helm-charts-hardened

Author	SHA1	Message	Date
Faisal Memon	446952920b	Merge branch 'main' into release	2024-03-04 09:54:53 -08:00
Faisal Memon	cf2e213f31	Bump spire Helm Chart version from 0.17.2 to 0.18.0 (#274 ) * `beda725` Add pod labels to the SPIRE agent (#273) * `077f152` Bump test chart dependencies (#272) * `5849ea2` add pod labels to spire server values (#271) * `f512b06` Configurable daemonsets updateStrategy (#212) * `a539065` Add direct tpm support for spire-agent (#216) * `fcd0c11` Add direct tpm support for spire-server (#211) * `c570174` Enable CA settings via global (#268) * `ac83694` Initial SPIRE 1.9.0 support (#262) * `ddb4eff` Bump test chart dependencies (#263) * `bfbafbc` Fix OpenShift Federation Ingress bug (#260) * `a0baace` Upgrade to spire-controller-manager 0.4.3 (#258) * `1446f7e` Add support for specifying agent authorized_delegates (#255) * `0b6cd88` Add support for specifying server admin_ids (#254) * `07a1c39` Add global override for kubectl tag (#251) * `b82a84d` Bump test chart dependencies (#252) * `7a1e731` Bump test chart dependencies (#246) * `a706063` make audit_log_enabled configurable (#241) * `34a39cb` Added emptyDir volume to spire-agent SCC (#243) * `a2e5a4e` Add support for enabling the spire-agent admin socket (#234) * `febdcbf` Fix whitespace in spire-agent daemonset Signed-off-by: Faisal Memon <[email protected]>	2024-03-04 17:51:48 +00:00
Rory Houlihan	beda725369	Add pod labels to the SPIRE agent (#273 ) Follow on from https://github.com/spiffe/helm-charts-hardened/pull/271. This will allow the SPIRE agent to also integrate with Azure Workload Identity. Signed-off-by: Rory Houlihan <[email protected]>	2024-03-04 06:45:32 -08:00
github-actions[bot]andmarcofranssen	077f152144	Bump test chart dependencies (#272 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-03-04 08:41:33 +00:00
McRors Calhoun	5849ea2c82	add pod labels to spire server values (#271 ) * add pod labels to spire server values The reason for this change is to be able to integrate spire with Azure Workload Idenity. To enable this, a label of `azure.workload.identity/use: "true"` needs to be added to the pods metadata. https://learn.microsoft.com/en-us/azure/aks/learn/tutorial-kubernetes-workload-identity#deploy-the-workload Signed-off-by: Rory Houlihan <[email protected]> * trim whitespace from podLabels Signed-off-by: Rory Houlihan <[email protected]> --------- Signed-off-by: Rory Houlihan <[email protected]>	2024-03-01 08:37:38 -08:00
Marco Franssen Kevin Fox Faisal Memon	f512b06419	Configurable daemonsets updateStrategy (#212 ) * Configure daemonsets updateStrategy This allows more deamonset pods to be rotated in the same time. This speeds up the updates Signed-off-by: Marco Franssen <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Marco Franssen <[email protected]> Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-02-29 14:42:52 -08:00
kfox1111andFaisal Memon	a539065c02	Add direct tpm support for spire-agent (#216 ) * Add direct tpm support for spire-agent Signed-off-by: Kevin Fox <[email protected]> * Add fingerprinting support Signed-off-by: Kevin Fox <[email protected]> * Add example Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-agent/templates/configmap.yaml Signed-off-by: kfox1111 <[email protected]> * Update charts/spire/charts/spire-agent/templates/configmap.yaml Signed-off-by: kfox1111 <[email protected]> * Fix broken tests Signed-off-by: Kevin Fox <[email protected]> * Fix hardcoded nodeAttestor and keyManager in spire-agent Fixes: https://github.com/spiffe/helm-charts-hardened/issues/220 Signed-off-by: Kevin Fox <[email protected]> * Fix merge issues Signed-off-by: Kevin Fox <[email protected]> * Fix unit tests Signed-off-by: Kevin Fox <[email protected]> * Pass the agent's securityContext on to Kubernetes Currently its ignored. Signed-off-by: Kevin Fox <[email protected]> * Update example to be usable Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Update to the newest release Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-02-29 20:33:57 +00:00
kfox1111andFaisal Memon	fcd0c11e14	Add direct tpm support for spire-server (#211 ) * Add direct tpm support Signed-off-by: Kevin Fox <[email protected]> * Add agent support Signed-off-by: Kevin Fox <[email protected]> * Add missing condition Signed-off-by: Kevin Fox <[email protected]> * Add missing condition Signed-off-by: Kevin Fox <[email protected]> * Remove agent bits from this pr Signed-off-by: Kevin Fox <[email protected]> * Plugin needs to write to /tmp Signed-off-by: Kevin Fox <[email protected]> * Fix tmp mount Signed-off-by: Kevin Fox <[email protected]> * Make it possible to manage cas/hashes via values Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Update to the newest release Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-02-29 11:41:25 -08:00
