kfox1111 and Faisal Memon
af155c2edc
Add support for running spiffe secured discovery provider (default) ( #163 )
...
* SPIFFE OIDC Discovery Provider Rework
Fixes: https://github.com/spiffe/helm-charts-hardened/issues/151
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] https://github.com/rancher/kubectl/pull/94
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2024-01-18 16:08:22 -08:00
dependabot[bot]
9a483c174a
Bump github.com/onsi/gomega from 1.30.0 to 1.31.0 in /tests ( #192 )
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.30.0 to 1.31.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.30.0...v1.31.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2024-01-18 04:07:00 -08:00
dependabot[bot]
a59220dd86
Bump helm.sh/helm/v3 from 3.13.3 to 3.14.0 in /tests ( #190 )
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.13.3 to 3.14.0.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.13.3...v3.14.0 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2024-01-18 03:31:32 -08:00
dependabot[bot]
2c56c4a5b1
Bump github.com/onsi/ginkgo/v2 from 2.14.0 to 2.15.0 in /tests ( #191 )
...
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo ) from 2.14.0 to 2.15.0.
- [Release notes](https://github.com/onsi/ginkgo/releases )
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/ginkgo/compare/v2.14.0...v2.15.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2024-01-18 03:15:51 -08:00
kfox1111 and Faisal Memon
f8327657cd
Add a test and example for federation support ( #169 )
...
* SPIFFE OIDC Discovery Provider Rework
Fixes: https://github.com/spiffe/helm-charts-hardened/issues/151
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] https://github.com/rancher/kubectl/pull/94
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2024-01-17 15:09:32 -08:00
kfox1111
3ccdb5e4c1
Add tls section to federation bundle endpoint and fix up annotations ( #173 )
...
* Add cert-manager support to the federation bundle endpoint and fix up bundle endpoint ingress annotations
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2024-01-17 00:17:15 -08:00
kfox1111
c7ab1319cc
Add join_token server nodeattestor support ( #187 )
...
Signed-off-by: Kevin Fox <[email protected]
2024-01-16 14:52:39 -08:00
github-actions[bot] and marcofranssen
81e9523e03
Bump test chart dependencies ( #186 )
...
Signed-off-by: GitHub <[email protected] [email protected]
2024-01-15 06:11:02 -08:00
Mariusz Sabath
6d19a76f01
Fix agent daemonset format ( #184 )
...
Signed-off-by: Mariusz Sabath <[email protected]
2024-01-12 21:20:10 +00:00
dependabot[bot]
f3a85bdb98
Bump github.com/onsi/ginkgo/v2 from 2.13.2 to 2.14.0 in /tests ( #183 )
...
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo ) from 2.13.2 to 2.14.0.
- [Release notes](https://github.com/onsi/ginkgo/releases )
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/ginkgo/compare/v2.13.2...v2.14.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2024-01-12 00:55:06 -08:00
kfox1111
b61d4f5ae1
Add spire-agent to spire-agent pod path ( #180 )
2024-01-11 10:39:12 +00:00
kfox1111
befa074763
Fix notes bug ( #178 )
2024-01-11 10:31:02 +00:00
kfox1111
912c61e05c
Remove deprecated version values ( #179 )
2024-01-11 10:29:56 +00:00
Jerome Meyer
ae4ef6e992
Update HorizontalPodAutoscaler API to autoscaling/v2 ( #153 )
2024-01-11 11:19:41 +01:00
marcofranssen
e7a61a9ec5
Bump test chart dependencies
...
Signed-off-by: GitHub <[email protected]
2024-01-08 14:39:46 +01:00
kfox1111 and Faisal Memon
183e9aa534
SPIFFE OIDC Discovery Provider Rework ( #152 )
...
Co-authored-by: Faisal Memon <[email protected]
2024-01-03 11:40:14 +01:00
github-actions[bot] and marcofranssen
8f1aba8ad3
Bump test chart dependencies ( #171 )
...
Signed-off-by: GitHub <[email protected] [email protected]
2024-01-01 06:05:30 -08:00
kfox1111
2454b8cd2a
Fix links still pointing at older git repo ( #167 )
...
Signed-off-by: Kevin Fox <[email protected]
2023-12-27 17:10:49 -08:00
github-actions[bot] and marcofranssen
e5c5527fd7
Bump test chart dependencies ( #165 )
...
Signed-off-by: GitHub <[email protected] [email protected]
2023-12-25 14:32:18 -08:00
Drew Wells and kfox1111
e6300087b7
Update jwt test to work with newer slim images ( #139 )
...
* install newer version of slim debug
- switch to step tool for jwt verification against jwk public keys
Signed-off-by: Drew Wells <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2023-12-20 19:14:54 -08:00
kfox1111 and Marco Franssen
c39dd44526
Add recommendation for namespacePSS ( #131 )
...
Co-authored-by: Marco Franssen <[email protected]
2023-12-21 00:15:56 +00:00
dependabot[bot] and kfox1111
0555c87eef
Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /tests ( #162 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.14.0 to 0.17.0.
- [Commits](https://github.com/golang/crypto/compare/v0.14.0...v0.17.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected]
2023-12-20 09:50:41 -08:00
kfox1111
80f9d3823c
Revert to older ingress-nginx to fix tests ( #161 )
...
Signed-off-by: Kevin Fox <[email protected]
2023-12-20 09:05:23 -08:00
kfox1111
cb7e7e82c0
Remove 1.29.0 until deps catch up. ( #159 )
...
