panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
462 Commits 1 Branch 2 Tags
77fe43f37d19f80399299dcb02c0cb16efcf23ed
Commit Graph
462 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
kfox1111andMarco Franssen 77fe43f37d Cron job to check for and update images (#249) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-18 09:49:50 +02:00
Faisal MemonMarco FranssenKevin Fox
 		b7e15255f3 Allow job hooks to be disabled (#434) 
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
 2023-08-18 09:48:14 +02:00
kfox1111 5e4cf6f529 Clarify project issues identified with nesting document (#450) 2023-08-17 10:11:05 -07:00
kfox1111 72893515a2 Update spire bits to 1.7.2 (#452) 2023-08-17 10:10:45 -07:00
kfox1111 dc8a4545cc Array spacing in values is incorrect in a file. (#451) 2023-08-17 08:42:21 +02:00
Marco Franssen 94326d9c6d Fixup Helm docs 2023-08-16 16:48:42 +02:00
kfox1111 ae8941c49d Support Nested Spire with External Agent (#117) 2023-08-16 16:35:41 +02:00
Mariusz Sabath f40743d484 Improve Tornjak documentation (#439) 2023-08-16 14:27:27 +00:00
Faisal Memon 0124f633e8 Bypass example-test for docs only changes (#449) 2023-08-16 16:23:32 +02:00
kfox1111 48a2898016 Fix chainguard image references as per issue 442 (#443) 2023-08-16 16:22:09 +02:00
github-actions[bot]andmarcofranssen bd393e9597 Bump test chart dependencies (#445) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-08-15 17:55:19 +00:00
kfox1111Marco FranssenFaisal Memon
 		a52818a72e Add a FAQ and switch rare issue from README to it (#437) 
fixes https://github.com/spiffe/helm-charts/issues/433
closes #385

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-08-15 09:42:51 -07:00
grameshtwilio e60f5287e0 option to set KeyManager memory in spire server (#444) 2023-08-12 20:55:40 +02:00
dependabot[bot] a167ce6890 Bump actions/setup-go from 4.0.1 to 4.1.0 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4.0.1 to 4.1.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v4.0.1...v4.1.0)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-08-09 17:52:39 +02:00
github-actions[bot]andmarcofranssen e774584c46 Bump test chart dependencies (#426) 
Co-authored-by: marcofranssen <[email protected]>
 2023-08-09 15:11:47 +00:00
Drew Wells bfec27ef67 Fix jwtIssuer to allow for Uris including scheme (#425) 2023-08-09 16:53:21 +02:00
Mariusz Sabath 7a6e4f8d75 Change Tornjak backend default port (#436) 2023-08-09 16:46:08 +02:00
Faisal Memon 1e3039ccb9 Bump spire Helm Chart version from 0.11.0 to 0.11.1 (#419) 
Please review the below changelog to ensure this matches up with the
semantic version being applied.

**Note**: As this is a patch release we will make a cherry-picked
release using a followup PR targetering the release branch. Will
cherrypick the following commits into this patch release + the commit
bumping this version number.

**Changes in this release**

* d2e1606 issuer naming should respect issuer_name override (#378)
* a09e054 support annotations so oidc can be annotated (#391)
* 7d94b10 Update spire to 1.7.1 (#412)
* 9a6768b Add support for disabling container selectors (#399)
* 624ca9c Remove misadded lockfile (#400)

Signed-off-by: Faisal Memon <[email protected]>
 2023-08-03 09:12:03 -07:00
Drew WellsandFaisal Memon d2e1606286 issuer naming should respect issuer_name override (#378) 
align the spire-server configmap and issuer CR naming

---------

Signed-off-by: Drew Wells <[email protected]>
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-08-02 14:22:59 -07:00
github-actions[bot]andmarcofranssen a2e5c36cc9 Bump test chart dependencies (#416) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-07-31 18:00:20 +00:00
Drew WellsandFaisal Memon a09e054d04 support annotations so oidc can be annotated (#391) 
Signed-off-by: Drew Wells <[email protected]>
Signed-off-by: Drew Wells <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-07-31 10:54:01 -07:00
kfox1111 7d94b105ab Update spire to 1.7.1 (#412) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-07-28 23:01:26 +02:00
Petr McAllisterMarco Franssenkfox1111
 		9f4d4ace84 Add aws_pca to the spire-server (#404) 
This change allows aws_pca to be configured via values of this chart.

__Requires 1.7.1 version__ per
[bug](https://github.com/spiffe/spire/issues/4351) - this will not work
until 1.7.1 is released.

---------

Signed-off-by: Petr McAllister <[email protected]>
Signed-off-by: Petr McAllister <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-07-27 14:27:51 -07:00
github-actions[bot]marcofranssenkfox1111
 		af13f1fc64 Bump test chart dependencies (#401) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-07-27 11:20:48 -07:00
Faisal Memon 9a6768bca1 Add support for disabling container selectors (#399) 2023-07-27 13:27:57 -04:00
Edwin Buck 4687e20dbf Merge pull request #315 from spiffe/persistence-type 
Add persistence type flag
 2023-07-26 10:05:50 -05:00
kfox1111 e16210c653 Merge branch 'main' into persistence-type 2023-07-21 09:36:18 -07:00
kfox1111 624ca9cc49 Remove misadded lockfile (#400) 2023-07-20 15:28:32 -07:00
dependabot[bot] 7ce67c624c Bump actions/checkout from 3.5.2 to 3.5.3 (#395) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-07-20 07:30:54 -07:00
dependabot[bot] b85ba64dea Bump helm/kind-action from 1.7.0 to 1.8.0 (#396) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-07-20 07:29:08 -07:00
Marco Franssen 1898a18f0b Bump spire Helm Chart version from 0.10.1 to 0.11.0 (#394) 2023-07-19 15:23:43 -07:00
Kevin Fox a6bdb4d1e7 Add persistence type flag 
This patch adds a type flag to the persistence settings to enable
specifying the backing volume's type.

