panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,157 Commits 1 Branch 2 Tags
98ec4e680b076cb40ff399aa1d69d6497775db66
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Faisal MemonandKevin Fox 98ec4e680b Bump spire-lib Helm Chart version from 0.1.0 to 0.2.0 (#822) 
* Bump spire-lib and dependent Helm Chart versions (minor)

* 3c1dec30 fix casing of svidStore (#787)

Signed-off-by: Faisal Memon <[email protected]>

* Add missing repo reference

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
 2026-06-06 10:33:41 -07:00
Faisal Memon a40409ec53 Automate release bumps from the current branch (#831) 
* Automate dependent chart release bumps

Signed-off-by: Faisal Memon <[email protected]>

* Use ruamel for chart dependency parsing

Signed-off-by: Faisal Memon <[email protected]>

* Simplify dependent chart graph helper

Signed-off-by: Faisal Memon <[email protected]>

* Add current-branch mode to release automation

Signed-off-by: Faisal Memon <[email protected]>

* Polish chart dependency helper

Signed-off-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
 2026-05-31 05:29:55 -07:00
Faisal Memonandkfox1111 574fa87d57 Bump spire Helm Chart version from 0.28.4 to 0.28.5 (#817) 
* c489dfc4 Update helper images in spiffe-csi-driver (#815)
* f537f770 allow unsupported built-in key manager plugins to be used (#798)
* c5ba8213 Bump test chart dependencies (#797)
* dfe80891 feat: add gcp_iit node attestor configuration options (#796)
* 21969d20 Bump test chart dependencies (#795)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2026-05-07 05:04:38 -07:00
Faisal Memon 146cf1add6 Bump spire-nested Helm Chart version from 0.28.4 to 0.28.5 (#818) 
Signed-off-by: Faisal Memon <[email protected]>
 2026-05-03 05:52:41 -07:00
Faisal Memon d334bfde50 Bump spiffe-step-ssh Helm Chart version from 0.1.1 to 0.1.2 (#794) 
* 9273f11f Support root-level spire-lib chart reuse (#785)

Signed-off-by: Faisal Memon <[email protected]>
 2026-04-11 08:52:09 -07:00
Faisal Memonandkfox1111 d65890e409 Bump spire-nested Helm Chart version from 0.28.3 to 0.28.4 (#792) 
* 86787b59 Add initial spire-ha-agent support to the spire-nested chart (#790)
* 040ccf90 Bump versions to 1.14.5 (#789)
* 9273f11f Support root-level spire-lib chart reuse (#785)
* 96773a31 Bump versions (#777)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2026-04-10 23:32:47 -07:00
Faisal Memon a062e49c91 Bump spire Helm Chart version from 0.28.3 to 0.28.4 
* 01342172 Fix typos in error messages (#788)
* 040ccf90 Bump versions to 1.14.5 (#789)
* 9273f11f Support root-level spire-lib chart reuse (#785)
* 145f3a36 chore: Add configurable probes for controller-manager (#784)
* a27acbcb Bump test chart dependencies (#786)
* 838a3535 Label chart (#783)
* 59de7aa3 Bump test chart dependencies (#779)
* 96773a31 Bump versions (#777)
* aad7527c Add set_key_use configuration option (#774)
* de59147f fix gather hostcert edge case issues (#775)
* bf4bd819 feature: add awsSecretsManager upstreamAuthority (#772)
* f78c1d42 Bump test chart dependencies (#773)
* 7afffd75 Bump test chart dependencies (#771)
* 60899fc9 Add configurable hostNetwork support to spiffe-csi-driver (#769)
* 2de363a4 Bump test chart dependencies (#767)
* 6631349b feat(spire-server): add logEncoding parameter for controller-manager (#766)

Signed-off-by: Faisal Memon <[email protected]>
 2026-04-10 15:48:58 -07:00
Faisal Memon 9273f11f0a Support root-level spire-lib chart reuse (#785) 
* Add root-level spire-lib chart

Signed-off-by: Faisal Memon <[email protected]>

* Make spire consume root-level spire-lib

Signed-off-by: Faisal Memon <[email protected]>

* Prepare chart dependencies in CI

Signed-off-by: Faisal Memon <[email protected]>

* Document DCO requirement in CODEX

Signed-off-by: Faisal Memon <[email protected]>

* Centralize local chart dependency prep

Signed-off-by: Faisal Memon <[email protected]>

* Exclude spire-lib from chart-testing install

Signed-off-by: Faisal Memon <[email protected]>

* Rename CODEX guide to AGENTS

Signed-off-by: Faisal Memon <[email protected]>

* Add make target for chart dependencies

Signed-off-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
 2026-04-09 05:14:05 -07:00
Faisal Memon 8afe8cf6e7 Bump spire Helm Chart version from 0.28.2 to 0.28.3 
* 2385c2d7 Bump spire to 1.14.2 (#763)

Signed-off-by: Faisal Memon <[email protected]>
 2026-03-04 07:58:57 -08:00
Faisal Memon 20940774d1 Bump spire-nested Helm Chart version from 0.28.2 to 0.28.3 
* 2385c2d7 Bump spire to 1.14.2 (#763)

Signed-off-by: Faisal Memon <[email protected]>
 2026-03-04 07:38:32 -08:00
Faisal Memon 85989b45eb Bump spire Helm Chart version from 0.28.1 to 0.28.2 
* 24b3a173 Change hostNetwork to auto (#758)
* 0133d4a5 add key experimental.requirePQKEM for spire-server and spire-agent (#755)
* 0a841c76 Bump test chart dependencies (#759)
* a9bee70c feat(spiffe-oidc-discovery-provider): Add configurable log format option. (#757)
* bb4c0f33 chore: Bump controller manager image tag to 0.6.3 in README and values.yaml (#756)
* 3e8f3f18 Bump test chart dependencies (#753)
* b0aa3e42 Fix duplicate port names in controller-manager containers (#751)
* 3daadc64 fix(spire-server): Support duration strings for connMaxLifetime (#752)
* 730b76bb Bump test chart dependencies (#750)
* e849a1fb Add configurable hostNetwork parameter for spire-agent (#749)
* 982d53c2 Add ContainerResource scaling to spire-server HPA (#746)
* 8abac78a Support leaderElection values in controller manager (#740)
* 75ffbd06 Add imagePullSecrets support to helm hook jobs (#741)
* 141c8865 Add pobLabels support to csi and oidc (#744)
* 6b5d01b7 Bump test chart dependencies (#743)
* ba2b6a5a Add controller-manager metrics to PodMonitor (#748)
* 86a806f3 Add tolerations to spire-server hook pods (#742)
* 7d266454 Fix keyManager check stopping use of unsupported bulit-in plugin (#715)
* 666d304c Bump test chart dependencies (#738)
* a7ac6a49 feat(spire-server): add logFormat configuration option (#735)

