Commit Graph
100 Commits
Author SHA1 Message Date
Kevin Fox 3778597e72 Add missing ClusterSPIFFEID fields
There are a few options in the CRD not available via the chart.
Sync them to the chart.

Signed-off-by: Kevin Fox <[email protected]>
2023-11-05 23:29:22 -08:00
kfox1111 d6583be179 Add missing no cleanup flags to example tests (#79) 2023-11-05 14:10:16 +01:00
81cc2dc573 Ingress type openshift (#52)
* Specify ingress controller type

Signed-off-by: Kevin Fox <[email protected]>

* Fix indenting, docs

Signed-off-by: Kevin Fox <[email protected]>

* Fix spacing

Signed-off-by: Kevin Fox <[email protected]>

* Fix missing brackets

Signed-off-by: Kevin Fox <[email protected]>

* Fix missing brackets

Signed-off-by: Kevin Fox <[email protected]>

* Add ingress-nginx support

Signed-off-by: Kevin Fox <[email protected]>

* Use the right example values for test version to upgrade from.

Signed-off-by: Kevin Fox <[email protected]>

* Fix var in wrong location

Signed-off-by: Kevin Fox <[email protected]>

* Fix missing arg

Signed-off-by: Kevin Fox <[email protected]>

* Try this to checkout the right version

Signed-off-by: Kevin Fox <[email protected]>

* Switch to upgrading from 0.14.0

Signed-off-by: Kevin Fox <[email protected]>

* Install crds

Signed-off-by: Kevin Fox <[email protected]>

* Simple ingress support

For a lot of situations, ingress rules can be derived from trustDomain.
Change the code to generate rules by default for the user.

Signed-off-by: Kevin Fox <[email protected]>

* Add upgrade test fix from 43

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Fix test

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Enable unset ingress controller type to use with openshift later

Signed-off-by: Kevin Fox <[email protected]>

* Openshift ingress controller type support

Signed-off-by: Kevin Fox <[email protected]>

* Fix missing end tag

Signed-off-by: Kevin Fox <[email protected]>

* Fix merge conflicts

Signed-off-by: Kevin Fox <[email protected]>

* Fix doc merge conflicts

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Fix merge conflicts

Signed-off-by: Kevin Fox <[email protected]>

* Fix automatically generated rules on openshift

Signed-off-by: Kevin Fox <[email protected]>

* Fix formatting

Signed-off-by: Kevin Fox <[email protected]>

* Fix pathType

Signed-off-by: Kevin Fox <[email protected]>

* Make openshift edge rules work

Signed-off-by: Kevin Fox <[email protected]>

* Fix var scoping

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Fix issue created during merge conflict

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Mariusz Sabath <[email protected]>
2023-11-03 13:16:14 -07:00
kfox1111 6a6aa1c850 Cosign download fix (#72) 2023-10-31 16:44:52 +00:00
kfox1111andFaisal Memon ed23d8b714 Simple ingress support (#48)
Co-authored-by: Faisal Memon <[email protected]>
2023-10-30 22:16:17 +00:00
kfox1111 d50d78d9a0 Fix ingress annotation variable for tornjak server (#66) 2023-10-28 11:47:55 -07:00
kfox1111andMarco Franssen b813807f16 Update docs to simplify, clarify, and prioritize ease of install/upgrade (#62)
* Update docs to simplify, clarify, and prioritize ease of install/upgrade

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
2023-10-26 22:13:54 +00:00
kfox1111 5ad35bd8d5 Merge pull request #59 from sabre1041/spire-agent-nodename
Added environment variable to spire-agent to inject node name
2023-10-26 14:33:13 -07:00
kfox1111andFaisal Memon 7924323a8f Specify ingress controller type (#43)
* Specify ingress controller type

Signed-off-by: Kevin Fox <[email protected]>

* Fix indenting, docs

Signed-off-by: Kevin Fox <[email protected]>

* Fix spacing

Signed-off-by: Kevin Fox <[email protected]>

* Fix missing brackets

Signed-off-by: Kevin Fox <[email protected]>

* Fix missing brackets

Signed-off-by: Kevin Fox <[email protected]>

* Add ingress-nginx support

Signed-off-by: Kevin Fox <[email protected]>

* Use the right example values for test version to upgrade from.

