Commit Graph
162 Commits
Author SHA1 Message Date
spire-helm-version-checker[bot]andmarcofranssen 70f5b19d7e Bump test chart dependencies (#500)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-11-18 04:49:13 -08:00
spire-helm-version-checker[bot]andmarcofranssen 6193717061 Bump test chart dependencies (#494)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-11-11 04:15:31 -08:00
spire-helm-version-checker[bot]andmarcofranssen d5777c3dd2 Bump test chart dependencies (#493)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-11-04 05:39:24 -08:00
spire-helm-version-checker[bot]andmarcofranssen a3e607e7d8 Bump test chart dependencies (#484)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-10-28 06:01:02 -07:00
kfox1111 a7368eee1f Upgrade to spire 1.11.0 (#483)
Signed-off-by: Kevin Fox <[email protected]>
2024-10-25 22:36:59 -07:00
spire-helm-version-checker[bot]andmarcofranssen 29e9866a8c Bump test chart dependencies (#481)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-10-21 04:59:26 -07:00
kfox1111andFaisal Memon b08e8bf9b1 Agent support for bundle on host path (#478)
* Agent support for bundle on host path

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-agent/values.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-10-17 15:12:27 -07:00
spire-helm-version-checker[bot]andmarcofranssen 0a6dd19906 Bump test chart dependencies (#477)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-10-14 06:26:40 -07:00
spire-helm-version-checker[bot]andmarcofranssen 2443515682 Bump test chart dependencies (#474)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-10-07 14:04:33 -07:00
kfox1111 5d07eaff52 Align more settings to convention (#467)
* Align more settings to convention

Signed-off-by: Kevin Fox <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2024-10-03 12:06:38 -07:00
spire-helm-version-checker[bot]andmarcofranssen ea2d673830 Bump test chart dependencies (#470)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-09-30 17:06:39 -07:00
spire-helm-version-checker[bot]andmarcofranssen 352aee2f0d Bump test chart dependencies (#468)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-09-23 06:50:10 -07:00
Faisal Memonandkfox1111 c3c8514333 Change curl --caPath to --capath (#462)
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2024-09-17 14:02:06 -07:00
kfox1111andFaisal Memon 68d21ccade Add an initial json schema file for spire-agent (#458)
* Add an initial json schema file for spire-agent

Signed-off-by: Kevin Fox <[email protected]>

* Fix tab

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-09-17 13:39:22 -07:00
nweisenauer 8832da39b4 Protects SPIRE Agent's Chart Against YAML Template Injection (#450)
* protects agent's chart against template injection

Signed-off-by: Nico Weisenauer <[email protected]>

* removes unnecessary braces and whitespace

Signed-off-by: Nico Weisenauer <[email protected]>

* Removes int type validation via cast

Signed-off-by: Nico Weisenauer <[email protected]>

---------

Signed-off-by: Nico Weisenauer <[email protected]>
2024-09-16 06:23:01 -07:00
spire-helm-version-checker[bot]andmarcofranssen 86d6fcac25 Bump test chart dependencies (#449)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-09-09 06:36:28 -07:00
kfox1111andFaisal Memon 7df063f8db Upgrade SPIRE to 1.10.3 (#412)
* Update SPIRE to 1.10.3

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-agent/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-09-04 13:16:50 -07:00
spire-helm-version-checker[bot]andmarcofranssen de5ec47613 Bump test chart dependencies (#445)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-09-02 05:51:02 -07:00
spire-helm-version-checker[bot]andmarcofranssen 532852d907 Bump test chart dependencies (#440)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-08-26 09:45:03 -07:00
kfox1111 6e8ad569b3 Add a spire-agent auto kubelet verification mode (#435)
* Add a spire-agent auto kubelet verification mode

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2024-08-23 15:09:55 -07:00
kfox1111andFaisal Memon b96e07e349 Enable more forms of kubelet certificate verification (#426)
* Enable kubelet certificate verification by default

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/README.md

Signed-off-by: kfox1111 <[email protected]>

* Update charts/spire/charts/spire-agent/templates/configmap.yaml

Signed-off-by: kfox1111 <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Fix image

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-agent/templates/configmap.yaml

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-08-20 22:08:39 -07:00
Erik Godding Boye f92d729137 Add missing properties required by SecurityContextConstraints CRD (#432)
Signed-off-by: Erik Godding Boye <[email protected]>
2024-08-20 08:55:35 -07:00
kfox1111 827a3ea80c Bump spire to 1.10.1 (#424)
Signed-off-by: Kevin Fox <[email protected]>
2024-08-13 11:44:07 -07:00
kfox1111 0289e5fb00 Revert "Added support for specifying Kubelet CA Path (#415)" (#422)
This reverts commit abcf01958a.

