helm-charts-hardened

Author	SHA1	Message	Date
Faisal Memon	4b85cb6015	Bump spire Helm Chart version from 0.27.0 to 0.27.1 * `18b81443` Bump test chart dependencies (#698) * `31091cf5` Add oidc server_path_prefix option (#695) * `8dffc8ed` use spire-agent.hostCert.resources to set resources for corresponding spire-agent init container (#691) * `e75e095e` Bump test chart dependencies (#696) * `aab7c68d` Bump test chart dependencies (#692) * `ca6e9f34` Bump test chart dependencies * `a3739244` Bump test chart dependencies * `c52edb99` chore: update SPIRE to 1.13.2 (#681) * `41bd5b95` fix socketAlternate names throwing an error if set to an empty list (#678) * `54024730` Bump test chart dependencies (#684) * `89259757` Bump test chart dependencies (#674) * `0f5bb04a` Bump test chart dependencies (#672) Signed-off-by: Faisal Memon <[email protected]>	2025-11-25 10:53:21 -07:00
Monfortonandkfox1111	c52edb9928	chore: update SPIRE to 1.13.2 (#681 ) Signed-off-by: Monforton <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2025-10-13 10:59:13 -07:00
Faisal Memon	4da35fabeb	Bump spire Helm Chart version from 0.26.1 to 0.27.0 (#670 ) * `e73d76a0` Bump test chart dependencies (#669) * `1ab06a1b` Support for Cloud SQL Proxy in GCP (#646) * `3c3718c9` Update spire to 1.13.0 (#667) * `1feeca1c` make spire server's auth_opa_policy_engine configurable in the helm chart (#663) * `d51bf52a` Bump test chart dependencies (#666) * `c1b0cfe3` Add controller manager configs gcInterval, logLevel, and make entryIDPrefix configurable (#662) * `bb876121` Spire agent helm chart: allow configuring logFormat (#661) * `d6edae68` Add labels to the spiffe-oidc-discovery-provider values.yaml (#656) * `6376190b` Bump test chart dependencies (#660) * `9a802563` Bump test chart dependencies (#658) * `5e5810be` Bump test chart dependencies (#653) * `86feac63` Bump test chart dependencies (#647) * `5e40cfb2` Update imagePullPolicy to IfNotPresent (#643) * `86f0aecc` Bump test chart dependencies (#641) * `3ef5fe6c` Add Datadog as telemetry option (#639) Signed-off-by: Faisal Memon <[email protected]>	2025-09-24 07:08:26 -07:00
kfox1111	3c3718c904	Update spire to 1.13.0 (#667 ) Signed-off-by: Kevin Fox <[email protected]>	2025-09-16 22:13:29 -07:00
Faisal Memon	acfcc9d0a4	Bump spire Helm Chart version from 0.26.0 to 0.26.1 (#636 ) * `64b9c40` Bump test chart dependencies (#635) * `d516de0` Update spike to 0.4.2 (#632) * `8904b96` Bump test chart dependencies (#633) * `6581b11` Add disk based KeyManager (#627) * `d2913ff` Remove region from awsiid node attestor (#630) * `3218db7` Bump test chart dependencies (#628) * `57a6143` Add aws_iid to helm chart (#620) * `9a8e5a8` Add Agent TTL to Spire Server (#626) * `093c593` spire-server: Replace chown image with busybox * `a7d536c` tools: Replace rancher/kubectl with registry.k8s.io/kubectl * `fc1791f` Bump test chart dependencies (#618) Signed-off-by: Faisal Memon <[email protected]>	2025-07-28 12:30:10 -07:00
Faisal Memon	88f0108e10	Bump spire Helm Chart version from 0.25.0 to 0.26.0 * `255106da` Update to Tornjak 2.1.0 (#597) * `f37d681b` Enable running the oidc discovery provider without cluster-admin/CSI (#570) * `892051c4` Update for 1.12.4 (#605) * `b74b10a0` Bump test chart dependencies (#615) * `e78400eb` Initial spike support (#591) * `38314ed6` Bump test chart dependencies (#611) * `bfd08bcf` Bump test chart dependencies (#608) * `971e4be7` Bump test chart dependencies (#606) * `ffe43901` Nit: Fix typo in param guide (#595) Signed-off-by: Faisal Memon <[email protected]>	2025-07-04 06:55:19 -07:00
