helm-charts-hardened

Author	SHA1	Message	Date
kfox1111	838a353567	Label chart (#783 ) Signed-off-by: Kevin Fox <[email protected]>	2026-04-05 08:47:27 -07:00
kfox1111	96773a310f	Bump versions (#777 ) * Bump versions Signed-off-by: Kevin Fox <[email protected]> * Try this Signed-off-by: Kevin Fox <[email protected]> * Fix test for newer spire Signed-off-by: Kevin Fox <[email protected]> * Bump controller manager version Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2026-03-29 12:13:59 -07:00
Faisal Memon	8afe8cf6e7	Bump spire Helm Chart version from 0.28.2 to 0.28.3 * `2385c2d7` Bump spire to 1.14.2 (#763) Signed-off-by: Faisal Memon <[email protected]>	2026-03-04 07:58:57 -08:00
kfox1111	2385c2d7a2	Bump spire to 1.14.2 (#763 )	2026-03-04 00:57:14 +00:00
Faisal Memon	85989b45eb	Bump spire Helm Chart version from 0.28.1 to 0.28.2 * `24b3a173` Change hostNetwork to auto (#758) * `0133d4a5` add key experimental.requirePQKEM for spire-server and spire-agent (#755) * `0a841c76` Bump test chart dependencies (#759) * `a9bee70c` feat(spiffe-oidc-discovery-provider): Add configurable log format option. (#757) * `bb4c0f33` chore: Bump controller manager image tag to 0.6.3 in README and values.yaml (#756) * `3e8f3f18` Bump test chart dependencies (#753) * `b0aa3e42` Fix duplicate port names in controller-manager containers (#751) * `3daadc64` fix(spire-server): Support duration strings for connMaxLifetime (#752) * `730b76bb` Bump test chart dependencies (#750) * `e849a1fb` Add configurable hostNetwork parameter for spire-agent (#749) * `982d53c2` Add ContainerResource scaling to spire-server HPA (#746) * `8abac78a` Support leaderElection values in controller manager (#740) * `75ffbd06` Add imagePullSecrets support to helm hook jobs (#741) * `141c8865` Add pobLabels support to csi and oidc (#744) * `6b5d01b7` Bump test chart dependencies (#743) * `ba2b6a5a` Add controller-manager metrics to PodMonitor (#748) * `86a806f3` Add tolerations to spire-server hook pods (#742) * `7d266454` Fix keyManager check stopping use of unsupported bulit-in plugin (#715) * `666d304c` Bump test chart dependencies (#738) * `a7ac6a49` feat(spire-server): add logFormat configuration option (#735) Signed-off-by: Faisal Memon <[email protected]>	2026-03-03 15:21:39 -08:00
Faisal Memon	c826e29705	Bump spire Helm Chart version from 0.28.0 to 0.28.1 * `e99d9609` Bump test chart dependencies (#732) * `a7abf7d7` disable hostNetwork on spire-agent daemonset if connect by hostname is true (#705) Signed-off-by: Faisal Memon <[email protected]>	2026-01-27 09:09:02 -08:00
Faisal Memonandkfox1111	3c724632ee	Bump spire Helm Chart version from 0.27.1 to 0.28.0 (#731 ) * `6f2c71b0` Update spire to 1.14.1 (#729) * `f8f1e21f` CSI driver: Support setting podSecurityContext and securityContext (#642) * `813203a4` Update spike to the newest version (#665) * `97c383b1` Add Configurable Kubelet Address for SPIRE Agent (#709) * `8555efc6` Bump test chart dependencies * `e6c9d975` Bump test chart dependencies * `87da80a8` Add support for AWS KMS key tagging (#721) * `db8f1352` Bump test chart dependencies (#720) * `b1f902b6` Bump test chart dependencies * `198cdb60` Bump test chart dependencies * `dfbbecf0` Add guard to the validating admission policy to stop errors when there are no volumes in the spec. This fixes errors with HTTP solver pods in cert manager. (#706) * `1e1e8daa` Add support for attested node pruning configuration (#713) * `a2130ff7` Bump test chart dependencies (#712) * `adc5f3e8` Bump test chart dependencies * `4e0cdb13` Bump test chart dependencies * `95fa0deb` Allow configuring spire-agent prometheus listening address (#701) Signed-off-by: Faisal Memon <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2026-01-26 19:42:54 +00:00