Signed-off-by: Kevin Fox <[email protected]>

* Fix var in wrong location

Signed-off-by: Kevin Fox <[email protected]>

* Fix missing arg

Signed-off-by: Kevin Fox <[email protected]>

* Try this to checkout the right version

Signed-off-by: Kevin Fox <[email protected]>

* Switch to upgrading from 0.14.0

Signed-off-by: Kevin Fox <[email protected]>

* Install crds

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Enable unset ingress controller type to use with openshift later

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs after merge issue

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2023-10-24 20:18:53 +00:00
kfox1111andFaisal Memon 5025025fdc Fix doc missing end tag (#46)
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2023-10-18 21:28:00 +00:00
kfox1111 a01cdc96d6 Production test don't cleanup flag (#44)
* Production test don't cleanup flag

For use in the future with uprade tests, we add a flag -c to the production
test to not cleanup after the testing.

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2023-10-18 13:29:56 -07:00
56445c4f94 Spire controller manager upgrade (#8)
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
2023-10-17 19:54:12 +00:00
kfox1111 dd87bc0fb2 Bump spire versions to 1.7.4 (#35)
Signed-off-by: Kevin Fox <[email protected]>
2023-10-12 14:52:18 -07:00
kfox1111 df1abf6235 Bump to spire 1.7.3 (#31)
Signed-off-by: Kevin Fox <[email protected]>
2023-10-10 22:28:24 -07:00
kfox1111 0fa43a507d Add plugin support to the spire agent (#22)
* Exit code from diff indicating changes should not block commit.

Signed-off-by: Kevin Fox <[email protected]>

* Push the changes that update-tags creates

Signed-off-by: Kevin Fox <[email protected]>

* Add plugin support to the spire agent

This adapts the existing spire server plugin support to be usable by
the agent as well.

Signed-off-by: Kevin Fox <[email protected]>

* Fix notes

Signed-off-by: Kevin Fox <[email protected]>

* Add plugin support to the spire agent

This adapts the existing spire server plugin support to be usable by
the agent as well.

Signed-off-by: Kevin Fox <[email protected]>

* Fix notes

Signed-off-by: Kevin Fox <[email protected]>

* Update documentation

Signed-off-by: Kevin Fox <[email protected]>

* Update example

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
2023-10-10 08:09:11 +00:00
kfox1111andFaisal Memon afba33f179 Add spire agent experimental flags (#26)
* Add spire agent experimental flags

Signed-off-by: Kevin Fox <[email protected]>

* Fix nested test

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-agent/templates/configmap.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Regen docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2023-10-09 16:09:28 -07:00
kfox1111 8aca48f14c Push the changes that update-tags creates (#19)
* Exit code from diff indicating changes should not block commit.

Signed-off-by: Kevin Fox <[email protected]>

* Push the changes that update-tags creates

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2023-10-05 10:40:32 -07:00
kfox1111 a6cb3974ac Exit code from diff indicating changes should not block commit. (#17)
Signed-off-by: Kevin Fox <[email protected]>
2023-10-05 10:23:50 -07:00
kfox1111andFaisal Memon 21db1e4b9a Add a test to ensure upgrades work (#6)
* Add a test to ensure upgrades work

Signed-off-by: Kevin Fox <[email protected]>

* Update examples/production/run-tests.sh

Co-authored-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2023-10-02 17:05:25 -07:00
kfox1111 50825d9fc9 Deny production runs of example.org trust domains (#229) 2023-09-25 12:06:48 -07:00
kfox1111 5273f4e530 Switch mysql and postgresql tests to HA Production configs (#471)
Signed-off-by: Kevin Fox <[email protected]>
2023-09-01 12:25:07 -07:00
kfox1111andMarco Franssen e81a59a7e5 ingress-nginx production tests and spiffe-oidc-discovery-provider example (#136)
Co-authored-by: Marco Franssen <[email protected]>
2023-08-29 15:22:00 +00:00
51cba5b530 Add customPlugins and unsupportedBuiltInPlugins sections to spire-server (#198)
This patch enables end users to configure external plugins in the
spire-server config. Unsupported internal plugins are not able to be
set.