Signed-off-by: Faisal Memon <[email protected]>
 2026-03-03 15:21:39 -08:00
Faisal Memon 6937ae01a2 Bump spire-nested Helm Chart version from 0.28.1 to 0.28.2 
Signed-off-by: Faisal Memon <[email protected]>
 2026-03-03 15:02:10 -08:00
Faisal Memon 24b3a1730e Change hostNetwork to auto (#758) 2026-03-03 21:56:48 +00:00
Faisal Memon 28f95d263b Bump spire-nested Helm Chart version from 0.28.0 to 0.28.1 
Signed-off-by: Faisal Memon <[email protected]>
 2026-01-27 09:17:32 -08:00
Faisal Memon c826e29705 Bump spire Helm Chart version from 0.28.0 to 0.28.1 
* e99d9609 Bump test chart dependencies (#732)
* a7abf7d7 disable hostNetwork on spire-agent daemonset if connect by hostname is true (#705)

Signed-off-by: Faisal Memon <[email protected]>
 2026-01-27 09:09:02 -08:00
Faisal Memonandkfox1111 3c724632ee Bump spire Helm Chart version from 0.27.1 to 0.28.0 (#731) 
* 6f2c71b0 Update spire to 1.14.1 (#729)
* f8f1e21f CSI driver: Support setting podSecurityContext and securityContext (#642)
* 813203a4 Update spike to the newest version (#665)
* 97c383b1 Add Configurable Kubelet Address for SPIRE Agent (#709)
* 8555efc6 Bump test chart dependencies
* e6c9d975 Bump test chart dependencies
* 87da80a8 Add support for AWS KMS key tagging (#721)
* db8f1352 Bump test chart dependencies (#720)
* b1f902b6 Bump test chart dependencies
* 198cdb60 Bump test chart dependencies
* dfbbecf0 Add guard to the validating admission policy to stop errors when there are no volumes in the spec. This fixes errors with HTTP solver pods in cert manager. (#706)
* 1e1e8daa Add support for attested node pruning configuration (#713)
* a2130ff7 Bump test chart dependencies (#712)
* adc5f3e8 Bump test chart dependencies
* 4e0cdb13 Bump test chart dependencies
* 95fa0deb Allow configuring spire-agent prometheus listening address (#701)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2026-01-26 19:42:54 +00:00
Faisal Memon 0ceaed05cc Bump spire-nested Helm Chart version from 0.27.1 to 0.28.0 (#730) 
* 6f2c71b0 Update spire to 1.14.1 (#729)

Signed-off-by: Faisal Memon <[email protected]>
 2026-01-26 11:22:17 -08:00
Faisal Memonandkfox1111 e1a1484511 Bump spire-nested Helm Chart version from 0.27.0 to 0.27.1 (#700) 
* c52edb99 chore: update SPIRE to 1.13.2 (#681)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-11-25 10:37:38 -08:00
Faisal Memon 4b85cb6015 Bump spire Helm Chart version from 0.27.0 to 0.27.1 
* 18b81443 Bump test chart dependencies (#698)
* 31091cf5 Add oidc server_path_prefix option (#695)
* 8dffc8ed use spire-agent.hostCert.resources to set resources for corresponding spire-agent init container (#691)
* e75e095e Bump test chart dependencies (#696)
* aab7c68d Bump test chart dependencies (#692)
* ca6e9f34 Bump test chart dependencies
* a3739244 Bump test chart dependencies
* c52edb99 chore: update SPIRE to 1.13.2 (#681)
* 41bd5b95 fix socketAlternate names throwing an error if set to an empty list (#678)
* 54024730 Bump test chart dependencies (#684)
* 89259757 Bump test chart dependencies (#674)
* 0f5bb04a Bump test chart dependencies (#672)

Signed-off-by: Faisal Memon <[email protected]>
 2025-11-25 10:53:21 -07:00
Faisal Memonandkfox1111 aea591e8b0 Bump spire-nested Helm Chart version from 0.26.1 to 0.27.0 (#671) 
* 3c3718c9 Update spire to 1.13.0 (#667)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-09-24 14:15:43 +00:00
Faisal Memon 4da35fabeb Bump spire Helm Chart version from 0.26.1 to 0.27.0 (#670) 
* e73d76a0 Bump test chart dependencies (#669)
* 1ab06a1b Support for Cloud SQL Proxy in GCP (#646)
* 3c3718c9 Update spire to 1.13.0 (#667)
* 1feeca1c make spire server's auth_opa_policy_engine configurable in the helm chart (#663)
* d51bf52a Bump test chart dependencies (#666)
* c1b0cfe3 Add controller manager configs gcInterval, logLevel, and make entryIDPrefix configurable (#662)
* bb876121 Spire agent helm chart: allow configuring logFormat (#661)
* d6edae68 Add labels to the spiffe-oidc-discovery-provider values.yaml (#656)
* 6376190b Bump test chart dependencies (#660)
* 9a802563 Bump test chart dependencies (#658)
* 5e5810be Bump test chart dependencies (#653)
* 86feac63 Bump test chart dependencies (#647)
* 5e40cfb2 Update imagePullPolicy to IfNotPresent (#643)
* 86f0aecc Bump test chart dependencies (#641)
* 3ef5fe6c Add Datadog as telemetry option (#639)

Signed-off-by: Faisal Memon <[email protected]>
 2025-09-24 07:08:26 -07:00
Faisal Memonandkfox1111 8443881250 Bump spiffe-step-ssh Helm Chart version from 0.1.0 to 0.1.1 (#640) 
* Bump spiffe-step-ssh Helm Chart version from 0.1.0 to 0.1.1

* a7d536c0 tools: Replace rancher/kubectl with registry.k8s.io/kubectl

Signed-off-by: Faisal Memon <[email protected]>

* Update charts/spiffe-step-ssh/Chart.yaml

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-08-05 03:27:50 -07:00
Faisal Memonandkfox1111 28c65d3458 Bump spire-nested Helm Chart version from 0.26.0 to 0.26.1 (#637) 
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-07-28 12:42:44 -07:00
Faisal Memon acfcc9d0a4 Bump spire Helm Chart version from 0.26.0 to 0.26.1 (#636) 
* 64b9c40 Bump test chart dependencies (#635)
* d516de0 Update spike to 0.4.2 (#632)
* 8904b96 Bump test chart dependencies (#633)
* 6581b11 Add disk based KeyManager (#627)
* d2913ff Remove region from awsiid node attestor (#630)
* 3218db7 Bump test chart dependencies (#628)
* 57a6143 Add aws_iid to helm chart (#620)
* 9a8e5a8 Add Agent TTL to Spire Server (#626)
* 093c593 spire-server: Replace chown image with busybox
* a7d536c tools: Replace rancher/kubectl with registry.k8s.io/kubectl
* fc1791f Bump test chart dependencies (#618)

