Commit Graph
404 Commits
Author SHA1 Message Date
Marco Franssen a11cfc99ac Allow to define the resources for tornjak backend
Signed-off-by: Marco Franssen <[email protected]>
2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen 382e0d4a47 Upgrade Tornjak image to version v1.2.0 (#259)
Signed-off-by: Mariusz Sabath <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen 657c460e67 Update charts/spire/charts/tornjak-frontend/templates/service.yaml
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen 7521cafcc6 Update charts/spire/charts/spire-server/templates/tornjak-config.yaml
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen b64c352b15 Update charts/spire/charts/spire-server/templates/tests/test-tornjak-connection.yaml
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
2023-05-16 19:31:38 +02:00
Marco Franssen 6ddf6ab9fa Improve tornjak docs (#276)
- Align tornjak backend naming with same convention as frontend
- Align Tornjak backend and frontend notes style
- Add disclaimer for Tornjak usage to example

---------

Signed-off-by: Marco Franssen <[email protected]>
2023-05-16 19:31:38 +02:00
Mariusz Sabath f5efa0cefd Remove dead macros
Signed-off-by: Mariusz Sabath <[email protected]>
2023-05-16 19:31:38 +02:00
Mariusz Sabath 91bdea2a1d Provide minimal resources to prevent accidental crashes due to resource exhaustion
Signed-off-by: Mariusz Sabath <[email protected]>
2023-05-16 19:31:38 +02:00
kfox1111 1675997748 Tornjak global image fix (#228)
This pr updates the Tornjak branch to work with the merged global
registry configuration support.

Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
2023-05-16 19:31:38 +02:00
5e827ee45e Add Tornjak Tests (#220)
Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2023-05-16 19:31:38 +02:00
Mariusz Sabath bdba97b629 Add empty directory to Tornjak to support npm cache (#224)
Resolves issue #223

Signed-off-by: Mariusz Sabath <[email protected]>
2023-05-16 19:31:38 +02:00
Mariusz SabathandMarco Franssen da186c5f53 Split Tornjak Frontend into separate subchart (#179)
Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
2023-05-16 19:31:38 +02:00
Marco Franssen 6d221263fb Add Tornjak
This reverts commit 3210dfe49dfabc96437d1fe60a1b9a5eedb2312b.

Signed-off-by: Marco Franssen <[email protected]>
2023-05-16 19:31:38 +02:00
Marco Franssen 8c5643b5f7 Bump spire Helm Chart version from 0.6.3 to 0.7.0 (#278)
Please review the below changelog to ensure this matches up with the
semantic version being applied.

> **Note**: **Maintainers** ensure to run following after merging this
PR to trigger the release workflow:
>
> ```shell
> git checkout main
> git pull
> git checkout release
> git pull
> git merge main
> git push
> ```

**Changes in this release**

* 65312f85 Include dependency values in documentation (#275)
* 5489212b Remove persistence.enabled flag (#274)
* b3153242 Allow for ConfigMaps to be annotated (#272)
* 013eb617 Fix spacing for spire server service annotation (#273)
* 73435be9 Add project glossary. (#262)
* c4656a74 Replicas > 1 is not allowed with sqlite driver (#269)
* d3da3eed External database configuration (#225)
* ce78bea1 Add Edwin Buck as a maintainer. (#267)
* 1f09d7b3 Bump test chart dependencies (#264)
* aa6b40c0 Add project overview. (#258)
* 8e7e6ebc Allow trust bundle url to be set along with format (#256)
* 1e09ea54 Bump peter-evans/create-pull-request from 5.0.0 to 5.0.1
(#253)
* 6760cd22 Bump test chart dependencies (#252)
* 61e338df Fix example production typos (#244)
* 3d81928f Add skipKubeletVerification configurable (#243)
* 46f10e1d Merge pull request #237 from spiffe/fix-check-versions
* 3889d22e Fix quotation bug in update-version.sh
* 6a894e8c Move update-versions.sh script
* 91083a6b Add post-install scripts to all tests to capture failure
details in GitHub workflow summary (#88)
* 9afb6f80 Merge pull request #242 from spiffe/shellcheck
* 99af475f Resolve shellcheck issues
* d0a1e128 Add workflow with shellcheck
* 8abd75ef Merge pull request #241 from
spiffe/dependabot/github_actions/sigstore/cosign-installer-3.0.3
* 252f1f5a Bump cosign to v2.0.2
* 247e3e5d Bump sigstore/cosign-installer from 3.0.2 to 3.0.3
* 17d62f12 Add an action to find new versions of helm charts (#184)
* 2c360a50 Add global for image registry (#201)
* 3cc89554 Move reusable macros to root chart (#218)
* 3fc81780 Add k8s 1.27 to CI + bump other versions to latest patches
(#219)
* 6b617440 Merge pull request #113 from
spiffe/spire-config-as-yaml-converted-json
* 9e03f297 Merge branch 'main' into spire-config-as-yaml-converted-json
* 210ed02c Remove dead code (#217)
* e3b0d00b Bump min required spire 1.6.x version for this chart
* d7dcfeb6 Change spiffe-oidc-provider-config configmap to yaml format
* 861108c0 Change spire-agent configmap to yaml format
* 1d72b572 Change spire-server configmap to yaml format

Signed-off-by: Marco Franssen <[email protected]>
2023-05-12 11:19:28 -07:00
Marco FranssenandFaisal Memon 65312f8525 Include dependency values in documentation (#275)
I have added a flag to the helm-docs script to include the documentation
for dependencies.

