panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
516 Commits 1 Branch 2 Tags
0fa43a507dc197566824622734d888cf5aaa3216
Commit Graph
152 Commits
Author SHA1 Message Date
github-actions[bot]andfaisal-memon 06d6690d71 Bump test chart dependencies (#20) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: faisal-memon <[email protected]>
 2023-10-05 11:21:51 -07:00
kfox1111 8aca48f14c Push the changes that update-tags creates (#19) 
* Exit code from diff indicating changes should not block commit.

Signed-off-by: Kevin Fox <[email protected]>

* Push the changes that update-tags creates

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2023-10-05 10:40:32 -07:00
kfox1111 a6cb3974ac Exit code from diff indicating changes should not block commit. (#17) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-10-05 10:23:50 -07:00
Faisal Memon c23e6cb3b1 Fix issue with version checker not running 
Signed-off-by: Faisal Memon <[email protected]>
 2023-10-03 09:00:20 +02:00
dependabot[bot] 51c20b1ec2 Bump actions/checkout from 4.0.0 to 4.1.0 (#9) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v4.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-02 21:12:05 -07:00
kfox1111andFaisal Memon 21db1e4b9a Add a test to ensure upgrades work (#6) 
* Add a test to ensure upgrades work

Signed-off-by: Kevin Fox <[email protected]>

* Update examples/production/run-tests.sh

Co-authored-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-10-02 17:05:25 -07:00
kfox1111 50825d9fc9 Deny production runs of example.org trust domains (#229) 2023-09-25 12:06:48 -07:00
dependabot[bot] 712a0f6fbe Bump actions/checkout from 4.0.0 to 4.1.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.0.0...v4.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-09-25 19:54:27 +02:00
dependabot[bot] 1aac2d483d Bump docker/login-action from 2 to 3 
Bumps [docker/login-action](https://github.com/docker/login-action) from 2 to 3.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-09-13 17:59:54 +02:00
KrishnaKrishnakumar VenkataramanMarco Franssen
 		65d56957de Migrate to readme-generator for helm maintained by bitnami (#431) 
Co-authored-by: Krishnakumar Venkataraman <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-09-08 09:39:30 +02:00
dependabot[bot] 48adb8869f Bump actions/checkout from 3.6.0 to 4.0.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.6.0 to 4.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.6.0...v4.0.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-09-05 18:05:51 +02:00
dependabot[bot] d1f52d6995 Bump sigstore/cosign-installer from 3.1.1 to 3.1.2 (#473) 2023-09-04 06:52:44 +00:00
kfox1111 5273f4e530 Switch mysql and postgresql tests to HA Production configs (#471) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-09-01 12:25:07 -07:00
kfox1111andMarco Franssen e81a59a7e5 ingress-nginx production tests and spiffe-oidc-discovery-provider example (#136) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-29 15:22:00 +00:00
dependabot[bot] b05175e2b6 Bump actions/checkout from 3.5.3 to 3.6.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.3 to 3.6.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.5.3...v3.6.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-08-25 16:31:52 +02:00
Marco Franssen 71ac5afa11 Split steps in check-versions wf for easier debugging (#467) 2023-08-22 19:11:57 +00:00
kfox1111andMarco Franssen d91403af3a Scan for updates to new images (#466) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-22 12:05:44 -07:00
Marco Franssen 413644d27d Merge pull request #456 from spiffe/fix-dependabot-include-go 2023-08-21 18:42:51 +02:00
dependabot[bot] eb1ad75d7f Bump imjasonh/setup-crane from 0.1 to 0.3 (#460) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-08-21 01:03:56 -07:00
dependabot[bot] 3d307a2ebf Bump actions/setup-go from 4.0.0 to 4.1.0 (#459) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-08-21 01:03:40 -07:00
Marco Franssen 9cb59dafb8 Include go dependencies in dependabot.yaml 
Signed-off-by: Marco Franssen <[email protected]>
 2023-08-21 09:29:04 +02:00
Marco Franssen 80b9a83873 Fix indentation issue in dependabot.yaml 
Signed-off-by: Marco Franssen <[email protected]>
 2023-08-21 09:29:04 +02:00
kfox1111andMarco Franssen 77fe43f37d Cron job to check for and update images (#249) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-18 09:49:50 +02:00
kfox1111 ae8941c49d Support Nested Spire with External Agent (#117) 2023-08-16 16:35:41 +02:00
Faisal Memon 0124f633e8 Bypass example-test for docs only changes (#449) 2023-08-16 16:23:32 +02:00
github-actions[bot]andmarcofranssen bd393e9597 Bump test chart dependencies (#445) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-08-15 17:55:19 +00:00
dependabot[bot] a167ce6890 Bump actions/setup-go from 4.0.1 to 4.1.0 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4.0.1 to 4.1.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v4.0.1...v4.1.0)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-08-09 17:52:39 +02:00
github-actions[bot]andmarcofranssen e774584c46 Bump test chart dependencies (#426) 
Co-authored-by: marcofranssen <[email protected]>
 2023-08-09 15:11:47 +00:00
github-actions[bot]andmarcofranssen a2e5c36cc9 Bump test chart dependencies (#416) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-07-31 18:00:20 +00:00
github-actions[bot]marcofranssenkfox1111
 		af13f1fc64 Bump test chart dependencies (#401) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-07-27 11:20:48 -07:00
dependabot[bot] 7ce67c624c Bump actions/checkout from 3.5.2 to 3.5.3 (#395) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-07-20 07:30:54 -07:00
dependabot[bot] b85ba64dea Bump helm/kind-action from 1.7.0 to 1.8.0 (#396) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-07-20 07:29:08 -07:00
Marco Franssen e426bc06e9 Downgrade chart-testing tool to 3.8.0 
Unfortunatily it fails on linting

Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:54:04 +02:00
Marco Franssen 09b466466a Utilize ct install --github-groups in ci workflow 
https://github.com/helm/chart-testing/pull/556
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:54:04 +02:00
Marco Franssen 42086bd66a Run example tests also on all k8s versions 
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:49:25 +02:00
Marco Franssen db0603825c Increase some timeouts, trying to fix the tests 
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:49:25 +02:00
Marco Franssen 54ed71f969 Add back tests for examples 
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:49:22 +02:00
Marco Franssen 06ddb7cd3f Use chart-testing ci/*-values.yaml for testing 
This also enables the refactor to have multiple root level charts.

Resolves #100

Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:48:19 +02:00
kfox1111andMarco Franssen a4c1de7b30 Add basic unit test framework (#390) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-07-19 18:36:07 +00:00
github-actions[bot] f461a01701 Bump test chart dependencies (#386) 2023-07-18 17:32:02 +00:00
github-actions[bot]marcofranssenFaisal Memon
 		ce39e82767 Bump test chart dependencies (#382) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-07-14 08:05:36 -07:00
dependabot[bot] 0197621fa4 Bump helm/kind-action from 1.7.0 to 1.8.0 (#384) 
Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.7.0
to 1.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/helm/kind-action/releases">helm/kind-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.8.0</h2>
<h2>What's Changed</h2>
<ul>
<li><a
href="https://redirect.github.com/helm/kind-action/issues/54">#54</a>
ignore the occasional post delete cluster by <a
href="https://github.com/jerry153fish"><code>@​jerry153fish</code></a>
in <a
href="https://redirect.github.com/helm/kind-action/pull/79">helm/kind-action#79</a></li>
<li>bump kind to v0.20.0 and script cleanup by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/helm/kind-action/pull/88">helm/kind-action#88</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/jerry153fish"><code>@​jerry153fish</code></a>
made their first contribution in <a
href="https://redirect.github.com/helm/kind-action/pull/79">helm/kind-action#79</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/helm/kind-action/compare/v1.7.0...v1.8.0">https://github.com/helm/kind-action/compare/v1.7.0...v1.8.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/helm/kind-action/commit/dda0770415bac9fc20092cacbc54aa298604d140"><code>dda0770</code></a>
bump kind to v0.20.0 and script cleanup (<a
href="https://redirect.github.com/helm/kind-action/issues/88">#88</a>)</li>
<li><a
href="https://github.com/helm/kind-action/commit/a2c862bdb666af911f88f48ba22f76a4f33c4588"><code>a2c862b</code></a>
<a href="https://redirect.github.com/helm/kind-action/issues/54">#54</a>
ignore the occasional post delete cluster (<a
href="https://redirect.github.com/helm/kind-action/issues/79">#79</a>)</li>
<li><a
href="https://github.com/helm/kind-action/commit/1307bb2fdec64b9400f7865196ea57b0f2efb30f"><code>1307bb2</code></a>
Bump actions/checkout from 3.5.2 to 3.5.3 (<a
href="https://redirect.github.com/helm/kind-action/issues/87">#87</a>)</li>
<li>See full diff in <a
href="https://github.com/helm/kind-action/compare/v1.7.0...v1.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=helm/kind-action&package-manager=github_actions&previous-version=1.7.0&new-version=1.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-07-12 09:01:07 -07:00
kfox1111andMarco Franssen c1b1dd3d88 Add additional domains to JWT issued items. (#230) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-07-03 22:26:28 +02:00
marcofranssen 3405e13944 Bump test chart dependencies 
Signed-off-by: GitHub <[email protected]>
Signed-off-by: Faisal Memon <[email protected]>
 2023-07-03 17:38:56 +02:00
github-actions[bot]andmarcofranssen e57c13ac13 Bump test chart dependencies (#370) 
Co-authored-by: marcofranssen <[email protected]>
 2023-06-29 08:16:31 +02:00
dependabot[bot]andMarco Franssen 731c8b45b5 Bump sigstore/cosign-installer from 3.1.0 to 3.1.1 (#373) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marco Franssen <[email protected]>
 2023-06-28 08:40:55 -07:00
Marco Franssen f4c421afa0 Ensure the released OCI artifact is also captured in rekor 
Signed-off-by: Marco Franssen <[email protected]>
 2023-06-27 09:30:09 +02:00
dependabot[bot]andMarco Franssen 386e736e78 Bump sigstore/cosign-installer from 3.0.5 to 3.1.0 (#368) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marco Franssen <[email protected]>
 2023-06-26 08:54:42 -07:00
Faisal Memon 1333b6ab34 Always add parseTime=true for mysql query string (#352) 2023-06-20 21:14:42 +02:00
github-actions[bot]marcofranssenFaisal Memon
 		ac3be716dd Bump test chart dependencies (#358) 
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-06-20 08:41:41 +02:00