panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
201 Commits 1 Branch 2 Tags
9ccbd3c67f0e55117842720758d7165690ed811e
Commit Graph
39 Commits
Author SHA1 Message Date
kfox1111 80e3b58dcd Remove dead file from failed rebase. (#121) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-03-14 13:23:02 -07:00
kfox1111 03db6bb5fe Namespace override 
This patch makes it possible to install the subcharts in different
namespaces as needed.

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-13 15:03:16 -07:00
Kevin Fox 09b21acca2 Fix the gate 
Signed-off-by: Kevin Fox <[email protected]>
 2023-03-11 19:21:59 +01:00
kfox1111 b6716aee17 Test that it is possible to lock down security of pods (#84) 2023-03-11 12:11:19 +01:00
Kevin Fox 490fe8f543 Enhance the test workflow scripts 
This makes it so that tests can now:
1. Add additional values files to the test
2. That the post-install.sh script knows if the test passed or failed
   for better output
3. That the main test can be skipped in favor of a test provided one

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-10 08:46:27 +01:00
Kevin Fox 7d1f8217ce Fix test. 
Signed-off-by: Kevin Fox <[email protected]>
 2023-03-09 10:09:50 -08:00
Marco Franssen 493ad8fbed Remove some duplication on chart-testing CI 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-09 10:09:50 -08:00
Marco Franssen dfa4e6c784 Ensure CI also runs when test scripts are changed 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-08 07:21:49 -08:00
kfox1111 d341c5ad58 UpstreamAuthority cert-manager support (#82) 2023-03-03 20:48:35 +01:00
Kevin Fox b7f8c86478 Add extra initContainers, containers, volumes to agent and server 
With plugin support, agents and servers need more customization.
This patch enables initContainers, extraContainers, extraVolumes
and extraVolumeMounts to be added to those services.

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-02 08:02:19 -08:00
Marco Franssen 81ac89a911 Add k8s 1.26.0 (Kind) to the test matrix 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-02 13:08:37 +01:00
Marco Franssen c0e5665702 Bump cosign to v2.0.0 
Cosign v2.0.0 doesn't require the experimental env var anymore

Signed-off-by: Marco Franssen <[email protected]>
 2023-03-02 09:15:46 +01:00
dependabot[bot] d729a4410c Bump sigstore/cosign-installer from 2.8.1 to 3.0.1 
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.8.1 to 3.0.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.8.1...v3.0.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-03-02 01:14:59 +00:00
Marco Franssen fea2aa59e2 Fix sigstore/cosign-installer usage in release workflow 
See https://github.com/sigstore/cosign-installer\#usage on proper usage

Resolves #66

Signed-off-by: Marco Franssen <[email protected]>
 2023-03-01 13:52:39 +01:00
dependabot[bot] e754b3a6c8 Bump actions/checkout from 3.2.0 to 3.3.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.2.0...v3.3.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-02-27 11:32:19 +01:00
kfox1111andMarco Franssen 35eb3bb42e Basic Prometheus support (#28) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-02-24 22:39:15 +01:00
Marco Franssen a29df4f6cc Change to cut releases from the release branch 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 10:55:00 +01:00
Marco Franssen e8768ec955 Add types to trigger workflow when changing the target branch 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 10:55:00 +01:00
Marco Franssen 3c7d828954 Only check for version bump if PR targets main 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 10:55:00 +01:00
Marco Franssen a95ef9f3db Use github.base_ref for target-branch 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 10:54:57 +01:00
Marco Franssen 5dc93da6b8 Bump to latest Helm and Python versions 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:35:46 +01:00
Marco Franssen d46c3fc14d Test without ACME tos Accepted 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:35:46 +01:00
Marco Franssen 49a68c3aed Add test for spire-oidc 
Using the nginx insecure option, because we can't rely on the ACME
protocol as this server isn't reachable.

Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:29 +01:00
Marco Franssen c9779b24ed Add test for upstream-authority-disk 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:28 +01:00
Marco Franssen b24faa9373 Add test for disabled spire-controller-manager 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:28 +01:00
Marco Franssen 9135086f8e Add infrastructure to test charts without defaulted values 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:28 +01:00
Marco Franssen b804b0a932 Fix workflow trigger path 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-21 20:28:53 +01:00
Marco Franssen c3ac45eec8 Move docs script to root of repo 
This makes it easier for contributors to ensure docs are updated by having the script
more easy at hand.

Signed-off-by: Marco Franssen <[email protected]>
 2023-02-14 14:04:31 +01:00
dependabot[bot] 9fbf532d9f Bump helm/chart-releaser-action from 1.4.1 to 1.5.0 
Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action) from 1.4.1 to 1.5.0.
- [Release notes](https://github.com/helm/chart-releaser-action/releases)
- [Commits](https://github.com/helm/chart-releaser-action/compare/v1.4.1...v1.5.0)

---
updated-dependencies:
- dependency-name: helm/chart-releaser-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-01-09 09:20:14 +01:00
dependabot[bot] ea3b07983e Bump actions/checkout from 3.2.0 to 3.3.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.2.0...v3.3.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-01-06 19:05:53 +01:00
Marco Franssen 98ce524618 Add workflow to release helm-charts to gh-pages and ghcr.io 
Signed-off-by: Marco Franssen <[email protected]>
 2023-01-02 13:46:20 +01:00
dependabot[bot] d1aa978d3a Bump helm/kind-action from 1.4.0 to 1.5.0 
Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](https://github.com/helm/kind-action/compare/v1.4.0...v1.5.0)

---
updated-dependencies:
- dependency-name: helm/kind-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-12-16 08:49:38 +01:00
Marco Franssen 320dce4eb2 Only run tests if a chart changed 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-15 10:22:27 +01:00
Marco Franssen 1ed5cf1239 Bump actions to latest version 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-15 10:17:52 +01:00
Marco Franssen d1106fdd4c Allow manual dispatch of CI workflow 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-15 10:17:52 +01:00
Marco Franssen f7443d22b8 Add job to test Helm chart using Kind 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-15 10:17:52 +01:00
Marco Franssen 9779a1295b Add job to lint helm-chart 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-15 10:17:51 +01:00
Marco Franssen 5025bdaf37 Add Helm chart workflow that checks for updated documentation 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-15 10:17:51 +01:00
Marco Franssen 0b6b855576 Add dependabot config 
Signed-off-by: Marco Franssen <[email protected]>
 2022-12-09 19:32:12 +01:00