panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
792 Commits 1 Branch 2 Tags
1dc650f06eb20a907beede75d6a589443e89edd4
Commit Graph
50 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mariusz Sabathkfox1111Edwin Buck
 		1dc650f06e Apply wildcard for ignoreNamespaces in Controller Manager (#378) 
* Apply wildcard for ignoreNamespaces in Controller Manager

Signed-off-by: Mariusz Sabath <[email protected]>

* Add the doc updates

Signed-off-by: Mariusz Sabath <[email protected]>

* Update charts/spire/charts/spire-server/values.yaml

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Edwin Buck <[email protected]>

---------

Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: Edwin Buck <[email protected]>
Co-authored-by: Edwin Buck <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-06-06 15:56:15 -07:00
Mariusz Sabath 7dabbf16d3 Add Openshift ignore namespaces to Controller Manager (#363) 
* Fix spelling error in Controller Manager config

Signed-off-by: Mariusz Sabath <[email protected]>

* Add ignoreNamespaces to ControllerManager for Openshift

Signed-off-by: Mariusz Sabath <[email protected]>

---------

Signed-off-by: Mariusz Sabath <[email protected]>
 2024-05-26 07:55:26 -07:00
Mariusz Sabath db177d4b85 Fix spelling error in Controller Manager config (#362) 
Signed-off-by: Mariusz Sabath <[email protected]>
 2024-05-23 19:26:44 +00:00
Mariusz Sabath 2c5dfa010f Improve Tornjak NOTES. Fixes #132 (#354) 
* Improve Tornjak NOTES. Fixes #132

Signed-off-by: Mariusz Sabath <[email protected]>

* Fix Tornjak ingress value

Signed-off-by: Mariusz Sabath <[email protected]>

---------

Signed-off-by: Mariusz Sabath <[email protected]>
 2024-05-14 13:52:55 -07:00
Mariusz Sabathkfox1111Mohammed Abdi
 		b6575c172d Update Tornjak deployment docs (#288) 
* Update Tornjak deployment docs

Signed-off-by: Mariusz Sabath <[email protected]>

* Change the  reference for installing standard Tornjak

Signed-off-by: Mariusz Sabath <[email protected]>

* Update examples/tornjak/README.md

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>

* Adjust deployment paths

Signed-off-by: Mariusz Sabath <[email protected]>

* Remove the production README changes

Signed-off-by: Mariusz Sabath <[email protected]>

* Minor text edits

Signed-off-by: Mariusz Sabath <[email protected]>

* Fix incorrect namespace value

Signed-off-by: Mariusz Sabath <[email protected]>

* Updat Tornjak README

Signed-off-by: Mariusz Sabath <[email protected]>

* Update Keycloak README

Signed-off-by: Mariusz Sabath <[email protected]>

* Text updates in Keycloak doc

Signed-off-by: Mariusz Sabath <[email protected]>

* Post-review updates

Signed-off-by: Mariusz Sabath <[email protected]>

* Update Tornjak message for User Management

Signed-off-by: Mariusz Sabath <[email protected]>

* Update examples/tornjak/keycloak/README.md

Co-authored-by: Mohammed Abdi <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>

* Update Tornjak deployment doc

Signed-off-by: Mariusz Sabath <[email protected]>

* Improve the Tornjak Auth message

Signed-off-by: Mariusz Sabath <[email protected]>

* Fix error with incorrect Ingress value

Signed-off-by: Mariusz Sabath <[email protected]>

* Fix documentation format

Signed-off-by: Mariusz Sabath <[email protected]>

* Update parameter format

Signed-off-by: Mariusz Sabath <[email protected]>

* Removed redundand doc sections

Signed-off-by: Mariusz Sabath <[email protected]>

---------

Signed-off-by: Mariusz Sabath <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: Mohammed Abdi <[email protected]>
 2024-05-09 04:26:17 -07:00
Mariusz Sabathandkfox1111 c37de1ea0c Fix Tornjak logsDir for Openshift (#344) 
* Fix Tornjak logsDir for Openshift

Signed-off-by: Mariusz Sabath <[email protected]>

* Update docs

Signed-off-by: Mariusz Sabath <[email protected]>

* Update charts/spire/charts/tornjak-frontend/templates/_helpers.tpl

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>

---------

Signed-off-by: Mariusz Sabath <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-05-03 08:04:38 -07:00
Mariusz Sabath 6d19a76f01 Fix agent daemonset format (#184) 
Signed-off-by: Mariusz Sabath <[email protected]>
 2024-01-12 21:20:10 +00:00
Mariusz Sabath 811123a207 Update the Tornjak image version (#150) 2023-12-14 23:15:04 +01:00
Mariusz Sabath b7d8590b77 Fix missing protocol in JWT Issuer (#120) 
* Add missing protocol to jwt_issuer