kfox1111	6f2c71b04d	Update spire to 1.14.1 (#729 ) Signed-off-by: Kevin Fox <[email protected]>	2026-01-23 21:15:49 +00:00
Faisal Memon	4b85cb6015	Bump spire Helm Chart version from 0.27.0 to 0.27.1 * `18b81443` Bump test chart dependencies (#698) * `31091cf5` Add oidc server_path_prefix option (#695) * `8dffc8ed` use spire-agent.hostCert.resources to set resources for corresponding spire-agent init container (#691) * `e75e095e` Bump test chart dependencies (#696) * `aab7c68d` Bump test chart dependencies (#692) * `ca6e9f34` Bump test chart dependencies * `a3739244` Bump test chart dependencies * `c52edb99` chore: update SPIRE to 1.13.2 (#681) * `41bd5b95` fix socketAlternate names throwing an error if set to an empty list (#678) * `54024730` Bump test chart dependencies (#684) * `89259757` Bump test chart dependencies (#674) * `0f5bb04a` Bump test chart dependencies (#672) Signed-off-by: Faisal Memon <[email protected]>	2025-11-25 10:53:21 -07:00
Monfortonandkfox1111	c52edb9928	chore: update SPIRE to 1.13.2 (#681 ) Signed-off-by: Monforton <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2025-10-13 10:59:13 -07:00
Faisal Memon	4da35fabeb	Bump spire Helm Chart version from 0.26.1 to 0.27.0 (#670 ) * `e73d76a0` Bump test chart dependencies (#669) * `1ab06a1b` Support for Cloud SQL Proxy in GCP (#646) * `3c3718c9` Update spire to 1.13.0 (#667) * `1feeca1c` make spire server's auth_opa_policy_engine configurable in the helm chart (#663) * `d51bf52a` Bump test chart dependencies (#666) * `c1b0cfe3` Add controller manager configs gcInterval, logLevel, and make entryIDPrefix configurable (#662) * `bb876121` Spire agent helm chart: allow configuring logFormat (#661) * `d6edae68` Add labels to the spiffe-oidc-discovery-provider values.yaml (#656) * `6376190b` Bump test chart dependencies (#660) * `9a802563` Bump test chart dependencies (#658) * `5e5810be` Bump test chart dependencies (#653) * `86feac63` Bump test chart dependencies (#647) * `5e40cfb2` Update imagePullPolicy to IfNotPresent (#643) * `86f0aecc` Bump test chart dependencies (#641) * `3ef5fe6c` Add Datadog as telemetry option (#639) Signed-off-by: Faisal Memon <[email protected]>	2025-09-24 07:08:26 -07:00
kfox1111	3c3718c904	Update spire to 1.13.0 (#667 ) Signed-off-by: Kevin Fox <[email protected]>	2025-09-16 22:13:29 -07:00
Faisal Memon	acfcc9d0a4	Bump spire Helm Chart version from 0.26.0 to 0.26.1 (#636 ) * `64b9c40` Bump test chart dependencies (#635) * `d516de0` Update spike to 0.4.2 (#632) * `8904b96` Bump test chart dependencies (#633) * `6581b11` Add disk based KeyManager (#627) * `d2913ff` Remove region from awsiid node attestor (#630) * `3218db7` Bump test chart dependencies (#628) * `57a6143` Add aws_iid to helm chart (#620) * `9a8e5a8` Add Agent TTL to Spire Server (#626) * `093c593` spire-server: Replace chown image with busybox * `a7d536c` tools: Replace rancher/kubectl with registry.k8s.io/kubectl * `fc1791f` Bump test chart dependencies (#618) Signed-off-by: Faisal Memon <[email protected]>	2025-07-28 12:30:10 -07:00
Faisal Memon	88f0108e10	Bump spire Helm Chart version from 0.25.0 to 0.26.0 * `255106da` Update to Tornjak 2.1.0 (#597) * `f37d681b` Enable running the oidc discovery provider without cluster-admin/CSI (#570) * `892051c4` Update for 1.12.4 (#605) * `b74b10a0` Bump test chart dependencies (#615) * `e78400eb` Initial spike support (#591) * `38314ed6` Bump test chart dependencies (#611) * `bfd08bcf` Bump test chart dependencies (#608) * `971e4be7` Bump test chart dependencies (#606) * `ffe43901` Nit: Fix typo in param guide (#595) Signed-off-by: Faisal Memon <[email protected]>	2025-07-04 06:55:19 -07:00
