panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
911 Commits 1 Branch 2 Tags
6a62880431185443af71748c56a27cffd38d392c
Commit Graph
266 Commits
Author SHA1 Message Date
marcofranssen 95e1eb7c57 Bump test chart dependencies 
Signed-off-by: GitHub <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-11-20 10:34:08 +01:00
marcofranssen 889d0af84d Bump test chart dependencies 
Signed-off-by: GitHub <[email protected]>
 2023-11-13 13:49:52 +01:00
kfox1111Faisal MemonMariusz Sabath
 		f2758a8b2b Autogen jwtIssuer (#88) 
* Autogen jwtIssuer

Unset a default for jwtIssuer and global.spire.jwtIssuer. When unset,
generate it to the default of oidc-discovery.$trustDomain so in many
cases the user doesn't need to set it at all.

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Mariusz Sabath <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-11-09 20:31:48 +00:00
kfox1111Marco FranssenFaisal Memon
 		805d8696d0 spire-controller-manager 0.4.0 support (#60) 
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-11-08 10:43:19 +00:00
dependabot[bot] edf2381aad Bump sigstore/cosign-installer from 3.1.2 to 3.2.0 (#85) 
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.1.2 to 3.2.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.1.2...v3.2.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-07 22:56:47 -08:00
marcofranssen 0ed6d9244d Bump test chart dependencies 
Signed-off-by: GitHub <[email protected]>
 2023-11-06 13:15:02 +01:00
dependabot[bot] 9b31f3d40b Bump helm/chart-testing-action from 2.6.0 to 2.6.1 
Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/helm/chart-testing-action/releases)
- [Commits](https://github.com/helm/chart-testing-action/compare/v2.6.0...v2.6.1)

---
updated-dependencies:
- dependency-name: helm/chart-testing-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-11-05 23:21:35 -08:00
dependabot[bot] 2dce90f44e Bump helm/chart-releaser-action from 1.5.0 to 1.6.0 (#75) 
Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/helm/chart-releaser-action/releases)
- [Commits](https://github.com/helm/chart-releaser-action/compare/v1.5.0...v1.6.0)

---
updated-dependencies:
- dependency-name: helm/chart-releaser-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-02 23:12:20 -07:00
kfox1111 6a6aa1c850 Cosign download fix (#72) 2023-10-31 16:44:52 +00:00
github-actions[bot]andmarcofranssen 09ebfc9ee3 Bump test chart dependencies (#68) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-10-30 09:30:10 -07:00
github-actions[bot]marcofranssenFaisal Memon
 		0b174345ab Bump test chart dependencies (#54) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-10-23 20:40:30 +00:00
dependabot[bot]andFaisal Memon cf226a73d5 Bump actions/checkout from 4.1.0 to 4.1.1 (#42) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.1.0...v4.1.1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Faisal Memon <[email protected]>
 2023-10-18 21:17:40 +00:00
kfox1111Faisal MemonMarco Franssen
 		56445c4f94 Spire controller manager upgrade (#8) 
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-10-17 19:54:12 +00:00
github-actions[bot]andmarcofranssen 2644e4b198 Bump test chart dependencies (#38) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-10-16 18:00:04 +00:00
github-actions[bot]andfaisal-memon 06d6690d71 Bump test chart dependencies (#20) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: faisal-memon <[email protected]>
 2023-10-05 11:21:51 -07:00
kfox1111 8aca48f14c Push the changes that update-tags creates (#19) 
* Exit code from diff indicating changes should not block commit.

Signed-off-by: Kevin Fox <[email protected]>

* Push the changes that update-tags creates

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2023-10-05 10:40:32 -07:00
kfox1111 a6cb3974ac Exit code from diff indicating changes should not block commit. (#17) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-10-05 10:23:50 -07:00
Faisal Memon c23e6cb3b1 Fix issue with version checker not running 
Signed-off-by: Faisal Memon <[email protected]>
 2023-10-03 09:00:20 +02:00
dependabot[bot] 51c20b1ec2 Bump actions/checkout from 4.0.0 to 4.1.0 (#9) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v4.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-02 21:12:05 -07:00
kfox1111andFaisal Memon 21db1e4b9a Add a test to ensure upgrades work (#6) 
* Add a test to ensure upgrades work

