panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
931 Commits 1 Branch 2 Tags
25967baeef53a7c54bc98421c314fa55b99eb869
Commit Graph
593 Commits
Author SHA1 Message Date
RedneckEdamameandkfox1111 25967baeef Add new config.jwksUri option to oidc-discovery chart (#547) 
Signed-off-by: Spencer Hitchins <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-03-31 18:13:23 +00:00
spire-helm-version-checker[bot]andmarcofranssen 2f96b0b1d0 Bump test chart dependencies (#545) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-03-24 05:54:29 -07:00
kfox1111 663b89e3ea Upgrade to SPIRE 1.12.0 (#542) 
Signed-off-by: Kevin Fox <[email protected]>
 2025-03-21 16:43:10 -07:00
Tamal Saha 1c73035ecb Add values to configure apiServiceLabel and webhookLabel (#536) 
Signed-off-by: Tamal Saha <[email protected]>
 2025-03-18 11:07:59 -07:00
spire-helm-version-checker[bot]andmarcofranssen 385cbb3e3d Bump test chart dependencies (#539) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-03-17 06:47:06 -07:00
spire-helm-version-checker[bot]andmarcofranssen ad44c486b4 Bump test chart dependencies (#537) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-03-10 04:33:22 -07:00
nweisenauerandkfox1111 86ea90cbf4 Fixes indentation of sync_interval value inside spire-agent configmap (#534) 
Signed-off-by: Nico Weisenauer <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-03-06 15:40:41 +00:00
spire-helm-version-checker[bot]andmarcofranssen 3940ac3c22 Bump test chart dependencies (#533) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-03-03 06:09:55 -08:00
Faisal Memon 2af830d06d Bump spire Helm Chart version from 0.24.1 to 0.24.2 (#532) 
* b13f4c0 Bump test chart dependencies
* 915744f Bump test chart dependencies (#529)
* 0368210 Update spire to 1.11.2 (#527)
* ea03059 Bump test chart dependencies (#524)
* 762ba40 Bump test chart dependencies (#523)
* f1ba4ba Bump test chart dependencies (#522)
* 413e579 Bump test chart dependencies
* f88e3d5 Bump test chart dependencies (#517)
* 848f491 Bump test chart dependencies (#516)
* 41cbad2 Bump test chart dependencies (#512)
* 8925ed6 Bump test chart dependencies (#508)
* 70f5b19 Bump test chart dependencies (#500)

Signed-off-by: Faisal Memon <[email protected]>
 2025-02-27 09:27:47 -08:00
marcofranssen b13f4c0393 Bump test chart dependencies 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-02-24 09:22:07 +01:00
spire-helm-version-checker[bot]andmarcofranssen 915744fa46 Bump test chart dependencies (#529) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-02-17 06:01:47 -08:00
kfox1111 0368210d6b Update spire to 1.11.2 (#527) 
* Update spire to 1.11.2

Signed-off-by: Kevin Fox <[email protected]>

* Fix doc

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2025-02-13 22:39:13 -08:00
spire-helm-version-checker[bot]andmarcofranssen ea03059c38 Bump test chart dependencies (#524) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-02-10 05:41:32 -08:00
spire-helm-version-checker[bot]andmarcofranssen 762ba40ef9 Bump test chart dependencies (#523) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-02-03 06:04:19 -08:00
spire-helm-version-checker[bot]andmarcofranssen f1ba4ba62d Bump test chart dependencies (#522) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-01-27 05:26:37 -08:00
marcofranssen 413e579d42 Bump test chart dependencies 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-01-20 12:33:12 +01:00
spire-helm-version-checker[bot]andmarcofranssen f88e3d52a3 Bump test chart dependencies (#517) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-01-13 05:35:20 -08:00
spire-helm-version-checker[bot]andmarcofranssen 848f49199e Bump test chart dependencies (#516) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-01-06 06:43:10 -08:00
spire-helm-version-checker[bot]andmarcofranssen 41cbad2665 Bump test chart dependencies (#512) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2024-12-23 07:45:37 -08:00
spire-helm-version-checker[bot]marcofranssenkfox1111
 		8925ed6a46 Bump test chart dependencies (#508) 
* Bump test chart dependencies

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* Revert blank versions

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-12-16 09:34:11 -08:00
spire-helm-version-checker[bot]andmarcofranssen 70f5b19d7e Bump test chart dependencies (#500) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2024-11-18 04:49:13 -08:00
Faisal Memon 61eb715029 Bump spire Helm Chart version from 0.24.0 to 0.24.1 (#497) 
* 6608fc9 Add extraEnvVars support for spiffe-csi-driver containers (#496)
* 6193717 Bump test chart dependencies (#494)
* d5777c3 Bump test chart dependencies (#493)
* 4993b67 Fix GCS Bundle endpoint format variable (#491)