kfox1111	892051c466	Update for 1.12.4 (#605 ) * Update for 1.12.3 Signed-off-by: Kevin Fox <[email protected]> * Fix typo. Use test image Signed-off-by: Kevin Fox <[email protected]> * Fix lint Signed-off-by: Kevin Fox <[email protected]> * Fix format flag. Update config location for k8s configmap bp Signed-off-by: Kevin Fox <[email protected]> * Fix role Signed-off-by: Kevin Fox <[email protected]> * Update rbac Signed-off-by: Kevin Fox <[email protected]> * Fix key Signed-off-by: Kevin Fox <[email protected]> * Fix format Signed-off-by: Kevin Fox <[email protected]> * Fix the bundle format for the fetchca bits Signed-off-by: Kevin Fox <[email protected]> * Update key Signed-off-by: Kevin Fox <[email protected]> * Fix test rather then reconfigure Signed-off-by: Kevin Fox <[email protected]> * Add namespace Signed-off-by: Kevin Fox <[email protected]> * Update to follow the new patch Signed-off-by: Kevin Fox <[email protected]> * Fix formatting Signed-off-by: Kevin Fox <[email protected]> * Fix formatting Signed-off-by: Kevin Fox <[email protected]> * Update filename based on format Signed-off-by: Kevin Fox <[email protected]> * Add upgrade notes Signed-off-by: Kevin Fox <[email protected]> * Switch to testing nightly. Dont manage bundle configmap. Signed-off-by: Kevin Fox <[email protected]> * Update permissions Signed-off-by: Kevin Fox <[email protected]> * Update permissions Signed-off-by: Kevin Fox <[email protected]> * Update permissions Signed-off-by: Kevin Fox <[email protected]> * Update for final release Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2025-07-01 16:28:57 -07:00
kfox1111 Faisal Memon Volkan Özçelik	e78400ebcd	Initial spike support (#591 ) * Initial spike support Signed-off-by: Kevin Fox <[email protected]> * Fix lint and docs Signed-off-by: Kevin Fox <[email protected]> * Update spike to 0.4.1 Signed-off-by: Kevin Fox <[email protected]> * Update for multiarch Signed-off-by: Kevin Fox <[email protected]> * Update Signed-off-by: Kevin Fox <[email protected]> * Fix values and docs Signed-off-by: Kevin Fox <[email protected]> * Pull in changes from Volkan Signed-off-by: Kevin Fox <[email protected]> * Fix service Signed-off-by: Kevin Fox <[email protected]> * Typo fix Signed-off-by: Volkan Özçelik <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: Volkan Özçelik <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Volkan Özçelik <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2025-06-23 23:07:40 -07:00
Faisal Memon	18ec1ef9dd	Bump spire Helm Chart version from 0.24.5 to 0.25.0 * `bd2e8e3` Update spire to 1.12.2 (#592) * `d6684bc` Add spire-credentialcomposer-cel support (#587) * `ccfb490` Dynamically build the connection_string with options for the spire server when spire-server.dataStore.sql.databaseType == sqlite3 (#576) * `87bef26` Bump test chart dependencies (#588) * `b72505b` Bump test chart dependencies (#580) * `e4bd1df` Bump spire to 1.12.1 (#578) * `9062710` Bump test chart dependencies (#575) * `94e1d78` Bump test chart dependencies (#573) Signed-off-by: Faisal Memon <[email protected]>	2025-05-22 12:08:48 -07:00
kfox1111	bd2e8e3ced	Update spire to 1.12.2 (#592 ) Signed-off-by: Kevin Fox <[email protected]>	2025-05-22 08:54:36 -07:00
kfox1111	e4bd1df76c	Bump spire to 1.12.1 (#578 ) Signed-off-by: Kevin Fox <[email protected]>	2025-05-11 01:14:17 -07:00