kfox1111	892051c466	Update for 1.12.4 (#605 ) * Update for 1.12.3 Signed-off-by: Kevin Fox <[email protected]> * Fix typo. Use test image Signed-off-by: Kevin Fox <[email protected]> * Fix lint Signed-off-by: Kevin Fox <[email protected]> * Fix format flag. Update config location for k8s configmap bp Signed-off-by: Kevin Fox <[email protected]> * Fix role Signed-off-by: Kevin Fox <[email protected]> * Update rbac Signed-off-by: Kevin Fox <[email protected]> * Fix key Signed-off-by: Kevin Fox <[email protected]> * Fix format Signed-off-by: Kevin Fox <[email protected]> * Fix the bundle format for the fetchca bits Signed-off-by: Kevin Fox <[email protected]> * Update key Signed-off-by: Kevin Fox <[email protected]> * Fix test rather then reconfigure Signed-off-by: Kevin Fox <[email protected]> * Add namespace Signed-off-by: Kevin Fox <[email protected]> * Update to follow the new patch Signed-off-by: Kevin Fox <[email protected]> * Fix formatting Signed-off-by: Kevin Fox <[email protected]> * Fix formatting Signed-off-by: Kevin Fox <[email protected]> * Update filename based on format Signed-off-by: Kevin Fox <[email protected]> * Add upgrade notes Signed-off-by: Kevin Fox <[email protected]> * Switch to testing nightly. Dont manage bundle configmap. Signed-off-by: Kevin Fox <[email protected]> * Update permissions Signed-off-by: Kevin Fox <[email protected]> * Update permissions Signed-off-by: Kevin Fox <[email protected]> * Update permissions Signed-off-by: Kevin Fox <[email protected]> * Update for final release Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2025-07-01 16:28:57 -07:00
kfox1111 Faisal Memon Volkan Özçelik	e78400ebcd	Initial spike support (#591 ) * Initial spike support Signed-off-by: Kevin Fox <[email protected]> * Fix lint and docs Signed-off-by: Kevin Fox <[email protected]> * Update spike to 0.4.1 Signed-off-by: Kevin Fox <[email protected]> * Update for multiarch Signed-off-by: Kevin Fox <[email protected]> * Update Signed-off-by: Kevin Fox <[email protected]> * Fix values and docs Signed-off-by: Kevin Fox <[email protected]> * Pull in changes from Volkan Signed-off-by: Kevin Fox <[email protected]> * Fix service Signed-off-by: Kevin Fox <[email protected]> * Typo fix Signed-off-by: Volkan Özçelik <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: Volkan Özçelik <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Volkan Özçelik <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2025-06-23 23:07:40 -07:00
Faisal Memon	18ec1ef9dd	Bump spire Helm Chart version from 0.24.5 to 0.25.0 * `bd2e8e3` Update spire to 1.12.2 (#592) * `d6684bc` Add spire-credentialcomposer-cel support (#587) * `ccfb490` Dynamically build the connection_string with options for the spire server when spire-server.dataStore.sql.databaseType == sqlite3 (#576) * `87bef26` Bump test chart dependencies (#588) * `b72505b` Bump test chart dependencies (#580) * `e4bd1df` Bump spire to 1.12.1 (#578) * `9062710` Bump test chart dependencies (#575) * `94e1d78` Bump test chart dependencies (#573) Signed-off-by: Faisal Memon <[email protected]>	2025-05-22 12:08:48 -07:00
kfox1111	bd2e8e3ced	Update spire to 1.12.2 (#592 ) Signed-off-by: Kevin Fox <[email protected]>	2025-05-22 08:54:36 -07:00
kfox1111	e4bd1df76c	Bump spire to 1.12.1 (#578 ) Signed-off-by: Kevin Fox <[email protected]>	2025-05-11 01:14:17 -07:00
Faisal Memon	8ca477a0bf	Bump spire Helm Chart version from 0.24.4 to 0.24.5 (#572 ) * `1169dd5` Update spire-controller-manager to 0.6.2 and add its staticManifest support (#563) * `4dee6ca` Fix invalid image name for digest in template function of `spire-lib` (#569) * `ed9fb6a` Bump test chart dependencies (#566) * `912f412` Update tpm plugin version (#564) * `0fc00cb` Bump test chart dependencies (#561) Signed-off-by: Faisal Memon <[email protected]>	2025-04-24 10:59:19 -07:00
