Commit Graph
49 Commits
Author SHA1 Message Date
spire-helm-version-checker[bot]andmarcofranssen 666d304ce2 Bump test chart dependencies (#738)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2026-02-02 11:52:44 +01:00
e99d96097c Bump test chart dependencies (#732)
* Bump test chart dependencies

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2026-01-26 14:43:53 -08:00
f8f1e21f7d CSI driver: Support setting podSecurityContext and securityContext (#642)
* Allow for both the pod security context and container security contexts to be overriden through the spiffe-csi-driver values file

Signed-off-by: Alec Holmes <[email protected]>

* newline

Signed-off-by: Alec Holmes <[email protected]>

* fix space

Signed-off-by: Alec Holmes <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Alec Holmes <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2026-01-23 20:55:14 +00:00
marcofranssen 8555efc6f9 Bump test chart dependencies
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-01-19 18:38:03 +01:00
marcofranssen e6c9d975e7 Bump test chart dependencies
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-01-12 11:04:24 +01:00
marcofranssen 198cdb6075 Bump test chart dependencies
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-22 18:01:42 +01:00
marcofranssen adc5f3e8c3 Bump test chart dependencies
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-08 09:26:17 +01:00
marcofranssen 4e0cdb1306 Bump test chart dependencies
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-01 10:56:08 +01:00
Daniel Schlatter 8dffc8eda1 use spire-agent.hostCert.resources to set resources for corresponding spire-agent init container (#691)
* use spire-agent.resources to set resources for associated initContainers, remove specific keys for those initContainers corresponding resources

Signed-off-by: Daniel Schlatter <[email protected]>

* set resources for spire-agent init containers fingerprint-tpm and init-tpm-direct

Signed-off-by: Daniel Schlatter <[email protected]>

* use spiffe-csi-driver.resources to set resources for associated initContainers, remove specific keys for those initContainers corresponding resources

Signed-off-by: Daniel Schlatter <[email protected]>

* set resources for spiffe-csi-driver init container set-context

Signed-off-by: Daniel Schlatter <[email protected]>

---------

Signed-off-by: Daniel Schlatter <[email protected]>
2025-11-20 21:47:59 -08:00
spire-helm-version-checker[bot]andmarcofranssen e75e095e1e Bump test chart dependencies (#696)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2025-11-18 17:21:32 -08:00
marcofranssen a373924405 Bump test chart dependencies
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-10-27 12:08:37 +01:00
e73d76a039 Bump test chart dependencies (#669)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2025-09-23 06:17:20 +00:00
spire-helm-version-checker[bot]andmarcofranssen 6376190b0b Bump test chart dependencies (#660)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2025-09-08 06:39:44 -07:00
spire-helm-version-checker[bot]andmarcofranssen 5e5810be1f Bump test chart dependencies (#653)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2025-08-25 06:56:02 -07:00
Eric Cavalcanti 5e40cfb222 Update imagePullPolicy to IfNotPresent (#643)
* Change selinux image pullpolicy and tag version

Signed-off-by: Eric Cavalcanti <[email protected]>

* Change image pullpolicy

Signed-off-by: Eric Cavalcanti <[email protected]>

* Update readme

Signed-off-by: Eric Cavalcanti <[email protected]>

* update examples

Signed-off-by: Eric Cavalcanti <[email protected]>

* Update image pullpolicy

Signed-off-by: Eric Cavalcanti <[email protected]>

* Fix readme as well

Signed-off-by: Eric Cavalcanti <[email protected]>

* Undo pullpolicy readme

Signed-off-by: Eric Cavalcanti <[email protected]>

* Add selinux

Signed-off-by: Eric Cavalcanti <[email protected]>

* Revert code block

Signed-off-by: Eric Cavalcanti <[email protected]>

* Change regex

Signed-off-by: Eric Cavalcanti <[email protected]>

---------

Signed-off-by: Eric Cavalcanti <[email protected]>
2025-08-11 06:19:27 -07:00
kfox1111 2a48bf91a0 Update csi driver (#555)
Fixes: #554

Signed-off-by: Kevin Fox <[email protected]>
2025-04-08 00:46:07 -07:00
Patrick O'Brien 6608fc980a Add extraEnvVars support for spiffe-csi-driver containers (#496)
Signed-off-by: Patrick O'Brien <[email protected]>
Signed-off-by: Patrick O’Brien <[email protected]>
2024-11-17 13:25:29 -08:00
kfox1111andFaisal Memon a360646842 Add validating admission policy to restrict upstream driver access (#482)
* Add validating admission policy to restrict upstream driver access

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spiffe-csi-driver/templates/policy.yaml

Signed-off-by: kfox1111 <[email protected]>

* Fix logic

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade helm

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Add version info

Signed-off-by: Kevin Fox <[email protected]>

* Add version info

Signed-off-by: Kevin Fox <[email protected]>

* Fix kind version

Signed-off-by: Kevin Fox <[email protected]>

* Fix kind version

Signed-off-by: Kevin Fox <[email protected]>

* Fix kind version

Signed-off-by: Kevin Fox <[email protected]>

* Fix detection

Signed-off-by: Kevin Fox <[email protected]>

* Just for testing...

