panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,232 Commits 1 Branch 2 Tags
8746056bbe2b24855b879506a11cde1220f845ad
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Faisal Memon 8746056bbe Add Smallstep repo to release workflow 
Signed-off-by: Faisal Memon <[email protected]>
 2026-06-06 11:54:06 -07:00
Faisal Memon 411eaec5cf Merge branch 'main' into release 2026-06-06 11:50:31 -07:00
Faisal MemonandKevin Fox 98ec4e680b Bump spire-lib Helm Chart version from 0.1.0 to 0.2.0 (#822) 
* Bump spire-lib and dependent Helm Chart versions (minor)

* 3c1dec30 fix casing of svidStore (#787)

Signed-off-by: Faisal Memon <[email protected]>

* Add missing repo reference

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
 2026-06-06 10:33:41 -07:00
Faisal Memon a40409ec53 Automate release bumps from the current branch (#831) 
* Automate dependent chart release bumps

Signed-off-by: Faisal Memon <[email protected]>

* Use ruamel for chart dependency parsing

Signed-off-by: Faisal Memon <[email protected]>

* Simplify dependent chart graph helper

Signed-off-by: Faisal Memon <[email protected]>

* Add current-branch mode to release automation

Signed-off-by: Faisal Memon <[email protected]>

* Polish chart dependency helper

Signed-off-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
 2026-05-31 05:29:55 -07:00
Faisal Memon 9c660b8546 Merge branch 'main' into release 2026-05-08 17:01:17 -07:00
Faisal Memonandkfox1111 574fa87d57 Bump spire Helm Chart version from 0.28.4 to 0.28.5 (#817) 
* c489dfc4 Update helper images in spiffe-csi-driver (#815)
* f537f770 allow unsupported built-in key manager plugins to be used (#798)
* c5ba8213 Bump test chart dependencies (#797)
* dfe80891 feat: add gcp_iit node attestor configuration options (#796)
* 21969d20 Bump test chart dependencies (#795)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2026-05-07 05:04:38 -07:00
Faisal Memon 146cf1add6 Bump spire-nested Helm Chart version from 0.28.4 to 0.28.5 (#818) 
Signed-off-by: Faisal Memon <[email protected]>
 2026-05-03 05:52:41 -07:00
Faisal Memon 4d96f353bb Merge branch 'main' into release 2026-04-13 12:48:25 -07:00
Faisal Memon d334bfde50 Bump spiffe-step-ssh Helm Chart version from 0.1.1 to 0.1.2 (#794) 
* 9273f11f Support root-level spire-lib chart reuse (#785)

Signed-off-by: Faisal Memon <[email protected]>
 2026-04-11 08:52:09 -07:00
Faisal Memonandkfox1111 d65890e409 Bump spire-nested Helm Chart version from 0.28.3 to 0.28.4 (#792) 
* 86787b59 Add initial spire-ha-agent support to the spire-nested chart (#790)
* 040ccf90 Bump versions to 1.14.5 (#789)
* 9273f11f Support root-level spire-lib chart reuse (#785)
* 96773a31 Bump versions (#777)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2026-04-10 23:32:47 -07:00
Faisal Memon a062e49c91 Bump spire Helm Chart version from 0.28.3 to 0.28.4 
* 01342172 Fix typos in error messages (#788)
* 040ccf90 Bump versions to 1.14.5 (#789)
* 9273f11f Support root-level spire-lib chart reuse (#785)
* 145f3a36 chore: Add configurable probes for controller-manager (#784)
* a27acbcb Bump test chart dependencies (#786)
* 838a3535 Label chart (#783)
* 59de7aa3 Bump test chart dependencies (#779)
* 96773a31 Bump versions (#777)
* aad7527c Add set_key_use configuration option (#774)
* de59147f fix gather hostcert edge case issues (#775)
* bf4bd819 feature: add awsSecretsManager upstreamAuthority (#772)
* f78c1d42 Bump test chart dependencies (#773)
* 7afffd75 Bump test chart dependencies (#771)
* 60899fc9 Add configurable hostNetwork support to spiffe-csi-driver (#769)
* 2de363a4 Bump test chart dependencies (#767)
* 6631349b feat(spire-server): add logEncoding parameter for controller-manager (#766)

Signed-off-by: Faisal Memon <[email protected]>
 2026-04-10 15:48:58 -07:00
Faisal Memon 9273f11f0a Support root-level spire-lib chart reuse (#785) 
* Add root-level spire-lib chart

Signed-off-by: Faisal Memon <[email protected]>

* Make spire consume root-level spire-lib

Signed-off-by: Faisal Memon <[email protected]>

* Prepare chart dependencies in CI

Signed-off-by: Faisal Memon <[email protected]>

* Document DCO requirement in CODEX

Signed-off-by: Faisal Memon <[email protected]>

* Centralize local chart dependency prep

Signed-off-by: Faisal Memon <[email protected]>

* Exclude spire-lib from chart-testing install

Signed-off-by: Faisal Memon <[email protected]>

* Rename CODEX guide to AGENTS

Signed-off-by: Faisal Memon <[email protected]>

* Add make target for chart dependencies

Signed-off-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
 2026-04-09 05:14:05 -07:00
Faisal Memon a381350999 Merge branch 'main' into release 2026-03-04 23:36:22 -08:00
Faisal Memon 8afe8cf6e7 Bump spire Helm Chart version from 0.28.2 to 0.28.3 
* 2385c2d7 Bump spire to 1.14.2 (#763)

