

---------

Signed-off-by: Maia Iyer <[email protected]>
 2024-02-22 14:37:45 -08:00
kfox1111 a0baace5ea Upgrade to spire-controller-manager 0.4.3 (#258) 
Signed-off-by: Kevin Fox <[email protected]>
 2024-02-22 10:38:58 -08:00
dependabot[bot] 020a0b5450 Bump helm.sh/helm/v3 from 3.14.1 to 3.14.2 in /tests (#257) 
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.14.1 to 3.14.2.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.14.1...v3.14.2)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-22 02:09:40 -08:00
dependabot[bot] ae800c432c Bump helm/kind-action from 1.8.0 to 1.9.0 (#256) 
Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](https://github.com/helm/kind-action/compare/v1.8.0...v1.9.0)

---
updated-dependencies:
- dependency-name: helm/kind-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-21 00:56:44 -08:00
kfox1111andFaisal Memon 1446f7ea79 Add support for specifying agent authorized_delegates (#255) 
* Add support for specifying agent authorized_delegates

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-agent/values.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-02-20 17:11:03 +00:00
kfox1111andFaisal Memon 0b6cd88d56 Add support for specifying server admin_ids (#254) 
* Add support for specifying server admin_ids

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-server/templates/configmap.yaml

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-02-20 08:50:18 -08:00
kfox1111 a4e91c6ba8 Add support for integration tests in the tests/integration dir (#253) 
* Add support for integration tests in the tests/integration dir

Signed-off-by: Kevin Fox <[email protected]>

* Fix split issue and typo

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2024-02-20 08:16:16 -08:00
kfox1111 07a1c391b2 Add global override for kubectl tag (#251) 2024-02-19 20:18:31 +01:00
github-actions[bot]marcofranssenkfox1111
 		b82a84dddb Bump test chart dependencies (#252) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-02-19 05:11:45 -08:00
Moritz Schmitz von Hülstandkfox1111 43a72a22ff Add example for using SPIRE for mTLS with Keycloak (#248) 
* Add example for using Spire for mTLS with Keycloak

Signed-off-by: Moritz Schmitz von Hülst <[email protected]>

* Minor improvement to the README.md

Signed-off-by: Moritz Schmitz von Hülst <[email protected]>

* But I still need to learn GitHub Markdown format

Signed-off-by: Moritz Schmitz von Hülst <[email protected]>

* Make it more obvious that it works without a (correct) password

Signed-off-by: Moritz Schmitz von Hülst <[email protected]>

* Add warning for Kubernetes 1.29+ feature

Signed-off-by: Moritz Schmitz von Hülst <[email protected]>

* Move ghostunnel into an initContainer with restartPolicy=Always

Signed-off-by: Moritz Schmitz von Hülst <[email protected]>

* Apply suggestions from code review

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Moritz Schmitz von Hülst <[email protected]>

* Move java-spiffe-helper-properties into extraDeploy of the Keycloak chart and pin node version to it has a matching rancher/kubectl image

Signed-off-by: Moritz Schmitz von Hülst <[email protected]>

---------

Signed-off-by: Moritz Schmitz von Hülst <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-02-19 04:33:01 -08:00
dependabot[bot] cc8ec897bf Bump helm.sh/helm/v3 from 3.14.0 to 3.14.1 in /tests (#249) 
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.14.0 to 3.14.1.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.14.0...v3.14.1)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-15 07:17:54 -08:00
github-actions[bot]marcofranssenkfox1111
 		7a1e731b31 Bump test chart dependencies (#246) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-02-12 13:46:21 +00:00
dependabot[bot] 13af653e3e Bump helm/kind-action from 1.8.0 to 1.9.0 (#245) 
Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](https://github.com/helm/kind-action/compare/v1.8.0...v1.9.0)

---
updated-dependencies:
- dependency-name: helm/kind-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-12 13:27:17 +00:00
McRors CalhounFaisal Memonkfox1111
 		a7060632a0 make audit_log_enabled configurable (#241) 
* make audit_log_enabled configurable

Signed-off-by: Rory Houlihan <[email protected]>

* Update charts/spire/charts/spire-server/values.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: McRors Calhoun <[email protected]>

* Update charts/spire/charts/spire-server/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Rory Houlihan <[email protected]>
Signed-off-by: McRors Calhoun <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-02-12 13:18:41 +00:00
Andrew Block 34a39cb76e Added emptyDir volume to spire-agent SCC (#243) 
Signed-off-by: Andrew Block <[email protected]>
 2024-02-10 04:51:59 -08:00
kfox1111 a2e5a4e629 Add support for enabling the spire-agent admin socket (#234) 
* Add support for enabling the spire-agent admin socket

Signed-off-by: Kevin Fox <[email protected]>

* Fix typo

Signed-off-by: Kevin Fox <[email protected]>

* Update permissions

Signed-off-by: Kevin Fox <[email protected]>

* Update permissions

Signed-off-by: Kevin Fox <[email protected]>

* Fix template

Signed-off-by: Kevin Fox <[email protected]>

* Update upstream agent too

Signed-off-by: Kevin Fox <[email protected]>

* Fix init issue

Signed-off-by: Kevin Fox <[email protected]>

* Refactor a bit to make things more automatic

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
 2024-02-09 12:44:43 -08:00
Marco Franssen febdcbf992 Fix whitespace in spire-agent daemonset 
Signed-off-by: Marco Franssen <[email protected]>
 2024-02-07 16:41:52 +01:00
Faisal Memon 7ad1ae7355 Bump spire Helm Chart version from 0.17.1 to 0.17.2 
* 49e21c3 Add missing affinity settings (#232)
* 8adbb89 Add alternate name support for the socket (#181)
* 350ec89 Bump test chart dependencies (#235)
* 0e12595 Update README.md delete pvc for cleanup (#233)

