panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,231 Commits 1 Branch 2 Tags
411eaec5cf6855a7d5d4baf3f9df15a3dd8a0036
Commit Graph
1231 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Marco Franssen 3889d22e34 Fix quotation bug in update-version.sh 
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-26 16:20:07 +02:00
Marco Franssen 6a894e8c38 Move update-versions.sh script 
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-26 16:20:07 +02:00
Marco Franssen 91083a6b4e Add post-install scripts to all tests to capture failure details in GitHub workflow summary (#88) 2023-04-26 07:17:29 -07:00
Marco Franssen 9afb6f80ac Merge pull request #242 from spiffe/shellcheck 2023-04-26 16:06:08 +02:00
Marco Franssen 99af475f1c Resolve shellcheck issues 
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-26 16:04:02 +02:00
Marco Franssen d0a1e12825 Add workflow with shellcheck 
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-26 12:02:27 +02:00
Marco Franssen 8abd75ef7b Merge pull request #241 from spiffe/dependabot/github_actions/sigstore/cosign-installer-3.0.3 2023-04-26 10:20:38 +02:00
Marco Franssen 252f1f5a19 Bump cosign to v2.0.2 
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-26 10:20:20 +02:00
dependabot[bot] 247e3e5d31 Bump sigstore/cosign-installer from 3.0.2 to 3.0.3 
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.0.2...v3.0.3)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-04-26 01:03:32 +00:00
kfox1111andMarco Franssen 17d62f1246 Add an action to find new versions of helm charts (#184) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-04-25 10:04:38 +02:00
kfox1111andMarco Franssen 2c360a50fd Add global for image registry (#201) 
This patch enables a user to override all image registry settings all at
once to point to their own registry to enable easy custom mirrors.

partially implements: https://github.com/spiffe/helm-charts/issues/139

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-04-20 20:08:14 +02:00
kfox1111 3cc8955429 Move reusable macros to root chart (#218) 
This patch adds the start of a library to help reduce code duplication.
It will be split out to its own library chart at the same time the other
charts are split out.

---------

Signed-off-by: Kevin Fox <[email protected]>
 2023-04-18 08:54:46 +02:00
Marco Franssen 3fc81780d9 Add k8s 1.27 to CI + bump other versions to latest patches (#219) 
- Add k8s 1.27 to test workflow
- Bump other k8s versions to latest patch release

---------

Signed-off-by: Marco Franssen <[email protected]>
 2023-04-17 23:28:28 -07:00
Marco Franssen 6b6174400f Merge pull request #113 from spiffe/spire-config-as-yaml-converted-json 2023-04-17 17:50:20 +02:00
kfox1111 9e03f29760 Merge branch 'main' into spire-config-as-yaml-converted-json 2023-04-17 08:43:19 -07:00
kfox1111 210ed02c58 Remove dead code (#217) 2023-04-17 12:18:18 +02:00
Marco Franssen e3b0d00bd7 Bump min required spire 1.6.x version for this chart 
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-17 12:02:09 +02:00
Marco Franssen d7dcfeb66c Change spiffe-oidc-provider-config configmap to yaml format 
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-17 12:02:09 +02:00
Marco Franssen 861108c0ab Change spire-agent configmap to yaml format 
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-17 11:52:47 +02:00
Marco Franssen 1d72b57260 Change spire-server configmap to yaml format 
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-17 11:52:45 +02:00
Marco Franssen 7a67caca5c Merge branch 'main' into release 2023-04-14 09:53:32 +02:00
Marco Franssen ad8bee0d3f Bump spire Helm Chart version from 0.6.2 to 0.6.3 
* 6c21f13 Bump actions/checkout from 3.5.0 to 3.5.2
* 0f57f56 Update to the 1.6.3 spire release
* b82abab Revert "Switch to persistence" (#210)
* 0dec80e Switch to persistence (#200)

Signed-off-by: Marco Franssen <[email protected]>
 2023-04-14 09:45:46 +02:00
dependabot[bot] 6c21f13264 Bump actions/checkout from 3.5.0 to 3.5.2 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.0 to 3.5.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.5.0...v3.5.2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-04-14 08:42:40 +02:00
Kevin Fox 0f57f5683a Update to the 1.6.3 spire release 
Update the images to point to the 1.6.3 version of spire.

Signed-off-by: Kevin Fox <[email protected]>
 2023-04-13 23:14:50 +02:00
kfox1111 b82abab357 Revert "Switch to persistence" (#210) 
Reverts spiffe/helm-charts#200

Signed-off-by: Kevin Fox <[email protected]>
 2023-04-12 16:12:07 -04:00
kfox1111 0dec80e1d5 Switch to persistence (#200) 
This patch switches the value to persistence to follow the helm
convention.

fixes: https://github.com/spiffe/helm-charts/issues/199

Signed-off-by: Kevin Fox <[email protected]>
 2023-04-12 08:56:10 -07:00
Marco Franssen e9de49e93b Merge branch 'main' into release 2023-04-12 11:09:48 +02:00
Faisal Memon bd8bcb2ffa Add Faisal Memon as maintainer to spire chart (#208) 2023-04-12 11:09:18 +02:00
dependabot[bot]andMarco Franssen b73f694a84 Bump sigstore/cosign-installer from 3.0.1 to 3.0.2 (#204) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marco Franssen <[email protected]>
 2023-04-12 10:54:31 +02:00
Marco Franssen 67a63bfa94 Bump spire Helm Chart version from 0.6.1 to 0.6.2 
* eeda042 Add  before-hook-creation delete policy