Signed-off-by: Kevin Fox <[email protected]>

* Just for testing...

Signed-off-by: Kevin Fox <[email protected]>

* Just for testing

Signed-off-by: Kevin Fox <[email protected]>

* Fix policy

Signed-off-by: Kevin Fox <[email protected]>

* Fix policy

Signed-off-by: Kevin Fox <[email protected]>

* Fix policy

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spiffe-csi-driver/values.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-10-26 07:40:29 -07:00
spire-helm-version-checker[bot]andmarcofranssen 3b04a837f8 Bump test chart dependencies (#299)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-03-25 06:47:39 -07:00
f512b06419 Configurable daemonsets updateStrategy (#212)
* Configure daemonsets updateStrategy

This allows more deamonset pods to be rotated in the same time. This speeds up the updates

Signed-off-by: Marco Franssen <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-02-29 14:42:52 -08:00
kfox1111andFaisal Memon 49e21c389b Add missing affinity settings (#232)
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-02-05 20:33:24 +00:00
kfox1111 912c61e05c Remove deprecated version values (#179) 2024-01-11 10:29:56 +00:00
github-actions[bot]andmarcofranssen 8f1aba8ad3 Bump test chart dependencies (#171)
Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
2024-01-01 06:05:30 -08:00
kfox1111andFaisal Memon e35838c309 Add recommendation for priorityClass (#124)
* Add a flag to enable recommendations

Signed-off-by: Kevin Fox <[email protected]>

* Add recommendation for priorityClass

Signed-off-by: Kevin Fox <[email protected]>

* Fix vars

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update docs. Fix typo.

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2023-12-11 11:42:40 -08:00
marcofranssen a3d3702049 Bump test chart dependencies
Signed-off-by: GitHub <[email protected]>
2023-12-11 10:44:48 +01:00
kfox1111 13f6028ccd SELinux support (#122)
* SELinux support

Add support to the chart to set the SELinux context to enable a working
system. Enable it by default on OpenShift clusters.

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2023-12-07 11:02:06 -08:00
marcofranssen 889d0af84d Bump test chart dependencies
Signed-off-by: GitHub <[email protected]>
2023-11-13 13:49:52 +01:00
kfox1111 f5d1376cb6 Documentation cleanup (#97)
Fix links to the repo after move. Remove references to other versions
of images we don't support.

Signed-off-by: Kevin Fox <[email protected]>
2023-11-11 12:28:41 -08:00
Marco Franssen 0320c3f755 Cleanup documentation
Signed-off-by: Marco Franssen <[email protected]>
2023-11-08 13:11:58 +01:00
3b016841da Support Openshift deployment (#13)
* Add support for SPIRE deployment on OpenShift 4.13

Signed-off-by: Mariusz Sabath <[email protected]>
Co-authored-by: Trilok Geer <[email protected]>
Co-authored-by: Andrew Block <[email protected]>

* Render README

Signed-off-by: Mariusz Sabath <[email protected]>

* Fix tornjak HTTP/HTTPS port values

Signed-off-by: Mariusz Sabath <[email protected]>

* Update Frontend README

Signed-off-by: Mariusz Sabath <[email protected]>

* Add env. variable to Agent to inject node name

Signed-off-by: Mariusz Sabath <[email protected]>

* Implement Marco's suggestion on CSI CSS version

Signed-off-by: Mariusz Sabath <[email protected]>

* Add MY_NODE_NAME env. variable to agent for openshift example

Signed-off-by: Mariusz Sabath <[email protected]>

* Move Openshift examples to dedicated directory

Signed-off-by: Mariusz Sabath <[email protected]>

* Simplified the install instructions

Signed-off-by: Mariusz Sabath <[email protected]>

* Suggested changes

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Andrew Block <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update docs, fix default for backwards compat

Signed-off-by: Kevin Fox <[email protected]>

* Don't recommend experimental features by default, dont debug helm install by default and explain how to add additional features

Signed-off-by: Kevin Fox <[email protected]>

* Add notes about openshift to the project for other reviewers.