Signed-off-by: Faisal Memon <[email protected]>
 2024-02-05 13:01:46 -08:00
kfox1111andFaisal Memon 49e21c389b Add missing affinity settings (#232) 
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-02-05 20:33:24 +00:00
kfox1111andFaisal Memon 8adbb89890 Add alternate name support for the socket (#181) 
* Add alternate name support for the socket

Signed-off-by: Kevin Fox <[email protected]>

* Fix missing image reference

Signed-off-by: Kevin Fox <[email protected]>

* Make user changing socket work smoothly.

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Update charts/spire/charts/spire-agent/values.yaml

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-02-05 11:40:19 -08:00
kfox1111 fce95cb443 Add example of mysql using spire (#164) 
* Add example of mysql using spire

Signed-off-by: Kevin Fox <[email protected]>

* Finish up the implementation

Signed-off-by: Kevin Fox <[email protected]>

* Update the image

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Update. Restested.

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
 2024-02-05 11:17:19 -08:00
github-actions[bot]andmarcofranssen 350ec89ff2 Bump test chart dependencies (#235) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2024-02-05 06:07:03 -08:00
cccsss01andkfox1111 0e1259546b Update README.md delete pvc for cleanup (#233) 
* Update README.md delete pvc for cleanup

adding command to delete the pvc

Signed-off-by: cccsss01 <[email protected]>

* Update charts/spire/README.md

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: cccsss01 <[email protected]>

---------

Signed-off-by: cccsss01 <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-02-02 15:23:44 -08:00
dependabot[bot]kfox1111Marco Franssen
 		40b5cc3601 Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 (#228) 
* Bump sigstore/cosign-installer from 3.3.0 to 3.4.0

Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.3.0...v3.4.0)

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2024-02-01 09:46:58 -08:00
kfox1111 35215aee33 Add missing upgrade test bypass (#231) 
* Add missing upgrade test bypass

Signed-off-by: Kevin Fox <[email protected]>

* Too many iterations. Update comment.

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2024-02-01 09:28:20 -08:00
dependabot[bot] c1783f639c Bump peter-evans/create-pull-request from 5.0.2 to 6.0.0 
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 5.0.2 to 6.0.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v5.0.2...v6.0.0)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-02-01 09:20:34 +01:00
Faisal Memon 16ecfe9bb9 Bump spire Helm Chart version from 0.17.0 to 0.17.1 (#226) 
* d547532 Pass the agent's securityContext on to Kubernetes (#225)
* 6b03d5a Fix hardcoded nodeAttestor and keyManager in spire-agent (#221)
* f4c92ed Update README.md put cleanup seperately (#223)
* 7542052 Bump test chart dependencies (#219)
* 01e031f Add another upgrade note and fix value name (#215)
* 0fbc512 Remove the white line from securityContext rendering
* 573beaf More quickly detect a daemonset is up and running
* e8d527c Update to spire-controller-manager 0.4.2 (#195)
* 25558d3 Update daemonset.yaml (#204)

Signed-off-by: Faisal Memon <[email protected]>
 2024-01-30 13:53:41 -08:00
kfox1111 d5475328b4 Pass the agent's securityContext on to Kubernetes (#225) 
Currently its ignored.

Signed-off-by: Kevin Fox <[email protected]>
 2024-01-30 19:55:12 +00:00
kfox1111 6b03d5a0bd Fix hardcoded nodeAttestor and keyManager in spire-agent (#221) 
* Fix hardcoded nodeAttestor and keyManager in spire-agent

---------

Signed-off-by: Kevin Fox <[email protected]>
 2024-01-30 11:33:32 -08:00
cccsss01andkfox1111 f4c92ed3ca Update README.md put cleanup seperately (#223) 
* Update README.md put cleanup seperately

Signed-off-by: cccsss01 <[email protected]>

* Update README.md

Signed-off-by: cccsss01 <[email protected]>

* Update charts/spire/README.md

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: cccsss01 <[email protected]>

---------

Signed-off-by: cccsss01 <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-01-30 10:55:10 -08:00
github-actions[bot]andmarcofranssen 7542052b65 Bump test chart dependencies (#219) 
Co-authored-by: marcofranssen <[email protected]>
 2024-01-29 09:24:31 +00:00
kfox1111 01e031f71c Add another upgrade note and fix value name (#215) 
* Add another upgrade note

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
 2024-01-26 17:47:57 -08:00
Marco Franssen 0fbc51223c Remove the white line from securityContext rendering 
Prevents the following diff introduced since the 0.17.0 release.

```diff
        containers:
        - name: post-install-job
          securityContext:
+
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            readOnlyRootFilesystem: true
            runAsNonRoot: true
            seccompProfile:
              type: RuntimeDefault
```

Signed-off-by: Marco Franssen <[email protected]>
 2024-01-26 13:51:28 +01:00