Signed-off-by: Faisal Memon <[email protected]>
 2026-03-04 07:58:57 -08:00
Faisal Memon 20940774d1 Bump spire-nested Helm Chart version from 0.28.2 to 0.28.3 
* 2385c2d7 Bump spire to 1.14.2 (#763)

Signed-off-by: Faisal Memon <[email protected]>
 2026-03-04 07:38:32 -08:00
Faisal Memon a754113b2f Merge branch 'main' into release 2026-03-03 15:57:39 -08:00
Faisal Memon 85989b45eb Bump spire Helm Chart version from 0.28.1 to 0.28.2 
* 24b3a173 Change hostNetwork to auto (#758)
* 0133d4a5 add key experimental.requirePQKEM for spire-server and spire-agent (#755)
* 0a841c76 Bump test chart dependencies (#759)
* a9bee70c feat(spiffe-oidc-discovery-provider): Add configurable log format option. (#757)
* bb4c0f33 chore: Bump controller manager image tag to 0.6.3 in README and values.yaml (#756)
* 3e8f3f18 Bump test chart dependencies (#753)
* b0aa3e42 Fix duplicate port names in controller-manager containers (#751)
* 3daadc64 fix(spire-server): Support duration strings for connMaxLifetime (#752)
* 730b76bb Bump test chart dependencies (#750)
* e849a1fb Add configurable hostNetwork parameter for spire-agent (#749)
* 982d53c2 Add ContainerResource scaling to spire-server HPA (#746)
* 8abac78a Support leaderElection values in controller manager (#740)
* 75ffbd06 Add imagePullSecrets support to helm hook jobs (#741)
* 141c8865 Add pobLabels support to csi and oidc (#744)
* 6b5d01b7 Bump test chart dependencies (#743)
* ba2b6a5a Add controller-manager metrics to PodMonitor (#748)
* 86a806f3 Add tolerations to spire-server hook pods (#742)
* 7d266454 Fix keyManager check stopping use of unsupported bulit-in plugin (#715)
* 666d304c Bump test chart dependencies (#738)
* a7ac6a49 feat(spire-server): add logFormat configuration option (#735)

Signed-off-by: Faisal Memon <[email protected]>
 2026-03-03 15:21:39 -08:00
Faisal Memon 6937ae01a2 Bump spire-nested Helm Chart version from 0.28.1 to 0.28.2 
Signed-off-by: Faisal Memon <[email protected]>
 2026-03-03 15:02:10 -08:00
Faisal Memon 24b3a1730e Change hostNetwork to auto (#758) 2026-03-03 21:56:48 +00:00
Faisal Memon ae69e6bede Merge branch 'main' into release 2026-01-30 00:25:48 -08:00
Faisal Memon 28f95d263b Bump spire-nested Helm Chart version from 0.28.0 to 0.28.1 
Signed-off-by: Faisal Memon <[email protected]>
 2026-01-27 09:17:32 -08:00
Faisal Memon c826e29705 Bump spire Helm Chart version from 0.28.0 to 0.28.1 
* e99d9609 Bump test chart dependencies (#732)
* a7abf7d7 disable hostNetwork on spire-agent daemonset if connect by hostname is true (#705)

Signed-off-by: Faisal Memon <[email protected]>
 2026-01-27 09:09:02 -08:00
Faisal Memon dea4d39651 Merge branch 'main' into release 2026-01-26 11:50:56 -08:00
Faisal Memonandkfox1111 3c724632ee Bump spire Helm Chart version from 0.27.1 to 0.28.0 (#731) 
* 6f2c71b0 Update spire to 1.14.1 (#729)
* f8f1e21f CSI driver: Support setting podSecurityContext and securityContext (#642)
* 813203a4 Update spike to the newest version (#665)
* 97c383b1 Add Configurable Kubelet Address for SPIRE Agent (#709)
* 8555efc6 Bump test chart dependencies
* e6c9d975 Bump test chart dependencies
* 87da80a8 Add support for AWS KMS key tagging (#721)
* db8f1352 Bump test chart dependencies (#720)
* b1f902b6 Bump test chart dependencies
* 198cdb60 Bump test chart dependencies
* dfbbecf0 Add guard to the validating admission policy to stop errors when there are no volumes in the spec. This fixes errors with HTTP solver pods in cert manager. (#706)
* 1e1e8daa Add support for attested node pruning configuration (#713)
* a2130ff7 Bump test chart dependencies (#712)
* adc5f3e8 Bump test chart dependencies
* 4e0cdb13 Bump test chart dependencies
* 95fa0deb Allow configuring spire-agent prometheus listening address (#701)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2026-01-26 19:42:54 +00:00
Faisal Memon 0ceaed05cc Bump spire-nested Helm Chart version from 0.27.1 to 0.28.0 (#730) 
* 6f2c71b0 Update spire to 1.14.1 (#729)

