panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
352 Commits 1 Branch 2 Tags
1247b68f4d77791517ad7c7e898361dc670d057b
Commit Graph
232 Commits
Author SHA1 Message Date
Mariusz Sabath 1247b68f4d Parametrize probes (#310) 
This PR addresses #307 by parametrizing Probes and moving them to
values.yaml

---------

Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-25 08:53:44 -04:00
Marco Franssen efdeb2e123 Bump spire Helm Chart version from 0.7.0 to 0.8.0 
* c1c5b112 Merge pull request #306 from spiffe/remove-1.21
* 0df45e3c Fix up docs
* ed038fea Upgrade to spire 1.6.4 (#308)
* dc5d9cfe Fix root README.md
* e4447fd8 Upgrade Tornjak to new image v1.2.1 (#299)
* 69f402ec Update docs
* 38d51d59 Apply suggestions from code review
* a1ba235c Update docs
* 1922085b Fix hooks for K3s (#305)
* 4fb549e9 Remove 1.21.x testing
* 88efc77b Allow to use spire-server as an upstream authority (#304)
* 0ba03880 Add support for spire-server ingress (#68)
* 4777a300 Bump test chart dependencies (#301)
* 00c2c1a5 Fix the generated pr so that it runs jobs too (#303)
* dd1ad495 Update images for cve's found by the cronjob (#290)
* 1c694707 Updated Tornjak documenation with Not-for-production labels (#297)
* 78096374 Merge pull request #296 from spiffe/dependabot/github_actions/helm/kind-action-1.7.0
* e61ed17b Merge pull request #295 from spiffe/dependabot/github_actions/sigstore/cosign-installer-3.0.5
* 9975e58f Merge pull request #245 from spiffe/tags
* 7bb7ece1 Bump helm/kind-action from 1.6.0 to 1.7.0
* f1623a59 Bump sigstore/cosign-installer from 3.0.4 to 3.0.5
* f8db5a31 Fix Tornjak persistence issue (#294)
* b30b412e Tornjak reuse spire-lib.cluster-domain macro (#292)
* 90c9eb50 Fix kubectl-image macro to handle version deprecation
* 300d1ccf Apply deprecation of image.version to Tornjak
* d8504864 Instead of removing version, first deprecate version
* 59e422b9 Add documentation for all image.tag values
* d1f3cdb9 Switch image.version to image.tag
* 31ce704f Cleanup maintainer handbook (#287)
* a2da9437 Remove manual dispatch from dummy workflow (#288)
* 807558bb Bump helm/kind-action from 1.5.0 to 1.6.0 (#285)
* 3df67dbb Bump sigstore/cosign-installer from 3.0.3 to 3.0.4 (#286)
* 5505d41d Merge pull request #283 from spiffe/additional-k8s-native-feature-tornjak-frontend
* 391f093a Allow to configure topologySpreadConstraints for tornjak-frontend
* 5cc26d31 Allow to configure tolerations for tornjak-frontend
* 3537161c Allow to configure affinity for tornjak-frontend
* aed6fdfe Use the correct kubectl for the cluster (#248)
* ee43c5e3 Add nodeSelector for tornjak
* fc13cbd9 Merge pull request #234 from spiffe/tornjak
* ed472aa9 Update documentation
* a11cfc99 Allow to define the resources for tornjak backend
* 382e0d4a Upgrade Tornjak image to version v1.2.0  (#259)
* 657c460e Update charts/spire/charts/tornjak-frontend/templates/service.yaml
* 7521cafc Update charts/spire/charts/spire-server/templates/tornjak-config.yaml
* b64c352b Update charts/spire/charts/spire-server/templates/tests/test-tornjak-connection.yaml
* 6ddf6ab9 Improve tornjak docs (#276)
* 80d34f04 Use common post-install scripts for testing
* f5efa0ce Remove dead macros
* bd86518a Fixing shellcheck
* 91bdea2a Provide minimal resources to prevent accidental crashes due to resource exhaustion
* 16759977 Tornjak global image fix (#228)
* 5e827ee4 Add Tornjak Tests (#220)
* bdba97b6 Add empty directory to Tornjak to support npm cache (#224)
* da186c5f Split Tornjak Frontend into separate subchart (#179)
* 6d221263 Add Tornjak
* 2669d8b5 Add maintainer's handbook. (#265)
* 72596aea Skip tests for docs folders (#281)
* 7c71738d Bump test chart dependencies (#279)
* 05addae9 Add json to test path (#280)
* 8d9b7349 Switch the spire tests to always run (#250)