Faisal Memon	8ca477a0bf	Bump spire Helm Chart version from 0.24.4 to 0.24.5 (#572 ) * `1169dd5` Update spire-controller-manager to 0.6.2 and add its staticManifest support (#563) * `4dee6ca` Fix invalid image name for digest in template function of `spire-lib` (#569) * `ed9fb6a` Bump test chart dependencies (#566) * `912f412` Update tpm plugin version (#564) * `0fc00cb` Bump test chart dependencies (#561) Signed-off-by: Faisal Memon <[email protected]>	2025-04-24 10:59:19 -07:00
Faisal Memon Faisal Memon kfox1111	4b55f65c62	Bump spire Helm Chart version from 0.24.3 to 0.24.4 (#558 ) * `240176a` Postgresql ro connection string fix (#556) * `2a48bf9` Update csi driver (#555) * `cd39d7b` Bump test chart dependencies (#553) Signed-off-by: Faisal Memon <[email protected]> Co-authored-by: Faisal Memon <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2025-04-10 04:33:40 -07:00
Faisal Memon	3b2e564cf0	Bump spire Helm Chart version from 0.24.2 to 0.24.3 * `25967bae` Add new config.jwksUri option to oidc-discovery chart (#547) * `2f96b0b1` Bump test chart dependencies (#545) * `663b89e3` Upgrade to SPIRE 1.12.0 (#542) * `1c73035e` Add values to configure apiServiceLabel and webhookLabel (#536) * `385cbb3e` Bump test chart dependencies (#539) * `ad44c486` Bump test chart dependencies (#537) * `86ea90cb` Fixes indentation of sync_interval value inside spire-agent configmap (#534) * `3940ac3c` Bump test chart dependencies (#533) Signed-off-by: Faisal Memon <[email protected]>	2025-04-06 04:55:57 -07:00
kfox1111	663b89e3ea	Upgrade to SPIRE 1.12.0 (#542 ) Signed-off-by: Kevin Fox <[email protected]>	2025-03-21 16:43:10 -07:00
Faisal Memon	2af830d06d	Bump spire Helm Chart version from 0.24.1 to 0.24.2 (#532 ) * `b13f4c0` Bump test chart dependencies * `915744f` Bump test chart dependencies (#529) * `0368210` Update spire to 1.11.2 (#527) * `ea03059` Bump test chart dependencies (#524) * `762ba40` Bump test chart dependencies (#523) * `f1ba4ba` Bump test chart dependencies (#522) * `413e579` Bump test chart dependencies * `f88e3d5` Bump test chart dependencies (#517) * `848f491` Bump test chart dependencies (#516) * `41cbad2` Bump test chart dependencies (#512) * `8925ed6` Bump test chart dependencies (#508) * `70f5b19` Bump test chart dependencies (#500) Signed-off-by: Faisal Memon <[email protected]>	2025-02-27 09:27:47 -08:00
kfox1111	0368210d6b	Update spire to 1.11.2 (#527 ) * Update spire to 1.11.2 Signed-off-by: Kevin Fox <[email protected]> * Fix doc Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2025-02-13 22:39:13 -08:00
Faisal Memon	61eb715029	Bump spire Helm Chart version from 0.24.0 to 0.24.1 (#497 ) * `6608fc9` Add extraEnvVars support for spiffe-csi-driver containers (#496) * `6193717` Bump test chart dependencies (#494) * `d5777c3` Bump test chart dependencies (#493) * `4993b67` Fix GCS Bundle endpoint format variable (#491) Signed-off-by: Faisal Memon <[email protected]>	2024-11-17 14:14:01 -08:00
Faisal Memon	5b16168e70	Bump spire Helm Chart version from 0.23.0 to 0.24.0 (#487 ) * `a3e607e` Bump test chart dependencies (#484) * `a360646` Add validating admission policy to restrict upstream driver access (#482) * `a7368ee` Upgrade to spire 1.11.0 (#483) * `fe5464b` Update notes (#479) * `29e9866` Bump test chart dependencies (#481) * `13736cd` Add support for the new hint spire-controller-manager feature (#472) * `b08e8bf` Agent support for bundle on host path (#478) * `7b409ed` Fix cert-manager upstream authority when enabling recommendations (#476) * `01c7227` Add support for the new fallback spire-controller-manager feature (#471) * `0a6dd19` Bump test chart dependencies (#477) * `fcbd64e` Support federation bundle endpoint profile http_web certificates (#469) * `c29f45f` Add AWS DB types (#464) * `898a349` Add remaining data store options (#463) * `2443515` Bump test chart dependencies (#474) * `c461794` Update the spire-controller-manager to 0.6.0 (#473) * `5d07eaf` Align more settings to convention (#467) * `ea2d673` Bump test chart dependencies (#470) * `352aee2` Bump test chart dependencies (#468) * `c3c8514` Change curl --caPath to --capath (#462) * `68d21cc` Add an initial json schema file for spire-agent (#458) * `b7e9823` Add new config.jwtDomain value to oidc-discovery chart (#457) * `8832da3` Protects SPIRE Agent's Chart Against YAML Template Injection (#450) * `3bc7025` Update spiffe-helper (#453) * `86d6fca` Bump test chart dependencies (#449) Signed-off-by: Faisal Memon <[email protected]>	2024-10-28 18:36:17 +00:00
kfox1111	a7368eee1f	Upgrade to spire 1.11.0 (#483 ) Signed-off-by: Kevin Fox <[email protected]>	2024-10-25 22:36:59 -07:00
Faisal Memon	01b1114e26	Bump spire Helm Chart version from 0.22.0 to 0.23.0 * `7df063f` Upgrade SPIRE to 1.10.3 (#412) * `de5ec47` Bump test chart dependencies (#445) * `e72b94f` Add all built in BundlePublishers (#430) * `532852d` Bump test chart dependencies (#440) * `6e8ad56` Add a spire-agent auto kubelet verification mode (#435) * `50c741e` Remove extra check that sometimes breaks oidc (#437) * `e062b9f` Support ipv4 only clusters (#434) * `b96e07e` Enable more forms of kubelet certificate verification (#426) * `f92d729` Add missing properties required by SecurityContextConstraints CRD (#432) * `8553a78` Bump test chart dependencies (#431) Signed-off-by: Faisal Memon <[email protected]>	2024-09-04 14:00:46 -07:00
kfox1111andFaisal Memon	7df063f8db	Upgrade SPIRE to 1.10.3 (#412 ) * Update SPIRE to 1.10.3 Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-agent/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-09-04 13:16:50 -07:00
Faisal Memon	de1e98337a	Bump spire Helm Chart version from 0.21.1 to 0.22.0 (#428 ) * `9b2d72f` Fix permission issue with 1.10 and defaults when upgraded (#423) * `827a3ea` Bump spire to 1.10.1 (#424) * `0289e5f` Revert "Added support for specifying Kubelet CA Path (#415)" (#422) * `bf40797` Bump test chart dependencies (#418) * `abcf019` Added support for specifying Kubelet CA Path (#415) * `6d4d526` Allow configuring persistence in the spire-agent (#414) Signed-off-by: Faisal Memon <[email protected]>	2024-08-15 13:59:31 +00:00
kfox1111	827a3ea80c	Bump spire to 1.10.1 (#424 ) Signed-off-by: Kevin Fox <[email protected]>	2024-08-13 11:44:07 -07:00
Faisal Memon	b4d4d901b9	Bump spire Helm Chart version from 0.21.0 to 0.21.1 (#409 ) * `82a6d5d` Should be `admin_socket_path` not `admin_socket_dir` (#407) * `6240c0b` Bump test chart dependencies (#402) * `c3d1d39` Update to SPIRE 1.10.0 (#393) * `741cd9c` Bump test chart dependencies (#398) * `c507ee0` Bump test chart dependencies (#397) * `199bb6f` Add connect by hostname to agent cofigmap (#392) * `eb6d89b` Update charts/spire/README.md * `c93ad87` Add valid kubectl version to examples * `500fdd9` Bump test chart dependencies (#391) * `08fc5f3` Bump test chart dependencies (#390) * `6904295` Bump test chart dependencies (#389) * `fb7fb80` Fix format for ignoreNamespaces (#388) * `7a0a77b` Fix host path of "spire-agent-admin-socket-dir" volume (#386) * `1d2d755` Add resource limits for upgrade and delete hook batch jobs (#366) * `f7e0d4b` Update _spire-system-namespace.yaml (#381) * `29d4b57` Bump test chart dependencies * `4c9059e` Bump test chart dependencies (#379) * `1dc650f` Apply wildcard for ignoreNamespaces in Controller Manager (#378) * `6c2b5e6` Bump test chart dependencies (#376) Signed-off-by: Faisal Memon <[email protected]>	2024-08-06 08:28:22 -07:00