kfox1111	c57017425e	Enable CA settings via global (#268 ) Adds a global.spire.caSubject section where you can set the CA subject information for all spire-server instances. Signed-off-by: Kevin Fox <[email protected]>	2024-02-28 11:47:24 -08:00
kfox1111	ac83694970	Initial SPIRE 1.9.0 support (#262 )	2024-02-28 17:54:53 +00:00
dependabot[bot]	40d5fefcfe	Bump peter-evans/create-pull-request from 6.0.0 to 6.0.1 (#267 ) Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6.0.0 to 6.0.1. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](https://github.com/peter-evans/create-pull-request/compare/v6.0.0...v6.0.1) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-02-27 20:22:58 -08:00
github-actions[bot]andmarcofranssen	ddb4effda6	Bump test chart dependencies (#263 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-02-26 06:28:45 -08:00
Maia Iyer	bfbafbc94f	Fix OpenShift Federation Ingress bug (#260 ) * Fix OpenShift Federation Ingress bug Signed-off-by: Maia Iyer <[email protected]> * Remove duplicate line Signed-off-by: Maia Iyer <[email protected]> --------- Signed-off-by: Maia Iyer <[email protected]>	2024-02-22 14:37:45 -08:00
kfox1111	a0baace5ea	Upgrade to spire-controller-manager 0.4.3 (#258 ) Signed-off-by: Kevin Fox <[email protected]>	2024-02-22 10:38:58 -08:00
dependabot[bot]	020a0b5450	Bump helm.sh/helm/v3 from 3.14.1 to 3.14.2 in /tests (#257 ) Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.14.1 to 3.14.2. - [Release notes](https://github.com/helm/helm/releases) - [Commits](https://github.com/helm/helm/compare/v3.14.1...v3.14.2) --- updated-dependencies: - dependency-name: helm.sh/helm/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-02-22 02:09:40 -08:00
dependabot[bot]	ae800c432c	Bump helm/kind-action from 1.8.0 to 1.9.0 (#256 ) Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.8.0 to 1.9.0. - [Release notes](https://github.com/helm/kind-action/releases) - [Commits](https://github.com/helm/kind-action/compare/v1.8.0...v1.9.0) --- updated-dependencies: - dependency-name: helm/kind-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-02-21 00:56:44 -08:00
kfox1111andFaisal Memon	1446f7ea79	Add support for specifying agent authorized_delegates (#255 ) * Add support for specifying agent authorized_delegates Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-agent/values.yaml Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-02-20 17:11:03 +00:00
kfox1111andFaisal Memon	0b6cd88d56	Add support for specifying server admin_ids (#254 ) * Add support for specifying server admin_ids Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-server/templates/configmap.yaml Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-02-20 08:50:18 -08:00
kfox1111	a4e91c6ba8	Add support for integration tests in the tests/integration dir (#253 ) * Add support for integration tests in the tests/integration dir Signed-off-by: Kevin Fox <[email protected]> * Fix split issue and typo Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-02-20 08:16:16 -08:00
kfox1111	07a1c391b2	Add global override for kubectl tag (#251 )	2024-02-19 20:18:31 +01:00
github-actions[bot]marcofranssen kfox1111	b82a84dddb	Bump test chart dependencies (#252 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-02-19 05:11:45 -08:00
Moritz Schmitz von Hülstandkfox1111	43a72a22ff	Add example for using SPIRE for mTLS with Keycloak (#248 ) * Add example for using Spire for mTLS with Keycloak Signed-off-by: Moritz Schmitz von Hülst <[email protected]> * Minor improvement to the README.md Signed-off-by: Moritz Schmitz von Hülst <[email protected]> * But I still need to learn GitHub Markdown format Signed-off-by: Moritz Schmitz von Hülst <[email protected]> * Make it more obvious that it works without a (correct) password Signed-off-by: Moritz Schmitz von Hülst <[email protected]> * Add warning for Kubernetes 1.29+ feature Signed-off-by: Moritz Schmitz von Hülst <[email protected]> * Move ghostunnel into an initContainer with restartPolicy=Always Signed-off-by: Moritz Schmitz von Hülst <[email protected]> * Apply suggestions from code review Co-authored-by: kfox1111 <[email protected]> Signed-off-by: Moritz Schmitz von Hülst <[email protected]> * Move java-spiffe-helper-properties into extraDeploy of the Keycloak chart and pin node version to it has a matching rancher/kubectl image Signed-off-by: Moritz Schmitz von Hülst <[email protected]> --------- Signed-off-by: Moritz Schmitz von Hülst <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-02-19 04:33:01 -08:00