Signed-off-by: Marco Franssen <[email protected]>
 2023-05-25 14:22:31 +02:00
Edwin Buck c1c5b112c0 Merge pull request #306 from spiffe/remove-1.21 
Remove 1.21.x testing
 2023-05-23 18:33:58 -05:00
Kevin Fox 0df45e3cd8 Fix up docs 
Signed-off-by: Kevin Fox <[email protected]>
 2023-05-23 16:26:23 -07:00
kfox1111 ed038feae1 Upgrade to spire 1.6.4 (#308) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-05-23 16:17:34 -07:00
Mariusz Sabath e4447fd8eb Upgrade Tornjak to new image v1.2.1 (#299) 
This upgrade enables the production version of React in Tornjak Frontend
with a smaller footprint and faster startup time.

Using Tornjak v1.2.1 release
https://github.com/spiffe/tornjak/releases/tag/v1.2.1

---------

Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-23 13:32:20 -04:00
Kevin Fox 69f402ecc6 Update docs 
Signed-off-by: Kevin Fox <[email protected]>
 2023-05-23 09:56:05 -07:00
kfox1111andFaisal Memon 38d51d5985 Apply suggestions from code review 
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
 2023-05-23 09:55:38 -07:00
Kevin Fox a1ba235c99 Update docs 
Signed-off-by: Kevin Fox <[email protected]>
 2023-05-23 09:44:06 -07:00
Faisal Memonandkfox1111 1922085ba7 Fix hooks for K3s (#305) 
Co-authored-by: kfox1111 <[email protected]>
 2023-05-23 08:59:21 -07:00
kfox1111andMarco Franssen 88efc77bee Allow to use spire-server as an upstream authority (#304) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-05-23 14:39:37 +00:00
kfox1111Faisal MemonMarco Franssendependabot[bot]
 		0ba03880a1 Add support for spire-server ingress (#68) 
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-05-23 13:58:58 +00:00
kfox1111 dd1ad495bd Update images for cve's found by the cronjob (#290) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-05-18 14:55:39 -07:00
Mariusz Sabath 1c6947078a Updated Tornjak documenation with Not-for-production labels (#297) 2023-05-18 23:31:03 +02:00
Marco Franssen 9975e58f5c Merge pull request #245 from spiffe/tags 2023-05-18 09:18:22 +02:00
kfox1111 f8db5a313b Fix Tornjak persistence issue (#294) 2023-05-18 01:54:26 +02:00
Marco Franssen b30b412edb Tornjak reuse spire-lib.cluster-domain macro (#292) 
Resolves #291

Signed-off-by: Marco Franssen <[email protected]>
 2023-05-17 12:42:17 -07:00
Marco Franssen 90c9eb50f9 Fix kubectl-image macro to handle version deprecation 
Signed-off-by: Marco Franssen <[email protected]>
 2023-05-17 20:21:07 +02:00
Marco Franssen 300d1ccf28 Apply deprecation of image.version to Tornjak 
Signed-off-by: Marco Franssen <[email protected]>
 2023-05-17 20:21:07 +02:00
Marco Franssen d850486478 Instead of removing version, first deprecate version 
Deprecating version allows users of the chart to have a migration path

Signed-off-by: Marco Franssen <[email protected]>
 2023-05-17 20:21:07 +02:00
Marco Franssen 59e422b9e3 Add documentation for all image.tag values 
Signed-off-by: Marco Franssen <[email protected]>
 2023-05-17 20:21:07 +02:00
Kevin Fox d1f3cdb909 Switch image.version to image.tag 
The convention in most charts is to use image.tag. This patch updates the values
to use it instead of the less standard image.version.

