kfox1111
a7368eee1f
Upgrade to spire 1.11.0 ( #483 )
...
Signed-off-by: Kevin Fox <[email protected]
2024-10-25 22:36:59 -07:00
kfox1111 and Faisal Memon
fe5464ba9f
Update notes ( #479 )
...
* Update notes
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2024-10-24 10:17:46 -07:00
spire-helm-version-checker[bot] and marcofranssen
29e9866a8c
Bump test chart dependencies ( #481 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2024-10-21 04:59:26 -07:00
kfox1111
13736cdf6f
Add support for the new hint spire-controller-manager feature ( #472 )
...
* Add support for the new hint spire-controller-manager feature
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected]
2024-10-17 15:48:09 -07:00
kfox1111 and Faisal Memon
b08e8bf9b1
Agent support for bundle on host path ( #478 )
...
* Agent support for bundle on host path
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2024-10-17 15:12:27 -07:00
Yann Soubeyrand and kfox1111
7b409ed912
Fix cert-manager upstream authority when enabling recommendations ( #476 )
...
Signed-off-by: Yann Soubeyrand <[email protected] [email protected]
2024-10-17 14:14:20 -07:00
kfox1111
01c7227b13
Add support for the new fallback spire-controller-manager feature ( #471 )
...
* Add support for the new fallback spire-controller-manager feature
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected]
2024-10-17 12:38:25 -07:00
spire-helm-version-checker[bot] and marcofranssen
0a6dd19906
Bump test chart dependencies ( #477 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2024-10-14 06:26:40 -07:00
kfox1111
fcbd64e011
Support federation bundle endpoint profile http_web certificates ( #469 )
...
* Support federation bundle endpoint profile http_web certificates
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2024-10-10 12:03:54 -07:00
c29f45fc30
Add AWS DB types ( #464 )
...
* Add remaining data store options
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2024-10-08 10:50:32 -07:00
kfox1111 and Faisal Memon
898a349297
Add remaining data store options ( #463 )
...
* Add remaining data store options
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2024-10-07 16:18:06 -07:00
spire-helm-version-checker[bot] and marcofranssen
2443515682
Bump test chart dependencies ( #474 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2024-10-07 14:04:33 -07:00
kfox1111 and Faisal Memon
c46179472c
Update the spire-controller-manager to 0.6.0 ( #473 )
...
Signed-off-by: Kevin Fox <[email protected] [email protected]
2024-10-03 16:27:23 -07:00
kfox1111
5d07eaff52
Align more settings to convention ( #467 )
...
* Align more settings to convention
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected]
2024-10-03 12:06:38 -07:00
spire-helm-version-checker[bot] and marcofranssen
ea2d673830
Bump test chart dependencies ( #470 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2024-09-30 17:06:39 -07:00
spire-helm-version-checker[bot] and marcofranssen
352aee2f0d
Bump test chart dependencies ( #468 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2024-09-23 06:50:10 -07:00
Faisal Memon and kfox1111
c3c8514333
Change curl --caPath to --capath ( #462 )
...
Signed-off-by: Faisal Memon <[email protected] [email protected]
2024-09-17 14:02:06 -07:00
kfox1111 and Faisal Memon
68d21ccade
Add an initial json schema file for spire-agent ( #458 )
...
* Add an initial json schema file for spire-agent
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected]
2024-09-17 13:39:22 -07:00
Erik Godding Boye and Faisal Memon
b7e9823a65
Add new config.jwtDomain value to oidc-discovery chart ( #457 )
...
Signed-off-by: Erik Godding Boye <[email protected] [email protected]
2024-09-17 12:36:52 -07:00
nweisenauer
8832da39b4
Protects SPIRE Agent's Chart Against YAML Template Injection ( #450 )
...
* protects agent's chart against template injection
Signed-off-by: Nico Weisenauer <[email protected] [email protected] [email protected] [email protected]
2024-09-16 06:23:01 -07:00
kfox1111
3bc70255e7
Update spiffe-helper ( #453 )
...
* Update spiffe-helper
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected]
2024-09-12 09:49:14 -07:00
spire-helm-version-checker[bot] and marcofranssen
86d6fcac25
Bump test chart dependencies ( #449 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2024-09-09 06:36:28 -07:00
Faisal Memon
01b1114e26
Bump spire Helm Chart version from 0.22.0 to 0.23.0
...
* 7df063f#412 )
* de5ec47#445 )
* e72b94f#430 )
* 532852d#440 )
* 6e8ad56#435 )
* 50c741e#437 )
* e062b9f#434 )
* b96e07e#426 )
* f92d729#432 )
* 8553a78#431 )
Signed-off-by: Faisal Memon <[email protected]
2024-09-04 14:00:46 -07:00
Faisal Memon
080d101787
Bump spire-nested Helm Chart version from 0.22.0 to 0.23.0 ( #447 )
...
* 7df063f#412 )
Signed-off-by: Faisal Memon <[email protected]
2024-09-04 13:39:53 -07:00
kfox1111 and Faisal Memon
7df063f8db
Upgrade SPIRE to 1.10.3 ( #412 )
...
* Update SPIRE to 1.10.3
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2024-09-04 13:16:50 -07:00
spire-helm-version-checker[bot] and marcofranssen
de5ec47613
Bump test chart dependencies ( #445 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2024-09-02 05:51:02 -07:00
kfox1111 and Faisal Memon
e72b94fc13
Add all built in BundlePublishers ( #430 )
...
* Add all built in BundlePublishers
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2024-08-27 12:35:23 -07:00
spire-helm-version-checker[bot] and marcofranssen
532852d907
Bump test chart dependencies ( #440 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2024-08-26 09:45:03 -07:00
kfox1111
6e8ad569b3
Add a spire-agent auto kubelet verification mode ( #435 )
...