Signed-off-by: Faisal Memon <[email protected]>
 2024-11-17 14:14:01 -08:00
Patrick O'Brien 6608fc980a Add extraEnvVars support for spiffe-csi-driver containers (#496) 
Signed-off-by: Patrick O'Brien <[email protected]>
Signed-off-by: Patrick O’Brien <[email protected]>
 2024-11-17 13:25:29 -08:00
spire-helm-version-checker[bot]andmarcofranssen 6193717061 Bump test chart dependencies (#494) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2024-11-11 04:15:31 -08:00
spire-helm-version-checker[bot]andmarcofranssen d5777c3dd2 Bump test chart dependencies (#493) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2024-11-04 05:39:24 -08:00
Mattias Gees 4993b671b5 Fix GCS Bundle endpoint format variable (#491) 
The GCS Bundle endpoint configuration was pointing to the S3 Format variable instead of the GCS one.

Signed-off-by: Mattias Gees <[email protected]>
 2024-11-01 13:26:15 +01:00
Faisal Memon 5b16168e70 Bump spire Helm Chart version from 0.23.0 to 0.24.0 (#487) 
* a3e607e Bump test chart dependencies (#484)
* a360646 Add validating admission policy to restrict upstream driver access (#482)
* a7368ee Upgrade to spire 1.11.0 (#483)
* fe5464b Update notes (#479)
* 29e9866 Bump test chart dependencies (#481)
* 13736cd Add support for the new hint spire-controller-manager feature (#472)
* b08e8bf Agent support for bundle on host path (#478)
* 7b409ed Fix cert-manager upstream authority when enabling recommendations (#476)
* 01c7227 Add support for the new fallback spire-controller-manager feature (#471)
* 0a6dd19 Bump test chart dependencies (#477)
* fcbd64e Support federation bundle endpoint profile http_web certificates (#469)
* c29f45f Add AWS DB types (#464)
* 898a349 Add remaining data store options (#463)
* 2443515 Bump test chart dependencies (#474)
* c461794 Update the spire-controller-manager to 0.6.0 (#473)
* 5d07eaf Align more settings to convention (#467)
* ea2d673 Bump test chart dependencies (#470)
* 352aee2 Bump test chart dependencies (#468)
* c3c8514 Change curl --caPath to --capath (#462)
* 68d21cc Add an initial json schema file for spire-agent (#458)
* b7e9823 Add new config.jwtDomain value to oidc-discovery chart (#457)
* 8832da3 Protects SPIRE Agent's Chart Against YAML Template Injection (#450)
* 3bc7025 Update spiffe-helper (#453)
* 86d6fca Bump test chart dependencies (#449)

Signed-off-by: Faisal Memon <[email protected]>
 2024-10-28 18:36:17 +00:00
spire-helm-version-checker[bot]andmarcofranssen a3e607e7d8 Bump test chart dependencies (#484) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2024-10-28 06:01:02 -07:00
kfox1111andFaisal Memon a360646842 Add validating admission policy to restrict upstream driver access (#482) 
* Add validating admission policy to restrict upstream driver access

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spiffe-csi-driver/templates/policy.yaml

Signed-off-by: kfox1111 <[email protected]>

* Fix logic

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade helm

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Add version info

Signed-off-by: Kevin Fox <[email protected]>

* Add version info

Signed-off-by: Kevin Fox <[email protected]>

* Fix kind version

Signed-off-by: Kevin Fox <[email protected]>

* Fix kind version

Signed-off-by: Kevin Fox <[email protected]>

* Fix kind version

Signed-off-by: Kevin Fox <[email protected]>

* Fix detection

Signed-off-by: Kevin Fox <[email protected]>

* Just for testing...

Signed-off-by: Kevin Fox <[email protected]>

* Just for testing...

Signed-off-by: Kevin Fox <[email protected]>

* Just for testing

Signed-off-by: Kevin Fox <[email protected]>

* Fix policy

Signed-off-by: Kevin Fox <[email protected]>

* Fix policy

Signed-off-by: Kevin Fox <[email protected]>

* Fix policy

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spiffe-csi-driver/values.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-10-26 07:40:29 -07:00
kfox1111 a7368eee1f Upgrade to spire 1.11.0 (#483) 
Signed-off-by: Kevin Fox <[email protected]>
 2024-10-25 22:36:59 -07:00
kfox1111andFaisal Memon fe5464ba9f Update notes (#479) 
* Update notes