Signed-off-by: Kevin Fox <[email protected]>
 2023-05-17 20:21:07 +02:00
Marco Franssen 391f093ae9 Allow to configure topologySpreadConstraints for tornjak-frontend 
Signed-off-by: Marco Franssen <[email protected]>
 2023-05-16 20:29:41 +02:00
Marco Franssen 5cc26d3142 Allow to configure tolerations for tornjak-frontend 
Signed-off-by: Marco Franssen <[email protected]>
 2023-05-16 20:29:41 +02:00
Marco Franssen 3537161cdf Allow to configure affinity for tornjak-frontend 
Signed-off-by: Marco Franssen <[email protected]>
 2023-05-16 20:29:41 +02:00
kfox1111 aed6fdfe4e Use the correct kubectl for the cluster (#248) 2023-05-16 20:28:53 +02:00
Marco Franssen ee43c5e36f Add nodeSelector for tornjak 
Tornjak only supports amd64 builds at the moment

To prevent deployment failures on clusters with arm64 nodes I have added a nodeSelector for tornjak frontend, and documentation for spire-server

Signed-off-by: Marco Franssen <[email protected]>
 2023-05-16 20:20:32 +02:00
Mariusz Sabath ed472aa98b Update documentation 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Marco Franssen a11cfc99ac Allow to define the resources for tornjak backend 
Signed-off-by: Marco Franssen <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen 382e0d4a47 Upgrade Tornjak image to version v1.2.0 (#259) 
Signed-off-by: Mariusz Sabath <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen 657c460e67 Update charts/spire/charts/tornjak-frontend/templates/service.yaml 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen 7521cafcc6 Update charts/spire/charts/spire-server/templates/tornjak-config.yaml 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen b64c352b15 Update charts/spire/charts/spire-server/templates/tests/test-tornjak-connection.yaml 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Marco Franssen 6ddf6ab9fa Improve tornjak docs (#276) 
- Align tornjak backend naming with same convention as frontend
- Align Tornjak backend and frontend notes style
- Add disclaimer for Tornjak usage to example

---------

Signed-off-by: Marco Franssen <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz Sabath f5efa0cefd Remove dead macros 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz Sabath 91bdea2a1d Provide minimal resources to prevent accidental crashes due to resource exhaustion 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
kfox1111 1675997748 Tornjak global image fix (#228) 
This pr updates the Tornjak branch to work with the merged global
registry configuration support.

Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz SabathMarco Franssenkfox1111
 		5e827ee45e Add Tornjak Tests (#220) 
Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz Sabath bdba97b629 Add empty directory to Tornjak to support npm cache (#224) 
Resolves issue #223

Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen da186c5f53 Split Tornjak Frontend into separate subchart (#179) 
Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-05-16 19:31:38 +02:00
Marco Franssen 6d221263fb Add Tornjak 
This reverts commit 3210dfe49dfabc96437d1fe60a1b9a5eedb2312b.

Signed-off-by: Marco Franssen <[email protected]>
 2023-05-16 19:31:38 +02:00
Marco Franssen 8c5643b5f7 Bump spire Helm Chart version from 0.6.3 to 0.7.0 (#278) 
Please review the below changelog to ensure this matches up with the
semantic version being applied.