Signed-off-by: Marco Franssen <[email protected]>
 2023-04-11 18:15:45 +02:00
Faisal Memon eeda0428b4 Add before-hook-creation delete policy 
Signed-off-by: Faisal Memon <[email protected]>
 2023-04-09 22:22:59 +02:00
Marco Franssen 949d34828e Merge branch 'main' into release 2023-04-06 09:46:22 +02:00
Marco Franssen f6219d9627 Bump spire Helm Chart version from 0.6.0 to 0.6.1 
* db148c8 Fix trustDomain global for oidc discovery provider (#193)

Signed-off-by: Marco Franssen <[email protected]>
 2023-04-06 09:45:29 +02:00
Marco Franssen db148c8aeb Fix trustDomain global for oidc discovery provider (#193) 2023-04-05 10:46:53 -04:00
Marco Franssen 3f044af7b9 Merge branch 'main' into release 2023-04-04 14:27:34 +02:00
Marco Franssen 2a2615b2c6 Bump spire Helm Chart version from 0.5.1 to 0.6.0 
* 563e1f7 Add podmonitors (#165)
* 456075f Add hooks to set failurepolicy to ignore on webhook (#128)
* d5dc706 Add Kubernetes 1.21 back (#188)
* daa620b Fix production example test (#183)
* c661d0b Make service dns domain configurable (#164)
* ec236e9 Test for configurable images (#182)
* 280315c Fix namespace-override github test summary (#154)
* 072d952 Switch tests to curl (#178)
* 1b4bfb7 Cleanup old leftover to k8s-workload-registrar
* a770928 Switch busybox image to cgr.dev/chainguard/busybox:latest-glibc (#175)
* 8790416 Enable global config for clusterName, trustDomain, and bundleConfigMap (#156)
* b54c41a Enhance the production example
* dfb32dc Revert adding tornjak to be releasable (#180)
* 059d5fb Bump spire Helm Chart version from 0.5.0 to 0.5.1
* e2ec6ac Add a test to ensure the chart versions match (#163)
* 64585ba Fix formatting issues introduced with #152
* 0dac0db Improve Spire Chart documentation
* f709ed9 Bump actions/checkout from 3.4.0 to 3.5.0
* faef439 Bump helm/chart-testing-action from 2.3.1 to 2.4.0
* ae62dd1 Bump spire version to 1.6.1
* 02fda80 Add Artifact Hub badge to README.md
* 901e670 Disable default Tornjak deployment (#153)
* 05d0f47 Introduction of Tornjak to SPIRE Server helm charts (#144)
* b25dc77 Test fixing the tests (#148)
* b4be9ed Add maturity tag (#138)
* d4fd2ce Extract the namespace override test out of the old lockdown test. (#145)
* 4f85802 Update lockdown test to test the production example
* 04a1305 Fork the lockdown test to two tests as it is doing the work of 2 (#134)
* 64d0107 Resolve issue in prod example on volume mount (#143)
* 5b6708b Remove @dennisgove from CODEOWNERS (#140)
* a516caa Remove k8s 1.21 from test matrix + small syntax error fix (#133)
* 811a2f6 Add option to enable federation on spire-server (#97)

Signed-off-by: Marco Franssen <[email protected]>
 2023-04-04 14:25:31 +02:00
kfox1111andMarco Franssen 563e1f7920 Add podmonitors (#165) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-04 09:55:35 +02:00
Faisal MemonandMarco Franssen 456075f843 Add hooks to set failurepolicy to ignore on webhook (#128) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-04 09:46:49 +02:00
Faisal MemonandMarco Franssen d5dc706592 Add Kubernetes 1.21 back (#188) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-04 09:25:19 +02:00
kfox1111andMarco Franssen daa620bf05 Fix production example test (#183) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-03 19:54:53 +02:00
kfox1111andMarco Franssen c661d0bc7e Make service dns domain configurable (#164) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-03 19:52:36 +02:00
kfox1111andMarco Franssen ec236e9762 Test for configurable images (#182) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-03 19:50:06 +02:00
kfox1111andMarco Franssen 280315ca68 Fix namespace-override github test summary (#154) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-03 19:37:19 +02:00
kfox1111andMarco Franssen 072d952d9a Switch tests to curl (#178) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-03 19:32:18 +02:00
Marco Franssen 1b4bfb779e Cleanup old leftover to k8s-workload-registrar 
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-03 15:44:36 +02:00
Marco Franssen a7709287bf Switch busybox image to cgr.dev/chainguard/busybox:latest-glibc (#175) 2023-04-03 05:33:30 -07:00
kfox1111 87904164ad Enable global config for clusterName, trustDomain, and bundleConfigMap (#156) 2023-04-02 19:28:49 +02:00
Marco Franssen b54c41aee0 Enhance the production example 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-31 15:48:40 +02:00
Marco Franssen dfb32dc28f Revert adding tornjak to be releasable (#180) 2023-03-31 10:11:54 +02:00
kfox1111 545059c316 Merge pull request #176 from spiffe/release-patch 
Cut patch release for 0.5.0
 2023-03-28 09:02:20 -07:00