Related issue: https://github.com/rancher/kubectl/pull/94
Signed-off-by: Kevin Fox <[email protected]
2023-12-19 19:00:41 -08:00
kfox1111
ad905d9c3e
Fix the nested test ( #158 )
...
Signed-off-by: Kevin Fox <[email protected]
2023-12-19 16:12:46 -08:00
kfox1111 and Marco Franssen
49beb64584
Add recommendation for namespaceLayout ( #127 )
...
Co-authored-by: Marco Franssen <[email protected]
2023-12-19 15:02:57 +00:00
Marco Franssen
2496c71164
Bump k8s versions for ci workflow ( #156 )
2023-12-19 15:52:45 +01:00
kfox1111 and Marco Franssen
f642feafef
Fix test logging ( #154 )
...
Co-authored-by: Marco Franssen <[email protected]
2023-12-19 11:52:21 +00:00
kfox1111
33cacd2ee8
Add recommendation for prometheus exporter ( #144 )
2023-12-19 11:38:20 +00:00
kfox1111 and Marco Franssen
6997d6a904
Add recommendation for securityContext and podSecurityContext ( #125 )
...
Co-authored-by: Marco Franssen <[email protected]
2023-12-19 11:26:26 +00:00
kfox1111
50c4ac35b0
Add recommendation for strictMode ( #143 )
2023-12-19 12:12:53 +01:00
4fb9d18f50
Bump test chart dependencies ( #155 )
...
* Bump test chart dependencies
Signed-off-by: GitHub <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2023-12-18 09:12:59 -08:00
Mariusz Sabath
811123a207
Update the Tornjak image version ( #150 )
2023-12-14 23:15:04 +01:00
dependabot[bot]
1f74f6bc13
Bump helm.sh/helm/v3 from 3.13.2 to 3.13.3 in /tests ( #149 )
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.13.2 to 3.13.3.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.13.2...v3.13.3 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2023-12-13 19:47:49 -08:00
Marco Franssen
94498c0a31
Bump cosign to v2.2.2
...
Signed-off-by: Marco Franssen <[email protected]
2023-12-13 08:56:31 +01:00
dependabot[bot]
b7e98c4c95
Bump sigstore/cosign-installer from 3.2.0 to 3.3.0
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.2.0...v3.3.0 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-12-13 08:56:31 +01:00
kfox1111 and Faisal Memon
a097606d77
Remove extra example values that are already set by default ( #128 )
...
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected]
2023-12-12 16:23:23 +00:00
kfox1111
1524537318
Update default for additionalDomains not to include localhost ( #146 )
...
Its pretty much only useful if you want to port forward the
discovery provider and use localhost to access it. An uncommon
use case. Its easy to add back for that case. This simplifies
production deploymnet.
Signed-off-by: Kevin Fox <[email protected]
2023-12-12 08:14:16 -08:00
Marco Franssen
6e997d4f47
Bump cosign to v2.2.2
...
Signed-off-by: Marco Franssen <[email protected]
2023-12-12 12:53:15 +01:00
dependabot[bot]
9d483e276e
Bump sigstore/cosign-installer from 3.2.0 to 3.3.0
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.2.0...v3.3.0 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-12-12 12:53:15 +01:00
kfox1111
8615cb0840
Add devcontainer support to the repo ( #98 )
2023-12-12 12:50:32 +01:00
kfox1111 and Faisal Memon
e35838c309
Add recommendation for priorityClass ( #124 )
...
* Add a flag to enable recommendations
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2023-12-11 11:42:40 -08:00
kfox1111
9f72a8f971
Use good and automatic defaults for tornjak frontend workingDir ( #129 )
...
Signed-off-by: Kevin Fox <[email protected] [email protected]
2023-12-11 07:52:44 -08:00
kfox1111 and Mariusz Sabath
7726351955
Tornjak UBI support ( #123 )
...
* Tornjak UBI support
The Tornjak containers now have two different flavors. Vanilla and UBI.
Automatically select the UBI image when deploying on OpenShift.
Signed-off-by: Kevin Fox <[email protected] [email protected]
2023-12-11 06:56:58 -08:00
kfox1111
89c07e2d04
Revert openssl 3.2 change ( #142 )
...
Signed-off-by: Kevin Fox <[email protected]
2023-12-11 06:33:24 -08:00
marcofranssen
a3d3702049
Bump test chart dependencies
...
Signed-off-by: GitHub <[email protected]
2023-12-11 10:44:48 +01:00
80c7653a21
Bump test chart dependencies ( #134 )
...
* Bump test chart dependencies
Signed-off-by: GitHub <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2023-12-07 22:47:38 +00:00
kfox1111
13f6028ccd
SELinux support ( #122 )
...
* SELinux support
Add support to the chart to set the SELinux context to enable a working
system. Enable it by default on OpenShift clusters.
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected]
2023-12-07 11:02:06 -08:00
dependabot[bot]
c017d82594
Bump actions/setup-python from 4 to 5 ( #137 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 4 to 5.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2023-12-07 12:40:31 +00:00
dependabot[bot]
6fda639237
Bump actions/setup-go from 4.1.0 to 5.0.0 ( #136 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 4.1.0 to 5.0.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v4.1.0...v5.0.0 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2023-12-07 04:32:42 -08:00