Faisal Memon Faisal Memon kfox1111	4b55f65c62	Bump spire Helm Chart version from 0.24.3 to 0.24.4 (#558 ) * `240176a` Postgresql ro connection string fix (#556) * `2a48bf9` Update csi driver (#555) * `cd39d7b` Bump test chart dependencies (#553) Signed-off-by: Faisal Memon <[email protected]> Co-authored-by: Faisal Memon <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2025-04-10 04:33:40 -07:00
Faisal Memon	3b2e564cf0	Bump spire Helm Chart version from 0.24.2 to 0.24.3 * `25967bae` Add new config.jwksUri option to oidc-discovery chart (#547) * `2f96b0b1` Bump test chart dependencies (#545) * `663b89e3` Upgrade to SPIRE 1.12.0 (#542) * `1c73035e` Add values to configure apiServiceLabel and webhookLabel (#536) * `385cbb3e` Bump test chart dependencies (#539) * `ad44c486` Bump test chart dependencies (#537) * `86ea90cb` Fixes indentation of sync_interval value inside spire-agent configmap (#534) * `3940ac3c` Bump test chart dependencies (#533) Signed-off-by: Faisal Memon <[email protected]>	2025-04-06 04:55:57 -07:00
kfox1111	663b89e3ea	Upgrade to SPIRE 1.12.0 (#542 ) Signed-off-by: Kevin Fox <[email protected]>	2025-03-21 16:43:10 -07:00
Faisal Memon	2af830d06d	Bump spire Helm Chart version from 0.24.1 to 0.24.2 (#532 ) * `b13f4c0` Bump test chart dependencies * `915744f` Bump test chart dependencies (#529) * `0368210` Update spire to 1.11.2 (#527) * `ea03059` Bump test chart dependencies (#524) * `762ba40` Bump test chart dependencies (#523) * `f1ba4ba` Bump test chart dependencies (#522) * `413e579` Bump test chart dependencies * `f88e3d5` Bump test chart dependencies (#517) * `848f491` Bump test chart dependencies (#516) * `41cbad2` Bump test chart dependencies (#512) * `8925ed6` Bump test chart dependencies (#508) * `70f5b19` Bump test chart dependencies (#500) Signed-off-by: Faisal Memon <[email protected]>	2025-02-27 09:27:47 -08:00
kfox1111	0368210d6b	Update spire to 1.11.2 (#527 ) * Update spire to 1.11.2 Signed-off-by: Kevin Fox <[email protected]> * Fix doc Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2025-02-13 22:39:13 -08:00
Faisal Memon	61eb715029	Bump spire Helm Chart version from 0.24.0 to 0.24.1 (#497 ) * `6608fc9` Add extraEnvVars support for spiffe-csi-driver containers (#496) * `6193717` Bump test chart dependencies (#494) * `d5777c3` Bump test chart dependencies (#493) * `4993b67` Fix GCS Bundle endpoint format variable (#491) Signed-off-by: Faisal Memon <[email protected]>	2024-11-17 14:14:01 -08:00
Faisal Memon	5b16168e70	Bump spire Helm Chart version from 0.23.0 to 0.24.0 (#487 ) * `a3e607e` Bump test chart dependencies (#484) * `a360646` Add validating admission policy to restrict upstream driver access (#482) * `a7368ee` Upgrade to spire 1.11.0 (#483) * `fe5464b` Update notes (#479) * `29e9866` Bump test chart dependencies (#481) * `13736cd` Add support for the new hint spire-controller-manager feature (#472) * `b08e8bf` Agent support for bundle on host path (#478) * `7b409ed` Fix cert-manager upstream authority when enabling recommendations (#476) * `01c7227` Add support for the new fallback spire-controller-manager feature (#471) * `0a6dd19` Bump test chart dependencies (#477) * `fcbd64e` Support federation bundle endpoint profile http_web certificates (#469) * `c29f45f` Add AWS DB types (#464) * `898a349` Add remaining data store options (#463) * `2443515` Bump test chart