65d56957de
Migrate to readme-generator for helm maintained by bitnami ( #431 )
...
Co-authored-by: Krishnakumar Venkataraman <[email protected] [email protected]
2023-09-08 09:39:30 +02:00
Simon Ostendorf
dcc60a2896
fix(charts/spire/spire-agent): podmonitor templating ( #478 )
2023-09-08 09:31:18 +02:00
kfox1111 and Marco Franssen
e81a59a7e5
ingress-nginx production tests and spiffe-oidc-discovery-provider example ( #136 )
...
Co-authored-by: Marco Franssen <[email protected]
2023-08-29 15:22:00 +00:00
51cba5b530
Add customPlugins and unsupportedBuiltInPlugins sections to spire-server ( #198 )
...
This patch enables end users to configure external plugins in the
spire-server config. Unsupported internal plugins are not able to be
set.
---------
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected]
2023-08-24 21:13:28 +00:00
grameshtwilio and Faisal Memon
c817dd2411
support datastore password secret created by external resources ( #464 )
...
This allows the datastore secret object to be created by external agents
such as https://github.com/external-secrets/external-secrets
---------
Signed-off-by: grameshtwilio <[email protected] [email protected]
2023-08-22 16:08:52 -07:00
cbe0001131
Federation test ( #423 )
...
Co-authored-by: kfox1111 <[email protected] [email protected]
2023-08-22 20:07:54 +02:00
Marco Franssen and Faisal Memon
c298510701
Fix initContainers spire-server statefulset ( #458 )
...
To allow for inplace upgrades of spire-server statefulset we are not
allowed to
make changes to all fields of the statefulset spec.
When bumping from 0.8.1 to the latest version the `initContainers:`
field is added in the spec and therefore does not allow for updating the
statefulset.
This fix prevents the empty initContainers block when bumping from a
previous chart version.
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-08-21 10:38:42 -07:00
Marco Franssen
76e3665396
Fix annotation for spire-oidc deployment ( #457 )
2023-08-18 10:06:15 -07:00
5e2e8a9188
Adds AWS KMS KeyManager support ( #435 )
...
Co-authored-by: Marco Franssen <[email protected] [email protected]
2023-08-18 09:52:51 +02:00
b7e15255f3
Allow job hooks to be disabled ( #434 )
...
Co-authored-by: Marco Franssen <[email protected] [email protected]
2023-08-18 09:48:14 +02:00
kfox1111
72893515a2
Update spire bits to 1.7.2 ( #452 )
2023-08-17 10:10:45 -07:00
kfox1111
dc8a4545cc
Array spacing in values is incorrect in a file. ( #451 )
2023-08-17 08:42:21 +02:00
kfox1111
ae8941c49d
Support Nested Spire with External Agent ( #117 )
2023-08-16 16:35:41 +02:00
kfox1111
48a2898016
Fix chainguard image references as per issue 442 ( #443 )
2023-08-16 16:22:09 +02:00
grameshtwilio
e60f5287e0
option to set KeyManager memory in spire server ( #444 )
2023-08-12 20:55:40 +02:00
Drew Wells
bfec27ef67
Fix jwtIssuer to allow for Uris including scheme ( #425 )
2023-08-09 16:53:21 +02:00
Mariusz Sabath
7a6e4f8d75
Change Tornjak backend default port ( #436 )
2023-08-09 16:46:08 +02:00
Drew Wells and Faisal Memon
d2e1606286
issuer naming should respect issuer_name override ( #378 )
...
align the spire-server configmap and issuer CR naming
---------
Signed-off-by: Drew Wells <[email protected] [email protected] [email protected]
2023-08-02 14:22:59 -07:00
Drew Wells and Faisal Memon
a09e054d04
support annotations so oidc can be annotated ( #391 )
...
Signed-off-by: Drew Wells <[email protected] [email protected] [email protected]
2023-07-31 10:54:01 -07:00
kfox1111
7d94b105ab
Update spire to 1.7.1 ( #412 )
...
Signed-off-by: Kevin Fox <[email protected]
2023-07-28 23:01:26 +02:00
9f4d4ace84
Add aws_pca to the spire-server ( #404 )
...
This change allows aws_pca to be configured via values of this chart.
__Requires 1.7.1 version__ per
[bug](https://github.com/spiffe/spire/issues/4351 ) - this will not work
until 1.7.1 is released.
---------
Signed-off-by: Petr McAllister <[email protected] [email protected] [email protected] [email protected] [email protected]
2023-07-27 14:27:51 -07:00
Faisal Memon
9a6768bca1
Add support for disabling container selectors ( #399 )
2023-07-27 13:27:57 -04:00
Kevin Fox
a6bdb4d1e7
Add persistence type flag
...
This patch adds a type flag to the persistence settings to enable
specifying the backing volume's type.
Signed-off-by: Kevin Fox <[email protected]
2023-07-19 23:40:23 +02:00
Marco Franssen
06ddb7cd3f
Use chart-testing ci/*-values.yaml for testing
...
This also enables the refactor to have multiple root level charts.
Resolves #100
Signed-off-by: Marco Franssen <[email protected]
2023-07-19 22:48:19 +02:00
Marco Franssen
088b29608e
Improve tornjak service API to have object structure ( #392 )
2023-07-19 09:17:45 -07:00
Marco Franssen
522066e9f9
Align tornjak clientCA naming convention ( #393 )
2023-07-19 09:13:50 -07:00
Mariusz Sabath and Marco Franssen
f05cb4fe1e
Add option to configure TLS/mTLS endpoint for Tornjak ( #338 )
...