* Add a spire-agent auto kubelet verification mode
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected]
2024-08-23 15:09:55 -07:00
kfox1111
50c741e047
Remove extra check that sometimes breaks oidc ( #437 )
...
Signed-off-by: Kevin Fox <[email protected]
2024-08-22 12:08:18 -07:00
kfox1111
e062b9f196
Support ipv4 only clusters ( #434 )
...
* Support ipv4 only clusters
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected]
2024-08-21 12:00:38 -07:00
kfox1111 and Faisal Memon
b96e07e349
Enable more forms of kubelet certificate verification ( #426 )
...
* Enable kubelet certificate verification by default
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2024-08-20 22:08:39 -07:00
Erik Godding Boye
f92d729137
Add missing properties required by SecurityContextConstraints CRD ( #432 )
...
Signed-off-by: Erik Godding Boye <[email protected]
2024-08-20 08:55:35 -07:00
spire-helm-version-checker[bot] and marcofranssen
8553a78f6c
Bump test chart dependencies ( #431 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2024-08-19 12:39:18 +02:00
Faisal Memon and kfox1111
ba35e81247
Bump spire-nested Helm Chart version from 0.21.1 to 0.22.0 ( #429 )
...
* 827a3ea#424 )
Signed-off-by: Faisal Memon <[email protected] [email protected]
2024-08-15 10:13:02 -07:00
Faisal Memon
de1e98337a
Bump spire Helm Chart version from 0.21.1 to 0.22.0 ( #428 )
...
* 9b2d72f#423 )
* 827a3ea#424 )
* 0289e5f#415 )" (#422 )
* bf40797#418 )
* abcf019#415 )
* 6d4d526#414 )
Signed-off-by: Faisal Memon <[email protected]
2024-08-15 13:59:31 +00:00
kfox1111
9b2d72f6a2
Fix permission issue with 1.10 and defaults when upgraded ( #423 )
...
* Fix permission issue with 1.10 and defaults when upgraded
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected]
2024-08-13 22:21:20 -07:00
kfox1111
827a3ea80c
Bump spire to 1.10.1 ( #424 )
...
Signed-off-by: Kevin Fox <[email protected]
2024-08-13 11:44:07 -07:00
kfox1111
0289e5fb00
Revert "Added support for specifying Kubelet CA Path ( #415 )" ( #422 )
...
This reverts commit abcf01958a[email protected]
2024-08-13 11:03:31 -07:00
spire-helm-version-checker[bot] and marcofranssen
bf40797049
Bump test chart dependencies ( #418 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2024-08-12 07:05:38 -07:00
Andrew Block and Faisal Memon
abcf01958a
Added support for specifying Kubelet CA Path ( #415 )
...
Signed-off-by: Andrew Block <[email protected] [email protected]
2024-08-09 04:56:11 +00:00
kfox1111
6d4d52604a
Allow configuring persistence in the spire-agent ( #414 )
...
* Allow configuring persistence in the spire-agent
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected]
2024-08-08 20:06:06 -07:00
Faisal Memon
42e702a8da
Bump spire-nested Helm Chart version from 0.21.0 to 0.21.1 ( #410 )
...
* c3d1d39#393 )
Signed-off-by: Faisal Memon <[email protected]
2024-08-06 09:31:12 -07:00
Faisal Memon
b4d4d901b9
Bump spire Helm Chart version from 0.21.0 to 0.21.1 ( #409 )
...
* 82a6d5d#407 )
* 6240c0b#402 )
* c3d1d39#393 )
* 741cd9c#398 )
* c507ee0#397 )
* 199bb6f#392 )
* eb6d89bc93ad87500fdd9#391 )
* 08fc5f3#390 )
* 6904295#389 )
* fb7fb80#388 )
* 7a0a77b#386 )
* 1d2d755#366 )
* f7e0d4b#381 )
* 29d4b574c9059e#379 )
* 1dc650f#378 )
* 6c2b5e6#376 )
Signed-off-by: Faisal Memon <[email protected]
2024-08-06 08:28:22 -07:00
Ben Leggett
82a6d5d410
Should be admin_socket_path not admin_socket_dir ( #407 )
...
Signed-off-by: Benjamin Leggett <[email protected]
2024-08-05 15:49:01 -07:00
6240c0b08c
Bump test chart dependencies ( #402 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected] [email protected]
2024-07-29 12:57:07 +00:00
kfox1111 and Faisal Memon
c3d1d39ed7
Update to SPIRE 1.10.0 ( #393 )
...
* Update to SPIRE 1.10.0
Remove the options that were removed in 1.10, and update.
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected]
2024-07-24 12:19:06 -07:00
spire-helm-version-checker[bot] and marcofranssen
741cd9c6b4
Bump test chart dependencies ( #398 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2024-07-22 07:41:57 -07:00
spire-helm-version-checker[bot] and marcofranssen
c507ee0ea3
Bump test chart dependencies ( #397 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2024-07-15 15:14:13 +02:00
tuxotron and kfox1111
199bb6f998
Add connect by hostname to agent cofigmap ( #392 )
...
When setting the kubeletConnectByHostname to "true", the charts update the agent daemonset to define the MY_NODE_NAME environment variable, but it doesn't set the "node_name_env" setting in the WorkloadAttestor:k8s plugin, therefore the agent continues trying to connect to the kubelet using the localhost interface
Signed-off-by: tuxotron <[email protected] [email protected]
2024-07-11 12:47:57 -07:00
kfox1111