Signed-off-by: Faisal Memon <[email protected]>
 2025-07-28 12:30:10 -07:00
Faisal Memon d1f5c7e93d Bump spire-nested Helm Chart version from 0.25.0 to 0.26.0 
* 892051c4 Update for 1.12.4 (#605)

Signed-off-by: Faisal Memon <[email protected]>
 2025-07-04 07:07:40 -07:00
Faisal Memon 88f0108e10 Bump spire Helm Chart version from 0.25.0 to 0.26.0 
* 255106da Update to Tornjak 2.1.0 (#597)
* f37d681b Enable running the oidc discovery provider without cluster-admin/CSI (#570)
* 892051c4 Update for 1.12.4 (#605)
* b74b10a0 Bump test chart dependencies (#615)
* e78400eb Initial spike support (#591)
* 38314ed6 Bump test chart dependencies (#611)
* bfd08bcf Bump test chart dependencies (#608)
* 971e4be7 Bump test chart dependencies (#606)
* ffe43901 Nit: Fix typo in param guide (#595)

Signed-off-by: Faisal Memon <[email protected]>
 2025-07-04 06:55:19 -07:00
Faisal Memon ce9b3737ff Update tests to go 1.24.3 (#600) 
Signed-off-by: Faisal Memon <[email protected]>
 2025-05-29 08:15:34 -07:00
Faisal Memon 0b906b6754 Bump spire-nested Helm Chart version from 0.24.5 to 0.25.0 
* bd2e8e3 Update spire to 1.12.2 (#592)
* e4bd1df Bump spire to 1.12.1 (#578)

Signed-off-by: Faisal Memon <[email protected]>
 2025-05-22 15:01:41 -07:00
Faisal Memon 18ec1ef9dd Bump spire Helm Chart version from 0.24.5 to 0.25.0 
* bd2e8e3 Update spire to 1.12.2 (#592)
* d6684bc Add spire-credentialcomposer-cel support (#587)
* ccfb490 Dynamically build the connection_string with options for the spire server when spire-server.dataStore.sql.databaseType == sqlite3 (#576)
* 87bef26 Bump test chart dependencies (#588)
* b72505b Bump test chart dependencies (#580)
* e4bd1df Bump spire to 1.12.1 (#578)
* 9062710 Bump test chart dependencies (#575)
* 94e1d78 Bump test chart dependencies (#573)

Signed-off-by: Faisal Memon <[email protected]>
 2025-05-22 12:08:48 -07:00
Faisal Memon 27ac69503b Bump spire-nested Helm Chart version from 0.24.4 to 0.24.5 
Signed-off-by: Faisal Memon <[email protected]>
 2025-04-24 11:20:12 -07:00
Faisal Memon 8ca477a0bf Bump spire Helm Chart version from 0.24.4 to 0.24.5 (#572) 
* 1169dd5 Update spire-controller-manager to 0.6.2 and add its staticManifest support (#563)
* 4dee6ca Fix invalid image name for digest in template function of `spire-lib` (#569)
* ed9fb6a Bump test chart dependencies (#566)
* 912f412 Update tpm plugin version (#564)
* 0fc00cb Bump test chart dependencies (#561)

Signed-off-by: Faisal Memon <[email protected]>
 2025-04-24 10:59:19 -07:00
Faisal MemonFaisal Memonkfox1111
 		e8ba2600cd Bump spire-nested Helm Chart version from 0.24.3 to 0.24.4 (#559) 
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-04-10 05:46:15 -07:00
Faisal MemonFaisal Memonkfox1111
 		4b55f65c62 Bump spire Helm Chart version from 0.24.3 to 0.24.4 (#558) 
* 240176a Postgresql ro connection string fix (#556)
* 2a48bf9 Update csi driver (#555)
* cd39d7b Bump test chart dependencies (#553)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-04-10 04:33:40 -07:00
Faisal Memonandkfox1111 cd8215819a Bump spire-nested Helm Chart version from 0.24.2 to 0.24.3 (#551) 
* 663b89e3 Upgrade to SPIRE 1.12.0 (#542)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-04-06 06:01:18 -07:00
Faisal Memon 3b2e564cf0 Bump spire Helm Chart version from 0.24.2 to 0.24.3 
* 25967bae Add new config.jwksUri option to oidc-discovery chart (#547)
* 2f96b0b1 Bump test chart dependencies (#545)
* 663b89e3 Upgrade to SPIRE 1.12.0 (#542)
* 1c73035e Add values to configure apiServiceLabel and webhookLabel (#536)
* 385cbb3e Bump test chart dependencies (#539)
* ad44c486 Bump test chart dependencies (#537)
* 86ea90cb Fixes indentation of sync_interval value inside spire-agent configmap (#534)
* 3940ac3c Bump test chart dependencies (#533)

Signed-off-by: Faisal Memon <[email protected]>
 2025-04-06 04:55:57 -07:00
Faisal Memonandkfox1111 ece7f07f70 Bump spire-nested Helm Chart version from 0.24.1 to 0.24.2 (#531) 
* 0368210 Update spire to 1.11.2 (#527)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-02-27 11:02:51 -08:00
Faisal Memon 2af830d06d Bump spire Helm Chart version from 0.24.1 to 0.24.2 (#532) 
* b13f4c0 Bump test chart dependencies
* 915744f Bump test chart dependencies (#529)
* 0368210 Update spire to 1.11.2 (#527)
* ea03059 Bump test chart dependencies (#524)
* 762ba40 Bump test chart dependencies (#523)
* f1ba4ba Bump test chart dependencies (#522)
* 413e579 Bump test chart dependencies
* f88e3d5 Bump test chart dependencies (#517)
* 848f491 Bump test chart dependencies (#516)
* 41cbad2 Bump test chart dependencies (#512)
* 8925ed6 Bump test chart dependencies (#508)
* 70f5b19 Bump test chart dependencies (#500)