Signed-off-by: Kevin Fox <[email protected]>
2024-08-13 11:03:31 -07:00
spire-helm-version-checker[bot]andmarcofranssen bf40797049 Bump test chart dependencies (#418)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-08-12 07:05:38 -07:00
Andrew BlockandFaisal Memon abcf01958a Added support for specifying Kubelet CA Path (#415)
Signed-off-by: Andrew Block <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-08-09 04:56:11 +00:00
kfox1111 6d4d52604a Allow configuring persistence in the spire-agent (#414)
* Allow configuring persistence in the spire-agent

Signed-off-by: Kevin Fox <[email protected]>

* Better wording. Leave space for other services if needed some day.

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2024-08-08 20:06:06 -07:00
Ben Leggett 82a6d5d410 Should be admin_socket_path not admin_socket_dir (#407)
Signed-off-by: Benjamin Leggett <[email protected]>
2024-08-05 15:49:01 -07:00
6240c0b08c Bump test chart dependencies (#402)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2024-07-29 12:57:07 +00:00
kfox1111andFaisal Memon c3d1d39ed7 Update to SPIRE 1.10.0 (#393)
* Update to SPIRE 1.10.0

Remove the options that were removed in 1.10, and update.

Signed-off-by: Kevin Fox <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

* Fix uid mismatch issue on 1.10.0+

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-07-24 12:19:06 -07:00
spire-helm-version-checker[bot]andmarcofranssen c507ee0ea3 Bump test chart dependencies (#397)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-07-15 15:14:13 +02:00
tuxotronandkfox1111 199bb6f998 Add connect by hostname to agent cofigmap (#392)
When setting the kubeletConnectByHostname to "true", the charts update the agent daemonset to define the MY_NODE_NAME environment variable, but it doesn't set the "node_name_env" setting in the WorkloadAttestor:k8s plugin, therefore the agent continues trying to connect to the kubelet using the localhost interface

Signed-off-by: tuxotron <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2024-07-11 12:47:57 -07:00
spire-helm-version-checker[bot]andmarcofranssen 500fdd9ac3 Bump test chart dependencies (#391)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-07-08 12:03:03 +02:00
spire-helm-version-checker[bot]andmarcofranssen 08fc5f3d46 Bump test chart dependencies (#390)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-07-01 08:20:53 +00:00
spire-helm-version-checker[bot]andmarcofranssen 690429525c Bump test chart dependencies (#389)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-06-24 08:20:59 +00:00
knp-sap 7a0a77b6b8 Fix host path of "spire-agent-admin-socket-dir" volume (#386)
Signed-off-by: knp-sap <[email protected]>
2024-06-23 09:54:39 -07:00
spire-helm-version-checker[bot]andmarcofranssen 6c2b5e64cc Bump test chart dependencies (#376)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-06-03 06:50:32 -07:00
d29ad0649f Bump test chart dependencies (#369)
* Bump test chart dependencies

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* Remove workaround as they fixed curl

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
2024-05-27 06:36:36 -07:00
spire-helm-version-checker[bot]andmarcofranssen bfcf418301 Bump test chart dependencies (#359)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-05-20 06:33:31 -07:00
kfox1111 c31a2e9f65 Bump up spire to 1.9.6 (#356)
Signed-off-by: Kevin Fox <[email protected]>
2024-05-16 09:20:14 -07:00
kfox1111 b2e9f40774 Bump spire version (#352)
Signed-off-by: Kevin Fox <[email protected]>
2024-05-07 20:16:15 -07:00
spire-helm-version-checker[bot]andmarcofranssen 7165b20ddf Bump test chart dependencies (#350)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-05-06 12:57:43 -07:00
spire-helm-version-checker[bot]andmarcofranssen f679a0dab6 Bump test chart dependencies (#333)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-04-22 06:34:39 -07:00
marcofranssen 3d2ac166b9 Bump test chart dependencies
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2024-04-19 16:36:40 +02:00
kfox1111andFaisal Memon 1bf3aa77ef Default spire-server port 443 (#308)
Changes the default service port for the spire-server to 443 to allow easier switching between internal access and external access through an ingress controller.

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-04-11 12:29:28 -07:00
kfox1111andFaisal Memon 1ef979c4e7 Remove upgrade hook needed in 0.19.x (#317)
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-04-11 12:00:34 -07:00
kfox1111 5b1bf432f4 Update spire to 1.9.4 (#324)
Signed-off-by: Kevin Fox <[email protected]>
2024-04-11 11:15:05 -07:00
kfox1111 373601086e Update spire to 1.9.3 (#315)
Signed-off-by: Kevin Fox <[email protected]>
2024-04-05 13:37:37 -07:00
kfox1111andFaisal Memon 8a542ab2ac nameOverride autoconfig support (#305)
* nameOverride autoconfig support

When setting up nested charts with nameOverride, you need to
be able to inform other charts about the override.

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-04-02 12:56:58 -07:00
af2639e4e3 Bump test chart dependencies (#310)
* Bump test chart dependencies

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* Revert bash image that breaks tests

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
2024-04-02 11:03:22 -07:00