* Update for 1.12.3
Signed-off-by: Kevin Fox <[email protected]>
* Fix typo. Use test image
Signed-off-by: Kevin Fox <[email protected]>
* Fix lint
Signed-off-by: Kevin Fox <[email protected]>
* Fix format flag. Update config location for k8s configmap bp
Signed-off-by: Kevin Fox <[email protected]>
* Fix role
Signed-off-by: Kevin Fox <[email protected]>
* Update rbac
Signed-off-by: Kevin Fox <[email protected]>
* Fix key
Signed-off-by: Kevin Fox <[email protected]>
* Fix format
Signed-off-by: Kevin Fox <[email protected]>
* Fix the bundle format for the fetchca bits
Signed-off-by: Kevin Fox <[email protected]>
* Update key
Signed-off-by: Kevin Fox <[email protected]>
* Fix test rather then reconfigure
Signed-off-by: Kevin Fox <[email protected]>
* Add namespace
Signed-off-by: Kevin Fox <[email protected]>
* Update to follow the new patch
Signed-off-by: Kevin Fox <[email protected]>
* Fix formatting
Signed-off-by: Kevin Fox <[email protected]>
* Fix formatting
Signed-off-by: Kevin Fox <[email protected]>
* Update filename based on format
Signed-off-by: Kevin Fox <[email protected]>
* Add upgrade notes
Signed-off-by: Kevin Fox <[email protected]>
* Switch to testing nightly. Dont manage bundle configmap.
Signed-off-by: Kevin Fox <[email protected]>
* Update permissions
Signed-off-by: Kevin Fox <[email protected]>
* Update permissions
Signed-off-by: Kevin Fox <[email protected]>
* Update permissions
Signed-off-by: Kevin Fox <[email protected]>
* Update for final release
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
This patch adds the start of a library to help reduce code duplication.
It will be split out to its own library chart at the same time the other
charts are split out.
---------
Signed-off-by: Kevin Fox <[email protected]>
Adds namespace to the ClusterRole and ClusterRoleBinding so that it
doesn't conflict when you have two instances of the chart, in different
namespaces with the same release name.
Signed-off-by: Kevin Fox <[email protected]>
When the server and agent are not in the same namespace, the bundle needs to be
uploadable in the agent's namespace.
Signed-off-by: Kevin Fox <[email protected]>
The cluster role does the same thing, but at the cluster level
where it belongs. The extra role code does nothing so we remove
it here.
Signed-off-by: Kevin Fox <[email protected]>
The k8s-workload-registrar needs access to the spire-server socket and
therefore has to run in the same pod to be able to mount the socket
into the container.
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
kfox1111