Commit Graph
674 Commits
Author SHA1 Message Date
spire-helm-version-checker[bot]andmarcofranssen a3e607e7d8 Bump test chart dependencies (#484)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-10-28 06:01:02 -07:00
kfox1111andFaisal Memon a360646842 Add validating admission policy to restrict upstream driver access (#482)
* Add validating admission policy to restrict upstream driver access

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spiffe-csi-driver/templates/policy.yaml

Signed-off-by: kfox1111 <[email protected]>

* Fix logic

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade helm

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Add version info

Signed-off-by: Kevin Fox <[email protected]>

* Add version info

Signed-off-by: Kevin Fox <[email protected]>

* Fix kind version

Signed-off-by: Kevin Fox <[email protected]>

* Fix kind version

Signed-off-by: Kevin Fox <[email protected]>

* Fix kind version

Signed-off-by: Kevin Fox <[email protected]>

* Fix detection

Signed-off-by: Kevin Fox <[email protected]>

* Just for testing...

Signed-off-by: Kevin Fox <[email protected]>

* Just for testing...

Signed-off-by: Kevin Fox <[email protected]>

* Just for testing

Signed-off-by: Kevin Fox <[email protected]>

* Fix policy

Signed-off-by: Kevin Fox <[email protected]>

* Fix policy

Signed-off-by: Kevin Fox <[email protected]>

* Fix policy

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spiffe-csi-driver/values.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-10-26 07:40:29 -07:00
kfox1111 a7368eee1f Upgrade to spire 1.11.0 (#483)
Signed-off-by: Kevin Fox <[email protected]>
2024-10-25 22:36:59 -07:00
kfox1111andFaisal Memon fe5464ba9f Update notes (#479)
* Update notes

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update charts/spire/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-10-24 10:17:46 -07:00
spire-helm-version-checker[bot]andmarcofranssen 29e9866a8c Bump test chart dependencies (#481)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-10-21 04:59:26 -07:00
kfox1111 13736cdf6f Add support for the new hint spire-controller-manager feature (#472)
* Add support for the new hint spire-controller-manager feature

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
2024-10-17 15:48:09 -07:00
kfox1111andFaisal Memon b08e8bf9b1 Agent support for bundle on host path (#478)
* Agent support for bundle on host path

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-agent/values.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-10-17 15:12:27 -07:00
Yann Soubeyrandandkfox1111 7b409ed912 Fix cert-manager upstream authority when enabling recommendations (#476)
Signed-off-by: Yann Soubeyrand <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2024-10-17 14:14:20 -07:00
kfox1111 01c7227b13 Add support for the new fallback spire-controller-manager feature (#471)
* Add support for the new fallback spire-controller-manager feature

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2024-10-17 12:38:25 -07:00
spire-helm-version-checker[bot]andmarcofranssen 0a6dd19906 Bump test chart dependencies (#477)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-10-14 06:26:40 -07:00
kfox1111 fcbd64e011 Support federation bundle endpoint profile http_web certificates (#469)
* Support federation bundle endpoint profile http_web certificates

Signed-off-by: Kevin Fox <[email protected]>

* Fix var

Signed-off-by: Kevin Fox <[email protected]>

* Fix key

Signed-off-by: Kevin Fox <[email protected]>

* Fix test

Signed-off-by: Kevin Fox <[email protected]>

* Fix test

Signed-off-by: Kevin Fox <[email protected]>

* Fix test

Signed-off-by: Kevin Fox <[email protected]>

* Fix test

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2024-10-10 12:03:54 -07:00
c29f45fc30 Add AWS DB types (#464)
* Add remaining data store options

Signed-off-by: Kevin Fox <[email protected]>

* Fix env var

Signed-off-by: Kevin Fox <[email protected]>

* Add aws db types

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update charts/spire/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix mysql vars

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Fix missing )

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-server/values.yaml

Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix readme

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
2024-10-08 10:50:32 -07:00
kfox1111andFaisal Memon 898a349297 Add remaining data store options (#463)
* Add remaining data store options

Signed-off-by: Kevin Fox <[email protected]>

* Fix env var

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update charts/spire/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-10-07 16:18:06 -07:00
spire-helm-version-checker[bot]andmarcofranssen 2443515682 Bump test chart dependencies (#474)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-10-07 14:04:33 -07:00
kfox1111andFaisal Memon c46179472c Update the spire-controller-manager to 0.6.0 (#473)
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-10-03 16:27:23 -07:00
kfox1111 5d07eaff52 Align more settings to convention (#467)
* Align more settings to convention

Signed-off-by: Kevin Fox <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2024-10-03 12:06:38 -07:00
spire-helm-version-checker[bot]andmarcofranssen ea2d673830 Bump test chart dependencies (#470)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-09-30 17:06:39 -07:00
spire-helm-version-checker[bot]andmarcofranssen 352aee2f0d Bump test chart dependencies (#468)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-09-23 06:50:10 -07:00
Faisal Memonandkfox1111 c3c8514333 Change curl --caPath to --capath (#462)
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2024-09-17 14:02:06 -07:00
kfox1111andFaisal Memon 68d21ccade Add an initial json schema file for spire-agent (#458)
* Add an initial json schema file for spire-agent