Signed-off-by: Kevin Fox <[email protected]>

* Update examples/production/run-tests.sh

Co-authored-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-10-02 17:05:25 -07:00
kfox1111 50825d9fc9 Deny production runs of example.org trust domains (#229) 2023-09-25 12:06:48 -07:00
dependabot[bot] 712a0f6fbe Bump actions/checkout from 4.0.0 to 4.1.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.0.0...v4.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-09-25 19:54:27 +02:00
dependabot[bot] 1aac2d483d Bump docker/login-action from 2 to 3 
Bumps [docker/login-action](https://github.com/docker/login-action) from 2 to 3.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-09-13 17:59:54 +02:00
KrishnaKrishnakumar VenkataramanMarco Franssen
 		65d56957de Migrate to readme-generator for helm maintained by bitnami (#431) 
Co-authored-by: Krishnakumar Venkataraman <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-09-08 09:39:30 +02:00
dependabot[bot] 48adb8869f Bump actions/checkout from 3.6.0 to 4.0.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.6.0 to 4.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.6.0...v4.0.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-09-05 18:05:51 +02:00
dependabot[bot] d1f52d6995 Bump sigstore/cosign-installer from 3.1.1 to 3.1.2 (#473) 2023-09-04 06:52:44 +00:00
kfox1111 5273f4e530 Switch mysql and postgresql tests to HA Production configs (#471) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-09-01 12:25:07 -07:00
kfox1111andMarco Franssen e81a59a7e5 ingress-nginx production tests and spiffe-oidc-discovery-provider example (#136) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-29 15:22:00 +00:00
dependabot[bot] b05175e2b6 Bump actions/checkout from 3.5.3 to 3.6.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.3 to 3.6.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.5.3...v3.6.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-08-25 16:31:52 +02:00
Marco Franssen 71ac5afa11 Split steps in check-versions wf for easier debugging (#467) 2023-08-22 19:11:57 +00:00
kfox1111andMarco Franssen d91403af3a Scan for updates to new images (#466) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-22 12:05:44 -07:00
Marco Franssen 413644d27d Merge pull request #456 from spiffe/fix-dependabot-include-go 2023-08-21 18:42:51 +02:00
dependabot[bot] eb1ad75d7f Bump imjasonh/setup-crane from 0.1 to 0.3 (#460) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-08-21 01:03:56 -07:00
dependabot[bot] 3d307a2ebf Bump actions/setup-go from 4.0.0 to 4.1.0 (#459) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-08-21 01:03:40 -07:00
Marco Franssen 9cb59dafb8 Include go dependencies in dependabot.yaml 
Signed-off-by: Marco Franssen <[email protected]>
 2023-08-21 09:29:04 +02:00
Marco Franssen 80b9a83873 Fix indentation issue in dependabot.yaml 
Signed-off-by: Marco Franssen <[email protected]>
 2023-08-21 09:29:04 +02:00
kfox1111andMarco Franssen 77fe43f37d Cron job to check for and update images (#249) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-18 09:49:50 +02:00
kfox1111 ae8941c49d Support Nested Spire with External Agent (#117) 2023-08-16 16:35:41 +02:00
Faisal Memon 0124f633e8 Bypass example-test for docs only changes (#449) 2023-08-16 16:23:32 +02:00
github-actions[bot]andmarcofranssen bd393e9597 Bump test chart dependencies (#445) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-08-15 17:55:19 +00:00
dependabot[bot] a167ce6890 Bump actions/setup-go from 4.0.1 to 4.1.0 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4.0.1 to 4.1.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v4.0.1...v4.1.0)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-08-09 17:52:39 +02:00
github-actions[bot]andmarcofranssen e774584c46 Bump test chart dependencies (#426) 
Co-authored-by: marcofranssen <[email protected]>
 2023-08-09 15:11:47 +00:00
github-actions[bot]andmarcofranssen a2e5c36cc9 Bump test chart dependencies (#416) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-07-31 18:00:20 +00:00
github-actions[bot]marcofranssenkfox1111
 		af13f1fc64 Bump test chart dependencies (#401) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-07-27 11:20:48 -07:00
dependabot[bot] 7ce67c624c Bump actions/checkout from 3.5.2 to 3.5.3 (#395) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-07-20 07:30:54 -07:00
dependabot[bot] b85ba64dea Bump helm/kind-action from 1.7.0 to 1.8.0 (#396) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-07-20 07:29:08 -07:00
Marco Franssen e426bc06e9 Downgrade chart-testing tool to 3.8.0 
Unfortunatily it fails on linting

Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:54:04 +02:00
Marco Franssen 09b466466a Utilize ct install --github-groups in ci workflow 
https://github.com/helm/chart-testing/pull/556
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:54:04 +02:00
Marco Franssen 42086bd66a Run example tests also on all k8s versions 
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:49:25 +02:00
Marco Franssen db0603825c Increase some timeouts, trying to fix the tests 
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:49:25 +02:00