Co-authored-by: Marco Franssen <[email protected]
2023-07-19 14:32:32 +02:00
kfox1111
19d3208740
Fix oidc provider config change not rolling out ( #383 )
2023-07-12 21:05:09 +02:00
kfox1111
3ed1859cd1
Add missing tolerations config to daemonsets ( #381 )
...
spiffe-csi-driver and spire-agent are missing the ability to specify
tolerations. This PR adds the missing functionality.
fixes: https://github.com/spiffe/helm-charts/issues/380
Signed-off-by: Kevin Fox <[email protected]
2023-07-06 12:48:59 -05:00
Drew Wells
4ad68b154b
Add namespace to spiffe-oidc-discovery-provider RBAC definitions ( #379 )
2023-07-06 09:50:46 -07:00
kfox1111 and Marco Franssen
c1b1dd3d88
Add additional domains to JWT issued items. ( #230 )
...
Co-authored-by: Marco Franssen <[email protected]
2023-07-03 22:26:28 +02:00
LaithLite
81452d5e7e
Fix missing spiffe-csi-driver imagePullSecrets template ( #376 )
2023-07-03 12:52:31 +02:00
Marco Franssen
d7a03f620d
Fix bug in cert-manager upstream authority
...
The arguments for default function need to be the other way around
Signed-off-by: Marco Franssen <[email protected]
2023-06-29 17:39:21 +02:00
Marco Franssen
99e01c6722
Bump spire-controller-manager from 0.2.2 to 0.2.3 ( #367 )
...
resolves a bunch of vulnerabilities in the Image
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-06-22 16:16:43 -07:00
kfox1111
8409674a3e
Fix the init container flags of the statefulset ( #366 )
2023-06-22 18:57:07 +02:00
Drew Wells
3b6666016c
add missing federatesWith option ( #361 )
...
DEMO
```
spire-server-0 -- spire-server entry show -spiffeID spiffe://box-4.example.com/ns/dwells/sa/dwells-rc-realm-client
Defaulted container "spire-server" out of: spire-server, spire-controller-manager, wait (init)
Found 1 entry
Entry ID : 09301666-010e-4ba9-9dcb-44370d4e49e4
SPIFFE ID : spiffe://box-4.example.com/ns/dwells/sa/dwells-rc-realm-client
Parent ID : spiffe://box-4.example.com/spire/agent/k8s_psat/example-cluster/ff93872d-791f-4bf3-a532-475775d03d3e
Revision : 0
X509-SVID TTL : default
JWT-SVID TTL : default
Selector : k8s:pod-uid:40e0bcad-6ec8-460b-a839-659654549d7a
FederatesWith : box-3.example.com
```
Signed-off-by: Drew Wells <[email protected]
2023-06-22 08:45:37 -07:00
Drew Wells
0533d92594
fixes missing template ( #362 )
2023-06-22 09:40:08 -04:00
Faisal Memon
1333b6ab34
Always add parseTime=true for mysql query string ( #352 )
2023-06-20 21:14:42 +02:00
Marco Franssen
af36f7c09b
Align the bash image version with other instances for spire-agent ( #356 )
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-06-19 11:28:35 -07:00
Marco Franssen
c11a8c00e7
Implement pre-delete hook for graceful delete of spiffe-oidc-discovery-provider ( #353 )
2023-06-17 06:06:27 -07:00
a6dcf267d1
Allow for SPIRE Agent to run as non root user ( #209 )
...
Co-authored-by: Marco Franssen <[email protected] [email protected]
2023-06-17 10:32:41 +02:00
Faisal Memon
e88f7f6fe2
Add configmap annotation to spire-bundle configmap ( #351 )
2023-06-16 23:22:44 +02:00
Drew Wells and Kevin Fox
020bde8561
Add support to create a issuer and CA via cert-manager ( #342 )
...
Co-authored-by: Kevin Fox <[email protected]
2023-06-16 21:04:11 +00:00
kfox1111
e6b608c9fd
Bump spire images to 1.7.0 ( #348 )
2023-06-16 07:26:59 +00:00
kfox1111
c97a788c85
Fix bundle role/rolebinding naming conflict ( #333 )
2023-06-16 08:55:49 +02:00
kfox1111
d0da864113
Add missing metadata to subcharts ( #347 )
2023-06-14 12:46:22 -07:00
kfox1111
4c0a1d52c5
Allow overriding test images ( #186 )
2023-06-14 21:17:08 +02:00
kfox1111
250fd5db00
Add missing global values to charts ( #311 )
2023-06-14 09:16:02 +02:00
Drew Wells
8748933548
Update upstream-ca-secret.yaml ( #341 )
...
Fix an issue with nested context being used for namespace
Fixes this issue:
```
Error: UPGRADE FAILED: template: spire/charts/spire-server/templates/upstream-ca-secret.yaml:8:16: executing "spire/charts/spire-server/templates/upstream-ca-secret.yaml" at <include "spire-server.names
pace" .>: error calling include: template: spire/charts/spire-server/templates/_helpers.tpl:30:16: executing "spire-server.namespace" at <.Values.namespaceOverride>: nil pointer evaluating interface {}.
namespaceOverride
helm.go:84: [debug] template: spire/charts/spire-server/templates/upstream-ca-secret.yaml:8:16: executing "spire/charts/spire-server/templates/upstream-ca-secret.yaml" at <include "spire-server.namespac
e" .>: error calling include: template: spire/charts/spire-server/templates/_helpers.tpl:30:16: executing "spire-server.namespace" at <.Values.namespaceOverride>: nil pointer evaluating interface {}.nam
espaceOverride
```
Signed-off-by: Drew Wells <[email protected]
2023-06-12 11:25:14 -07:00
kfox1111
4e07450781
Fix ingress annotations for federation ( #337 )
...
fixes: https://github.com/spiffe/helm-charts/issues/336
Signed-off-by: Kevin Fox <[email protected]
2023-06-12 05:50:26 -07:00
