panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
933 Commits 1 Branch 2 Tags
9da5fa24dda7ad0bba4d50695d265256a237c6c6
Commit Graph
16 Commits
Author SHA1 Message Date
kfox1111 5d07eaff52 Align more settings to convention (#467) 
* Align more settings to convention

Signed-off-by: Kevin Fox <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2024-10-03 12:06:38 -07:00
kfox1111 6de23d3303 Don't create role/binding when bundle disabled (#336) 
When the bundle notifier is disabled, there is no need to create
a role and role binding for it.

Signed-off-by: Kevin Fox <[email protected]>
 2024-04-26 14:21:16 -07:00
kfox1111 c132cc481e Add support for externalServer=true (#303) 2024-04-26 19:19:01 +00:00
kfox1111andMarco Franssen 49beb64584 Add recommendation for namespaceLayout (#127) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-12-19 15:02:57 +00:00
Drew WellsandKevin Fox 020bde8561 Add support to create a issuer and CA via cert-manager (#342) 
Co-authored-by: Kevin Fox <[email protected]>
 2023-06-16 21:04:11 +00:00
kfox1111 c97a788c85 Fix bundle role/rolebinding naming conflict (#333) 2023-06-16 08:55:49 +02:00
kfox1111 3cc8955429 Move reusable macros to root chart (#218) 
This patch adds the start of a library to help reduce code duplication.
It will be split out to its own library chart at the same time the other
charts are split out.

---------

Signed-off-by: Kevin Fox <[email protected]>
 2023-04-18 08:54:46 +02:00
kfox1111 87904164ad Enable global config for clusterName, trustDomain, and bundleConfigMap (#156) 2023-04-02 19:28:49 +02:00
kfox1111 03db6bb5fe Namespace override 
This patch makes it possible to install the subcharts in different
namespaces as needed.

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-13 15:03:16 -07:00
Kevin Fox bfeb217558 Fix cluster role name uniqueness 
Adds namespace to the ClusterRole and ClusterRoleBinding so that it
doesn't conflict when you have two instances of the chart, in different
namespaces with the same release name.

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-10 15:45:49 +01:00
Kevin Fox 9e22d2c303 Make the namespace the bundle is dropped into configurable 
When the server and agent are not in the same namespace, the bundle needs to be
uploadable in the agent's namespace.

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-09 12:00:41 -08:00
Kevin Fox aaaf2f7625 Remove dead role code 
The cluster role does the same thing, but at the cluster level
where it belongs. The extra role code does nothing so we remove
it here.

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-08 12:36:35 -08:00
kfox1111 f123296032 Add a flag to configure the Kubernetes NodeAttestor (#83) 2023-03-06 19:59:54 +01:00
kfox1111 d341c5ad58 UpstreamAuthority cert-manager support (#82) 2023-03-03 20:48:35 +01:00
Marco Franssen 0a0ddb4a9b Move the k8s-workload-registrar back into same pod as spire-server 
The k8s-workload-registrar needs access to the spire-server socket and
therefore has to run in the same pod to be able to mount the socket
into the container.

Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:11 +01:00
Marco Franssen ce9b58e725 Move spire-server to dedicated subchart 
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:10 +01:00