Marco Franssen and Faisal Memon
50846ebe9a
Improve spiffe-csi security-context
...
Co-authored-by: Faisal Memon <[email protected] [email protected]
2023-02-18 13:04:15 +01:00
Marco Franssen
4e1d3d78bb
Improve README.md and artifacthub.io
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:15 +01:00
Marco Franssen
ff9ab8693c
Replace LICENSE
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:15 +01:00
Marco Franssen
b3248e5c9c
Remove deprecated k8s workload registrar support
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:15 +01:00
Ken Huffman and Marco Franssen
3448897316
Add namespaceSelector for spire-controller-manager ( #112 )
...
Co-authored-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:15 +01:00
Marco Franssen
bba395b015
Add test for oidc discovery provider
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:15 +01:00
Marco Franssen
7d9ab07e23
Add the namespace to the oidc-discovery-provider allowed dns names
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:14 +01:00
Marco Franssen
5c8f1a7c9b
Add spire-controller-manager keyword to chart
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:14 +01:00
Marco Franssen
5fe83469ba
Fix link to sources
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:14 +01:00
Marco Franssen
8be96e4530
Fix spire validating webhook configuration
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:14 +01:00
Marco Franssen
3018ef8469
Add icon to spire chart
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:14 +01:00
Marco Franssen and Gert Jan Kamstra
225931565a
Include spire namespace to fix oidc-provider
...
Signed-off-by: Marco Franssen <[email protected] [email protected] [email protected]
2023-02-18 13:04:13 +01:00
Marco Franssen
456c9cc53b
Add by default k8s workload registrar compatible SPIFFEIDs to controller-manager setup
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:13 +01:00
Marco Franssen
31a75aeb43
Bump minimum spire version to 1.5.4
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:13 +01:00
Marco Franssen
0d49280cda
Add support for spire-controller-manager
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:13 +01:00
Marco Franssen
977468bc6a
Fix agent connectivity if deployed with different name
...
e.g. if deploying with spire-65de556ac
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:13 +01:00
Marco Franssen
875b17a948
Fix RBAC permissions k8s-workload-registrar
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:13 +01:00
Marco Franssen
016e8336d0
Fix agent connectivity if deployed with different name
...
e.g. if deploying with spire-65de556ac
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:12 +01:00
Marco Franssen
9921d1df40
Use correct helper function for upstream-ca-secret
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:12 +01:00
Marco Franssen
4a2b0ac69a
Add spire-k8s-registrar service
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:12 +01:00
Marco Franssen
175d448341
Utilize helper function for spire-k8s-workload-registrar
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:12 +01:00
Marco Franssen
5ff662acea
Update statement on minimum required spire version
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:12 +01:00
Marco Franssen
065689a6a4
Fix k8s workload registrar image pullPolicy
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:12 +01:00
Marco Franssen
05e1c2f736
Bump spire to latest 1.5.4 patch release
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:11 +01:00
Marco Franssen
8277bf0bd4
Patch wait-for-it to latest Januari release
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:11 +01:00
Marco Franssen
f0921014cf
Use template function from the right chart for oidc discovery provider configmap
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:11 +01:00
Marco Franssen
92440c72cc
Add note on scaling spire-server to value docs
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:11 +01:00
Marco Franssen
0a0ddb4a9b
Move the k8s-workload-registrar back into same pod as spire-server
...
The k8s-workload-registrar needs access to the spire-server socket and
therefore has to run in the same pod to be able to mount the socket
into the container.
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:11 +01:00
Marco Franssen
738842de16
Fix oidc-discovery-provider config mount
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:11 +01:00
Marco Franssen
2c8ca0a237
List spire-server and spire-agent in dependencies
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:10 +01:00
Marco Franssen
c7ebf72d13
Remove unused helpers from root
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:10 +01:00
Marco Franssen
cdbee1bc1b
Cleanup values.yaml
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:10 +01:00
Marco Franssen
b3d5b7d80a
Remove unused template + fix spiffe-csi-driver
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:10 +01:00
Marco Franssen
ce9b58e725
Move spire-server to dedicated subchart
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:10 +01:00
Marco Franssen
e312d42350
Move spire-agent to dedicated subchart
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:09 +01:00
Marco Franssen
ab2636ae98
Move k8s-workload-registrar to sub chart
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:09 +01:00
Marco Franssen and Gert Jan Kamstra
99da500c1c
Move oidc-discovery-provider to sub chart
...
Signed-off-by: Marco Franssen <[email protected] [email protected] [email protected] [email protected]
2023-02-18 13:04:09 +01:00
Marco Franssen
35b8ad3c00
Move the spiffe-csi-driver into a sub chart
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:09 +01:00
Marco Franssen and Gert Jan Kamstra
3fe5f8f145
Improve documentation on values
...
Co-authored-by: Gert Jan Kamstra <[email protected] [email protected]
2023-02-18 13:04:09 +01:00
Marco Franssen
93156bf904
Allow to use external created secret
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:09 +01:00
Marco Franssen
786c6a5d89
Use with statement for readability
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:08 +01:00
Marco Franssen
fe38a52a95
Improve upstream CA
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:08 +01:00
Marco Franssen
1ee42c53d3
Bump wait-for-it image latest-20221223
...
This version supports arm64 and amd64
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:08 +01:00
Ken Huffman and Marco Franssen
ce86fb97e1
Add optional UpstreamAuthority ( #79 )
...
Co-authored-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:08 +01:00
Marco Franssen
ddf4be3d3d
Bump csiDriver to 0.2.1
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:08 +01:00
Marco Franssen
bf31bdc2c0
Fix server podAnnotations configurable
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:08 +01:00
Marco Franssen
a2abee2f95
Switch oidc image back to static image
...
The repo as private and is now set to public
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:08 +01:00
Marco Franssen
94318b02a6
Bump spire to 1.5.3 to fix oidc healthchecks
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:07 +01:00
Marco Franssen and Gert Jan Kamstra
aff50434fa
Apply suggestions from code review
...
Co-authored-by: Gert Jan Kamstra <[email protected] [email protected]
2023-02-18 13:04:07 +01:00
Marco Franssen
109be1a3cc
Replaced wait-for-it image to resolve security issues
...
This image was also outdated (no recent releases) and contains whole bunch of vulnerabilities
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:07 +01:00