Signed-off-by: Faisal Memon <[email protected]>
 2026-01-26 11:22:17 -08:00
Faisal Memon aabc73b1e5 Merge branch 'main' into release 2025-11-25 12:37:56 -06:00
Faisal Memonandkfox1111 e1a1484511 Bump spire-nested Helm Chart version from 0.27.0 to 0.27.1 (#700) 
* c52edb99 chore: update SPIRE to 1.13.2 (#681)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-11-25 10:37:38 -08:00
Faisal Memon 4b85cb6015 Bump spire Helm Chart version from 0.27.0 to 0.27.1 
* 18b81443 Bump test chart dependencies (#698)
* 31091cf5 Add oidc server_path_prefix option (#695)
* 8dffc8ed use spire-agent.hostCert.resources to set resources for corresponding spire-agent init container (#691)
* e75e095e Bump test chart dependencies (#696)
* aab7c68d Bump test chart dependencies (#692)
* ca6e9f34 Bump test chart dependencies
* a3739244 Bump test chart dependencies
* c52edb99 chore: update SPIRE to 1.13.2 (#681)
* 41bd5b95 fix socketAlternate names throwing an error if set to an empty list (#678)
* 54024730 Bump test chart dependencies (#684)
* 89259757 Bump test chart dependencies (#674)
* 0f5bb04a Bump test chart dependencies (#672)

Signed-off-by: Faisal Memon <[email protected]>
 2025-11-25 10:53:21 -07:00
Faisal Memon e672cfce40 Merge branch 'main' into release 2025-09-24 08:35:51 -07:00
Faisal Memonandkfox1111 aea591e8b0 Bump spire-nested Helm Chart version from 0.26.1 to 0.27.0 (#671) 
* 3c3718c9 Update spire to 1.13.0 (#667)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-09-24 14:15:43 +00:00
Faisal Memon 4da35fabeb Bump spire Helm Chart version from 0.26.1 to 0.27.0 (#670) 
* e73d76a0 Bump test chart dependencies (#669)
* 1ab06a1b Support for Cloud SQL Proxy in GCP (#646)
* 3c3718c9 Update spire to 1.13.0 (#667)
* 1feeca1c make spire server's auth_opa_policy_engine configurable in the helm chart (#663)
* d51bf52a Bump test chart dependencies (#666)
* c1b0cfe3 Add controller manager configs gcInterval, logLevel, and make entryIDPrefix configurable (#662)
* bb876121 Spire agent helm chart: allow configuring logFormat (#661)
* d6edae68 Add labels to the spiffe-oidc-discovery-provider values.yaml (#656)
* 6376190b Bump test chart dependencies (#660)
* 9a802563 Bump test chart dependencies (#658)
* 5e5810be Bump test chart dependencies (#653)
* 86feac63 Bump test chart dependencies (#647)
* 5e40cfb2 Update imagePullPolicy to IfNotPresent (#643)
* 86f0aecc Bump test chart dependencies (#641)
* 3ef5fe6c Add Datadog as telemetry option (#639)

Signed-off-by: Faisal Memon <[email protected]>
 2025-09-24 07:08:26 -07:00
Faisal Memonandkfox1111 8443881250 Bump spiffe-step-ssh Helm Chart version from 0.1.0 to 0.1.1 (#640) 
* Bump spiffe-step-ssh Helm Chart version from 0.1.0 to 0.1.1

* a7d536c0 tools: Replace rancher/kubectl with registry.k8s.io/kubectl

Signed-off-by: Faisal Memon <[email protected]>

* Update charts/spiffe-step-ssh/Chart.yaml

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-08-05 03:27:50 -07:00
Faisal Memon fc97e81bb5 Merge branch 'main' into release 2025-07-28 17:48:00 -07:00
Faisal Memonandkfox1111 28c65d3458 Bump spire-nested Helm Chart version from 0.26.0 to 0.26.1 (#637) 
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-07-28 12:42:44 -07:00
Faisal Memon acfcc9d0a4 Bump spire Helm Chart version from 0.26.0 to 0.26.1 (#636) 
* 64b9c40 Bump test chart dependencies (#635)
* d516de0 Update spike to 0.4.2 (#632)
* 8904b96 Bump test chart dependencies (#633)
* 6581b11 Add disk based KeyManager (#627)
* d2913ff Remove region from awsiid node attestor (#630)
* 3218db7 Bump test chart dependencies (#628)
* 57a6143 Add aws_iid to helm chart (#620)
* 9a8e5a8 Add Agent TTL to Spire Server (#626)
* 093c593 spire-server: Replace chown image with busybox
* a7d536c tools: Replace rancher/kubectl with registry.k8s.io/kubectl
* fc1791f Bump test chart dependencies (#618)