Signed-off-by: Faisal Memon <[email protected]>
 2025-02-27 09:27:47 -08:00
Faisal Memonandkfox1111 17d31f1789 Bump spiffe-step-ssh Helm Chart version from 0.0.1 to 0.1.0 (#499) 
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-11-17 14:48:08 -08:00
Faisal Memonandkfox1111 18a34f6cab Bump spire-nested Helm Chart version from 0.24.0 to 0.24.1 (#498) 
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-11-17 14:27:03 -08:00
Faisal Memon 61eb715029 Bump spire Helm Chart version from 0.24.0 to 0.24.1 (#497) 
* 6608fc9 Add extraEnvVars support for spiffe-csi-driver containers (#496)
* 6193717 Bump test chart dependencies (#494)
* d5777c3 Bump test chart dependencies (#493)
* 4993b67 Fix GCS Bundle endpoint format variable (#491)

Signed-off-by: Faisal Memon <[email protected]>
 2024-11-17 14:14:01 -08:00
Faisal Memon 5b16168e70 Bump spire Helm Chart version from 0.23.0 to 0.24.0 (#487) 
* a3e607e Bump test chart dependencies (#484)
* a360646 Add validating admission policy to restrict upstream driver access (#482)
* a7368ee Upgrade to spire 1.11.0 (#483)
* fe5464b Update notes (#479)
* 29e9866 Bump test chart dependencies (#481)
* 13736cd Add support for the new hint spire-controller-manager feature (#472)
* b08e8bf Agent support for bundle on host path (#478)
* 7b409ed Fix cert-manager upstream authority when enabling recommendations (#476)
* 01c7227 Add support for the new fallback spire-controller-manager feature (#471)
* 0a6dd19 Bump test chart dependencies (#477)
* fcbd64e Support federation bundle endpoint profile http_web certificates (#469)
* c29f45f Add AWS DB types (#464)
* 898a349 Add remaining data store options (#463)
* 2443515 Bump test chart dependencies (#474)
* c461794 Update the spire-controller-manager to 0.6.0 (#473)
* 5d07eaf Align more settings to convention (#467)
* ea2d673 Bump test chart dependencies (#470)
* 352aee2 Bump test chart dependencies (#468)
* c3c8514 Change curl --caPath to --capath (#462)
* 68d21cc Add an initial json schema file for spire-agent (#458)
* b7e9823 Add new config.jwtDomain value to oidc-discovery chart (#457)
* 8832da3 Protects SPIRE Agent's Chart Against YAML Template Injection (#450)
* 3bc7025 Update spiffe-helper (#453)
* 86d6fca Bump test chart dependencies (#449)

Signed-off-by: Faisal Memon <[email protected]>
 2024-10-28 18:36:17 +00:00
Faisal Memon 6e375ef260 Bump spire-nested Helm Chart version from 0.23.0 to 0.24.0 (#486) 
* a7368ee Upgrade to spire 1.11.0 (#483)
* 5d07eaf Align more settings to convention (#467)

Signed-off-by: Faisal Memon <[email protected]>
 2024-10-28 18:12:27 +00:00
Faisal Memon cd7c192ad2 Bump spire-crds Helm Chart version from 0.4.0 to 0.5.0 (#485) 
* 13736cd Add support for the new hint spire-controller-manager feature (#472)
* 01c7227 Add support for the new fallback spire-controller-manager feature (#471)

Signed-off-by: Faisal Memon <[email protected]>
 2024-10-28 11:04:42 -07:00
Faisal Memonandkfox1111 c3c8514333 Change curl --caPath to --capath (#462) 
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-09-17 14:02:06 -07:00
Faisal Memon 01b1114e26 Bump spire Helm Chart version from 0.22.0 to 0.23.0 
* 7df063f Upgrade SPIRE to 1.10.3 (#412)
* de5ec47 Bump test chart dependencies (#445)
* e72b94f Add all built in BundlePublishers (#430)
* 532852d Bump test chart dependencies (#440)
* 6e8ad56 Add a spire-agent auto kubelet verification mode (#435)
* 50c741e Remove extra check that sometimes breaks oidc (#437)
* e062b9f Support ipv4 only clusters (#434)
* b96e07e Enable more forms of kubelet certificate verification (#426)
* f92d729 Add missing properties required by SecurityContextConstraints CRD (#432)
* 8553a78 Bump test chart dependencies (#431)

Signed-off-by: Faisal Memon <[email protected]>
 2024-09-04 14:00:46 -07:00
Faisal Memon 080d101787 Bump spire-nested Helm Chart version from 0.22.0 to 0.23.0 (#447) 
* 7df063f Upgrade SPIRE to 1.10.3 (#412)

Signed-off-by: Faisal Memon <[email protected]>
 2024-09-04 13:39:53 -07:00
Faisal Memonandkfox1111 ba35e81247 Bump spire-nested Helm Chart version from 0.21.1 to 0.22.0 (#429) 
* 827a3ea Bump spire to 1.10.1 (#424)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2024-08-15 10:13:02 -07:00
Faisal Memon de1e98337a Bump spire Helm Chart version from 0.21.1 to 0.22.0 (#428) 
* 9b2d72f Fix permission issue with 1.10 and defaults when upgraded (#423)
* 827a3ea Bump spire to 1.10.1 (#424)
* 0289e5f Revert "Added support for specifying Kubelet CA Path (#415)" (#422)
* bf40797 Bump test chart dependencies (#418)
* abcf019 Added support for specifying Kubelet CA Path (#415)
* 6d4d526 Allow configuring persistence in the spire-agent (#414)

Signed-off-by: Faisal Memon <[email protected]>
 2024-08-15 13:59:31 +00:00
Faisal Memon 42e702a8da Bump spire-nested Helm Chart version from 0.21.0 to 0.21.1 (#410) 
* c3d1d39 Update to SPIRE 1.10.0 (#393)

Signed-off-by: Faisal Memon <[email protected]>
 2024-08-06 09:31:12 -07:00
Faisal Memon b4d4d901b9 Bump spire Helm Chart version from 0.21.0 to 0.21.1 (#409) 
* 82a6d5d Should be `admin_socket_path` not `admin_socket_dir` (#407)
* 6240c0b Bump test chart dependencies (#402)
* c3d1d39 Update to SPIRE 1.10.0 (#393)
* 741cd9c Bump test chart dependencies (#398)
* c507ee0 Bump test chart dependencies (#397)
* 199bb6f Add connect by hostname to agent cofigmap (#392)
* eb6d89b Update charts/spire/README.md
* c93ad87 Add valid kubectl version to examples
* 500fdd9 Bump test chart dependencies (#391)
* 08fc5f3 Bump test chart dependencies (#390)
* 6904295 Bump test chart dependencies (#389)
* fb7fb80 Fix format for ignoreNamespaces (#388)
* 7a0a77b Fix host path of "spire-agent-admin-socket-dir" volume (#386)
* 1d2d755 Add resource limits for upgrade and delete hook batch jobs (#366)
* f7e0d4b Update _spire-system-namespace.yaml (#381)
* 29d4b57 Bump test chart dependencies
* 4c9059e Bump test chart dependencies (#379)
* 1dc650f Apply wildcard for ignoreNamespaces in Controller Manager (#378)
* 6c2b5e6 Bump test chart dependencies (#376)