> **Note**: **Maintainers** ensure to run following after merging this
PR to trigger the release workflow:
>
> ```shell
> git checkout main
> git pull
> git checkout release
> git pull
> git merge main
> git push
> ```

**Changes in this release**

* 65312f85 Include dependency values in documentation (#275)
* 5489212b Remove persistence.enabled flag (#274)
* b3153242 Allow for ConfigMaps to be annotated (#272)
* 013eb617 Fix spacing for spire server service annotation (#273)
* 73435be9 Add project glossary. (#262)
* c4656a74 Replicas > 1 is not allowed with sqlite driver (#269)
* d3da3eed External database configuration (#225)
* ce78bea1 Add Edwin Buck as a maintainer. (#267)
* 1f09d7b3 Bump test chart dependencies (#264)
* aa6b40c0 Add project overview. (#258)
* 8e7e6ebc Allow trust bundle url to be set along with format (#256)
* 1e09ea54 Bump peter-evans/create-pull-request from 5.0.0 to 5.0.1
(#253)
* 6760cd22 Bump test chart dependencies (#252)
* 61e338df Fix example production typos (#244)
* 3d81928f Add skipKubeletVerification configurable (#243)
* 46f10e1d Merge pull request #237 from spiffe/fix-check-versions
* 3889d22e Fix quotation bug in update-version.sh
* 6a894e8c Move update-versions.sh script
* 91083a6b Add post-install scripts to all tests to capture failure
details in GitHub workflow summary (#88)
* 9afb6f80 Merge pull request #242 from spiffe/shellcheck
* 99af475f Resolve shellcheck issues
* d0a1e128 Add workflow with shellcheck
* 8abd75ef Merge pull request #241 from
spiffe/dependabot/github_actions/sigstore/cosign-installer-3.0.3
* 252f1f5a Bump cosign to v2.0.2
* 247e3e5d Bump sigstore/cosign-installer from 3.0.2 to 3.0.3
* 17d62f12 Add an action to find new versions of helm charts (#184)
* 2c360a50 Add global for image registry (#201)
* 3cc89554 Move reusable macros to root chart (#218)
* 3fc81780 Add k8s 1.27 to CI + bump other versions to latest patches
(#219)
* 6b617440 Merge pull request #113 from
spiffe/spire-config-as-yaml-converted-json
* 9e03f297 Merge branch 'main' into spire-config-as-yaml-converted-json
* 210ed02c Remove dead code (#217)
* e3b0d00b Bump min required spire 1.6.x version for this chart
* d7dcfeb6 Change spiffe-oidc-provider-config configmap to yaml format
* 861108c0 Change spire-agent configmap to yaml format
* 1d72b572 Change spire-server configmap to yaml format

Signed-off-by: Marco Franssen <[email protected]>
 2023-05-12 11:19:28 -07:00
Marco FranssenandFaisal Memon 65312f8525 Include dependency values in documentation (#275) 
I have added a flag to the helm-docs script to include the documentation
for dependencies.

This will add more complete documentation to
https://artifacthub.io/packages/helm/spiffe/spire#values so it is easier
for our users to get started and having a complete overview.

---------

Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-05-12 18:12:23 +00:00
Faisal Memon 5489212bb5 Remove persistence.enabled flag (#274) 2023-05-12 16:19:50 +02:00
Faisal Memonandkfox1111 b315324244 Allow for ConfigMaps to be annotated (#272) 
Without an annotation, spinnaker will rename the configmap.

---------

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-05-11 10:49:06 -07:00
Faisal Memon 013eb617a9 Fix spacing for spire server service annotation (#273) 
Spacing off by 4.

Signed-off-by: Faisal Memon <[email protected]>
 2023-05-10 18:22:07 -07:00
kfox1111Faisal MemonMarco Franssen
 		c4656a74b2 Replicas > 1 is not allowed with sqlite driver (#269) 
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-05-10 16:30:05 +02:00
kfox1111Faisal MemonMarco Franssen
 		d3da3eed55 External database configuration (#225) 
This patch makes all the database settings configurable.

fixes: https://github.com/spiffe/helm-charts/issues/37

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-05-10 14:04:34 +02:00
Edwin Buck ce78bea121 Add Edwin Buck as a maintainer. (#267) 2023-05-09 17:00:02 +02:00
kfox1111andFaisal Memon 8e7e6ebc76 Allow trust bundle url to be set along with format (#256) 
This patch enables the spire-agent to retrieve the trust bundle via url.

fixes: https://github.com/spiffe/helm-charts/issues/254

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-05-04 13:15:17 -07:00