dependencies (#474) * `c461794` Update the spire-controller-manager to 0.6.0 (#473) * `5d07eaf` Align more settings to convention (#467) * `ea2d673` Bump test chart dependencies (#470) * `352aee2` Bump test chart dependencies (#468) * `c3c8514` Change curl --caPath to --capath (#462) * `68d21cc` Add an initial json schema file for spire-agent (#458) * `b7e9823` Add new config.jwtDomain value to oidc-discovery chart (#457) * `8832da3` Protects SPIRE Agent's Chart Against YAML Template Injection (#450) * `3bc7025` Update spiffe-helper (#453) * `86d6fca` Bump test chart dependencies (#449) Signed-off-by: Faisal Memon <[email protected]>	2024-10-28 18:36:17 +00:00
kfox1111	a7368eee1f	Upgrade to spire 1.11.0 (#483 ) Signed-off-by: Kevin Fox <[email protected]>	2024-10-25 22:36:59 -07:00
Faisal Memon	01b1114e26	Bump spire Helm Chart version from 0.22.0 to 0.23.0 * `7df063f` Upgrade SPIRE to 1.10.3 (#412) * `de5ec47` Bump test chart dependencies (#445) * `e72b94f` Add all built in BundlePublishers (#430) * `532852d` Bump test chart dependencies (#440) * `6e8ad56` Add a spire-agent auto kubelet verification mode (#435) * `50c741e` Remove extra check that sometimes breaks oidc (#437) * `e062b9f` Support ipv4 only clusters (#434) * `b96e07e` Enable more forms of kubelet certificate verification (#426) * `f92d729` Add missing properties required by SecurityContextConstraints CRD (#432) * `8553a78` Bump test chart dependencies (#431) Signed-off-by: Faisal Memon <[email protected]>	2024-09-04 14:00:46 -07:00
kfox1111andFaisal Memon	7df063f8db	Upgrade SPIRE to 1.10.3 (#412 ) * Update SPIRE to 1.10.3 Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-agent/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-09-04 13:16:50 -07:00
Faisal Memon	de1e98337a	Bump spire Helm Chart version from 0.21.1 to 0.22.0 (#428 ) * `9b2d72f` Fix permission issue with 1.10 and defaults when upgraded (#423) * `827a3ea` Bump spire to 1.10.1 (#424) * `0289e5f` Revert "Added support for specifying Kubelet CA Path (#415)" (#422) * `bf40797` Bump test chart dependencies (#418) * `abcf019` Added support for specifying Kubelet CA Path (#415) * `6d4d526` Allow configuring persistence in the spire-agent (#414) Signed-off-by: Faisal Memon <[email protected]>	2024-08-15 13:59:31 +00:00
kfox1111	827a3ea80c	Bump spire to 1.10.1 (#424 ) Signed-off-by: Kevin Fox <[email protected]>	2024-08-13 11:44:07 -07:00
Faisal Memon	b4d4d901b9	Bump spire Helm Chart version from 0.21.0 to 0.21.1 (#409 ) * `82a6d5d` Should be `admin_socket_path` not `admin_socket_dir` (#407) * `6240c0b` Bump test chart dependencies (#402) * `c3d1d39` Update to SPIRE 1.10.0 (#393) * `741cd9c` Bump test chart dependencies (#398) * `c507ee0` Bump test chart dependencies (#397) * `199bb6f` Add connect by hostname to agent cofigmap (#392) * `eb6d89b` Update charts/spire/README.md * `c93ad87` Add valid kubectl version to examples * `500fdd9` Bump test chart dependencies (#391) * `08fc5f3` Bump test chart dependencies (#390) * `6904295` Bump test chart dependencies (#389) * `fb7fb80` Fix format for ignoreNamespaces (#388) * `7a0a77b` Fix host path of "spire-agent-admin-socket-dir" volume (#386) * `1d2d755` Add resource limits for upgrade and delete hook batch jobs (#366) * `f7e0d4b` Update _spire-system-namespace.yaml (#381) * `29d4b57` Bump test chart dependencies * `4c9059e` Bump test chart dependencies (#379) * `1dc650f` Apply wildcard for ignoreNamespaces in Controller Manager (#378) * `6c2b5e6` Bump test chart dependencies (#376) Signed-off-by: Faisal Memon <[email protected]>	2024-08-06 08:28:22 -07:00