Signed-off-by: Faisal Memon <[email protected]>
 2024-08-06 08:28:22 -07:00
Faisal Memon 7eb8c6c98d Bump spire-nested Helm Chart version from 0.20.0 to 0.21.0 
Signed-off-by: Faisal Memon <[email protected]>
 2024-05-30 15:27:28 -07:00
Faisal Memon 63853f5494 Bump spire Helm Chart version from 0.20.0 to 0.21.0 (#373) 
* 54a2f03 Change cleanup default (#349)
* d29ad06 Bump test chart dependencies (#369)
* 7dabbf1 Add Openshift ignore namespaces to Controller Manager (#363)
* db177d4 Fix spelling error in Controller Manager config (#362)
* d236154 Fix upstream ca name suffix issue (#361)
* bfcf418 Bump test chart dependencies (#359)
* c31a2e9 Bump up spire to 1.9.6 (#356)
* 2c5dfa0 Improve Tornjak NOTES. Fixes #132 (#354)
* a453a2c Bump test chart dependencies (#355)
* b6575c1 Update Tornjak deployment docs (#288)
* be560d9 Check for a misconfiguration of bundle endpoint profiles (#348)
* b2e9f40 Bump spire version (#352)
* 7165b20 Bump test chart dependencies (#350)
* da4ebdf Fix federation certificate name when upstream enabled (#347)
* c37de1e Fix Tornjak logsDir for Openshift (#344)
* 8fef1bd Add external spire-controller-managers (#284)
* ee12404 set refresh hint to 1/3 of default CA TTL value fixes #335 (#343)
* 2d9866a Bump test chart dependencies (#338)
* 6de23d3 Don't create role/binding when bundle disabled (#336)
* c132cc4 Add support for externalServer=true (#303)
* a2494ee Add auth option for Tornjak (#259)
* f679a0d Bump test chart dependencies (#333)
* 5149256 Work around curl change
* 3d2ac16 Bump test chart dependencies
* 08f699b Add spire-lib chart (#289)
* 260b02f Add an easy to use identity for child servers (#302)

Signed-off-by: Faisal Memon <[email protected]>
 2024-05-30 22:00:00 +00:00
Faisal Memon 27689e797b Bump spire Helm Chart version from 0.19.2 to 0.20.0 (#329) 
* 1bf3aa7 Default spire-server port 443 (#308)
* 1ef979c Remove upgrade hook needed in 0.19.x (#317)
* aa92791 Upgrade to spire-controller-manager 0.5.0 (#316)
* c1e4feb Fix ingress host with a dot (#323)
* 5b1bf43 Update spire to 1.9.4 (#324)
* dcd11e9 Fix chainguard issue (#326)
* bc79f58 AWS KMS key_identifier upgrade (#314)

Signed-off-by: Faisal Memon <[email protected]>
 2024-04-11 16:10:50 -07:00
Faisal Memon a5613b8cd7 Bump spire-crds Helm Chart version from 0.3.0 to 0.4.0 (#328) 
* aa92791 Upgrade to spire-controller-manager 0.5.0 (#316)

Signed-off-by: Faisal Memon <[email protected]>
 2024-04-11 15:56:57 -07:00
Faisal Memon 7aa8cb360e Bump spire Helm Chart version from 0.19.1 to 0.19.2 
* 38e72d1 Update spire-controller-manager to 0.4.4 (#318)
* 3736010 Update spire to 1.9.3 (#315)
* fafed66 Add global for storageClass (#307)
* 0b99a72 Add config for experimental events based cache (#311)
* 8a542ab nameOverride autoconfig support (#305)
* af2639e Bump test chart dependencies (#310)

Signed-off-by: Faisal Memon <[email protected]>
 2024-04-05 16:42:33 -07:00
Faisal Memon 0b99a7258f Add config for experimental events based cache (#311) 
Signed-off-by: Faisal Memon <[email protected]>
 2024-04-02 22:55:41 +00:00
Faisal Memon 530b0bd96d Bump spire Helm Chart version from 0.19.0 to 0.19.1 
* 8887d01 Enable serviceAccountAllowList to autocalculate namespace (#304)
* d418ee1 Update to SPIRE 1.9.2, use retry_bootstrap, remove wait for it (#301)
* 2fcc105 Fix kubeCconfig edge case (#306)
* a15e445 Run SPIRE server as deployment (#293)
* c821126 Fix documentation issue (#300)
* 3b04a83 Bump test chart dependencies (#299)

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-29 14:35:10 -07:00
Faisal Memon d418ee16f8 Update to SPIRE 1.9.2, use retry_bootstrap, remove wait for it (#301) 
* Update to SPIRE 1.9.2, use retry_bootstrap, remove wait for it

Signed-off-by: Faisal Memon <[email protected]>

* Remove waitfor it in values.yaml

Signed-off-by: Faisal Memon <[email protected]>

* Update docs

Signed-off-by: Faisal Memon <[email protected]>

* Remove wait for it from images.json

Signed-off-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-27 18:55:22 +00:00
Faisal Memon 83ea863d57 Bump spire Helm Chart version from 0.18.2 to 0.19.0 
* 72768ec Support hybrid nodes with different attestors or config (#218)
* 5299642 Bump test chart dependencies
* 36e9315 Add external k8s bundler (#270)
* ef610df Complete Server K8S PSAT support (#242)
* d96271c Bump test chart dependencies (#282)

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-22 12:23:04 -07:00
Faisal Memon 5e430f49fa Fix issue with tests not running on automated PRs (#266) 
* Use github app for version checker

Signed-off-by: Faisal Memon <[email protected]>

* Use full version

Signed-off-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-10 23:07:20 -07:00
Faisal Memon c6d57fc750 Bump spire Helm Chart version from 0.18.1 to 0.18.2 
* fd3b7d5 Fix duplicate securityContext section in spire-agent (#279)

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-07 10:48:09 -08:00
Faisal Memon 058e841881 Bump spire Helm Chart version from 0.18.0 to 0.18.1 
* aea37a9 Update SPIRE to 1.9.1 (#277)
* 99044ef Fix error message typo 'county' -> 'country' (#275)