Signed-off-by: Mariusz Sabath <[email protected]>

* Removed trailing spaces

Signed-off-by: Mariusz Sabath <[email protected]>

---------

Signed-off-by: Mariusz Sabath <[email protected]>
 2023-11-29 00:13:32 +00:00
Mariusz Sabath c9885de539 Introduce ReadOnlyRootFilesystem for Tornjak frontend (#110) 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-11-16 15:47:04 -08:00
Mariusz Sabath 911f51b679 Consolidate all the examples to a common relative path (#109) 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-11-16 13:14:55 -08:00
Mariusz SabathMarco Franssenkfox1111
 		821ca1290e Add Tornjak ingress example (#30) 
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Mariusz Sabath <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-11-10 12:30:40 +00:00
Mariusz Sabath 93c20c6830 Merge pull request #83 from spiffe/doc-ingress-patch 
Fix the typo in the production ingress README
 2023-11-09 10:28:14 -05:00
Mariusz Sabath bd7879a84c Fix the typo in the production ingress README 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-11-08 11:48:20 +01:00
Mariusz Sabath f08ebd344e Patch Tornjak ingress (#74) 
* Fix the tornjak backend tornjak

Signed-off-by: Mariusz Sabath <[email protected]>

* Revert "Fix the tornjak backend tornjak"

This reverts commit cef5505fab940af34be8cfef3e210f020c2f36a1.

Signed-off-by: Mariusz Sabath <[email protected]>

* Fix the tornjak backend tornjak

Signed-off-by: Mariusz Sabath <[email protected]>

---------

Signed-off-by: Mariusz Sabath <[email protected]>
 2023-11-02 09:38:33 -07:00
Mariusz SabathTrilok GeerAndrew Blockkfox1111
 		3b016841da Support Openshift deployment (#13) 
* Add support for SPIRE deployment on OpenShift 4.13

Signed-off-by: Mariusz Sabath <[email protected]>
Co-authored-by: Trilok Geer <[email protected]>
Co-authored-by: Andrew Block <[email protected]>

* Render README

Signed-off-by: Mariusz Sabath <[email protected]>

* Fix tornjak HTTP/HTTPS port values

Signed-off-by: Mariusz Sabath <[email protected]>

* Update Frontend README

Signed-off-by: Mariusz Sabath <[email protected]>

* Add env. variable to Agent to inject node name

Signed-off-by: Mariusz Sabath <[email protected]>

* Implement Marco's suggestion on CSI CSS version

Signed-off-by: Mariusz Sabath <[email protected]>

* Add MY_NODE_NAME env. variable to agent for openshift example

Signed-off-by: Mariusz Sabath <[email protected]>

* Move Openshift examples to dedicated directory

Signed-off-by: Mariusz Sabath <[email protected]>

* Simplified the install instructions

Signed-off-by: Mariusz Sabath <[email protected]>

* Suggested changes

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Andrew Block <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update docs, fix default for backwards compat

Signed-off-by: Kevin Fox <[email protected]>

* Don't recommend experimental features by default, dont debug helm install by default and explain how to add additional features

Signed-off-by: Kevin Fox <[email protected]>

* Add notes about openshift to the project for other reviewers.

Signed-off-by: Kevin Fox <[email protected]>

* Fix incorrectly reverted change

Signed-off-by: Kevin Fox <[email protected]>

* Correct notes

Signed-off-by: Kevin Fox <[email protected]>

* Update default

Signed-off-by: Kevin Fox <[email protected]>

* Fix issue created from bad merge conflict resolution

Signed-off-by: kfox1111 <[email protected]>

* Update examples/openshift/openshift-values.yaml

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>

* Update examples/openshift/openshift-values.yaml

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>

* Update examples/openshift/openshift-values.yaml

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>

* Update examples/openshift/openshift-values.yaml

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>

---------

Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Trilok Geer <[email protected]>
Co-authored-by: Andrew Block <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
 2023-10-31 16:27:23 +00:00
Mariusz Sabathandkfox1111 02d445c87b Update charts/spire/README.md 
Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-10-26 16:08:15 -04:00
Mariusz Sabath 663551297a Fix Tornjak HTTPS ingress port (#39) 
* Fix failing Tornjak ingress port