kfox1111andFaisal Memon	c3d1d39ed7	Update to SPIRE 1.10.0 (#393 ) * Update to SPIRE 1.10.0 Remove the options that were removed in 1.10, and update. Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> * Fix uid mismatch issue on 1.10.0+ Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-07-24 12:19:06 -07:00
Faisal Memon	63853f5494	Bump spire Helm Chart version from 0.20.0 to 0.21.0 (#373 ) * `54a2f03` Change cleanup default (#349) * `d29ad06` Bump test chart dependencies (#369) * `7dabbf1` Add Openshift ignore namespaces to Controller Manager (#363) * `db177d4` Fix spelling error in Controller Manager config (#362) * `d236154` Fix upstream ca name suffix issue (#361) * `bfcf418` Bump test chart dependencies (#359) * `c31a2e9` Bump up spire to 1.9.6 (#356) * `2c5dfa0` Improve Tornjak NOTES. Fixes #132 (#354) * `a453a2c` Bump test chart dependencies (#355) * `b6575c1` Update Tornjak deployment docs (#288) * `be560d9` Check for a misconfiguration of bundle endpoint profiles (#348) * `b2e9f40` Bump spire version (#352) * `7165b20` Bump test chart dependencies (#350) * `da4ebdf` Fix federation certificate name when upstream enabled (#347) * `c37de1e` Fix Tornjak logsDir for Openshift (#344) * `8fef1bd` Add external spire-controller-managers (#284) * `ee12404` set refresh hint to 1/3 of default CA TTL value fixes #335 (#343) * `2d9866a` Bump test chart dependencies (#338) * `6de23d3` Don't create role/binding when bundle disabled (#336) * `c132cc4` Add support for externalServer=true (#303) * `a2494ee` Add auth option for Tornjak (#259) * `f679a0d` Bump test chart dependencies (#333) * `5149256` Work around curl change * `3d2ac16` Bump test chart dependencies * `08f699b` Add spire-lib chart (#289) * `260b02f` Add an easy to use identity for child servers (#302) Signed-off-by: Faisal Memon <[email protected]>	2024-05-30 22:00:00 +00:00
kfox1111	c31a2e9f65	Bump up spire to 1.9.6 (#356 ) Signed-off-by: Kevin Fox <[email protected]>	2024-05-16 09:20:14 -07:00
kfox1111	b2e9f40774	Bump spire version (#352 ) Signed-off-by: Kevin Fox <[email protected]>	2024-05-07 20:16:15 -07:00
kfox1111andMarco Franssen	08f699bdb0	Add spire-lib chart (#289 ) * Add spire-lib chart Make spire-lib bits into its own library chart. Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Marco Franssen <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Move notes back Signed-off-by: Kevin Fox <[email protected]> * Fix NOTES Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Marco Franssen <[email protected]>	2024-04-18 08:21:31 -07:00
Faisal Memon	27689e797b	Bump spire Helm Chart version from 0.19.2 to 0.20.0 (#329 ) * `1bf3aa7` Default spire-server port 443 (#308) * `1ef979c` Remove upgrade hook needed in 0.19.x (#317) * `aa92791` Upgrade to spire-controller-manager 0.5.0 (#316) * `c1e4feb` Fix ingress host with a dot (#323) * `5b1bf43` Update spire to 1.9.4 (#324) * `dcd11e9` Fix chainguard issue (#326) * `bc79f58` AWS KMS key_identifier upgrade (#314) Signed-off-by: Faisal Memon <[email protected]>	2024-04-11 16:10:50 -07:00
kfox1111	5b1bf432f4	Update spire to 1.9.4 (#324 ) Signed-off-by: Kevin Fox <[email protected]>	2024-04-11 11:15:05 -07:00
Faisal Memon	7aa8cb360e	Bump spire Helm Chart version from 0.19.1 to 0.19.2 * `38e72d1` Update spire-controller-manager to 0.4.4 (#318) * `3736010` Update spire to 1.9.3 (#315) * `fafed66` Add global for storageClass (#307) * `0b99a72` Add config for experimental events based cache (#311) * `8a542ab` nameOverride autoconfig support (#305) * `af2639e` Bump test chart dependencies (#310) Signed-off-by: Faisal Memon <[email protected]>	2024-04-05 16:42:33 -07:00