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-06 06:29:00 -08:00
Faisal Memon cf2e213f31 Bump spire Helm Chart version from 0.17.2 to 0.18.0 (#274) 
* beda725 Add pod labels to the SPIRE agent (#273)
* 077f152 Bump test chart dependencies (#272)
* 5849ea2 add pod labels to spire server values (#271)
* f512b06 Configurable daemonsets updateStrategy (#212)
* a539065 Add direct tpm support for spire-agent (#216)
* fcd0c11 Add direct tpm support for spire-server (#211)
* c570174 Enable CA settings via global (#268)
* ac83694 Initial SPIRE 1.9.0 support (#262)
* ddb4eff Bump test chart dependencies (#263)
* bfbafbc Fix OpenShift Federation Ingress bug (#260)
* a0baace Upgrade to spire-controller-manager 0.4.3 (#258)
* 1446f7e Add support for specifying agent authorized_delegates (#255)
* 0b6cd88 Add support for specifying server admin_ids (#254)
* 07a1c39 Add global override for kubectl tag (#251)
* b82a84d Bump test chart dependencies (#252)
* 7a1e731 Bump test chart dependencies (#246)
* a706063 make audit_log_enabled configurable (#241)
* 34a39cb Added emptyDir volume to spire-agent SCC (#243)
* a2e5a4e Add support for enabling the spire-agent admin socket (#234)
* febdcbf Fix whitespace in spire-agent daemonset

Signed-off-by: Faisal Memon <[email protected]>
 2024-03-04 17:51:48 +00:00
Faisal Memon 7ad1ae7355 Bump spire Helm Chart version from 0.17.1 to 0.17.2 
* 49e21c3 Add missing affinity settings (#232)
* 8adbb89 Add alternate name support for the socket (#181)
* 350ec89 Bump test chart dependencies (#235)
* 0e12595 Update README.md delete pvc for cleanup (#233)

Signed-off-by: Faisal Memon <[email protected]>
 2024-02-05 13:01:46 -08:00
Faisal Memon 16ecfe9bb9 Bump spire Helm Chart version from 0.17.0 to 0.17.1 (#226) 
* d547532 Pass the agent's securityContext on to Kubernetes (#225)
* 6b03d5a Fix hardcoded nodeAttestor and keyManager in spire-agent (#221)
* f4c92ed Update README.md put cleanup seperately (#223)
* 7542052 Bump test chart dependencies (#219)
* 01e031f Add another upgrade note and fix value name (#215)
* 0fbc512 Remove the white line from securityContext rendering
* 573beaf More quickly detect a daemonset is up and running
* e8d527c Update to spire-controller-manager 0.4.2 (#195)
* 25558d3 Update daemonset.yaml (#204)

Signed-off-by: Faisal Memon <[email protected]>
 2024-01-30 13:53:41 -08:00
Faisal Memon 1ef207c7b2 Add note about supported version upgrades (#119) 
Signed-off-by: Faisal Memon <[email protected]>
 2023-11-28 22:01:16 +00:00
Faisal Memon 6cd2282a71 Update SPIRE crds version (#93) 
Signed-off-by: Faisal Memon <[email protected]>
 2023-11-09 16:18:35 -08:00
Faisal Memon 06d8cd2ae5 Bump spire Helm Chart version from 0.14.0 to 0.15.0 
* 6c0a4fb Auto tornjak url (#89)
* f2758a8 Autogen jwtIssuer (#88)
* 93c20c6 Merge pull request #83 from spiffe/doc-ingress-patch
* c662b0c Merge branch 'main' into doc-ingress-patch
* de8cbc8 Bump github.com/onsi/gomega from 1.29.0 to 1.30.0 in /tests (#90)
* 1de838e Bump helm.sh/helm/v3 from 3.13.1 to 3.13.2 in /tests (#91)
* daf9d55 Merge branch 'main' into doc-ingress-patch
* aaeca00 Fix tests after renaming files
* 0320c3f Cleanup documentation
* 37cd9f2 Update to SPIRE 1.8.4 (#84)
* bd7879a Fix the typo in the production ingress README
* 805d869 spire-controller-manager 0.4.0 support (#60)
* edf2381 Bump sigstore/cosign-installer from 3.1.2 to 3.2.0 (#85)
* 0ed6d92 Bump test chart dependencies
* f7b6140 Fix docs
* a7e8785 Add another missing one
* 3778597 Add missing ClusterSPIFFEID fields
* 9b31f3d Bump helm/chart-testing-action from 2.6.0 to 2.6.1
* d6583be Add missing no cleanup flags to example tests (#79)
* 81cc2dc Ingress type openshift (#52)
* 2dce90f Bump helm/chart-releaser-action from 1.5.0 to 1.6.0 (#75)
* f08ebd3 Patch Tornjak ingress (#74)
* 6a6aa1c Cosign download fix (#72)
* 3b01684 Support Openshift deployment  (#13)
* ed23d8b Simple ingress support (#48)
* b354413 Fix incorrect nesting of priorityClassName (#67)
* 09ebfc9 Bump test chart dependencies (#68)
* d50d78d Fix ingress annotation variable for tornjak server (#66)
* b813807 Update docs to simplify, clarify, and prioritize ease of install/upgrade (#62)
* 5ad35bd Merge pull request #59 from sabre1041/spire-agent-nodename
* 02d445c Update charts/spire/README.md
* 9bd7f43 Added environment variable to spire-agent to inject node name
* fb64f8d Bump github.com/onsi/gomega from 1.28.1 to 1.29.0 in /tests (#61)
* 30d0f59 Update helm-charts repository URL (#58)
* 7924323 Specify ingress controller type (#43)
* 0b17434 Bump test chart dependencies (#54)
* a419903 Bump github.com/onsi/gomega from 1.28.0 to 1.28.1 in /tests (#53)
* 5025025 Fix doc missing end tag (#46)
* cf226a7 Bump actions/checkout from 4.1.0 to 4.1.1 (#42)

