panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
453 Commits 1 Branch 2 Tags
48a2898016cc96b4a91fc98015c622aec8869c32
Commit Graph
54 Commits
Author SHA1 Message Date
github-actions[bot]andmarcofranssen bd393e9597 Bump test chart dependencies (#445) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-08-15 17:55:19 +00:00
github-actions[bot]andmarcofranssen e774584c46 Bump test chart dependencies (#426) 
Co-authored-by: marcofranssen <[email protected]>
 2023-08-09 15:11:47 +00:00
github-actions[bot]andmarcofranssen a2e5c36cc9 Bump test chart dependencies (#416) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-07-31 18:00:20 +00:00
github-actions[bot]marcofranssenkfox1111
 		af13f1fc64 Bump test chart dependencies (#401) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-07-27 11:20:48 -07:00
Marco Franssen db0603825c Increase some timeouts, trying to fix the tests 
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:49:25 +02:00
Marco Franssen 54ed71f969 Add back tests for examples 
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:49:22 +02:00
Marco Franssen 06ddb7cd3f Use chart-testing ci/*-values.yaml for testing 
This also enables the refactor to have multiple root level charts.

Resolves #100

Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:48:19 +02:00
github-actions[bot] f461a01701 Bump test chart dependencies (#386) 2023-07-18 17:32:02 +00:00
github-actions[bot]marcofranssenFaisal Memon
 		ce39e82767 Bump test chart dependencies (#382) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-07-14 08:05:36 -07:00
kfox1111andMarco Franssen c1b1dd3d88 Add additional domains to JWT issued items. (#230) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-07-03 22:26:28 +02:00
marcofranssen 3405e13944 Bump test chart dependencies 
Signed-off-by: GitHub <[email protected]>
Signed-off-by: Faisal Memon <[email protected]>
 2023-07-03 17:38:56 +02:00
github-actions[bot]andmarcofranssen e57c13ac13 Bump test chart dependencies (#370) 
Co-authored-by: marcofranssen <[email protected]>
 2023-06-29 08:16:31 +02:00
Faisal Memon 1333b6ab34 Always add parseTime=true for mysql query string (#352) 2023-06-20 21:14:42 +02:00
github-actions[bot]marcofranssenFaisal Memon
 		ac3be716dd Bump test chart dependencies (#358) 
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-06-20 08:41:41 +02:00
Drew WellsandKevin Fox 020bde8561 Add support to create a issuer and CA via cert-manager (#342) 
Co-authored-by: Kevin Fox <[email protected]>
 2023-06-16 21:04:11 +00:00
github-actions[bot] cfa9f78885 Bump test chart dependencies (#332) 2023-06-05 16:46:48 -07:00
github-actions[bot]andmarcofranssen 28c0824714 Bump test chart dependencies (#322) 
Co-authored-by: marcofranssen <[email protected]>
 2023-06-02 08:37:25 +02:00
kfox1111Faisal MemonMarco Franssendependabot[bot]
 		0ba03880a1 Add support for spire-server ingress (#68) 
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-05-23 13:58:58 +00:00
github-actions[bot]andmarcofranssen 4777a30012 Bump test chart dependencies (#301) 
Co-authored-by: marcofranssen <[email protected]>
 2023-05-23 10:19:40 +00:00
Mariusz SabathandMarco Franssen 382e0d4a47 Upgrade Tornjak image to version v1.2.0 (#259) 
Signed-off-by: Mariusz Sabath <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz Sabath 80d34f0485 Use common post-install scripts for testing 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz Sabath bd86518abc Fixing shellcheck 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz SabathMarco Franssenkfox1111
 		5e827ee45e Add Tornjak Tests (#220) 
Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-05-16 19:31:38 +02:00
github-actions[bot]marcofranssenFaisal Memon
 		7c71738d57 Bump test chart dependencies (#279) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-05-15 16:24:00 -07:00
Marco FranssenandFaisal Memon 65312f8525 Include dependency values in documentation (#275) 
I have added a flag to the helm-docs script to include the documentation
for dependencies.

This will add more complete documentation to
https://artifacthub.io/packages/helm/spiffe/spire#values so it is easier
for our users to get started and having a complete overview.