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Edwin Buck <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2023-08-24 21:13:28 +00:00
kfox1111andMarco Franssen d91403af3a Scan for updates to new images (#466)
Co-authored-by: Marco Franssen <[email protected]>
2023-08-22 12:05:44 -07:00
kfox1111andMarco Franssen 77fe43f37d Cron job to check for and update images (#249)
Co-authored-by: Marco Franssen <[email protected]>
2023-08-18 09:49:50 +02:00
kfox1111 5e4cf6f529 Clarify project issues identified with nesting document (#450) 2023-08-17 10:11:05 -07:00
kfox1111 72893515a2 Update spire bits to 1.7.2 (#452) 2023-08-17 10:10:45 -07:00
kfox1111 dc8a4545cc Array spacing in values is incorrect in a file. (#451) 2023-08-17 08:42:21 +02:00
kfox1111 ae8941c49d Support Nested Spire with External Agent (#117) 2023-08-16 16:35:41 +02:00
kfox1111 48a2898016 Fix chainguard image references as per issue 442 (#443) 2023-08-16 16:22:09 +02:00
a52818a72e Add a FAQ and switch rare issue from README to it (#437)
fixes https://github.com/spiffe/helm-charts/issues/433
closes #385

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2023-08-15 09:42:51 -07:00
kfox1111 7d94b105ab Update spire to 1.7.1 (#412)
Signed-off-by: Kevin Fox <[email protected]>
2023-07-28 23:01:26 +02:00
kfox1111 e16210c653 Merge branch 'main' into persistence-type 2023-07-21 09:36:18 -07:00
kfox1111 624ca9cc49 Remove misadded lockfile (#400) 2023-07-20 15:28:32 -07:00
Kevin Fox a6bdb4d1e7 Add persistence type flag
This patch adds a type flag to the persistence settings to enable
specifying the backing volume's type.

Signed-off-by: Kevin Fox <[email protected]>
2023-07-19 23:40:23 +02:00
kfox1111andMarco Franssen a4c1de7b30 Add basic unit test framework (#390)
Co-authored-by: Marco Franssen <[email protected]>
2023-07-19 18:36:07 +00:00
kfox1111 19d3208740 Fix oidc provider config change not rolling out (#383) 2023-07-12 21:05:09 +02:00
kfox1111 3ed1859cd1 Add missing tolerations config to daemonsets (#381)
spiffe-csi-driver and spire-agent are missing the ability to specify
tolerations. This PR adds the missing functionality.

fixes: https://github.com/spiffe/helm-charts/issues/380

Signed-off-by: Kevin Fox <[email protected]>
2023-07-06 12:48:59 -05:00
kfox1111andMarco Franssen c1b1dd3d88 Add additional domains to JWT issued items. (#230)
Co-authored-by: Marco Franssen <[email protected]>
2023-07-03 22:26:28 +02:00
kfox1111 8409674a3e Fix the init container flags of the statefulset (#366) 2023-06-22 18:57:07 +02:00
a6dcf267d1 Allow for SPIRE Agent to run as non root user (#209)
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2023-06-17 10:32:41 +02:00
kfox1111 e6b608c9fd Bump spire images to 1.7.0 (#348) 2023-06-16 07:26:59 +00:00
kfox1111 c97a788c85 Fix bundle role/rolebinding naming conflict (#333) 2023-06-16 08:55:49 +02:00
kfox1111 d0da864113 Add missing metadata to subcharts (#347) 2023-06-14 12:46:22 -07:00
kfox1111 4c0a1d52c5 Allow overriding test images (#186) 2023-06-14 21:17:08 +02:00
kfox1111 250fd5db00 Add missing global values to charts (#311) 2023-06-14 09:16:02 +02:00
kfox1111 4e07450781 Fix ingress annotations for federation (#337)
fixes: https://github.com/spiffe/helm-charts/issues/336

Signed-off-by: Kevin Fox <[email protected]>
2023-06-12 05:50:26 -07:00
Kevin Fox 0df45e3cd8 Fix up docs
Signed-off-by: Kevin Fox <[email protected]>
2023-05-23 16:26:23 -07:00
kfox1111 ed038feae1 Upgrade to spire 1.6.4 (#308)
Signed-off-by: Kevin Fox <[email protected]>
2023-05-23 16:17:34 -07:00
Kevin Fox dc5d9cfeec Fix root README.md
Signed-off-by: Kevin Fox <[email protected]>
2023-05-23 16:15:21 -07:00
Kevin Fox 69f402ecc6 Update docs
Signed-off-by: Kevin Fox <[email protected]>
2023-05-23 09:56:05 -07:00
kfox1111andFaisal Memon 38d51d5985 Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
2023-05-23 09:55:38 -07:00
Kevin Fox a1ba235c99 Update docs
Signed-off-by: Kevin Fox <[email protected]>
2023-05-23 09:44:06 -07:00
Kevin Fox 4fb549e954 Remove 1.21.x testing
Signed-off-by: Kevin Fox <[email protected]>
2023-05-23 08:57:07 -07:00
kfox1111andMarco Franssen 88efc77bee Allow to use spire-server as an upstream authority (#304)
Co-authored-by: Marco Franssen <[email protected]>
2023-05-23 14:39:37 +00:00
0ba03880a1 Add support for spire-server ingress (#68)
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 13:58:58 +00:00
kfox1111 00c2c1a533 Fix the generated pr so that it runs jobs too (#303) 2023-05-23 12:14:40 +02:00
kfox1111 dd1ad495bd Update images for cve's found by the cronjob (#290)
Signed-off-by: Kevin Fox <[email protected]>
2023-05-18 14:55:39 -07:00
kfox1111 f8db5a313b Fix Tornjak persistence issue (#294) 2023-05-18 01:54:26 +02:00
Kevin Fox d1f3cdb909 Switch image.version to image.tag
The convention in most charts is to use image.tag. This patch updates the values
to use it instead of the less standard image.version.