Signed-off-by: Faisal Memon <[email protected]>
 2025-07-28 12:30:10 -07:00
Faisal Memon 7c8d4fd53b Merge branch 'main' into release 2025-07-04 11:04:01 -07:00
Faisal Memon d1f5c7e93d Bump spire-nested Helm Chart version from 0.25.0 to 0.26.0 
* 892051c4 Update for 1.12.4 (#605)

Signed-off-by: Faisal Memon <[email protected]>
 2025-07-04 07:07:40 -07:00
Faisal Memon 88f0108e10 Bump spire Helm Chart version from 0.25.0 to 0.26.0 
* 255106da Update to Tornjak 2.1.0 (#597)
* f37d681b Enable running the oidc discovery provider without cluster-admin/CSI (#570)
* 892051c4 Update for 1.12.4 (#605)
* b74b10a0 Bump test chart dependencies (#615)
* e78400eb Initial spike support (#591)
* 38314ed6 Bump test chart dependencies (#611)
* bfd08bcf Bump test chart dependencies (#608)
* 971e4be7 Bump test chart dependencies (#606)
* ffe43901 Nit: Fix typo in param guide (#595)

Signed-off-by: Faisal Memon <[email protected]>
 2025-07-04 06:55:19 -07:00
Faisal Memon ce9b3737ff Update tests to go 1.24.3 (#600) 
Signed-off-by: Faisal Memon <[email protected]>
 2025-05-29 08:15:34 -07:00
Faisal Memon 27da75fcc5 Merge branch 'main' into release 2025-05-22 16:39:33 -07:00
Faisal Memon 0b906b6754 Bump spire-nested Helm Chart version from 0.24.5 to 0.25.0 
* bd2e8e3 Update spire to 1.12.2 (#592)
* e4bd1df Bump spire to 1.12.1 (#578)

Signed-off-by: Faisal Memon <[email protected]>
 2025-05-22 15:01:41 -07:00
Faisal Memon 18ec1ef9dd Bump spire Helm Chart version from 0.24.5 to 0.25.0 
* bd2e8e3 Update spire to 1.12.2 (#592)
* d6684bc Add spire-credentialcomposer-cel support (#587)
* ccfb490 Dynamically build the connection_string with options for the spire server when spire-server.dataStore.sql.databaseType == sqlite3 (#576)
* 87bef26 Bump test chart dependencies (#588)
* b72505b Bump test chart dependencies (#580)
* e4bd1df Bump spire to 1.12.1 (#578)
* 9062710 Bump test chart dependencies (#575)
* 94e1d78 Bump test chart dependencies (#573)

Signed-off-by: Faisal Memon <[email protected]>
 2025-05-22 12:08:48 -07:00
Faisal Memon 815e207f8f Merge branch 'main' into release 2025-04-25 21:35:24 -07:00
Faisal Memon 27ac69503b Bump spire-nested Helm Chart version from 0.24.4 to 0.24.5 
Signed-off-by: Faisal Memon <[email protected]>
 2025-04-24 11:20:12 -07:00
Faisal Memon 8ca477a0bf Bump spire Helm Chart version from 0.24.4 to 0.24.5 (#572) 
* 1169dd5 Update spire-controller-manager to 0.6.2 and add its staticManifest support (#563)
* 4dee6ca Fix invalid image name for digest in template function of `spire-lib` (#569)
* ed9fb6a Bump test chart dependencies (#566)
* 912f412 Update tpm plugin version (#564)
* 0fc00cb Bump test chart dependencies (#561)

Signed-off-by: Faisal Memon <[email protected]>
 2025-04-24 10:59:19 -07:00
Faisal Memon 7c7f791e33 Merge branch 'main' into release 2025-04-10 14:35:39 -07:00
Faisal MemonFaisal Memonkfox1111
 		e8ba2600cd Bump spire-nested Helm Chart version from 0.24.3 to 0.24.4 (#559) 
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-04-10 05:46:15 -07:00
Faisal MemonFaisal Memonkfox1111
 		4b55f65c62 Bump spire Helm Chart version from 0.24.3 to 0.24.4 (#558) 
* 240176a Postgresql ro connection string fix (#556)
* 2a48bf9 Update csi driver (#555)
* cd39d7b Bump test chart dependencies (#553)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-04-10 04:33:40 -07:00
Faisal Memon 815fbd00ed Merge branch 'main' into release 2025-04-06 22:03:03 -07:00
Faisal Memonandkfox1111 cd8215819a Bump spire-nested Helm Chart version from 0.24.2 to 0.24.3 (#551) 
* 663b89e3 Upgrade to SPIRE 1.12.0 (#542)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-04-06 06:01:18 -07:00
Faisal Memon 3b2e564cf0 Bump spire Helm Chart version from 0.24.2 to 0.24.3 
* 25967bae Add new config.jwksUri option to oidc-discovery chart (#547)
* 2f96b0b1 Bump test chart dependencies (#545)
* 663b89e3 Upgrade to SPIRE 1.12.0 (#542)
* 1c73035e Add values to configure apiServiceLabel and webhookLabel (#536)
* 385cbb3e Bump test chart dependencies (#539)
* ad44c486 Bump test chart dependencies (#537)
* 86ea90cb Fixes indentation of sync_interval value inside spire-agent configmap (#534)
* 3940ac3c Bump test chart dependencies (#533)