kfox1111andFaisal Memon	c3d1d39ed7	Update to SPIRE 1.10.0 (#393 ) * Update to SPIRE 1.10.0 Remove the options that were removed in 1.10, and update. Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> * Fix uid mismatch issue on 1.10.0+ Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-07-24 12:19:06 -07:00
Faisal Memon	63853f5494	Bump spire Helm Chart version from 0.20.0 to 0.21.0 (#373 ) * `54a2f03` Change cleanup default (#349) * `d29ad06` Bump test chart dependencies (#369) * `7dabbf1` Add Openshift ignore namespaces to Controller Manager (#363) * `db177d4` Fix spelling error in Controller Manager config (#362) * `d236154` Fix upstream ca name suffix issue (#361) * `bfcf418` Bump test chart dependencies (#359) * `c31a2e9` Bump up spire to 1.9.6 (#356) * `2c5dfa0` Improve Tornjak NOTES. Fixes #132 (#354) * `a453a2c` Bump test chart dependencies (#355) * `b6575c1` Update Tornjak deployment docs (#288) * `be560d9` Check for a misconfiguration of bundle endpoint profiles (#348) * `b2e9f40` Bump spire version (#352) * `7165b20` Bump test chart dependencies (#350) * `da4ebdf` Fix federation certificate name when upstream enabled (#347) * `c37de1e` Fix Tornjak logsDir for Openshift (#344) * `8fef1bd` Add external spire-controller-managers (#284) * `ee12404` set refresh hint to 1/3 of default CA TTL value fixes #335 (#343) * `2d9866a` Bump test chart dependencies (#338) * `6de23d3` Don't create role/binding when bundle disabled (#336) * `c132cc4` Add support for externalServer=true (#303) * `a2494ee` Add auth option for Tornjak (#259) * `f679a0d` Bump test chart dependencies (#333) * `5149256` Work around curl change * `3d2ac16` Bump test chart dependencies * `08f699b` Add spire-lib chart (#289) * `260b02f` Add an easy to use identity for child servers (#302) Signed-off-by: Faisal Memon <[email protected]>	2024-05-30 22:00:00 +00:00
kfox1111	c31a2e9f65	Bump up spire to 1.9.6 (#356 ) Signed-off-by: Kevin Fox <[email protected]>	2024-05-16 09:20:14 -07:00
kfox1111	b2e9f40774	Bump spire version (#352 ) Signed-off-by: Kevin Fox <[email protected]>	2024-05-07 20:16:15 -07:00
kfox1111andMarco Franssen	08f699bdb0	Add spire-lib chart (#289 ) * Add spire-lib chart Make spire-lib bits into its own library chart. Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Marco Franssen <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Move notes back Signed-off-by: Kevin Fox <[email protected]> * Fix NOTES Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Marco Franssen <[email protected]>	2024-04-18 08:21:31 -07:00
Faisal Memon	27689e797b	Bump spire Helm Chart version from 0.19.2 to 0.20.0 (#329 ) * `1bf3aa7` Default spire-server port 443 (#308) * `1ef979c` Remove upgrade hook needed in 0.19.x (#317) * `aa92791` Upgrade to spire-controller-manager 0.5.0 (#316) * `c1e4feb` Fix ingress host with a dot (#323) * `5b1bf43` Update spire to 1.9.4 (#324) * `dcd11e9` Fix chainguard issue (#326) * `bc79f58` AWS KMS key_identifier upgrade (#314) Signed-off-by: Faisal Memon <[email protected]>	2024-04-11 16:10:50 -07:00
kfox1111	5b1bf432f4	Update spire to 1.9.4 (#324 ) Signed-off-by: Kevin Fox <[email protected]>	2024-04-11 11:15:05 -07:00
Faisal Memon	7aa8cb360e	Bump spire Helm Chart version from 0.19.1 to 0.19.2 * `38e72d1` Update spire-controller-manager to 0.4.4 (#318) * `3736010` Update spire to 1.9.3 (#315) * `fafed66` Add global for storageClass (#307) * `0b99a72` Add config for experimental events based cache (#311) * `8a542ab` nameOverride autoconfig support (#305) * `af2639e` Bump test chart dependencies (#310) Signed-off-by: Faisal Memon <[email protected]>	2024-04-05 16:42:33 -07:00