This will add more complete documentation to
https://artifacthub.io/packages/helm/spiffe/spire#values so it is easier
for our users to get started and having a complete overview.

---------

Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2023-05-12 18:12:23 +00:00
Faisal Memon 5489212bb5 Remove persistence.enabled flag (#274) 2023-05-12 16:19:50 +02:00
Faisal Memonandkfox1111 b315324244 Allow for ConfigMaps to be annotated (#272)
Without an annotation, spinnaker will rename the configmap.

---------

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2023-05-11 10:49:06 -07:00
Faisal Memon 013eb617a9 Fix spacing for spire server service annotation (#273)
Spacing off by 4.

Signed-off-by: Faisal Memon <[email protected]>
2023-05-10 18:22:07 -07:00
c4656a74b2 Replicas > 1 is not allowed with sqlite driver (#269)
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
2023-05-10 16:30:05 +02:00
d3da3eed55 External database configuration (#225)
This patch makes all the database settings configurable.

fixes: https://github.com/spiffe/helm-charts/issues/37

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
2023-05-10 14:04:34 +02:00
Edwin Buck ce78bea121 Add Edwin Buck as a maintainer. (#267) 2023-05-09 17:00:02 +02:00
kfox1111andFaisal Memon 8e7e6ebc76 Allow trust bundle url to be set along with format (#256)
This patch enables the spire-agent to retrieve the trust bundle via url.

fixes: https://github.com/spiffe/helm-charts/issues/254

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2023-05-04 13:15:17 -07:00
Faisal Memon 3d81928ff8 Add skipKubeletVerification configurable (#243) 2023-04-26 21:38:14 +02:00
kfox1111andMarco Franssen 2c360a50fd Add global for image registry (#201)
This patch enables a user to override all image registry settings all at
once to point to their own registry to enable easy custom mirrors.

partially implements: https://github.com/spiffe/helm-charts/issues/139

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
2023-04-20 20:08:14 +02:00
kfox1111 3cc8955429 Move reusable macros to root chart (#218)
This patch adds the start of a library to help reduce code duplication.
It will be split out to its own library chart at the same time the other
charts are split out.

---------

Signed-off-by: Kevin Fox <[email protected]>
2023-04-18 08:54:46 +02:00
kfox1111 9e03f29760 Merge branch 'main' into spire-config-as-yaml-converted-json 2023-04-17 08:43:19 -07:00
kfox1111 210ed02c58 Remove dead code (#217) 2023-04-17 12:18:18 +02:00
Marco Franssen e3b0d00bd7 Bump min required spire 1.6.x version for this chart
Signed-off-by: Marco Franssen <[email protected]>
2023-04-17 12:02:09 +02:00
Marco Franssen d7dcfeb66c Change spiffe-oidc-provider-config configmap to yaml format
Signed-off-by: Marco Franssen <[email protected]>
2023-04-17 12:02:09 +02:00
Marco Franssen 861108c0ab Change spire-agent configmap to yaml format
Signed-off-by: Marco Franssen <[email protected]>
2023-04-17 11:52:47 +02:00
Marco Franssen 1d72b57260 Change spire-server configmap to yaml format
Signed-off-by: Marco Franssen <[email protected]>
2023-04-17 11:52:45 +02:00
Marco Franssen ad8bee0d3f Bump spire Helm Chart version from 0.6.2 to 0.6.3
* 6c21f13 Bump actions/checkout from 3.5.0 to 3.5.2
* 0f57f56 Update to the 1.6.3 spire release
* b82abab Revert "Switch to persistence" (#210)
* 0dec80e Switch to persistence (#200)

Signed-off-by: Marco Franssen <[email protected]>
2023-04-14 09:45:46 +02:00
Kevin Fox 0f57f5683a Update to the 1.6.3 spire release
Update the images to point to the 1.6.3 version of spire.