Signed-off-by: Faisal Memon <[email protected]>
 2023-11-09 13:18:02 -08:00
Faisal Memon 37cd9f25e2 Update to SPIRE 1.8.4 (#84) 2023-11-08 03:26:21 -08:00
Faisal Memon ff725c2e38 Bump spire Helm Chart version from 0.13.2 to 0.14.0 
* a01cdc9 Production test don't cleanup flag (#44)
* 56445c4 Spire controller manager upgrade (#8)
* 6635512 Fix Tornjak HTTPS ingress port (#39)
* 78ba615 Update to SPIRE 1.8.2 (#40)
* 2644e4b Bump test chart dependencies (#38)
* 5cb3c6d Bump helm.sh/helm/v3 from 3.13.0 to 3.13.1 in /tests (#37)
* 42bb8cf Bump spire Helm Chart version from 0.13.1 to 0.13.2
* dd87bc0 Bump spire versions to 1.7.4 (#35)
* fdba5d0 Bump spire Helm Chart version from 0.13.0 to 0.13.1
* 0e41a7d Fix failing Tornjak ingress port (#28)
* df1abf6 Bump to spire 1.7.3 (#31)
* 69a20e3 Merge pull request #29 from spiffe/tornjak-version
* 3036a41 Switch to version v1.4.0
* da49059 Update Tornjak image version
* 0fa43a5 Add plugin support to the spire agent (#22)
* c5c5320 Bump github.com/onsi/ginkgo/v2 from 2.12.1 to 2.13.0 in /tests (#27)
* afba33f Add spire agent experimental flags (#26)
* 1107278 Bump test chart dependencies
* 03ff618 Add Tornjak ingress (#16)
* 8f1bfc1 Merge pull request #23 from spiffe/examples-doc
* cd386eb Merge branch 'main' into examples-doc
* 12937db Update Example README
* 06d6690 Bump test chart dependencies (#20)
* 8aca48f Push the changes that update-tags creates (#19)
* a6cb397 Exit code from diff indicating changes should not block commit. (#17)
* ebfa518 Update FAQ from repo switch (#15)
* c23e6cb Fix issue with version checker not running
* 51c20b1 Bump actions/checkout from 4.0.0 to 4.1.0 (#9)
* 21db1e4 Add a test to ensure upgrades work (#6)
* f86648f Bump github.com/onsi/gomega from 1.27.10 to 1.28.0 in /tests
* babd677 Bump helm.sh/helm/v3 from 3.12.3 to 3.13.0 in /tests
* 45187fe Add back CODE-OF-CONDUCT
* 50825d9 Deny production runs of example.org trust domains (#229)
* 712a0f6 Bump actions/checkout from 4.0.0 to 4.1.0
* f04bdc3 Add support for experimental flags (#492)
* 7cdae92 Bump github.com/onsi/ginkgo/v2 from 2.12.0 to 2.12.1 in /tests (#490)
* d3091a8 Fix spire-server configmap UpstreamAuthority/aws_pca and KeyManager/a… (#489)
* 7a96175 Remove developer-guy as a CODEOWNER

Signed-off-by: Faisal Memon <[email protected]>
 2023-10-18 13:44:37 -07:00
Faisal Memon 78ba615c7d Update to SPIRE 1.8.2 (#40) 
Signed-off-by: Faisal Memon <[email protected]>
 2023-10-17 10:26:14 -07:00
Faisal Memon 42bb8cf066 Bump spire Helm Chart version from 0.13.1 to 0.13.2 
* dd87bc0 Bump spire versions to 1.7.4 (#35)
* fdba5d0 Bump spire Helm Chart version from 0.13.0 to 0.13.1
* 0e41a7d Fix failing Tornjak ingress port (#28)
* df1abf6 Bump to spire 1.7.3 (#31)
* 69a20e3 Merge pull request #29 from spiffe/tornjak-version
* 3036a41 Switch to version v1.4.0
* da49059 Update Tornjak image version
* 0fa43a5 Add plugin support to the spire agent (#22)
* c5c5320 Bump github.com/onsi/ginkgo/v2 from 2.12.1 to 2.13.0 in /tests (#27)
* afba33f Add spire agent experimental flags (#26)
* 1107278 Bump test chart dependencies
* 03ff618 Add Tornjak ingress (#16)
* 8f1bfc1 Merge pull request #23 from spiffe/examples-doc
* cd386eb Merge branch 'main' into examples-doc
* 12937db Update Example README
* 06d6690 Bump test chart dependencies (#20)
* 8aca48f Push the changes that update-tags creates (#19)
* a6cb397 Exit code from diff indicating changes should not block commit. (#17)
* ebfa518 Update FAQ from repo switch (#15)
* c23e6cb Fix issue with version checker not running
* 51c20b1 Bump actions/checkout from 4.0.0 to 4.1.0 (#9)
* 21db1e4 Add a test to ensure upgrades work (#6)
* f86648f Bump github.com/onsi/gomega from 1.27.10 to 1.28.0 in /tests
* babd677 Bump helm.sh/helm/v3 from 3.12.3 to 3.13.0 in /tests
* 45187fe Add back CODE-OF-CONDUCT
* 50825d9 Deny production runs of example.org trust domains (#229)
* 712a0f6 Bump actions/checkout from 4.0.0 to 4.1.0
* f04bdc3 Add support for experimental flags (#492)
* 7cdae92 Bump github.com/onsi/ginkgo/v2 from 2.12.0 to 2.12.1 in /tests (#490)
* d3091a8 Fix spire-server configmap UpstreamAuthority/aws_pca and KeyManager/a… (#489)
* 7a96175 Remove developer-guy as a CODEOWNER

Signed-off-by: Faisal Memon <[email protected]>
 2023-10-12 15:12:46 -07:00
Faisal Memon fdba5d084b Bump spire Helm Chart version from 0.13.0 to 0.13.1 
* 0e41a7d Fix failing Tornjak ingress port (#28)
* df1abf6 Bump to spire 1.7.3 (#31)
* 69a20e3 Merge pull request #29 from spiffe/tornjak-version
* 3036a41 Switch to version v1.4.0
* da49059 Update Tornjak image version
* 0fa43a5 Add plugin support to the spire agent (#22)
* c5c5320 Bump github.com/onsi/ginkgo/v2 from 2.12.1 to 2.13.0 in /tests (#27)
* afba33f Add spire agent experimental flags (#26)
* 1107278 Bump test chart dependencies
* 03ff618 Add Tornjak ingress (#16)
* 8f1bfc1 Merge pull request #23 from spiffe/examples-doc
* cd386eb Merge branch 'main' into examples-doc
* 12937db Update Example README
* 06d6690 Bump test chart dependencies (#20)
* 8aca48f Push the changes that update-tags creates (#19)
* a6cb397 Exit code from diff indicating changes should not block commit. (#17)
* ebfa518 Update FAQ from repo switch (#15)
* c23e6cb Fix issue with version checker not running
* 51c20b1 Bump actions/checkout from 4.0.0 to 4.1.0 (#9)
* 21db1e4 Add a test to ensure upgrades work (#6)
* f86648f Bump github.com/onsi/gomega from 1.27.10 to 1.28.0 in /tests
* babd677 Bump helm.sh/helm/v3 from 3.12.3 to 3.13.0 in /tests
* 45187fe Add back CODE-OF-CONDUCT
* 50825d9 Deny production runs of example.org trust domains (#229)
* 712a0f6 Bump actions/checkout from 4.0.0 to 4.1.0
* f04bdc3 Add support for experimental flags (#492)
* 7cdae92 Bump github.com/onsi/ginkgo/v2 from 2.12.0 to 2.12.1 in /tests (#490)
* d3091a8 Fix spire-server configmap UpstreamAuthority/aws_pca and KeyManager/a… (#489)
* 7a96175 Remove developer-guy as a CODEOWNER

