panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
182 Commits 1 Branch 2 Tags
6d43625f4dd955ba5527dc45b9dce42c3b0455d3
Commit Graph
60 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Marco Franssen dfa4e6c784 Ensure CI also runs when test scripts are changed 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-08 07:21:49 -08:00
Marco Franssen 02ed2021c8 Bump spire Helm Chart version from 0.3.0 to 0.4.0 
* 7984bbd Add script to automate cutting a release
* eb186ca Add values for server TTL configurables
* f123296 Add a flag to configure the Kubernetes NodeAttestor (#83)
* 0275569 Incorperate feedback
* a00c97b Incorperate feedback
* f93434a Make server service account allow list configurable
* f0b7f5b Make spire agent server address configurable
* cb627f0 Allow all subchart to conditionally disable (#90)
* 2e9510f Switch to non root nginx (#89)
* a901751 Fix Homepage URL
* 06c395f Fix sources in Chart.yaml (#85)
* d341c5a UpstreamAuthority cert-manager support (#82)
* a82ee69 Make sure all configmap changes rollout
* b7f8c86 Add extra initContainers, containers, volumes to agent and server
* 81ac89a Add k8s 1.26.0 (Kind) to the test matrix
* bb6abfc Merge pull request #76 from spiffe/dependabot/github_actions/sigstore/cosign-installer-3.0.1
* c0e5665 Bump cosign to v2.0.0
* d729a44 Bump sigstore/cosign-installer from 2.8.1 to 3.0.1
* fe7cd73 Merge pull request #74 from spiffe/arm64-support
* a3c04c0 Update supported versions
* 75480ed Bump spiffe-csi-driver image to 0.2.3 (arm64 support)
* 79889ff Bump spiffe-oidc-discovery-provider image to 1.6.0 (arm64 support)
* a632f76 Bump spire-agent image to 1.6.0 (arm64 support)
* b92e81d Bump spire-server image to 1.6.0 (arm64 support)
* fea2aa5 Fix sigstore/cosign-installer usage in release workflow
* fe93346 Use quote function instead of actual quotes
* 9480ab7 Add beta note to readme (#62)
* 4681498 Better spire-server entry commands (#59)

Signed-off-by: Marco Franssen <[email protected]>
 2023-03-08 09:44:02 +01:00
Marco Franssen 517cf9ed2d Add script to automate cutting a release 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-08 09:44:02 +01:00
Marco Franssen 3b7b3564da Allow to configure spire-server CA key type 
Resolves #18

Signed-off-by: Marco Franssen <[email protected]>
 2023-03-07 22:07:54 +01:00
Marco Franssen eb186ca346 Add values for server TTL configurables 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-07 09:47:25 +01:00
Marco Franssen a901751ee7 Fix Homepage URL 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-04 14:35:39 +01:00
Marco Franssen 81ac89a911 Add k8s 1.26.0 (Kind) to the test matrix 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-02 13:08:37 +01:00
Marco Franssen bb6abfcd3a Merge pull request #76 from spiffe/dependabot/github_actions/sigstore/cosign-installer-3.0.1 2023-03-02 09:16:01 +01:00
Marco Franssen c0e5665702 Bump cosign to v2.0.0 
Cosign v2.0.0 doesn't require the experimental env var anymore

Signed-off-by: Marco Franssen <[email protected]>
 2023-03-02 09:15:46 +01:00
Marco Franssen fe7cd731d5 Merge pull request #74 from spiffe/arm64-support 2023-03-01 19:47:12 +01:00
Marco Franssen a3c04c0d22 Update supported versions 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-01 15:41:47 +01:00
Marco Franssen 75480ede45 Bump spiffe-csi-driver image to 0.2.3 (arm64 support) 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-01 15:41:47 +01:00
Marco Franssen 79889ff3ed Bump spiffe-oidc-discovery-provider image to 1.6.0 (arm64 support) 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-01 15:41:47 +01:00
Marco Franssen a632f76021 Bump spire-agent image to 1.6.0 (arm64 support) 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-01 15:41:47 +01:00
Marco Franssen b92e81d416 Bump spire-server image to 1.6.0 (arm64 support) 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-01 15:41:47 +01:00
Marco Franssen fea2aa59e2 Fix sigstore/cosign-installer usage in release workflow 
See https://github.com/sigstore/cosign-installer\#usage on proper usage

Resolves #66

Signed-off-by: Marco Franssen <[email protected]>
 2023-03-01 13:52:39 +01:00
Marco Franssen 72d4929670 Bump spire chart to v0.3.0 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-28 19:21:29 +01:00
Marco Franssen f8cdec3f99 Allow to configure a priorityClassName for Daemonsets 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-27 08:09:00 -08:00
Marco Franssen ba41f04df5 Fix spire-controller-manager healthz port 
This to align with the spire-controller-manager-configmap.yaml

