Commit Graph
262 Commits
Author SHA1 Message Date
Kevin Fox b7f8c86478 Add extra initContainers, containers, volumes to agent and server
With plugin support, agents and servers need more customization.
This patch enables initContainers, extraContainers, extraVolumes
and extraVolumeMounts to be added to those services.

Signed-off-by: Kevin Fox <[email protected]>
2023-03-02 08:02:19 -08:00
Marco Franssen b92e81d416 Bump spire-server image to 1.6.0 (arm64 support)
Signed-off-by: Marco Franssen <[email protected]>
2023-03-01 15:41:47 +01:00
kfox1111 4681498559 Better spire-server entry commands (#59)
* Better spire-server entry commands

Currently in order to use the cli tools such as spire-server entry show
You must know the path within the container to the binary along with what
the path is to the socket. This patch makes that unnessisary. This now
works:
kubectl exec -it spire-server-0 -- spire-server entry show

Signed-off-by: Kevin Fox <[email protected]>

* Remove setting thats set to default

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2023-02-28 22:43:49 +01:00
kfox1111andMarco Franssen 35eb3bb42e Basic Prometheus support (#28)
Co-authored-by: Marco Franssen <[email protected]>
2023-02-24 22:39:15 +01:00
Marco Franssen b3248e5c9c Remove deprecated k8s workload registrar support
Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:15 +01:00
Ken HuffmanandMarco Franssen 3448897316 Add namespaceSelector for spire-controller-manager (#112)
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:15 +01:00
Marco FranssenandGert Jan Kamstra 225931565a Include spire namespace to fix oidc-provider
Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Gert Jan Kamstra <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:13 +01:00
Marco Franssen 456c9cc53b Add by default k8s workload registrar compatible SPIFFEIDs to controller-manager setup
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:13 +01:00
Marco Franssen 0d49280cda Add support for spire-controller-manager
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:13 +01:00
Marco Franssen 92440c72cc Add note on scaling spire-server to value docs
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:11 +01:00
Marco Franssen 0a0ddb4a9b Move the k8s-workload-registrar back into same pod as spire-server
The k8s-workload-registrar needs access to the spire-server socket and
therefore has to run in the same pod to be able to mount the socket
into the container.

Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:11 +01:00
Marco Franssen ce9b58e725 Move spire-server to dedicated subchart
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:10 +01:00