Signed-off-by: Faisal Memon <[email protected]>
 2025-04-06 04:55:57 -07:00
Faisal Memon 1b7e3a8755 Merge branch 'main' into release 2025-02-27 11:03:07 -08:00
Faisal Memonandkfox1111 ece7f07f70 Bump spire-nested Helm Chart version from 0.24.1 to 0.24.2 (#531) 
* 0368210 Update spire to 1.11.2 (#527)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-02-27 11:02:51 -08:00
Faisal Memon 2af830d06d Bump spire Helm Chart version from 0.24.1 to 0.24.2 (#532) 
* b13f4c0 Bump test chart dependencies
* 915744f Bump test chart dependencies (#529)
* 0368210 Update spire to 1.11.2 (#527)
* ea03059 Bump test chart dependencies (#524)
* 762ba40 Bump test chart dependencies (#523)
* f1ba4ba Bump test chart dependencies (#522)
* 413e579 Bump test chart dependencies
* f88e3d5 Bump test chart dependencies (#517)
* 848f491 Bump test chart dependencies (#516)
* 41cbad2 Bump test chart dependencies (#512)
* 8925ed6 Bump test chart dependencies (#508)
* 70f5b19 Bump test chart dependencies (#500)

Signed-off-by: Faisal Memon <[email protected]>
 2025-02-27 09:27:47 -08:00
Faisal Memon c7feff579b Merge branch 'main' into release 2024-11-17 14:59:08 -08:00
Faisal Memonandkfox1111 17d31f1789 Bump spiffe-step-ssh Helm Chart version from 0.0.1 to 0.1.0 (#499) 
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-11-17 14:48:08 -08:00
Faisal Memonandkfox1111 18a34f6cab Bump spire-nested Helm Chart version from 0.24.0 to 0.24.1 (#498) 
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-11-17 14:27:03 -08:00
Faisal Memon 61eb715029 Bump spire Helm Chart version from 0.24.0 to 0.24.1 (#497) 
* 6608fc9 Add extraEnvVars support for spiffe-csi-driver containers (#496)
* 6193717 Bump test chart dependencies (#494)
* d5777c3 Bump test chart dependencies (#493)
* 4993b67 Fix GCS Bundle endpoint format variable (#491)

Signed-off-by: Faisal Memon <[email protected]>
 2024-11-17 14:14:01 -08:00
Faisal Memon 9da5fa24dd Merge branch 'main' into release 2024-10-28 15:27:45 -07:00
Faisal Memon 5b16168e70 Bump spire Helm Chart version from 0.23.0 to 0.24.0 (#487) 
* a3e607e Bump test chart dependencies (#484)
* a360646 Add validating admission policy to restrict upstream driver access (#482)
* a7368ee Upgrade to spire 1.11.0 (#483)
* fe5464b Update notes (#479)
* 29e9866 Bump test chart dependencies (#481)
* 13736cd Add support for the new hint spire-controller-manager feature (#472)
* b08e8bf Agent support for bundle on host path (#478)
* 7b409ed Fix cert-manager upstream authority when enabling recommendations (#476)
* 01c7227 Add support for the new fallback spire-controller-manager feature (#471)
* 0a6dd19 Bump test chart dependencies (#477)
* fcbd64e Support federation bundle endpoint profile http_web certificates (#469)
* c29f45f Add AWS DB types (#464)
* 898a349 Add remaining data store options (#463)
* 2443515 Bump test chart dependencies (#474)
* c461794 Update the spire-controller-manager to 0.6.0 (#473)
* 5d07eaf Align more settings to convention (#467)
* ea2d673 Bump test chart dependencies (#470)
* 352aee2 Bump test chart dependencies (#468)
* c3c8514 Change curl --caPath to --capath (#462)
* 68d21cc Add an initial json schema file for spire-agent (#458)
* b7e9823 Add new config.jwtDomain value to oidc-discovery chart (#457)
* 8832da3 Protects SPIRE Agent's Chart Against YAML Template Injection (#450)
* 3bc7025 Update spiffe-helper (#453)
* 86d6fca Bump test chart dependencies (#449)

Signed-off-by: Faisal Memon <[email protected]>
 2024-10-28 18:36:17 +00:00
Faisal Memon 6e375ef260 Bump spire-nested Helm Chart version from 0.23.0 to 0.24.0 (#486) 
* a7368ee Upgrade to spire 1.11.0 (#483)
* 5d07eaf Align more settings to convention (#467)