Faisal Memon	530b0bd96d	Bump spire Helm Chart version from 0.19.0 to 0.19.1 * `8887d01` Enable serviceAccountAllowList to autocalculate namespace (#304) * `d418ee1` Update to SPIRE 1.9.2, use retry_bootstrap, remove wait for it (#301) * `2fcc105` Fix kubeCconfig edge case (#306) * `a15e445` Run SPIRE server as deployment (#293) * `c821126` Fix documentation issue (#300) * `3b04a83` Bump test chart dependencies (#299) Signed-off-by: Faisal Memon <[email protected]>	2024-03-29 14:35:10 -07:00
Faisal Memon	d418ee16f8	Update to SPIRE 1.9.2, use retry_bootstrap, remove wait for it (#301 ) * Update to SPIRE 1.9.2, use retry_bootstrap, remove wait for it Signed-off-by: Faisal Memon <[email protected]> * Remove waitfor it in values.yaml Signed-off-by: Faisal Memon <[email protected]> * Update docs Signed-off-by: Faisal Memon <[email protected]> * Remove wait for it from images.json Signed-off-by: Faisal Memon <[email protected]> --------- Signed-off-by: Faisal Memon <[email protected]>	2024-03-27 18:55:22 +00:00
Faisal Memon	83ea863d57	Bump spire Helm Chart version from 0.18.2 to 0.19.0 * `72768ec` Support hybrid nodes with different attestors or config (#218) * `5299642` Bump test chart dependencies * `36e9315` Add external k8s bundler (#270) * `ef610df` Complete Server K8S PSAT support (#242) * `d96271c` Bump test chart dependencies (#282) Signed-off-by: Faisal Memon <[email protected]>	2024-03-22 12:23:04 -07:00
Faisal Memon	c6d57fc750	Bump spire Helm Chart version from 0.18.1 to 0.18.2 * `fd3b7d5` Fix duplicate securityContext section in spire-agent (#279) Signed-off-by: Faisal Memon <[email protected]>	2024-03-07 10:48:09 -08:00
Faisal Memon	058e841881	Bump spire Helm Chart version from 0.18.0 to 0.18.1 * `aea37a9` Update SPIRE to 1.9.1 (#277) * `99044ef` Fix error message typo 'county' -> 'country' (#275) Signed-off-by: Faisal Memon <[email protected]>	2024-03-06 06:29:00 -08:00
kfox1111	aea37a9cd0	Update SPIRE to 1.9.1 (#277 ) Signed-off-by: Kevin Fox <[email protected]>	2024-03-05 17:49:26 -08:00
Faisal Memon	cf2e213f31	Bump spire Helm Chart version from 0.17.2 to 0.18.0 (#274 ) * `beda725` Add pod labels to the SPIRE agent (#273) * `077f152` Bump test chart dependencies (#272) * `5849ea2` add pod labels to spire server values (#271) * `f512b06` Configurable daemonsets updateStrategy (#212) * `a539065` Add direct tpm support for spire-agent (#216) * `fcd0c11` Add direct tpm support for spire-server (#211) * `c570174` Enable CA settings via global (#268) * `ac83694` Initial SPIRE 1.9.0 support (#262) * `ddb4eff` Bump test chart dependencies (#263) * `bfbafbc` Fix OpenShift Federation Ingress bug (#260) * `a0baace` Upgrade to spire-controller-manager 0.4.3 (#258) * `1446f7e` Add support for specifying agent authorized_delegates (#255) * `0b6cd88` Add support for specifying server admin_ids (#254) * `07a1c39` Add global override for kubectl tag (#251) * `b82a84d` Bump test chart dependencies (#252) * `7a1e731` Bump test chart dependencies (#246) * `a706063` make audit_log_enabled configurable (#241) * `34a39cb` Added emptyDir volume to spire-agent SCC (#243) * `a2e5a4e` Add support for enabling the spire-agent admin socket (#234) * `febdcbf` Fix whitespace in spire-agent daemonset Signed-off-by: Faisal Memon <[email protected]>	2024-03-04 17:51:48 +00:00
kfox1111	ac83694970	Initial SPIRE 1.9.0 support (#262 )	2024-02-28 17:54:53 +00:00
Faisal Memon	7ad1ae7355	Bump spire Helm Chart version from 0.17.1 to 0.17.2 * `49e21c3` Add missing affinity settings (#232) * `8adbb89` Add alternate name support for the socket (#181) * `350ec89` Bump test chart dependencies (#235) * `0e12595` Update README.md delete pvc for cleanup (#233) Signed-off-by: Faisal Memon <[email protected]>	2024-02-05 13:01:46 -08:00

1 2 3