Signed-off-by: Kevin Fox <[email protected]>
 2023-07-19 23:40:23 +02:00
Marco Franssen 94a2b7235b Merge pull request #324 from spiffe/enable-testing-multiple-charts 2023-07-19 23:06:28 +02:00
Marco Franssen e426bc06e9 Downgrade chart-testing tool to 3.8.0 
Unfortunatily it fails on linting

Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:54:04 +02:00
Marco Franssen 09b466466a Utilize ct install --github-groups in ci workflow 
https://github.com/helm/chart-testing/pull/556
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:54:04 +02:00
Marco Franssen 42086bd66a Run example tests also on all k8s versions 
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:49:25 +02:00
Marco Franssen 4848c48b1f Improve Makefile help and implementation 
This allows more granular tasks and composition.

Also improved the documentation.

Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:49:25 +02:00
Marco Franssen db0603825c Increase some timeouts, trying to fix the tests 
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:49:25 +02:00
Marco Franssen 54ed71f969 Add back tests for examples 
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:49:22 +02:00
Marco Franssen 4b4cef1eae Skip namespace-override test because of #330 
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:48:20 +02:00
Marco Franssen 380979c71c Prevent ci folder ending up in Helm package 
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:48:20 +02:00
Marco Franssen 06ddb7cd3f Use chart-testing ci/*-values.yaml for testing 
This also enables the refactor to have multiple root level charts.

Resolves #100

Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:48:19 +02:00
kfox1111andMarco Franssen a4c1de7b30 Add basic unit test framework (#390) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-07-19 18:36:07 +00:00
Marco Franssen 088b29608e Improve tornjak service API to have object structure (#392) 2023-07-19 09:17:45 -07:00
Marco Franssen 522066e9f9 Align tornjak clientCA naming convention (#393) 2023-07-19 09:13:50 -07:00
Mariusz SabathandMarco Franssen f05cb4fe1e Add option to configure TLS/mTLS endpoint for Tornjak (#338) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-07-19 14:32:32 +02:00
github-actions[bot] f461a01701 Bump test chart dependencies (#386) 2023-07-18 17:32:02 +00:00
github-actions[bot]marcofranssenFaisal Memon
 		ce39e82767 Bump test chart dependencies (#382) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-07-14 08:05:36 -07:00
kfox1111 19d3208740 Fix oidc provider config change not rolling out (#383) 2023-07-12 21:05:09 +02:00
dependabot[bot] 0197621fa4 Bump helm/kind-action from 1.7.0 to 1.8.0 (#384) 
Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.7.0
to 1.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/helm/kind-action/releases">helm/kind-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.8.0</h2>
<h2>What's Changed</h2>
<ul>
<li><a
href="https://redirect.github.com/helm/kind-action/issues/54">#54</a>
ignore the occasional post delete cluster by <a
href="https://github.com/jerry153fish"><code>@​jerry153fish</code></a>
in <a
href="https://redirect.github.com/helm/kind-action/pull/79">helm/kind-action#79</a></li>
<li>bump kind to v0.20.0 and script cleanup by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/helm/kind-action/pull/88">helm/kind-action#88</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/jerry153fish"><code>@​jerry153fish</code></a>
made their first contribution in <a
href="https://redirect.github.com/helm/kind-action/pull/79">helm/kind-action#79</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/helm/kind-action/compare/v1.7.0...v1.8.0">https://github.com/helm/kind-action/compare/v1.7.0...v1.8.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/helm/kind-action/commit/dda0770415bac9fc20092cacbc54aa298604d140"><code>dda0770</code></a>
bump kind to v0.20.0 and script cleanup (<a
href="https://redirect.github.com/helm/kind-action/issues/88">#88</a>)</li>
<li><a
href="https://github.com/helm/kind-action/commit/a2c862bdb666af911f88f48ba22f76a4f33c4588"><code>a2c862b</code></a>
<a href="https://redirect.github.com/helm/kind-action/issues/54">#54</a>
ignore the occasional post delete cluster (<a
href="https://redirect.github.com/helm/kind-action/issues/79">#79</a>)</li>
<li><a
href="https://github.com/helm/kind-action/commit/1307bb2fdec64b9400f7865196ea57b0f2efb30f"><code>1307bb2</code></a>
Bump actions/checkout from 3.5.2 to 3.5.3 (<a
href="https://redirect.github.com/helm/kind-action/issues/87">#87</a>)</li>
<li>See full diff in <a
href="https://github.com/helm/kind-action/compare/v1.7.0...v1.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=helm/kind-action&package-manager=github_actions&previous-version=1.7.0&new-version=1.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-07-12 09:01:07 -07:00