---------

Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-05-12 18:12:23 +00:00
kfox1111Faisal MemonMarco Franssen
 		d3da3eed55 External database configuration (#225) 
This patch makes all the database settings configurable.

fixes: https://github.com/spiffe/helm-charts/issues/37

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-05-10 14:04:34 +02:00
github-actions[bot]marcofranssenKevin Fox
 		1f09d7b386 Bump test chart dependencies (#264) 
Bump the Helm charts used in test scenarios to latest available
versions.

---------

Signed-off-by: GitHub <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
 2023-05-08 06:38:29 -07:00
github-actions[bot]andKevin Fox 6760cd22cd Bump test chart dependencies (#252) 
Bump the Helm charts used in test scenarios to latest available
versions.

---------

Signed-off-by: GitHub <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
 2023-05-01 09:16:43 -07:00
Marco Franssen 91083a6b4e Add post-install scripts to all tests to capture failure details in GitHub workflow summary (#88) 2023-04-26 07:17:29 -07:00
Marco Franssen 99af475f1c Resolve shellcheck issues 
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-26 16:04:02 +02:00
kfox1111andMarco Franssen 17d62f1246 Add an action to find new versions of helm charts (#184) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-04-25 10:04:38 +02:00
kfox1111andMarco Franssen 563e1f7920 Add podmonitors (#165) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-04 09:55:35 +02:00
kfox1111andMarco Franssen daa620bf05 Fix production example test (#183) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-03 19:54:53 +02:00
kfox1111andMarco Franssen 280315ca68 Fix namespace-override github test summary (#154) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-03 19:37:19 +02:00
Marco Franssen a7709287bf Switch busybox image to cgr.dev/chainguard/busybox:latest-glibc (#175) 2023-04-03 05:33:30 -07:00
kfox1111andMarco Franssen b25dc773bc Test fixing the tests (#148) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-03-22 09:49:33 +01:00
kfox1111 d4fd2ced39 Extract the namespace override test out of the old lockdown test. (#145) 
This patch removes the production bits of the old lockdown test
and establishes the namespace override test as its own test.

---------

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-21 22:13:26 +01:00
Marco Franssen 4f85802ae0 Update lockdown test to test the production example 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-21 21:55:20 +01:00
kfox1111 04a1305556 Fork the lockdown test to two tests as it is doing the work of 2 (#134) 
This patch makes a second copy of the existing lockdown test
because it is doing double duty. In follow on patches we will
make each test do one thing only.

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-21 10:14:38 -07:00
Pete Cable 811a2f6b01 Add option to enable federation on spire-server (#97) 2023-03-16 20:36:13 +01:00
Kevin FoxandMarco Franssen 6322a9a138 Fix tests 
Signed-off-by: Kevin Fox <[email protected]>

Co-authored-by: Marco Franssen <[email protected]>
 2023-03-16 18:58:31 +01:00
Kevin FoxandMarco Franssen cc7121e021 Add ingress support for OIDC discovery provider 
This patch enables exposing the oidc server out with an ingress
along with tests to ensure it works.

Signed-off-by: Kevin Fox <[email protected]>

Co-authored-by: Marco Franssen <[email protected]>
 2023-03-16 10:02:22 +01:00
kfox1111 80e3b58dcd Remove dead file from failed rebase. (#121) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-03-14 13:23:02 -07:00
kfox1111 03db6bb5fe Namespace override 
This patch makes it possible to install the subcharts in different
namespaces as needed.

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-13 15:03:16 -07:00
Kevin Fox 09b21acca2 Fix the gate 
Signed-off-by: Kevin Fox <[email protected]>
 2023-03-11 19:21:59 +01:00
kfox1111 b6716aee17 Test that it is possible to lock down security of pods (#84) 2023-03-11 12:11:19 +01:00
Kevin Fox 7d1f8217ce Fix test. 
Signed-off-by: Kevin Fox <[email protected]>
 2023-03-09 10:09:50 -08:00
kfox1111 d341c5ad58 UpstreamAuthority cert-manager support (#82) 2023-03-03 20:48:35 +01:00
Kevin Fox b7f8c86478 Add extra initContainers, containers, volumes to agent and server 
With plugin support, agents and servers need more customization.
This patch enables initContainers, extraContainers, extraVolumes
and extraVolumeMounts to be added to those services.

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-02 08:02:19 -08:00
kfox1111andMarco Franssen 35eb3bb42e Basic Prometheus support (#28) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-02-24 22:39:15 +01:00