Signed-off-by: Kevin Fox <[email protected]>
2023-04-13 23:14:50 +02:00
kfox1111 b82abab357 Revert "Switch to persistence" (#210)
Reverts spiffe/helm-charts#200

Signed-off-by: Kevin Fox <[email protected]>
2023-04-12 16:12:07 -04:00
kfox1111 0dec80e1d5 Switch to persistence (#200)
This patch switches the value to persistence to follow the helm
convention.

fixes: https://github.com/spiffe/helm-charts/issues/199

Signed-off-by: Kevin Fox <[email protected]>
2023-04-12 08:56:10 -07:00
Faisal Memon bd8bcb2ffa Add Faisal Memon as maintainer to spire chart (#208) 2023-04-12 11:09:18 +02:00
Marco Franssen 67a63bfa94 Bump spire Helm Chart version from 0.6.1 to 0.6.2
* eeda042 Add  before-hook-creation delete policy

Signed-off-by: Marco Franssen <[email protected]>
2023-04-11 18:15:45 +02:00
Faisal Memon eeda0428b4 Add before-hook-creation delete policy
Signed-off-by: Faisal Memon <[email protected]>
2023-04-09 22:22:59 +02:00
Marco Franssen f6219d9627 Bump spire Helm Chart version from 0.6.0 to 0.6.1
* db148c8 Fix trustDomain global for oidc discovery provider (#193)

Signed-off-by: Marco Franssen <[email protected]>
2023-04-06 09:45:29 +02:00
Marco Franssen db148c8aeb Fix trustDomain global for oidc discovery provider (#193) 2023-04-05 10:46:53 -04:00
Marco Franssen 2a2615b2c6 Bump spire Helm Chart version from 0.5.1 to 0.6.0
* 563e1f7 Add podmonitors (#165)
* 456075f Add hooks to set failurepolicy to ignore on webhook (#128)
* d5dc706 Add Kubernetes 1.21 back (#188)
* daa620b Fix production example test (#183)
* c661d0b Make service dns domain configurable (#164)
* ec236e9 Test for configurable images (#182)
* 280315c Fix namespace-override github test summary (#154)
* 072d952 Switch tests to curl (#178)
* 1b4bfb7 Cleanup old leftover to k8s-workload-registrar
* a770928 Switch busybox image to cgr.dev/chainguard/busybox:latest-glibc (#175)
* 8790416 Enable global config for clusterName, trustDomain, and bundleConfigMap (#156)
* b54c41a Enhance the production example
* dfb32dc Revert adding tornjak to be releasable (#180)
* 059d5fb Bump spire Helm Chart version from 0.5.0 to 0.5.1
* e2ec6ac Add a test to ensure the chart versions match (#163)
* 64585ba Fix formatting issues introduced with #152
* 0dac0db Improve Spire Chart documentation
* f709ed9 Bump actions/checkout from 3.4.0 to 3.5.0
* faef439 Bump helm/chart-testing-action from 2.3.1 to 2.4.0
* ae62dd1 Bump spire version to 1.6.1
* 02fda80 Add Artifact Hub badge to README.md
* 901e670 Disable default Tornjak deployment (#153)
* 05d0f47 Introduction of Tornjak to SPIRE Server helm charts (#144)
* b25dc77 Test fixing the tests (#148)
* b4be9ed Add maturity tag (#138)
* d4fd2ce Extract the namespace override test out of the old lockdown test. (#145)
* 4f85802 Update lockdown test to test the production example
* 04a1305 Fork the lockdown test to two tests as it is doing the work of 2 (#134)
* 64d0107 Resolve issue in prod example on volume mount (#143)
* 5b6708b Remove @dennisgove from CODEOWNERS (#140)
* a516caa Remove k8s 1.21 from test matrix + small syntax error fix (#133)
* 811a2f6 Add option to enable federation on spire-server (#97)

Signed-off-by: Marco Franssen <[email protected]>
2023-04-04 14:25:31 +02:00
kfox1111andMarco Franssen 563e1f7920 Add podmonitors (#165)
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-04-04 09:55:35 +02:00
Faisal MemonandMarco Franssen 456075f843 Add hooks to set failurepolicy to ignore on webhook (#128)
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-04-04 09:46:49 +02:00
Faisal MemonandMarco Franssen d5dc706592 Add Kubernetes 1.21 back (#188)
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-04-04 09:25:19 +02:00
kfox1111andMarco Franssen c661d0bc7e Make service dns domain configurable (#164)
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-04-03 19:52:36 +02:00
kfox1111andMarco Franssen 072d952d9a Switch tests to curl (#178)
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-04-03 19:32:18 +02:00
Marco Franssen 1b4bfb779e Cleanup old leftover to k8s-workload-registrar
Signed-off-by: Marco Franssen <[email protected]>
2023-04-03 15:44:36 +02:00
Marco Franssen a7709287bf Switch busybox image to cgr.dev/chainguard/busybox:latest-glibc (#175) 2023-04-03 05:33:30 -07:00
kfox1111 87904164ad Enable global config for clusterName, trustDomain, and bundleConfigMap (#156) 2023-04-02 19:28:49 +02:00
Marco Franssen dfb32dc28f Revert adding tornjak to be releasable (#180) 2023-03-31 10:11:54 +02:00