Signed-off-by: Faisal Memon <[email protected]>
 2024-10-28 18:12:27 +00:00
Faisal Memon cd7c192ad2 Bump spire-crds Helm Chart version from 0.4.0 to 0.5.0 (#485) 
* 13736cd Add support for the new hint spire-controller-manager feature (#472)
* 01c7227 Add support for the new fallback spire-controller-manager feature (#471)

Signed-off-by: Faisal Memon <[email protected]>
 2024-10-28 11:04:42 -07:00
Faisal Memonandkfox1111 c3c8514333 Change curl --caPath to --capath (#462) 
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-09-17 14:02:06 -07:00
Faisal Memon e6d7d5784b Merge branch 'main' into release 2024-09-04 14:04:14 -07:00
Faisal Memon 01b1114e26 Bump spire Helm Chart version from 0.22.0 to 0.23.0 
* 7df063f Upgrade SPIRE to 1.10.3 (#412)
* de5ec47 Bump test chart dependencies (#445)
* e72b94f Add all built in BundlePublishers (#430)
* 532852d Bump test chart dependencies (#440)
* 6e8ad56 Add a spire-agent auto kubelet verification mode (#435)
* 50c741e Remove extra check that sometimes breaks oidc (#437)
* e062b9f Support ipv4 only clusters (#434)
* b96e07e Enable more forms of kubelet certificate verification (#426)
* f92d729 Add missing properties required by SecurityContextConstraints CRD (#432)
* 8553a78 Bump test chart dependencies (#431)

Signed-off-by: Faisal Memon <[email protected]>
 2024-09-04 14:00:46 -07:00
Faisal Memon 080d101787 Bump spire-nested Helm Chart version from 0.22.0 to 0.23.0 (#447) 
* 7df063f Upgrade SPIRE to 1.10.3 (#412)

Signed-off-by: Faisal Memon <[email protected]>
 2024-09-04 13:39:53 -07:00
Faisal Memon e5138372f7 Merge branch 'main' into release 2024-08-15 12:13:23 -05:00
Faisal Memonandkfox1111 ba35e81247 Bump spire-nested Helm Chart version from 0.21.1 to 0.22.0 (#429) 
* 827a3ea Bump spire to 1.10.1 (#424)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-08-15 10:13:02 -07:00
Faisal Memon de1e98337a Bump spire Helm Chart version from 0.21.1 to 0.22.0 (#428) 
* 9b2d72f Fix permission issue with 1.10 and defaults when upgraded (#423)
* 827a3ea Bump spire to 1.10.1 (#424)
* 0289e5f Revert "Added support for specifying Kubelet CA Path (#415)" (#422)
* bf40797 Bump test chart dependencies (#418)
* abcf019 Added support for specifying Kubelet CA Path (#415)
* 6d4d526 Allow configuring persistence in the spire-agent (#414)

Signed-off-by: Faisal Memon <[email protected]>
 2024-08-15 13:59:31 +00:00
Faisal Memon 627da2ad58 Merge branch 'main' into release 2024-08-06 09:31:38 -07:00
Faisal Memon 42e702a8da Bump spire-nested Helm Chart version from 0.21.0 to 0.21.1 (#410) 
* c3d1d39 Update to SPIRE 1.10.0 (#393)

Signed-off-by: Faisal Memon <[email protected]>
 2024-08-06 09:31:12 -07:00
Faisal Memon b4d4d901b9 Bump spire Helm Chart version from 0.21.0 to 0.21.1 (#409) 
* 82a6d5d Should be `admin_socket_path` not `admin_socket_dir` (#407)
* 6240c0b Bump test chart dependencies (#402)
* c3d1d39 Update to SPIRE 1.10.0 (#393)
* 741cd9c Bump test chart dependencies (#398)
* c507ee0 Bump test chart dependencies (#397)
* 199bb6f Add connect by hostname to agent cofigmap (#392)
* eb6d89b Update charts/spire/README.md
* c93ad87 Add valid kubectl version to examples
* 500fdd9 Bump test chart dependencies (#391)
* 08fc5f3 Bump test chart dependencies (#390)
* 6904295 Bump test chart dependencies (#389)
* fb7fb80 Fix format for ignoreNamespaces (#388)
* 7a0a77b Fix host path of "spire-agent-admin-socket-dir" volume (#386)
* 1d2d755 Add resource limits for upgrade and delete hook batch jobs (#366)
* f7e0d4b Update _spire-system-namespace.yaml (#381)
* 29d4b57 Bump test chart dependencies
* 4c9059e Bump test chart dependencies (#379)
* 1dc650f Apply wildcard for ignoreNamespaces in Controller Manager (#378)
* 6c2b5e6 Bump test chart dependencies (#376)