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update charts/spire/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-10-24 10:17:46 -07:00
spire-helm-version-checker[bot]andmarcofranssen 29e9866a8c Bump test chart dependencies (#481) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2024-10-21 04:59:26 -07:00
kfox1111 13736cdf6f Add support for the new hint spire-controller-manager feature (#472) 
* Add support for the new hint spire-controller-manager feature

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
 2024-10-17 15:48:09 -07:00
kfox1111andFaisal Memon b08e8bf9b1 Agent support for bundle on host path (#478) 
* Agent support for bundle on host path

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-agent/values.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-10-17 15:12:27 -07:00
Yann Soubeyrandandkfox1111 7b409ed912 Fix cert-manager upstream authority when enabling recommendations (#476) 
Signed-off-by: Yann Soubeyrand <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-10-17 14:14:20 -07:00
kfox1111 01c7227b13 Add support for the new fallback spire-controller-manager feature (#471) 
* Add support for the new fallback spire-controller-manager feature

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2024-10-17 12:38:25 -07:00
spire-helm-version-checker[bot]andmarcofranssen 0a6dd19906 Bump test chart dependencies (#477) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2024-10-14 06:26:40 -07:00
kfox1111 fcbd64e011 Support federation bundle endpoint profile http_web certificates (#469) 
* Support federation bundle endpoint profile http_web certificates

Signed-off-by: Kevin Fox <[email protected]>

* Fix var

Signed-off-by: Kevin Fox <[email protected]>

* Fix key

Signed-off-by: Kevin Fox <[email protected]>

* Fix test

Signed-off-by: Kevin Fox <[email protected]>

* Fix test

Signed-off-by: Kevin Fox <[email protected]>

* Fix test

Signed-off-by: Kevin Fox <[email protected]>

* Fix test

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2024-10-10 12:03:54 -07:00
kfox1111Faisal MemonMarco Franssen
 		c29f45fc30 Add AWS DB types (#464) 
* Add remaining data store options

Signed-off-by: Kevin Fox <[email protected]>

* Fix env var

Signed-off-by: Kevin Fox <[email protected]>

* Add aws db types

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update charts/spire/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix mysql vars

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Fix missing )

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-server/values.yaml

Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix readme

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2024-10-08 10:50:32 -07:00
kfox1111andFaisal Memon 898a349297 Add remaining data store options (#463) 
* Add remaining data store options

Signed-off-by: Kevin Fox <[email protected]>

* Fix env var

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update charts/spire/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-10-07 16:18:06 -07:00
spire-helm-version-checker[bot]andmarcofranssen 2443515682 Bump test chart dependencies (#474) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2024-10-07 14:04:33 -07:00
kfox1111andFaisal Memon c46179472c Update the spire-controller-manager to 0.6.0 (#473) 
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-10-03 16:27:23 -07:00
kfox1111 5d07eaff52 Align more settings to convention (#467) 
* Align more settings to convention

Signed-off-by: Kevin Fox <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2024-10-03 12:06:38 -07:00
spire-helm-version-checker[bot]andmarcofranssen ea2d673830 Bump test chart dependencies (#470) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2024-09-30 17:06:39 -07:00
spire-helm-version-checker[bot]andmarcofranssen 352aee2f0d Bump test chart dependencies (#468) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2024-09-23 06:50:10 -07:00
Faisal Memonandkfox1111 c3c8514333 Change curl --caPath to --capath (#462) 
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-09-17 14:02:06 -07:00
kfox1111andFaisal Memon 68d21ccade Add an initial json schema file for spire-agent (#458) 
* Add an initial json schema file for spire-agent

Signed-off-by: Kevin Fox <[email protected]>

* Fix tab

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-09-17 13:39:22 -07:00
Erik Godding BoyeandFaisal Memon b7e9823a65 Add new config.jwtDomain value to oidc-discovery chart (#457) 
Signed-off-by: Erik Godding Boye <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-09-17 12:36:52 -07:00
nweisenauer 8832da39b4 Protects SPIRE Agent's Chart Against YAML Template Injection (#450) 
* protects agent's chart against template injection

Signed-off-by: Nico Weisenauer <[email protected]>

* removes unnecessary braces and whitespace

Signed-off-by: Nico Weisenauer <[email protected]>

* Removes int type validation via cast

Signed-off-by: Nico Weisenauer <[email protected]>

---------

Signed-off-by: Nico Weisenauer <[email protected]>
 2024-09-16 06:23:01 -07:00
kfox1111 3bc70255e7 Update spiffe-helper (#453) 
* Update spiffe-helper

Signed-off-by: Kevin Fox <[email protected]>

* Update .github/tests/images.json

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
 2024-09-12 09:49:14 -07:00