Marco Franssen
7834800463
Move replicaCount to server and oidc components
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:04 +01:00
Marco Franssen
445cde9604
Add the gcr.io images in comment in values.yaml
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:04 +01:00
Marco Franssen
0b6198cf7c
Fix loglevel values
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:04 +01:00
Marco Franssen
ec61c387b0
Fix oidc health check using using scratch images
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:04 +01:00
Marco Franssen
765a4edaf8
Update spire server config to remove deprecated settings
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:03 +01:00
Marco Franssen
7f5346fc84
Switch to ghcr.io for images and bump to 1.5.0
...
Resolves #31
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:03 +01:00
Marco Franssen
a5afe8979e
Add a template to build the image string
...
This also allows to use image digest as a version
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:03 +01:00
Marco Franssen
569412b5d4
Allow to configure resources per object
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:03 +01:00
Marco Franssen
fb5985ada4
Bump spire chart version and require k8s 1.21+
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:03 +01:00
Marco Franssen
5cb6ebe95e
Enforce to amd64 nodes using nodeSelector
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:02 +01:00
Marco Franssen
3a39fe5666
Bump Spire version to 1.0.2 for oidc fixes
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:02 +01:00
Marco Franssen
f11dc08b20
Bump spire image versions from 1.0.0 to 1.0.1
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:02 +01:00
Marco Franssen and Gert Jan Kamstra
48dacbca64
Fix agent socket mount in spire-oidc
...
Co-authored-by: Gert Jan Kamstra <[email protected] [email protected]
2023-02-18 13:04:02 +01:00
Marco Franssen and Gert Jan Kamstra
4f93ead90a
Configurable insecureScheme nginx image
...
Co-Authored-by: Gert Jan Kamstra <[email protected] [email protected]
2023-02-18 13:04:02 +01:00
Marco Franssen
1c54ce82bb
Add jwtIssuer configuration
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:02 +01:00
Marco Franssen
46466e5ec6
Run oidc insecure on unix socket using Nginx
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:01 +01:00
Marco Franssen
c9f69907ac
Use new domains configuration
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:01 +01:00
Marco Franssen
4d3fb47839
Change socket mounts for more control (readonly)
...
pods like oidc mount more then one of these sockets, now we can control readonly vs non readonly better
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:01 +01:00
Marco Franssen
f2d7aa1f62
Run oidc discovery provider as separate pod using workload api
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:01 +01:00
Marco Franssen
31bce3b09e
Remove spire ingress as it complicate SNI acme
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:01 +01:00
Marco Franssen
1e5e84439b
Run Spire services by default on ClusterIP
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:01 +01:00
Marco Franssen
007fa7b83d
Initial spire chart setup
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:00 +01:00
Marco Franssen