dependabot[bot]	cc8ec897bf	Bump helm.sh/helm/v3 from 3.14.0 to 3.14.1 in /tests (#249 ) Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.14.0 to 3.14.1. - [Release notes](https://github.com/helm/helm/releases) - [Commits](https://github.com/helm/helm/compare/v3.14.0...v3.14.1) --- updated-dependencies: - dependency-name: helm.sh/helm/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-02-15 07:17:54 -08:00
github-actions[bot]marcofranssen kfox1111	7a1e731b31	Bump test chart dependencies (#246 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-02-12 13:46:21 +00:00
dependabot[bot]	13af653e3e	Bump helm/kind-action from 1.8.0 to 1.9.0 (#245 ) Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.8.0 to 1.9.0. - [Release notes](https://github.com/helm/kind-action/releases) - [Commits](https://github.com/helm/kind-action/compare/v1.8.0...v1.9.0) --- updated-dependencies: - dependency-name: helm/kind-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-02-12 13:27:17 +00:00
McRors Calhoun Faisal Memon kfox1111	a7060632a0	make audit_log_enabled configurable (#241 ) * make audit_log_enabled configurable Signed-off-by: Rory Houlihan <[email protected]> * Update charts/spire/charts/spire-server/values.yaml Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: McRors Calhoun <[email protected]> * Update charts/spire/charts/spire-server/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Rory Houlihan <[email protected]> Signed-off-by: McRors Calhoun <[email protected]> Signed-off-by: kfox1111 <[email protected]> Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-02-12 13:18:41 +00:00
Andrew Block	34a39cb76e	Added emptyDir volume to spire-agent SCC (#243 ) Signed-off-by: Andrew Block <[email protected]>	2024-02-10 04:51:59 -08:00
kfox1111	a2e5a4e629	Add support for enabling the spire-agent admin socket (#234 ) * Add support for enabling the spire-agent admin socket Signed-off-by: Kevin Fox <[email protected]> * Fix typo Signed-off-by: Kevin Fox <[email protected]> * Update permissions Signed-off-by: Kevin Fox <[email protected]> * Update permissions Signed-off-by: Kevin Fox <[email protected]> * Fix template Signed-off-by: Kevin Fox <[email protected]> * Update upstream agent too Signed-off-by: Kevin Fox <[email protected]> * Fix init issue Signed-off-by: Kevin Fox <[email protected]> * Refactor a bit to make things more automatic Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>	2024-02-09 12:44:43 -08:00
Marco Franssen	febdcbf992	Fix whitespace in spire-agent daemonset Signed-off-by: Marco Franssen <[email protected]>	2024-02-07 16:41:52 +01:00
Faisal Memon	bea59729fb	Merge branch 'main' into release	2024-02-05 13:08:35 -08:00
Faisal Memon	7ad1ae7355	Bump spire Helm Chart version from 0.17.1 to 0.17.2 * `49e21c3` Add missing affinity settings (#232) * `8adbb89` Add alternate name support for the socket (#181) * `350ec89` Bump test chart dependencies (#235) * `0e12595` Update README.md delete pvc for cleanup (#233) Signed-off-by: Faisal Memon <[email protected]>	2024-02-05 13:01:46 -08:00
kfox1111andFaisal Memon	49e21c389b	Add missing affinity settings (#232 ) Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-02-05 20:33:24 +00:00
kfox1111andFaisal Memon	8adbb89890	Add alternate name support for the socket (#181 ) * Add alternate name support for the socket Signed-off-by: Kevin Fox <[email protected]> * Fix missing image reference Signed-off-by: Kevin Fox <[email protected]> * Make user changing socket work smoothly. Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Update charts/spire/charts/spire-agent/values.yaml Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-02-05 11:40:19 -08:00
kfox1111	fce95cb443	Add example of mysql using spire (#164 ) * Add example of mysql using spire Signed-off-by: Kevin Fox <[email protected]> * Finish up the implementation Signed-off-by: Kevin Fox <[email protected]> * Update the image Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Update. Restested. Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>	2024-02-05 11:17:19 -08:00
github-actions[bot]andmarcofranssen	350ec89ff2	Bump test chart dependencies (#235 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-02-05 06:07:03 -08:00