Signed-off-by: Kevin Fox <[email protected]>

* Fix tab

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-09-17 13:39:22 -07:00
Erik Godding BoyeandFaisal Memon b7e9823a65 Add new config.jwtDomain value to oidc-discovery chart (#457)
Signed-off-by: Erik Godding Boye <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-09-17 12:36:52 -07:00
nweisenauer 8832da39b4 Protects SPIRE Agent's Chart Against YAML Template Injection (#450)
* protects agent's chart against template injection

Signed-off-by: Nico Weisenauer <[email protected]>

* removes unnecessary braces and whitespace

Signed-off-by: Nico Weisenauer <[email protected]>

* Removes int type validation via cast

Signed-off-by: Nico Weisenauer <[email protected]>

---------

Signed-off-by: Nico Weisenauer <[email protected]>
2024-09-16 06:23:01 -07:00
kfox1111 3bc70255e7 Update spiffe-helper (#453)
* Update spiffe-helper

Signed-off-by: Kevin Fox <[email protected]>

* Update .github/tests/images.json

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
2024-09-12 09:49:14 -07:00
spire-helm-version-checker[bot]andmarcofranssen 86d6fcac25 Bump test chart dependencies (#449)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-09-09 06:36:28 -07:00
Faisal Memon 01b1114e26 Bump spire Helm Chart version from 0.22.0 to 0.23.0
* 7df063f Upgrade SPIRE to 1.10.3 (#412)
* de5ec47 Bump test chart dependencies (#445)
* e72b94f Add all built in BundlePublishers (#430)
* 532852d Bump test chart dependencies (#440)
* 6e8ad56 Add a spire-agent auto kubelet verification mode (#435)
* 50c741e Remove extra check that sometimes breaks oidc (#437)
* e062b9f Support ipv4 only clusters (#434)
* b96e07e Enable more forms of kubelet certificate verification (#426)
* f92d729 Add missing properties required by SecurityContextConstraints CRD (#432)
* 8553a78 Bump test chart dependencies (#431)

Signed-off-by: Faisal Memon <[email protected]>
2024-09-04 14:00:46 -07:00
Faisal Memon 080d101787 Bump spire-nested Helm Chart version from 0.22.0 to 0.23.0 (#447)
* 7df063f Upgrade SPIRE to 1.10.3 (#412)

Signed-off-by: Faisal Memon <[email protected]>
2024-09-04 13:39:53 -07:00
kfox1111andFaisal Memon 7df063f8db Upgrade SPIRE to 1.10.3 (#412)
* Update SPIRE to 1.10.3

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-agent/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-09-04 13:16:50 -07:00
spire-helm-version-checker[bot]andmarcofranssen de5ec47613 Bump test chart dependencies (#445)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-09-02 05:51:02 -07:00
kfox1111andFaisal Memon e72b94fc13 Add all built in BundlePublishers (#430)
* Add all built in BundlePublishers

Signed-off-by: Kevin Fox <[email protected]>

* Add secret management

Signed-off-by: Kevin Fox <[email protected]>

* Fix typo

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-server/values.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-08-27 12:35:23 -07:00
spire-helm-version-checker[bot]andmarcofranssen 532852d907 Bump test chart dependencies (#440)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-08-26 09:45:03 -07:00
kfox1111 6e8ad569b3 Add a spire-agent auto kubelet verification mode (#435)
* Add a spire-agent auto kubelet verification mode

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2024-08-23 15:09:55 -07:00
kfox1111 50c741e047 Remove extra check that sometimes breaks oidc (#437)
Signed-off-by: Kevin Fox <[email protected]>
2024-08-22 12:08:18 -07:00
kfox1111 e062b9f196 Support ipv4 only clusters (#434)
* Support ipv4 only clusters

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spiffe-oidc-discovery-provider/templates/configmap.yaml

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
2024-08-21 12:00:38 -07:00
kfox1111andFaisal Memon b96e07e349 Enable more forms of kubelet certificate verification (#426)
* Enable kubelet certificate verification by default

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/README.md

Signed-off-by: kfox1111 <[email protected]>

* Update charts/spire/charts/spire-agent/templates/configmap.yaml

Signed-off-by: kfox1111 <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Fix image

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-agent/templates/configmap.yaml