Signed-off-by: Faisal Memon <[email protected]>
 2023-10-11 11:17:48 -07:00
Faisal Memon ebfa518a4b Update FAQ from repo switch (#15) 
* Update FAQ from repo switch

Signed-off-by: Faisal Memon <[email protected]>

* Add note about repo name

Signed-off-by: Faisal Memon <[email protected]>

* Clarify old and new forks

Signed-off-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
 2023-10-04 09:11:58 -07:00
Faisal Memon c23e6cb3b1 Fix issue with version checker not running 
Signed-off-by: Faisal Memon <[email protected]>
 2023-10-03 09:00:20 +02:00
Faisal Memon f04bdc3618 Add support for experimental flags (#492) 
Add support for the experimental section of the config. Needed for
developers. This PR doesnt add support for the `auth_opa_policy_engine`
experimental config.

---------

Signed-off-by: Faisal Memon <[email protected]>
 2023-09-22 14:55:03 -07:00
Faisal MemonMarco FranssenKevin Fox
 		b7e15255f3 Allow job hooks to be disabled (#434) 
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
 2023-08-18 09:48:14 +02:00
Faisal Memon 0124f633e8 Bypass example-test for docs only changes (#449) 2023-08-16 16:23:32 +02:00
Faisal Memon 1e3039ccb9 Bump spire Helm Chart version from 0.11.0 to 0.11.1 (#419) 
Please review the below changelog to ensure this matches up with the
semantic version being applied.

**Note**: As this is a patch release we will make a cherry-picked
release using a followup PR targetering the release branch. Will
cherrypick the following commits into this patch release + the commit
bumping this version number.

**Changes in this release**

* d2e1606 issuer naming should respect issuer_name override (#378)
* a09e054 support annotations so oidc can be annotated (#391)
* 7d94b10 Update spire to 1.7.1 (#412)
* 9a6768b Add support for disabling container selectors (#399)
* 624ca9c Remove misadded lockfile (#400)

Signed-off-by: Faisal Memon <[email protected]>
 2023-08-03 09:12:03 -07:00
Faisal Memon 9a6768bca1 Add support for disabling container selectors (#399) 2023-07-27 13:27:57 -04:00
Faisal Memon 1333b6ab34 Always add parseTime=true for mysql query string (#352) 2023-06-20 21:14:42 +02:00
Faisal Memon 57a93205a7 Add SPIRE 1.7.0 to main readme (#357) 2023-06-19 20:29:17 +02:00
Faisal Memon e88f7f6fe2 Add configmap annotation to spire-bundle configmap (#351) 2023-06-16 23:22:44 +02:00
Faisal Memon 9d504de05b Ignore .DS_Store files 
Signed-off-by: Faisal Memon <[email protected]>
 2023-06-16 17:30:51 +02:00
Faisal Memon 3cb55dfb4e Allow for having no registry specified (#312) 2023-05-25 14:15:46 -07:00
Faisal Memonandkfox1111 1922085ba7 Fix hooks for K3s (#305) 
Co-authored-by: kfox1111 <[email protected]>
 2023-05-23 08:59:21 -07:00
Faisal Memon 31ce704fa8 Cleanup maintainer handbook (#287) 2023-05-17 08:49:02 -07:00
Faisal MemonandMarco Franssen 72596aea8d Skip tests for docs folders (#281) 
Our mandatory checks will fail if there are docs only changes. The
helm-chart-ci.yaml skips these files, so the workflows never run, and
the mandatory checks are stuck waiting for results.

This adds a parallel workflow that runs fake tests for docs changes. So
that docs only changes can pass the required status checks. It uses
`paths-ignore` instead of `paths`. This is documented
[here](https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/troubleshooting-required-status-checks#handling-skipped-but-required-checks).

---------

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-05-16 10:21:44 -07:00
Faisal Memon 05addae906 Add json to test path (#280) 
Adds *.json to the workflow trigger so that changes to json files, such as updating versions, will trigger a pipeline run.

Signed-off-by: Faisal Memon <[email protected]>
 2023-05-15 16:16:03 -07:00
Faisal Memon 5489212bb5 Remove persistence.enabled flag (#274) 2023-05-12 16:19:50 +02:00
Faisal Memonandkfox1111 b315324244 Allow for ConfigMaps to be annotated (#272) 
Without an annotation, spinnaker will rename the configmap.

---------

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-05-11 10:49:06 -07:00
Faisal Memon 013eb617a9 Fix spacing for spire server service annotation (#273) 
Spacing off by 4.

Signed-off-by: Faisal Memon <[email protected]>
 2023-05-10 18:22:07 -07:00
Faisal Memon 3d81928ff8 Add skipKubeletVerification configurable (#243) 2023-04-26 21:38:14 +02:00
Faisal Memon bd8bcb2ffa Add Faisal Memon as maintainer to spire chart (#208) 2023-04-12 11:09:18 +02:00
Faisal Memon eeda0428b4 Add before-hook-creation delete policy 
Signed-off-by: Faisal Memon <[email protected]>
 2023-04-09 22:22:59 +02:00
Faisal MemonandMarco Franssen 456075f843 Add hooks to set failurepolicy to ignore on webhook (#128) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-04 09:46:49 +02:00
Faisal MemonandMarco Franssen d5dc706592 Add Kubernetes 1.21 back (#188) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-04 09:25:19 +02:00
Faisal Memon b4be9edfeb Add maturity tag (#138) 2023-03-22 09:28:31 +01:00
Faisal Memon fe93346b66 Use quote function instead of actual quotes 
Signed-off-by: Faisal Memon <[email protected]>
 2023-03-01 11:10:08 +01:00
Faisal MemonandMarco Franssen 9480ab74b4 Add beta note to readme (#62) 
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-02-28 15:21:51 -08:00