Signed-off-by: Kevin Fox <[email protected]>
2023-05-17 20:21:07 +02:00
kfox1111 aed6fdfe4e Use the correct kubectl for the cluster (#248) 2023-05-16 20:28:53 +02:00
kfox1111 1675997748 Tornjak global image fix (#228)
This pr updates the Tornjak branch to work with the merged global
registry configuration support.

Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
2023-05-16 19:31:38 +02:00
kfox1111 8d9b73496d Switch the spire tests to always run (#250)
This patch sets the spire chart tests to always run. This enables
changes in tests to be tested and sets a base for split out charts.

---------

Signed-off-by: Kevin Fox <[email protected]>
2023-05-14 17:39:08 -07:00
c4656a74b2 Replicas > 1 is not allowed with sqlite driver (#269)
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
2023-05-10 16:30:05 +02:00
d3da3eed55 External database configuration (#225)
This patch makes all the database settings configurable.

fixes: https://github.com/spiffe/helm-charts/issues/37

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
2023-05-10 14:04:34 +02:00
kfox1111andFaisal Memon 8e7e6ebc76 Allow trust bundle url to be set along with format (#256)
This patch enables the spire-agent to retrieve the trust bundle via url.

fixes: https://github.com/spiffe/helm-charts/issues/254

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2023-05-04 13:15:17 -07:00
kfox1111 61e338df55 Fix example production typos (#244)
Signed-off-by: kfox1111 <[email protected]>
2023-04-27 14:02:48 -07:00
kfox1111andMarco Franssen 17d62f1246 Add an action to find new versions of helm charts (#184)
Co-authored-by: Marco Franssen <[email protected]>
2023-04-25 10:04:38 +02:00
kfox1111andMarco Franssen 2c360a50fd Add global for image registry (#201)
This patch enables a user to override all image registry settings all at
once to point to their own registry to enable easy custom mirrors.

partially implements: https://github.com/spiffe/helm-charts/issues/139

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
2023-04-20 20:08:14 +02:00
kfox1111 3cc8955429 Move reusable macros to root chart (#218)
This patch adds the start of a library to help reduce code duplication.
It will be split out to its own library chart at the same time the other
charts are split out.

---------

Signed-off-by: Kevin Fox <[email protected]>
2023-04-18 08:54:46 +02:00
kfox1111 9e03f29760 Merge branch 'main' into spire-config-as-yaml-converted-json 2023-04-17 08:43:19 -07:00
kfox1111 210ed02c58 Remove dead code (#217) 2023-04-17 12:18:18 +02:00
Kevin Fox 0f57f5683a Update to the 1.6.3 spire release
Update the images to point to the 1.6.3 version of spire.

Signed-off-by: Kevin Fox <[email protected]>
2023-04-13 23:14:50 +02:00
kfox1111 b82abab357 Revert "Switch to persistence" (#210)
Reverts spiffe/helm-charts#200

Signed-off-by: Kevin Fox <[email protected]>
2023-04-12 16:12:07 -04:00
kfox1111 0dec80e1d5 Switch to persistence (#200)
This patch switches the value to persistence to follow the helm
convention.

