This patch enables end users to configure external plugins in the
spire-server config. Unsupported internal plugins are not able to be
set.
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Edwin Buck <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Please review the below changelog to ensure this matches up with the
semantic version being applied.
> **Note**: **Maintainers** ensure to run following after merging this
PR to trigger the release workflow:
>
> ```shell
> git checkout main
> git pull
> git checkout release
> git pull
> git merge main
> git push
> ```
**Changes in this release**
* 5e2e8a91 Adds AWS KMS KeyManager support (#435)
* 77fe43f3 Cron job to check for and update images (#249)
* b7e15255 Allow job hooks to be disabled (#434)
* 5e4cf6f5 Clarify project issues identified with nesting document
(#450)
* 72893515 Update spire bits to 1.7.2 (#452)
* dc8a4545 Array spacing in values is incorrect in a file. (#451)
* 94326d9c Fixup Helm docs
* ae8941c4 Support Nested Spire with External Agent (#117)
* f40743d4 Improve Tornjak documentation (#439)
* 0124f633 Bypass example-test for docs only changes (#449)
* 48a28980 Fix chainguard image references as per issue 442 (#443)
* bd393e95 Bump test chart dependencies (#445)
* a52818a7 Add a FAQ and switch rare issue from README to it (#437)
* e60f5287 option to set KeyManager memory in spire server (#444)
* a167ce68 Bump actions/setup-go from 4.0.1 to 4.1.0
* e774584c Bump test chart dependencies (#426)
* bfec27ef Fix jwtIssuer to allow for Uris including scheme (#425)
* 7a6e4f8d Change Tornjak backend default port (#436)
* 1e3039cc Bump spire Helm Chart version from 0.11.0 to 0.11.1 (#419)
* d2e16062 issuer naming should respect issuer_name override (#378)
* a2e5c36c Bump test chart dependencies (#416)
* a09e054d support annotations so oidc can be annotated (#391)
* 7d94b105 Update spire to 1.7.1 (#412)
* 9f4d4ace Add aws_pca to the spire-server (#404)
* af13f1fc Bump test chart dependencies (#401)
* 9a6768bc Add support for disabling container selectors (#399)
* 4687e20d Merge pull request #315 from spiffe/persistence-type
* e16210c6 Merge branch 'main' into persistence-type
* 624ca9cc Remove misadded lockfile (#400)
* 7ce67c62 Bump actions/checkout from 3.5.2 to 3.5.3 (#395)
* b85ba64d Bump helm/kind-action from 1.7.0 to 1.8.0 (#396)
* a6bdb4d1 Add persistence type flag
Signed-off-by: Marco Franssen <[email protected]>
Please review the below changelog to ensure this matches up with the
semantic version being applied.
**Note**: As this is a patch release we will make a cherry-picked
release using a followup PR targetering the release branch. Will
cherrypick the following commits into this patch release + the commit
bumping this version number.
**Changes in this release**
* d2e1606 issuer naming should respect issuer_name override (#378)
* a09e054 support annotations so oidc can be annotated (#391)
* 7d94b10 Update spire to 1.7.1 (#412)
* 9a6768b Add support for disabling container selectors (#399)
* 624ca9c Remove misadded lockfile (#400)
Signed-off-by: Faisal Memon <[email protected]>
* f4c421af Ensure the released OCI artifact is also captured in rekor
* 386e736e Bump sigstore/cosign-installer from 3.0.5 to 3.1.0 (#368)
* 99e01c67 Bump spire-controller-manager from 0.2.2 to 0.2.3 (#367)
* 4dccb0d3 Bump spire Helm Chart version from 0.9.0 to 0.9.1 (#365)
* 8409674a Fix the init container flags of the statefulset (#366)
* 3b666601 add missing federatesWith option (#361)
* 0533d925 fixes missing template (#362)
* 1333b6ab Always add parseTime=true for mysql query string (#352)
* ac3be716 Bump test chart dependencies (#358)
Signed-off-by: Marco Franssen <[email protected]>
* 57a9320 Add SPIRE 1.7.0 to main readme (#357)
* af36f7c Align the bash image version with other instances for spire-agent (#356)
* c11a8c0 Implement pre-delete hook for graceful delete of spiffe-oidc-discovery-provider (#353)
* a6dcf26 Allow for SPIRE Agent to run as non root user (#209)
* 9cf6049 Allow contributors to run linting easily on local
* e88f7f6 Add configmap annotation to spire-bundle configmap (#351)
* 020bde8 Add support to create a issuer and CA via cert-manager (#342)
* 9d504de Ignore .DS_Store files
* e6b608c Bump spire images to 1.7.0 (#348)
* c97a788 Fix bundle role/rolebinding naming conflict (#333)
* b66077e Bump peter-evans/create-pull-request from 5.0.1 to 5.0.2 (#349)
* d0da864 Add missing metadata to subcharts (#347)
* 4c0a1d5 Allow overriding test images (#186)
* 250fd5d Add missing global values to charts (#311)
* 5d8c907 Dropping k8s versions in CI older than 3, as per readme (#344)
* 8748933 Update upstream-ca-secret.yaml (#341)
* 4e07450 Fix ingress annotations for federation (#337)
* ea09199 Bump actions/checkout from 3.5.0 to 3.5.3
* 87fe198 Merge pull request #331 from edwbuck/key_conventions
* ddc0166 Fix line wrapping.
* 0cae9ce Update project/conventions.md
* cb18255 Update project/conventions.md
* 52e5c24 Upgrade Tornjak to image v1.2.2 (#328)
* 28e2abf Choose a different example for dotted Acronyms.
* d60d68c Added accidentally clipped explicit name guidelines.
* abe9fde Merge branch 'main' into key_conventions
* f6a7b62 Update project/conventions.md
* c4d19db Update project/conventions.md
* cfa9f78 Bump test chart dependencies (#332)
* c3213ab Initial submission of Helm Chart key naming conventions.
* 28c0824 Bump test chart dependencies (#322)
* d333154 Add Makefile for local testing (#327)
* 9fa1ec2 Improve Tornjak backend test (#321)
* 5b779dc Improve Tornjak frontend test (#320)
Signed-off-by: Marco Franssen <[email protected]>