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-08-20 22:08:39 -07:00
Erik Godding Boye f92d729137 Add missing properties required by SecurityContextConstraints CRD (#432)
Signed-off-by: Erik Godding Boye <[email protected]>
2024-08-20 08:55:35 -07:00
spire-helm-version-checker[bot]andmarcofranssen 8553a78f6c Bump test chart dependencies (#431)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-08-19 12:39:18 +02:00
Faisal Memonandkfox1111 ba35e81247 Bump spire-nested Helm Chart version from 0.21.1 to 0.22.0 (#429)
* 827a3ea Bump spire to 1.10.1 (#424)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2024-08-15 10:13:02 -07:00
Faisal Memon de1e98337a Bump spire Helm Chart version from 0.21.1 to 0.22.0 (#428)
* 9b2d72f Fix permission issue with 1.10 and defaults when upgraded (#423)
* 827a3ea Bump spire to 1.10.1 (#424)
* 0289e5f Revert "Added support for specifying Kubelet CA Path (#415)" (#422)
* bf40797 Bump test chart dependencies (#418)
* abcf019 Added support for specifying Kubelet CA Path (#415)
* 6d4d526 Allow configuring persistence in the spire-agent (#414)

Signed-off-by: Faisal Memon <[email protected]>
2024-08-15 13:59:31 +00:00
kfox1111 9b2d72f6a2 Fix permission issue with 1.10 and defaults when upgraded (#423)
* Fix permission issue with 1.10 and defaults when upgraded

Signed-off-by: Kevin Fox <[email protected]>

* Fix indenting

Signed-off-by: Kevin Fox <[email protected]>

* incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2024-08-13 22:21:20 -07:00
kfox1111 827a3ea80c Bump spire to 1.10.1 (#424)
Signed-off-by: Kevin Fox <[email protected]>
2024-08-13 11:44:07 -07:00
kfox1111 0289e5fb00 Revert "Added support for specifying Kubelet CA Path (#415)" (#422)
This reverts commit abcf01958a.

Signed-off-by: Kevin Fox <[email protected]>
2024-08-13 11:03:31 -07:00
spire-helm-version-checker[bot]andmarcofranssen bf40797049 Bump test chart dependencies (#418)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-08-12 07:05:38 -07:00
Andrew BlockandFaisal Memon abcf01958a Added support for specifying Kubelet CA Path (#415)
Signed-off-by: Andrew Block <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-08-09 04:56:11 +00:00
kfox1111 6d4d52604a Allow configuring persistence in the spire-agent (#414)
* Allow configuring persistence in the spire-agent

Signed-off-by: Kevin Fox <[email protected]>

* Better wording. Leave space for other services if needed some day.

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2024-08-08 20:06:06 -07:00
Faisal Memon 42e702a8da Bump spire-nested Helm Chart version from 0.21.0 to 0.21.1 (#410)
* c3d1d39 Update to SPIRE 1.10.0 (#393)

Signed-off-by: Faisal Memon <[email protected]>
2024-08-06 09:31:12 -07:00
Faisal Memon b4d4d901b9 Bump spire Helm Chart version from 0.21.0 to 0.21.1 (#409)
* 82a6d5d Should be `admin_socket_path` not `admin_socket_dir` (#407)
* 6240c0b Bump test chart dependencies (#402)
* c3d1d39 Update to SPIRE 1.10.0 (#393)
* 741cd9c Bump test chart dependencies (#398)
* c507ee0 Bump test chart dependencies (#397)
* 199bb6f Add connect by hostname to agent cofigmap (#392)
* eb6d89b Update charts/spire/README.md
* c93ad87 Add valid kubectl version to examples
* 500fdd9 Bump test chart dependencies (#391)
* 08fc5f3 Bump test chart dependencies (#390)
* 6904295 Bump test chart dependencies (#389)
* fb7fb80 Fix format for ignoreNamespaces (#388)
* 7a0a77b Fix host path of "spire-agent-admin-socket-dir" volume (#386)
* 1d2d755 Add resource limits for upgrade and delete hook batch jobs (#366)
* f7e0d4b Update _spire-system-namespace.yaml (#381)
* 29d4b57 Bump test chart dependencies
* 4c9059e Bump test chart dependencies (#379)
* 1dc650f Apply wildcard for ignoreNamespaces in Controller Manager (#378)
* 6c2b5e6 Bump test chart dependencies (#376)

Signed-off-by: Faisal Memon <[email protected]>
2024-08-06 08:28:22 -07:00
Ben Leggett 82a6d5d410 Should be admin_socket_path not admin_socket_dir (#407)
Signed-off-by: Benjamin Leggett <[email protected]>
2024-08-05 15:49:01 -07:00
6240c0b08c Bump test chart dependencies (#402)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2024-07-29 12:57:07 +00:00
kfox1111andFaisal Memon c3d1d39ed7 Update to SPIRE 1.10.0 (#393)
* Update to SPIRE 1.10.0

Remove the options that were removed in 1.10, and update.

Signed-off-by: Kevin Fox <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

* Fix uid mismatch issue on 1.10.0+

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-07-24 12:19:06 -07:00
spire-helm-version-checker[bot]andmarcofranssen 741cd9c6b4 Bump test chart dependencies (#398)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-07-22 07:41:57 -07:00