Signed-off-by: Mariusz Sabath <[email protected]>

* Add HTTPS port to Tornjak ingress

Signed-off-by: Mariusz Sabath <[email protected]>

* Remove tlsBackendPort flag

Signed-off-by: Mariusz Sabath <[email protected]>

---------

Signed-off-by: Mariusz Sabath <[email protected]>
 2023-10-17 19:48:54 +00:00
Mariusz SabathandFaisal Memon 0e41a7d1b4 Fix failing Tornjak ingress port (#28) 
Co-authored-by: Faisal Memon <[email protected]>
 2023-10-11 14:36:15 +00:00
Mariusz Sabath 69a20e32d4 Merge pull request #29 from spiffe/tornjak-version 
Update Tornjak image version
 2023-10-10 15:43:02 -04:00
Mariusz Sabath 3036a41c02 Switch to version v1.4.0 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-10-10 15:07:14 -04:00
Mariusz Sabath da49059c87 Update Tornjak image version 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-10-10 15:01:31 -04:00
Mariusz SabathandMarco Franssen 03ff618958 Add Tornjak ingress (#16) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-10-09 11:31:55 +00:00
Mariusz Sabath 8f1bfc16ad Merge pull request #23 from spiffe/examples-doc 2023-10-07 00:12:18 -04:00
Mariusz Sabath cd386eb8ae Merge branch 'main' into examples-doc 2023-10-06 21:49:02 -04:00
Mariusz Sabath 12937db24b Update Example README 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-10-06 21:31:59 -04:00
Mariusz Sabath f40743d484 Improve Tornjak documentation (#439) 2023-08-16 14:27:27 +00:00
Mariusz Sabath 7a6e4f8d75 Change Tornjak backend default port (#436) 2023-08-09 16:46:08 +02:00
Mariusz SabathandMarco Franssen f05cb4fe1e Add option to configure TLS/mTLS endpoint for Tornjak (#338) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-07-19 14:32:32 +02:00
Mariusz SabathandEdwin Buck 52e5c24947 Upgrade Tornjak to image v1.2.2 (#328) 
Upgrade Tornjak image to version v1.2.2
(https://github.com/spiffe/tornjak/releases/tag/v1.2.2)

- Resolving issue #326 (remove an emergency patch) 
- Refactor and improve Tornajk image build process

---------

Signed-off-by: Mariusz Sabath <[email protected]>
Co-authored-by: Edwin Buck <[email protected]>
 2023-06-08 14:29:01 -04:00
Mariusz Sabath 9fa1ec28a7 Improve Tornjak backend test (#321) 2023-05-30 23:29:29 +02:00
Mariusz Sabath 5b779dc88a Improve Tornjak frontend test (#320) 2023-05-30 23:28:35 +02:00
Mariusz SabathandFaisal Memon d83d6a8efe Emergency patch for Tornjak Frontend (#319) 
Tornjak Frontend serves incorrect dashboard due to restricted namespace.
Fixing the cache file location leads to this error:
```Error: EACCES: permission denied, open './build/env.js'```

Solution, to redirect the env.js output to writeable space e.g. /tmp

Signed-off-by: Mariusz Sabath <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-05-26 21:50:41 -07:00
Mariusz Sabath 1247b68f4d Parametrize probes (#310) 
This PR addresses #307 by parametrizing Probes and moving them to
values.yaml

---------

Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-25 08:53:44 -04:00
Mariusz Sabath e4447fd8eb Upgrade Tornjak to new image v1.2.1 (#299) 
This upgrade enables the production version of React in Tornjak Frontend
with a smaller footprint and faster startup time.

Using Tornjak v1.2.1 release
https://github.com/spiffe/tornjak/releases/tag/v1.2.1

---------

Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-23 13:32:20 -04:00
Mariusz Sabath 1c6947078a Updated Tornjak documenation with Not-for-production labels (#297) 2023-05-18 23:31:03 +02:00
Mariusz Sabath ed472aa98b Update documentation 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen 382e0d4a47 Upgrade Tornjak image to version v1.2.0 (#259) 
Signed-off-by: Mariusz Sabath <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen 657c460e67 Update charts/spire/charts/tornjak-frontend/templates/service.yaml 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen 7521cafcc6 Update charts/spire/charts/spire-server/templates/tornjak-config.yaml 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen b64c352b15 Update charts/spire/charts/spire-server/templates/tests/test-tornjak-connection.yaml 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz Sabath 80d34f0485 Use common post-install scripts for testing 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz Sabath f5efa0cefd Remove dead macros 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz Sabath bd86518abc Fixing shellcheck 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz Sabath 91bdea2a1d Provide minimal resources to prevent accidental crashes due to resource exhaustion 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz SabathMarco Franssenkfox1111
 		5e827ee45e Add Tornjak Tests (#220) 
Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz Sabath bdba97b629 Add empty directory to Tornjak to support npm cache (#224) 
Resolves issue #223

Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen da186c5f53 Split Tornjak Frontend into separate subchart (#179) 
Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz Sabath 901e670d49 Disable default Tornjak deployment (#153) 2023-03-22 12:16:38 -07:00
Mariusz SabathKevin FoxMarco FranssenPete CableDennis Gove
 		05d0f4778d Introduction of Tornjak to SPIRE Server helm charts (#144) 
This PR introduces a simplified version of
[Tornjak](https://github.com/spiffe/tornjak) to support UI and SPIRE
control plane.

It extends the `/charts/spire-server` sub-chart by injecting *tornjak*
container to the *spire-server* pod. Tornjak image consists of Tornjak
API (Tornjak Backend), Tornjak UI (Frontend), and database for storing
Tornjak specific information.

Tornjak Backend communicates with SPIRE API via SPIRE Server socket. 

Since Tornjak UI (Frontend) is a React code that renders in a browser,
it needs to communicate with Tornjak APIs, and that requires
communication ports to be open, either via Ingress (in Cloud deployment)
or via port forwarding in local deployments (e.g. kind, minikube etc).
Typically port 10000 is used for HTTP connection to Backend, and port
3000 for the HTTP connection to Frontend.

End user management, TLS, and mTLS connections will be addressed by
future PRs.

This PR resolves issue #31

---------

Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Pete Cable <[email protected]>
Co-authored-by: Dennis Gove <[email protected]>
 2023-03-22 13:09:09 -04:00