Faisal Memon	530b0bd96d	Bump spire Helm Chart version from 0.19.0 to 0.19.1 * `8887d01` Enable serviceAccountAllowList to autocalculate namespace (#304) * `d418ee1` Update to SPIRE 1.9.2, use retry_bootstrap, remove wait for it (#301) * `2fcc105` Fix kubeCconfig edge case (#306) * `a15e445` Run SPIRE server as deployment (#293) * `c821126` Fix documentation issue (#300) * `3b04a83` Bump test chart dependencies (#299) Signed-off-by: Faisal Memon <[email protected]>	2024-03-29 14:35:10 -07:00
Faisal Memon	d418ee16f8	Update to SPIRE 1.9.2, use retry_bootstrap, remove wait for it (#301 ) * Update to SPIRE 1.9.2, use retry_bootstrap, remove wait for it Signed-off-by: Faisal Memon <[email protected]> * Remove waitfor it in values.yaml Signed-off-by: Faisal Memon <[email protected]> * Update docs Signed-off-by: Faisal Memon <[email protected]> * Remove wait for it from images.json Signed-off-by: Faisal Memon <[email protected]> --------- Signed-off-by: Faisal Memon <[email protected]>	2024-03-27 18:55:22 +00:00
Faisal Memon	83ea863d57	Bump spire Helm Chart version from 0.18.2 to 0.19.0 * `72768ec` Support hybrid nodes with different attestors or config (#218) * `5299642` Bump test chart dependencies * `36e9315` Add external k8s bundler (#270) * `ef610df` Complete Server K8S PSAT support (#242) * `d96271c` Bump test chart dependencies (#282) Signed-off-by: Faisal Memon <[email protected]>	2024-03-22 12:23:04 -07:00
Faisal Memon	c6d57fc750	Bump spire Helm Chart version from 0.18.1 to 0.18.2 * `fd3b7d5` Fix duplicate securityContext section in spire-agent (#279) Signed-off-by: Faisal Memon <[email protected]>	2024-03-07 10:48:09 -08:00
Faisal Memon	058e841881	Bump spire Helm Chart version from 0.18.0 to 0.18.1 * `aea37a9` Update SPIRE to 1.9.1 (#277) * `99044ef` Fix error message typo 'county' -> 'country' (#275) Signed-off-by: Faisal Memon <[email protected]>	2024-03-06 06:29:00 -08:00
kfox1111	aea37a9cd0	Update SPIRE to 1.9.1 (#277 ) Signed-off-by: Kevin Fox <[email protected]>	2024-03-05 17:49:26 -08:00
Faisal Memon	cf2e213f31	Bump spire Helm Chart version from 0.17.2 to 0.18.0 (#274 ) * `beda725` Add pod labels to the SPIRE agent (#273) * `077f152` Bump test chart dependencies (#272) * `5849ea2` add pod labels to spire server values (#271) * `f512b06` Configurable daemonsets updateStrategy (#212) * `a539065` Add direct tpm support for spire-agent (#216) * `fcd0c11` Add direct tpm support for spire-server (#211) * `c570174` Enable CA settings via global (#268) * `ac83694` Initial SPIRE 1.9.0 support (#262) * `ddb4eff` Bump test chart dependencies (#263) * `bfbafbc` Fix OpenShift Federation Ingress bug (#260) * `a0baace` Upgrade to spire-controller-manager 0.4.3 (#258) * `1446f7e` Add support for specifying agent authorized_delegates (#255) * `0b6cd88` Add support for specifying server admin_ids (#254) * `07a1c39` Add global override for kubectl tag (#251) * `b82a84d` Bump test chart dependencies (#252) * `7a1e731` Bump test chart dependencies (#246) * `a706063` make audit_log_enabled configurable (#241) * `34a39cb` Added emptyDir volume to spire-agent SCC (#243) * `a2e5a4e` Add support for enabling the spire-agent admin socket (#234) * `febdcbf` Fix whitespace in spire-agent daemonset Signed-off-by: Faisal Memon <[email protected]>	2024-03-04 17:51:48 +00:00
kfox1111	ac83694970	Initial SPIRE 1.9.0 support (#262 )	2024-02-28 17:54:53 +00:00