Signed-off-by: Faisal Memon <[email protected]>
 2024-08-06 08:28:22 -07:00
Faisal Memon 470acf2259 Merge branch 'main' into release 2024-05-30 15:28:42 -07:00
Faisal Memon 7eb8c6c98d Bump spire-nested Helm Chart version from 0.20.0 to 0.21.0 
Signed-off-by: Faisal Memon <[email protected]>
 2024-05-30 15:27:28 -07:00
Faisal Memon 1c271e17ca Merge branch 'main' into release 2024-05-30 15:16:10 -07:00
Faisal Memon 63853f5494 Bump spire Helm Chart version from 0.20.0 to 0.21.0 (#373) 
* 54a2f03 Change cleanup default (#349)
* d29ad06 Bump test chart dependencies (#369)
* 7dabbf1 Add Openshift ignore namespaces to Controller Manager (#363)
* db177d4 Fix spelling error in Controller Manager config (#362)
* d236154 Fix upstream ca name suffix issue (#361)
* bfcf418 Bump test chart dependencies (#359)
* c31a2e9 Bump up spire to 1.9.6 (#356)
* 2c5dfa0 Improve Tornjak NOTES. Fixes #132 (#354)
* a453a2c Bump test chart dependencies (#355)
* b6575c1 Update Tornjak deployment docs (#288)
* be560d9 Check for a misconfiguration of bundle endpoint profiles (#348)
* b2e9f40 Bump spire version (#352)
* 7165b20 Bump test chart dependencies (#350)
* da4ebdf Fix federation certificate name when upstream enabled (#347)
* c37de1e Fix Tornjak logsDir for Openshift (#344)
* 8fef1bd Add external spire-controller-managers (#284)
* ee12404 set refresh hint to 1/3 of default CA TTL value fixes #335 (#343)
* 2d9866a Bump test chart dependencies (#338)
* 6de23d3 Don't create role/binding when bundle disabled (#336)
* c132cc4 Add support for externalServer=true (#303)
* a2494ee Add auth option for Tornjak (#259)
* f679a0d Bump test chart dependencies (#333)
* 5149256 Work around curl change
* 3d2ac16 Bump test chart dependencies
* 08f699b Add spire-lib chart (#289)
* 260b02f Add an easy to use identity for child servers (#302)

Signed-off-by: Faisal Memon <[email protected]>
 2024-05-30 22:00:00 +00:00
Faisal Memon d1576b638f Merge branch 'main' into release 2024-04-11 16:11:06 -07:00
Faisal Memon 27689e797b Bump spire Helm Chart version from 0.19.2 to 0.20.0 (#329) 
* 1bf3aa7 Default spire-server port 443 (#308)
* 1ef979c Remove upgrade hook needed in 0.19.x (#317)
* aa92791 Upgrade to spire-controller-manager 0.5.0 (#316)
* c1e4feb Fix ingress host with a dot (#323)
* 5b1bf43 Update spire to 1.9.4 (#324)
* dcd11e9 Fix chainguard issue (#326)
* bc79f58 AWS KMS key_identifier upgrade (#314)

Signed-off-by: Faisal Memon <[email protected]>
 2024-04-11 16:10:50 -07:00
Faisal Memon 8e6704e588 Merge branch 'main' into release 2024-04-11 15:57:17 -07:00
Faisal Memon a5613b8cd7 Bump spire-crds Helm Chart version from 0.3.0 to 0.4.0 (#328) 
* aa92791 Upgrade to spire-controller-manager 0.5.0 (#316)

Signed-off-by: Faisal Memon <[email protected]>
 2024-04-11 15:56:57 -07:00
Faisal Memon 26ff986c63 Merge branch 'main' into release 2024-04-05 18:25:34 -07:00
Faisal Memon 7aa8cb360e Bump spire Helm Chart version from 0.19.1 to 0.19.2 
* 38e72d1 Update spire-controller-manager to 0.4.4 (#318)
* 3736010 Update spire to 1.9.3 (#315)
* fafed66 Add global for storageClass (#307)
* 0b99a72 Add config for experimental events based cache (#311)
* 8a542ab nameOverride autoconfig support (#305)
* af2639e Bump test chart dependencies (#310)

Signed-off-by: Faisal Memon <[email protected]>
 2024-04-05 16:42:33 -07:00
Faisal Memon 0b99a7258f Add config for experimental events based cache (#311) 
Signed-off-by: Faisal Memon <[email protected]>
 2024-04-02 22:55:41 +00:00
Faisal Memon b693e74a2e Merge branch 'main' into release 2024-03-29 14:41:01 -07:00
Faisal Memon 530b0bd96d Bump spire Helm Chart version from 0.19.0 to 0.19.1 
* 8887d01 Enable serviceAccountAllowList to autocalculate namespace (#304)
* d418ee1 Update to SPIRE 1.9.2, use retry_bootstrap, remove wait for it (#301)
* 2fcc105 Fix kubeCconfig edge case (#306)
* a15e445 Run SPIRE server as deployment (#293)
* c821126 Fix documentation issue (#300)
* 3b04a83 Bump test chart dependencies (#299)

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-29 14:35:10 -07:00
Faisal Memon d418ee16f8 Update to SPIRE 1.9.2, use retry_bootstrap, remove wait for it (#301) 
* Update to SPIRE 1.9.2, use retry_bootstrap, remove wait for it

