* Add support for the new spire-controller-manager class feature
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs. Swich nested deployment to use controller manager
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Test with nightly
Signed-off-by: Kevin Fox <[email protected]>
* Fix global object naming clash
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing dot
Signed-off-by: Kevin Fox <[email protected]>
* Fix naming conflict with cluster ids
Signed-off-by: Kevin Fox <[email protected]>
* Fix scoping issue
Signed-off-by: Kevin Fox <[email protected]>
* Fix typo
Signed-off-by: Kevin Fox <[email protected]>
* Fix webhook name collision
Signed-off-by: Kevin Fox <[email protected]>
* Fix webhook reference and add note to user about className
Signed-off-by: Kevin Fox <[email protected]>
* Upgrade has to work on the old version of the object before rename
Signed-off-by: Kevin Fox <[email protected]>
* Fix formatting
Signed-off-by: Kevin Fox <[email protected]>
* Remove extra junk from job
Signed-off-by: Kevin Fox <[email protected]>
* Easier local runs and wait for crds
Signed-off-by: Kevin Fox <[email protected]>
* Add missing crd upgrade
Signed-off-by: Kevin Fox <[email protected]>
* Update upgrade notes
Signed-off-by: Kevin Fox <[email protected]>
* Update charts/spire/charts/spire-server/templates/controller-manager-cluster-ids.yaml
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Bump version to the released 0.4.0
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Merge in crd changes from upstream
Signed-off-by: Kevin Fox <[email protected]>
* Add auto populate dns
Signed-off-by: Kevin Fox <[email protected]>
* Update charts/spire/README.md
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Add missing ClusterSPIFFEID fields
There are a few options in the CRD not available via the chart.
Sync them to the chart.
Signed-off-by: Kevin Fox <[email protected]>
* Add another missing one
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Allow additional CRs to be managed by the chart
Sometimes additional ClusterSPIFFEIDs and the other CRs are needed. Add
support for the end user to manage those extra CRs via the chart.
Signed-off-by: Kevin Fox <[email protected]>
* Add validation
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Add className to crs
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Fix readme formatting
Signed-off-by: Kevin Fox <[email protected]>
* Update charts/spire/README.md
Signed-off-by: kfox1111 <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Remove dead code
Signed-off-by: Kevin Fox <[email protected]>
* Fix extra newline
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
* Autogen jwtIssuer
Unset a default for jwtIssuer and global.spire.jwtIssuer. When unset,
generate it to the default of oidc-discovery.$trustDomain so in many
cases the user doesn't need to set it at all.
Signed-off-by: Kevin Fox <[email protected]>
* Autogen tornjak's apiServerURL
Unset the default tornjak apiServerURL. When unset, default to
https://tornjak-backend.$trustDomain so in many cases users don't
have to set it.
Signed-off-by: Kevin Fox <[email protected]>
* Do more autodetection
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Mariusz Sabath <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
* Autogen jwtIssuer
Unset a default for jwtIssuer and global.spire.jwtIssuer. When unset,
generate it to the default of oidc-discovery.$trustDomain so in many
cases the user doesn't need to set it at all.
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Mariusz Sabath <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
* Specify ingress controller type
Signed-off-by: Kevin Fox <[email protected]>
* Fix indenting, docs
Signed-off-by: Kevin Fox <[email protected]>
* Fix spacing
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing brackets
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing brackets
Signed-off-by: Kevin Fox <[email protected]>
* Add ingress-nginx support
Signed-off-by: Kevin Fox <[email protected]>
* Use the right example values for test version to upgrade from.
Signed-off-by: Kevin Fox <[email protected]>
* Fix var in wrong location
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing arg
Signed-off-by: Kevin Fox <[email protected]>
* Try this to checkout the right version
Signed-off-by: Kevin Fox <[email protected]>
* Switch to upgrading from 0.14.0
Signed-off-by: Kevin Fox <[email protected]>
* Install crds
Signed-off-by: Kevin Fox <[email protected]>
* Simple ingress support
For a lot of situations, ingress rules can be derived from trustDomain.
Change the code to generate rules by default for the user.
Signed-off-by: Kevin Fox <[email protected]>
* Add upgrade test fix from 43
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Fix test
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Enable unset ingress controller type to use with openshift later
Signed-off-by: Kevin Fox <[email protected]>
* Openshift ingress controller type support
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing end tag
Signed-off-by: Kevin Fox <[email protected]>
* Fix merge conflicts
Signed-off-by: Kevin Fox <[email protected]>
* Fix doc merge conflicts
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Update docs
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Fix merge conflicts
Signed-off-by: Kevin Fox <[email protected]>
* Fix automatically generated rules on openshift
Signed-off-by: Kevin Fox <[email protected]>
* Fix formatting
Signed-off-by: Kevin Fox <[email protected]>
* Fix pathType
Signed-off-by: Kevin Fox <[email protected]>
* Make openshift edge rules work
Signed-off-by: Kevin Fox <[email protected]>
* Fix var scoping
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Fix issue created during merge conflict
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Mariusz Sabath <[email protected]>
* Specify ingress controller type
Signed-off-by: Kevin Fox <[email protected]>
* Fix indenting, docs
Signed-off-by: Kevin Fox <[email protected]>
* Fix spacing
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing brackets
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing brackets
Signed-off-by: Kevin Fox <[email protected]>
* Add ingress-nginx support
Signed-off-by: Kevin Fox <[email protected]>
* Use the right example values for test version to upgrade from.
Signed-off-by: Kevin Fox <[email protected]>
* Fix var in wrong location
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing arg
Signed-off-by: Kevin Fox <[email protected]>
* Try this to checkout the right version
Signed-off-by: Kevin Fox <[email protected]>
* Switch to upgrading from 0.14.0
Signed-off-by: Kevin Fox <[email protected]>
* Install crds
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Enable unset ingress controller type to use with openshift later
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs after merge issue
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
* Exit code from diff indicating changes should not block commit.
Signed-off-by: Kevin Fox <[email protected]>
* Push the changes that update-tags creates
Signed-off-by: Kevin Fox <[email protected]>
* Add plugin support to the spire agent
This adapts the existing spire server plugin support to be usable by
the agent as well.
Signed-off-by: Kevin Fox <[email protected]>
* Fix notes
Signed-off-by: Kevin Fox <[email protected]>
* Add plugin support to the spire agent
This adapts the existing spire server plugin support to be usable by
the agent as well.
Signed-off-by: Kevin Fox <[email protected]>
* Fix notes
Signed-off-by: Kevin Fox <[email protected]>
* Update documentation
Signed-off-by: Kevin Fox <[email protected]>
* Update example
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Add support for the experimental section of the config. Needed for
developers. This PR doesnt add support for the `auth_opa_policy_engine`
experimental config.
---------
Signed-off-by: Faisal Memon <[email protected]>
Current configmap template renders to a wrong KeyManager and
UpstreamAuthority configurarion when aws_kms and aws_pca are enabled and
container is crashing. The proposed changes will fix the issue.
---------
Signed-off-by: unufree <[email protected]>
Signed-off-by: unufr33 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