fixes: https://github.com/spiffe/helm-charts/issues/199

Signed-off-by: Kevin Fox <[email protected]>
2023-04-12 08:56:10 -07:00
kfox1111andMarco Franssen 563e1f7920 Add podmonitors (#165)
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-04-04 09:55:35 +02:00
kfox1111andMarco Franssen daa620bf05 Fix production example test (#183)
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-04-03 19:54:53 +02:00
kfox1111andMarco Franssen c661d0bc7e Make service dns domain configurable (#164)
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-04-03 19:52:36 +02:00
kfox1111andMarco Franssen ec236e9762 Test for configurable images (#182)
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-04-03 19:50:06 +02:00
kfox1111andMarco Franssen 280315ca68 Fix namespace-override github test summary (#154)
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-04-03 19:37:19 +02:00
kfox1111andMarco Franssen 072d952d9a Switch tests to curl (#178)
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-04-03 19:32:18 +02:00
kfox1111 87904164ad Enable global config for clusterName, trustDomain, and bundleConfigMap (#156) 2023-04-02 19:28:49 +02:00
kfox1111andMarco Franssen e2ec6ac47d Add a test to ensure the chart versions match (#163)
Co-authored-by: Marco Franssen <[email protected]>
2023-03-28 10:21:24 +02:00
kfox1111andMarco Franssen b25dc773bc Test fixing the tests (#148)
Co-authored-by: Marco Franssen <[email protected]>
2023-03-22 09:49:33 +01:00
kfox1111 d4fd2ced39 Extract the namespace override test out of the old lockdown test. (#145)
This patch removes the production bits of the old lockdown test
and establishes the namespace override test as its own test.

---------

Signed-off-by: Kevin Fox <[email protected]>
2023-03-21 22:13:26 +01:00
kfox1111 04a1305556 Fork the lockdown test to two tests as it is doing the work of 2 (#134)
This patch makes a second copy of the existing lockdown test
because it is doing double duty. In follow on patches we will
make each test do one thing only.

Signed-off-by: Kevin Fox <[email protected]>
2023-03-21 10:14:38 -07:00
Kevin FoxandMarco Franssen 6322a9a138 Fix tests
Signed-off-by: Kevin Fox <[email protected]>

Co-authored-by: Marco Franssen <[email protected]>
2023-03-16 18:58:31 +01:00
Kevin FoxandMarco Franssen cc7121e021 Add ingress support for OIDC discovery provider
This patch enables exposing the oidc server out with an ingress
along with tests to ensure it works.

Signed-off-by: Kevin Fox <[email protected]>

Co-authored-by: Marco Franssen <[email protected]>
2023-03-16 10:02:22 +01:00
kfox1111 2e3f045826 Make webhook fail policy configurable (#124)
This patch makes the webhook fail policy configurable.

---------

Signed-off-by: Kevin Fox <[email protected]>
2023-03-15 12:55:07 -07:00
kfox1111 9ccbd3c67f Make kubelet path configurable (#123) 2023-03-15 10:25:06 +01:00
kfox1111 80e3b58dcd Remove dead file from failed rebase. (#121)
Signed-off-by: Kevin Fox <[email protected]>
2023-03-14 13:23:02 -07:00
Kevin Fox 25c77fc0cb Fix the driver not coming up on overloaded nodes
Add to the reference production example a fix for overloaded nodes.

fixes: https://github.com/spiffe/helm-charts/issues/80

Signed-off-by: Kevin Fox <[email protected]>
2023-03-14 20:10:51 +01:00
kfox1111 03db6bb5fe Namespace override
This patch makes it possible to install the subcharts in different
namespaces as needed.

Signed-off-by: Kevin Fox <[email protected]>
2023-03-13 15:03:16 -07:00
kfox1111 661000a29a Make the agent socket configurable (#114) 2023-03-13 20:35:27 +01:00
kfox1111andMarco Franssen f3a81ad78d Make csi driver configurable to be able to run multiple instances (#115)
Co-authored-by: Marco Franssen <[email protected]>
2023-03-13 14:12:37 +01:00
kfox1111 b198bc7e39 Fix the tests so they can run locked down. (#111) 2023-03-11 22:10:14 +01:00
Kevin Fox 09b21acca2 Fix the gate
Signed-off-by: Kevin Fox <[email protected]>
2023-03-11 19:21:59 +01:00
kfox1111 b6716aee17 Test that it is possible to lock down security of pods (#84) 2023-03-11 12:11:19 +01:00
Kevin Fox bfeb217558 Fix cluster role name uniqueness
Adds namespace to the ClusterRole and ClusterRoleBinding so that it
doesn't conflict when you have two instances of the chart, in different
namespaces with the same release name.

Signed-off-by: Kevin Fox <[email protected]>
2023-03-10 15:45:49 +01:00
Kevin Fox 490fe8f543 Enhance the test workflow scripts
This makes it so that tests can now:
1. Add additional values files to the test
2. That the post-install.sh script knows if the test passed or failed
   for better output
3. That the main test can be skipped in favor of a test provided one

Signed-off-by: Kevin Fox <[email protected]>
2023-03-10 08:46:27 +01:00