Signed-off-by: Marco Franssen <[email protected]>
 2023-02-27 08:08:17 -08:00
Marco Franssen 495d9d67e8 Align healthz ports and checks across containers 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 21:06:09 +01:00
Marco FranssenandFaisal Memon ef6a6bd53d Improve sentence based on review 
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 20:33:42 +01:00
Marco Franssen 615b4341cc Clarify Chart version increments in CONTRIBUTING.md 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 20:16:47 +01:00
Marco Franssen 8ceb00efe6 Merge pull request #33 from spiffe/version-increment-check 2023-02-24 10:55:17 +01:00
Marco Franssen a29df4f6cc Change to cut releases from the release branch 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 10:55:00 +01:00
Marco Franssen e8768ec955 Add types to trigger workflow when changing the target branch 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 10:55:00 +01:00
Marco Franssen 3c7d828954 Only check for version bump if PR targets main 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 10:55:00 +01:00
Marco Franssen a95ef9f3db Use github.base_ref for target-branch 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 10:54:57 +01:00
Marco Franssen 5dc93da6b8 Bump to latest Helm and Python versions 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:35:46 +01:00
Marco Franssen d46c3fc14d Test without ACME tos Accepted 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:35:46 +01:00
Marco Franssen 8d97803c8a Bump chart version to 0.2.0 and appVersion to 1.5.5 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:34:52 +01:00
Marco Franssen 49a68c3aed Add test for spire-oidc 
Using the nginx insecure option, because we can't rely on the ACME
protocol as this server isn't reachable.

Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:29 +01:00
Marco Franssen c9779b24ed Add test for upstream-authority-disk 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:28 +01:00
Marco Franssen b24faa9373 Add test for disabled spire-controller-manager 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:28 +01:00
Marco Franssen ec26d85f61 Enable spire-controller-manager by default 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:28 +01:00
Marco Franssen 9135086f8e Add infrastructure to test charts without defaulted values 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:28 +01:00
Marco Franssen 115d9bdf80 Add category and license annotations for artifacthub 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-22 12:37:00 +01:00
Marco Franssen b804b0a932 Fix workflow trigger path 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-21 20:28:53 +01:00
Marco Franssen 8974a3086d Disable jekyll for gh-pages 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-21 15:47:06 +01:00
Marco Franssen 9dee09e38e Merge pull request #14 from spiffe/base-chart 2023-02-20 10:59:32 +01:00
Marco Franssen cb3f94022f Remove duplicate volume creation 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:37:31 +01:00
Marco Franssen 73d4ed2ee5 Add .gitignore for the bin folder containing helm-docs 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:37:31 +01:00
Marco Franssen 99d32050ba Remove option to choose different agent socket path 
Resolves #19

Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:23:36 +01:00
Marco FranssenandFaisal Memon 50846ebe9a Improve spiffe-csi security-context 
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:15 +01:00
Marco Franssen 4e1d3d78bb Improve README.md and artifacthub.io 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:15 +01:00
Marco Franssen ff9ab8693c Replace LICENSE 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:15 +01:00
Marco Franssen b3248e5c9c Remove deprecated k8s workload registrar support 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:15 +01:00
Marco Franssen c3ac45eec8 Move docs script to root of repo 
This makes it easier for contributors to ensure docs are updated by having the script
more easy at hand.

Signed-off-by: Marco Franssen <[email protected]>
 2023-02-14 14:04:31 +01:00
Marco Franssen fe5b3a2a16 Add .editorconfig 
This is convenient to have some basic formatting automatically done on files

At least for the people that have the .editorconfig plugin in their IDE

Signed-off-by: Marco Franssen <[email protected]>
 2023-02-09 10:31:49 +01:00
Marco Franssen 98ce524618 Add workflow to release helm-charts to gh-pages and ghcr.io 
Signed-off-by: Marco Franssen <[email protected]>
 2023-01-02 13:46:20 +01:00
Marco Franssen 2ab97de63c Merge pull request #6 from spiffe/ci-workflow 2022-12-15 10:23:33 +01:00
Marco Franssen 320dce4eb2 Only run tests if a chart changed 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-15 10:22:27 +01:00
Marco Franssen 1ed5cf1239 Bump actions to latest version 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-15 10:17:52 +01:00
Marco Franssen d1106fdd4c Allow manual dispatch of CI workflow 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-15 10:17:52 +01:00
Marco Franssen f7443d22b8 Add job to test Helm chart using Kind 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-15 10:17:52 +01:00
Marco Franssen 9779a1295b Add job to lint helm-chart 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-15 10:17:51 +01:00
Marco Franssen 5025bdaf37 Add Helm chart workflow that checks for updated documentation 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-15 10:17:51 +01:00
Marco Franssen 0b6b855576 Add dependabot config 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-09 19:32:12 +01:00
Marco Franssen a584ed6666 Add CODEOWNERS 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-09 18:49:55 +01:00
Marco Franssen cec2244a53 Add README.md 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-09 18:49:52 +01:00
Marco Franssen 99e6f7bc29 Add CONTRIBUTING.md 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-09 16:13:15 +01:00