Faisal Memon	7ad1ae7355	Bump spire Helm Chart version from 0.17.1 to 0.17.2 * `49e21c3` Add missing affinity settings (#232) * `8adbb89` Add alternate name support for the socket (#181) * `350ec89` Bump test chart dependencies (#235) * `0e12595` Update README.md delete pvc for cleanup (#233) Signed-off-by: Faisal Memon <[email protected]>	2024-02-05 13:01:46 -08:00
Faisal Memon	16ecfe9bb9	Bump spire Helm Chart version from 0.17.0 to 0.17.1 (#226 ) * `d547532` Pass the agent's securityContext on to Kubernetes (#225) * `6b03d5a` Fix hardcoded nodeAttestor and keyManager in spire-agent (#221) * `f4c92ed` Update README.md put cleanup seperately (#223) * `7542052` Bump test chart dependencies (#219) * `01e031f` Add another upgrade note and fix value name (#215) * `0fbc512` Remove the white line from securityContext rendering * `573beaf` More quickly detect a daemonset is up and running * `e8d527c` Update to spire-controller-manager 0.4.2 (#195) * `25558d3` Update daemonset.yaml (#204) Signed-off-by: Faisal Memon <[email protected]>	2024-01-30 13:53:41 -08:00
Kevin Fox	2df2e1661f	Bump spire Helm Chart version from 0.16.0 to 0.17.0 * `4c307c1` Add missing bundlePublisher section and extraEnv so settings can be set (#201) * `d724d1e` Update the documentation (#172) * `e59a29b` Bump test chart dependencies (#200) * `4668151` Add missing extraVolumeMounts to the controllerManager (#196) * `b9ac3c4` Update to spire-controller-manager 0.4.1 (#193) * `6fec1e5` Update SPIRE to 1.8.7 (#194) * `af155c2` Add support for running spiffe secured discovery provider (default) (#163) * `3ccdb5e` Add tls section to federation bundle endpoint and fix up annotations (#173) * `c7ab131` Add join_token server nodeattestor support (#187) * `81e9523` Bump test chart dependencies (#186) * `6d19a76` Fix agent daemonset format (#184) * `b61d4f5` Add spire-agent to spire-agent pod path (#180) * `befa074` Fix notes bug (#178) * `912c61e` Remove deprecated version values (#179) * `ae4ef6e` Update HorizontalPodAutoscaler API to autoscaling/v2 (#153) * `e7a61a9` Bump test chart dependencies * `183e9aa` SPIFFE OIDC Discovery Provider Rework (#152) * `8f1aba8` Bump test chart dependencies (#171) * `2454b8c` Fix links still pointing at older git repo (#167) * `e5c5527` Bump test chart dependencies (#165) * `e630008` Update jwt test to work with newer slim images (#139) * `c39dd44` Add recommendation for namespacePSS (#131) * `49beb64` Add recommendation for namespaceLayout (#127) * `33cacd2` Add recommendation for prometheus exporter (#144) * `6997d6a` Add recommendation for securityContext and podSecurityContext (#125) * `50c4ac3` Add recommendation for strictMode (#143) * `4fb9d18` Bump test chart dependencies (#155) * `811123a` Update the Tornjak image version (#150) * `1524537` Update default for additionalDomains not to include localhost (#146) * `e35838c` Add recommendation for priorityClass (#124) * `9f72a8f` Use good and automatic defaults for tornjak frontend workingDir (#129) * `7726351` Tornjak UBI support (#123) * `89c07e2` Revert openssl 3.2 change (#142) * `a3d3702` Bump test chart dependencies * `80c7653` Bump test chart dependencies (#134) * `13f6028` SELinux support (#122) * `3e8335c` Add a flag to enable recommendations (#121) * `692d463` Remove unneeded lookup function from upgrade hook (#104) * `8422b8d` Added ability to create namespaces (#103) Signed-off-by: Kevin Fox <[email protected]>	2024-01-24 12:24:29 +01:00
kfox1111	6fec1e598a	Update SPIRE to 1.8.7 (#194 ) Signed-off-by: Kevin Fox <[email protected]>	2024-01-18 21:07:53 -08:00
kfox1111	2454b8cd2a	Fix links still pointing at older git repo (#167 ) Signed-off-by: Kevin Fox <[email protected]>	2023-12-27 17:10:49 -08:00