Signed-off-by: Faisal Memon <[email protected]>

* Remove waitfor it in values.yaml

Signed-off-by: Faisal Memon <[email protected]>

* Update docs

Signed-off-by: Faisal Memon <[email protected]>

* Remove wait for it from images.json

Signed-off-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-27 18:55:22 +00:00
Faisal Memon 3e70c74c24 Merge branch 'main' into release 2024-03-22 13:44:11 -07:00
Faisal Memon 83ea863d57 Bump spire Helm Chart version from 0.18.2 to 0.19.0 
* 72768ec Support hybrid nodes with different attestors or config (#218)
* 5299642 Bump test chart dependencies
* 36e9315 Add external k8s bundler (#270)
* ef610df Complete Server K8S PSAT support (#242)
* d96271c Bump test chart dependencies (#282)

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-22 12:23:04 -07:00
Faisal Memon 5e430f49fa Fix issue with tests not running on automated PRs (#266) 
* Use github app for version checker

Signed-off-by: Faisal Memon <[email protected]>

* Use full version

Signed-off-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-10 23:07:20 -07:00
Faisal Memon b759abea7f Merge branch 'main' into release 2024-03-07 10:50:41 -08:00
Faisal Memon c6d57fc750 Bump spire Helm Chart version from 0.18.1 to 0.18.2 
* fd3b7d5 Fix duplicate securityContext section in spire-agent (#279)

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-07 10:48:09 -08:00
Faisal Memon 1131141daa Merge branch 'main' into release 2024-03-06 09:38:40 -08:00
Faisal Memon 058e841881 Bump spire Helm Chart version from 0.18.0 to 0.18.1 
* aea37a9 Update SPIRE to 1.9.1 (#277)
* 99044ef Fix error message typo 'county' -> 'country' (#275)

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-06 06:29:00 -08:00
Faisal Memon 446952920b Merge branch 'main' into release 2024-03-04 09:54:53 -08:00
Faisal Memon cf2e213f31 Bump spire Helm Chart version from 0.17.2 to 0.18.0 (#274) 
* beda725 Add pod labels to the SPIRE agent (#273)
* 077f152 Bump test chart dependencies (#272)
* 5849ea2 add pod labels to spire server values (#271)
* f512b06 Configurable daemonsets updateStrategy (#212)
* a539065 Add direct tpm support for spire-agent (#216)
* fcd0c11 Add direct tpm support for spire-server (#211)
* c570174 Enable CA settings via global (#268)
* ac83694 Initial SPIRE 1.9.0 support (#262)
* ddb4eff Bump test chart dependencies (#263)
* bfbafbc Fix OpenShift Federation Ingress bug (#260)
* a0baace Upgrade to spire-controller-manager 0.4.3 (#258)
* 1446f7e Add support for specifying agent authorized_delegates (#255)
* 0b6cd88 Add support for specifying server admin_ids (#254)
* 07a1c39 Add global override for kubectl tag (#251)
* b82a84d Bump test chart dependencies (#252)
* 7a1e731 Bump test chart dependencies (#246)
* a706063 make audit_log_enabled configurable (#241)
* 34a39cb Added emptyDir volume to spire-agent SCC (#243)
* a2e5a4e Add support for enabling the spire-agent admin socket (#234)
* febdcbf Fix whitespace in spire-agent daemonset

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-04 17:51:48 +00:00
Faisal Memon bea59729fb Merge branch 'main' into release 2024-02-05 13:08:35 -08:00
Faisal Memon 7ad1ae7355 Bump spire Helm Chart version from 0.17.1 to 0.17.2 
* 49e21c3 Add missing affinity settings (#232)
* 8adbb89 Add alternate name support for the socket (#181)
* 350ec89 Bump test chart dependencies (#235)
* 0e12595 Update README.md delete pvc for cleanup (#233)

Signed-off-by: Faisal Memon <[email protected]>
 2024-02-05 13:01:46 -08:00
Faisal Memon f2f56fa055 Merge branch 'main' into release 2024-01-30 13:54:14 -08:00
Faisal Memon 16ecfe9bb9 Bump spire Helm Chart version from 0.17.0 to 0.17.1 (#226) 
* d547532 Pass the agent's securityContext on to Kubernetes (#225)
* 6b03d5a Fix hardcoded nodeAttestor and keyManager in spire-agent (#221)
* f4c92ed Update README.md put cleanup seperately (#223)
* 7542052 Bump test chart dependencies (#219)
* 01e031f Add another upgrade note and fix value name (#215)
* 0fbc512 Remove the white line from securityContext rendering
* 573beaf More quickly detect a daemonset is up and running
* e8d527c Update to spire-controller-manager 0.4.2 (#195)
* 25558d3 Update daemonset.yaml (#204)

Signed-off-by: Faisal Memon <[email protected]>
 2024-01-30 13:53:41 -08:00
Faisal Memon 1ef207c7b2 Add note about supported version upgrades (#119) 
Signed-off-by: Faisal Memon <[email protected]>
 2023-11-28 22:01:16 +00:00