cccsss01andkfox1111	0e1259546b	Update README.md delete pvc for cleanup (#233 ) * Update README.md delete pvc for cleanup adding command to delete the pvc Signed-off-by: cccsss01 <[email protected]> * Update charts/spire/README.md Co-authored-by: kfox1111 <[email protected]> Signed-off-by: cccsss01 <[email protected]> --------- Signed-off-by: cccsss01 <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-02-02 15:23:44 -08:00
dependabot[bot]kfox1111 Marco Franssen	40b5cc3601	Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 (#228 ) * Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.3.0 to 3.4.0. - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](https://github.com/sigstore/cosign-installer/compare/v3.3.0...v3.4.0) Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: kfox1111 <[email protected]> Co-authored-by: Marco Franssen <[email protected]>	2024-02-01 09:46:58 -08:00
kfox1111	35215aee33	Add missing upgrade test bypass (#231 ) * Add missing upgrade test bypass Signed-off-by: Kevin Fox <[email protected]> * Too many iterations. Update comment. Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-02-01 09:28:20 -08:00
dependabot[bot]	c1783f639c	Bump peter-evans/create-pull-request from 5.0.2 to 6.0.0 Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 5.0.2 to 6.0.0. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](https://github.com/peter-evans/create-pull-request/compare/v5.0.2...v6.0.0) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>	2024-02-01 09:20:34 +01:00
Faisal Memon	f2f56fa055	Merge branch 'main' into release	2024-01-30 13:54:14 -08:00
Faisal Memon	16ecfe9bb9	Bump spire Helm Chart version from 0.17.0 to 0.17.1 (#226 ) * `d547532` Pass the agent's securityContext on to Kubernetes (#225) * `6b03d5a` Fix hardcoded nodeAttestor and keyManager in spire-agent (#221) * `f4c92ed` Update README.md put cleanup seperately (#223) * `7542052` Bump test chart dependencies (#219) * `01e031f` Add another upgrade note and fix value name (#215) * `0fbc512` Remove the white line from securityContext rendering * `573beaf` More quickly detect a daemonset is up and running * `e8d527c` Update to spire-controller-manager 0.4.2 (#195) * `25558d3` Update daemonset.yaml (#204) Signed-off-by: Faisal Memon <[email protected]>	2024-01-30 13:53:41 -08:00
kfox1111	d5475328b4	Pass the agent's securityContext on to Kubernetes (#225 ) Currently its ignored. Signed-off-by: Kevin Fox <[email protected]>	2024-01-30 19:55:12 +00:00
kfox1111	6b03d5a0bd	Fix hardcoded nodeAttestor and keyManager in spire-agent (#221 ) * Fix hardcoded nodeAttestor and keyManager in spire-agent --------- Signed-off-by: Kevin Fox <[email protected]>	2024-01-30 11:33:32 -08:00
cccsss01andkfox1111	f4c92ed3ca	Update README.md put cleanup seperately (#223 ) * Update README.md put cleanup seperately Signed-off-by: cccsss01 <[email protected]> * Update README.md Signed-off-by: cccsss01 <[email protected]> * Update charts/spire/README.md Co-authored-by: kfox1111 <[email protected]> Signed-off-by: cccsss01 <[email protected]> --------- Signed-off-by: cccsss01 <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-01-30 10:55:10 -08:00
github-actions[bot]andmarcofranssen	7542052b65	Bump test chart dependencies (#219 ) Co-authored-by: marcofranssen <[email protected]>	2024-01-29 09:24:31 +00:00
kfox1111	01e031f71c	Add another upgrade note and fix value name (#215 ) * Add another upgrade note --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>	2024-01-26 17:47:57 -08:00
Marco Franssen	0fbc51223c	Remove the white line from securityContext rendering Prevents the following diff introduced since the 0.17.0 release. ```diff containers: - name: post-install-job securityContext: + allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true seccompProfile: type: RuntimeDefault ``` Signed-off-by: Marco Franssen <[email protected]>	2024-01-26 13:51:28 +01:00
Marco Franssen	573beaf2b0	More quickly detect a daemonset is up and running Overall I see the daemonsets on my nodes be ready in approx 5 to 7 seconds. Reducing the initial delay allows them to be marked as ready within 10 seconds. In cases it takes longer the next probe will be in 30 seconds so max initial waiting time is 40 seconds to be marked as ready compared to 75 seconds at this point of time. Furhtermore the 30 seconds probes also allow more quick detection of failures Signed-off-by: Marco Franssen <[email protected]>	2024-01-26 13:43:28 +01:00
kfox1111	e8d527cd9a	Update to spire-controller-manager 0.4.2 (#195 )	2024-01-25 12:07:10 +01:00
kfox1111	3e1c5199b7	Always upgrade test from the previous major release (#207 )	2024-01-24 17:02:31 +01:00

1 2 3 4 5 ...