Signed-off-by: Kevin Fox <[email protected]>

* Fix incorrectly reverted change

Signed-off-by: Kevin Fox <[email protected]>

* Correct notes

Signed-off-by: Kevin Fox <[email protected]>

* Update default

Signed-off-by: Kevin Fox <[email protected]>

* Fix issue created from bad merge conflict resolution

Signed-off-by: kfox1111 <[email protected]>

* Update examples/openshift/openshift-values.yaml

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>

* Update examples/openshift/openshift-values.yaml

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>

* Update examples/openshift/openshift-values.yaml

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>

* Update examples/openshift/openshift-values.yaml

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>

---------

Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Trilok Geer <[email protected]>
Co-authored-by: Andrew Block <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
2023-10-31 16:27:23 +00:00
github-actions[bot]andfaisal-memon 06d6690d71 Bump test chart dependencies (#20)
Signed-off-by: GitHub <[email protected]>
Co-authored-by: faisal-memon <[email protected]>
2023-10-05 11:21:51 -07:00
65d56957de Migrate to readme-generator for helm maintained by bitnami (#431)
Co-authored-by: Krishnakumar Venkataraman <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
2023-09-08 09:39:30 +02:00
kfox1111 3ed1859cd1 Add missing tolerations config to daemonsets (#381)
spiffe-csi-driver and spire-agent are missing the ability to specify
tolerations. This PR adds the missing functionality.

fixes: https://github.com/spiffe/helm-charts/issues/380

Signed-off-by: Kevin Fox <[email protected]>
2023-07-06 12:48:59 -05:00
kfox1111 d0da864113 Add missing metadata to subcharts (#347) 2023-06-14 12:46:22 -07:00
Mariusz Sabath 1247b68f4d Parametrize probes (#310)
This PR addresses #307 by parametrizing Probes and moving them to
values.yaml

---------

Signed-off-by: Mariusz Sabath <[email protected]>
2023-05-25 08:53:44 -04:00
kfox1111 dd1ad495bd Update images for cve's found by the cronjob (#290)
Signed-off-by: Kevin Fox <[email protected]>
2023-05-18 14:55:39 -07:00
Marco Franssen d850486478 Instead of removing version, first deprecate version
Deprecating version allows users of the chart to have a migration path

Signed-off-by: Marco Franssen <[email protected]>
2023-05-17 20:21:07 +02:00
Marco Franssen 59e422b9e3 Add documentation for all image.tag values
Signed-off-by: Marco Franssen <[email protected]>
2023-05-17 20:21:07 +02:00
Kevin Fox d1f3cdb909 Switch image.version to image.tag
The convention in most charts is to use image.tag. This patch updates the values
to use it instead of the less standard image.version.

Signed-off-by: Kevin Fox <[email protected]>
2023-05-17 20:21:07 +02:00
Marco FranssenandFaisal Memon 65312f8525 Include dependency values in documentation (#275)
I have added a flag to the helm-docs script to include the documentation
for dependencies.

This will add more complete documentation to
https://artifacthub.io/packages/helm/spiffe/spire#values so it is easier
for our users to get started and having a complete overview.

---------

Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2023-05-12 18:12:23 +00:00
kfox1111 9ccbd3c67f Make kubelet path configurable (#123) 2023-03-15 10:25:06 +01:00
kfox1111 661000a29a Make the agent socket configurable (#114) 2023-03-13 20:35:27 +01:00
kfox1111andMarco Franssen f3a81ad78d Make csi driver configurable to be able to run multiple instances (#115)
Co-authored-by: Marco Franssen <[email protected]>
2023-03-13 14:12:37 +01:00
Marco Franssen 75480ede45 Bump spiffe-csi-driver image to 0.2.3 (arm64 support)
Signed-off-by: Marco Franssen <[email protected]>
2023-03-01 15:41:47 +01:00
Marco Franssen f8cdec3f99 Allow to configure a priorityClassName for Daemonsets
Signed-off-by: Marco Franssen <[email protected]>
2023-02-27 08:09:00 -08:00
Marco Franssen 99d32050ba Remove option to choose different agent socket path
Resolves #19

Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:23:36 +01:00
Marco Franssen 4e1d3d78bb Improve README.md and artifacthub.io
Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:15 +01:00
Marco Franssen ab2636ae98 Move k8s-workload-registrar to sub chart
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:09 +01:00
Marco Franssen 35b8ad3c00 Move the spiffe-csi-driver into a sub chart
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:09 +01:00