Marco Franssenandkfox1111	78bb95ba35	Bump spire Helm Chart version from 0.15.1 to 0.16.0 * `b7d8590` Fix missing protocol in JWT Issuer (#120) * `1ef207c` Add note about supported version upgrades (#119) * `4281114` Fix missing release name from install documentation (#118) * `e030fa1` Allow additional CRs to be managed by the chart (#117) * `d936293` Enable agent to kubelet connection to use hostname (#112) * `e68f617` Bump test chart dependencies (#116) * `d616632` Bump spire version to 1.8.5 (#115) * `95e1eb7` Bump test chart dependencies * `966061c` Auto add default CSIDriver labels on OpenShift * `c9885de` Introduce ReadOnlyRootFilesystem for Tornjak frontend (#110) * `8107095` Fix typo ClusterSPIFFEID for workloadTSelectoremplates (#107) * `5c0ce97` Ordering of SecurityContextConstraint array items (#105) * `889d0af` Bump test chart dependencies * `f5d1376` Documentation cleanup (#97) Signed-off-by: Marco Franssen <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2023-12-01 16:03:24 +01:00
kfox1111	d616632810	Bump spire version to 1.8.5 (#115 )	2023-11-24 09:32:27 -08:00
Marco Franssenandkfox1111	250666a2b0	Bump spire Helm Chart version from 0.15.0 to 0.15.1 * `821ca12` Add Tornjak ingress example (#30) * `6cd2282` Update SPIRE crds version (#93) Co-authored-by: kfox1111 <[email protected]> Signed-off-by: Marco Franssen <[email protected]>	2023-11-10 14:00:58 +01:00
Faisal Memon	06d8cd2ae5	Bump spire Helm Chart version from 0.14.0 to 0.15.0 * `6c0a4fb` Auto tornjak url (#89) * `f2758a8` Autogen jwtIssuer (#88) * `93c20c6` Merge pull request #83 from spiffe/doc-ingress-patch * `c662b0c` Merge branch 'main' into doc-ingress-patch * `de8cbc8` Bump github.com/onsi/gomega from 1.29.0 to 1.30.0 in /tests (#90) * `1de838e` Bump helm.sh/helm/v3 from 3.13.1 to 3.13.2 in /tests (#91) * `daf9d55` Merge branch 'main' into doc-ingress-patch * `aaeca00` Fix tests after renaming files * `0320c3f` Cleanup documentation * `37cd9f2` Update to SPIRE 1.8.4 (#84) * `bd7879a` Fix the typo in the production ingress README * `805d869` spire-controller-manager 0.4.0 support (#60) * `edf2381` Bump sigstore/cosign-installer from 3.1.2 to 3.2.0 (#85) * `0ed6d92` Bump test chart dependencies * `f7b6140` Fix docs * `a7e8785` Add another missing one * `3778597` Add missing ClusterSPIFFEID fields * `9b31f3d` Bump helm/chart-testing-action from 2.6.0 to 2.6.1 * `d6583be` Add missing no cleanup flags to example tests (#79) * `81cc2dc` Ingress type openshift (#52) * `2dce90f` Bump helm/chart-releaser-action from 1.5.0 to 1.6.0 (#75) * `f08ebd3` Patch Tornjak ingress (#74) * `6a6aa1c` Cosign download fix (#72) * `3b01684` Support Openshift deployment (#13) * `ed23d8b` Simple ingress support (#48) * `b354413` Fix incorrect nesting of priorityClassName (#67) * `09ebfc9` Bump test chart dependencies (#68) * `d50d78d` Fix ingress annotation variable for tornjak server (#66) * `b813807` Update docs to simplify, clarify, and prioritize ease of install/upgrade (#62) * `5ad35bd` Merge pull request #59 from sabre1041/spire-agent-nodename * `02d445c` Update charts/spire/README.md * `9bd7f43` Added environment variable to spire-agent to inject node name * `fb64f8d` Bump github.com/onsi/gomega from 1.28.1 to 1.29.0 in /tests (#61) * `30d0f59` Update helm-charts repository URL (#58) * `7924323` Specify ingress controller type (#43) * `0b17434` Bump test chart dependencies (#54) * `a419903` Bump github.com/onsi/gomega from 1.28.0 to 1.28.1 in /tests (#53) * `5025025` Fix doc missing end tag (#46) * `cf226a7` Bump actions/checkout from 4.1.0 to 4.1.1 (#42) Signed-off-by: Faisal Memon <[email protected]>	2023-11-09 13:18:02 -08:00

1 2 3