panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
649 Commits 1 Branch 2 Tags
af155c2edcabe6321360c071db1efd445dfe31ec
Commit Graph
649 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Kevin Fox 9d7881f8b4 Switch hostpath to emptydir in spire-server 
The api of the server does not need to be exported out of the
server pod.

Signed-off-by: Kevin Fox <[email protected]>
 2023-02-28 09:49:13 -08:00
Marco Franssen f8cdec3f99 Allow to configure a priorityClassName for Daemonsets 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-27 08:09:00 -08:00
Marco Franssen ba41f04df5 Fix spire-controller-manager healthz port 
This to align with the spire-controller-manager-configmap.yaml

Signed-off-by: Marco Franssen <[email protected]>
 2023-02-27 08:08:17 -08:00
dependabot[bot] e754b3a6c8 Bump actions/checkout from 3.2.0 to 3.3.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.2.0...v3.3.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-02-27 11:32:19 +01:00
kfox1111andMarco Franssen 35eb3bb42e Basic Prometheus support (#28) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-02-24 22:39:15 +01:00
Marco Franssen 495d9d67e8 Align healthz ports and checks across containers 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 21:06:09 +01:00
Faisal Memon 156052ada0 Merge pull request #40 from spiffe/update-contributing 
Clarify Chart version increments in CONTRIBUTING.md
 2023-02-24 11:34:08 -08:00
Marco FranssenandFaisal Memon ef6a6bd53d Improve sentence based on review 
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 20:33:42 +01:00
Marco Franssen 615b4341cc Clarify Chart version increments in CONTRIBUTING.md 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 20:16:47 +01:00
Marco Franssen 8ceb00efe6 Merge pull request #33 from spiffe/version-increment-check 2023-02-24 10:55:17 +01:00
Marco Franssen a29df4f6cc Change to cut releases from the release branch 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 10:55:00 +01:00
Marco Franssen e8768ec955 Add types to trigger workflow when changing the target branch 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 10:55:00 +01:00
Marco Franssen 3c7d828954 Only check for version bump if PR targets main 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 10:55:00 +01:00
Marco Franssen a95ef9f3db Use github.base_ref for target-branch 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-24 10:54:57 +01:00
kfox1111 f149f2ed82 Merge pull request #23 from spiffe/test-non-defaulted-values 
Test charts without defaulted values
 2023-02-23 09:08:15 -08:00
Marco Franssen 5dc93da6b8 Bump to latest Helm and Python versions 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:35:46 +01:00
Marco Franssen d46c3fc14d Test without ACME tos Accepted 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:35:46 +01:00
Marco Franssen 8d97803c8a Bump chart version to 0.2.0 and appVersion to 1.5.5 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:34:52 +01:00
Marco Franssen 49a68c3aed Add test for spire-oidc 
Using the nginx insecure option, because we can't rely on the ACME
protocol as this server isn't reachable.

Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:29 +01:00
Marco Franssen c9779b24ed Add test for upstream-authority-disk 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:28 +01:00
Marco Franssen b24faa9373 Add test for disabled spire-controller-manager 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:28 +01:00
Marco Franssen ec26d85f61 Enable spire-controller-manager by default 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:28 +01:00
Marco Franssen 9135086f8e Add infrastructure to test charts without defaulted values 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:28 +01:00
kfox1111andFaisal Memon 8a3ae10da5 Add the option to disable unix workloadattestor (#26) 
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:32:35 +01:00
Marco Franssen 115d9bdf80 Add category and license annotations for artifacthub 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-22 12:37:00 +01:00
Marco Franssen b804b0a932 Fix workflow trigger path 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-21 20:28:53 +01:00
Kevin Fox 32303d7eba Remove the need for hostpath on oidc provider 
The hostpath isn't needed. This patch removes the extra mount and changes
it to an emptyDir.

Signed-off-by: Kevin Fox <[email protected]>
 2023-02-21 15:48:02 +01:00
Marco Franssen 8974a3086d Disable jekyll for gh-pages 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-21 15:47:06 +01:00
Marco Franssen 9dee09e38e Merge pull request #14 from spiffe/base-chart 2023-02-20 10:59:32 +01:00
Marco Franssen cb3f94022f Remove duplicate volume creation 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:37:31 +01:00
Marco Franssen 73d4ed2ee5 Add .gitignore for the bin folder containing helm-docs 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:37:31 +01:00
Marco Franssen 99d32050ba Remove option to choose different agent socket path 
Resolves #19

Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:23:36 +01:00
Marco FranssenandFaisal Memon 50846ebe9a Improve spiffe-csi security-context 
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:15 +01:00
Marco Franssen 4e1d3d78bb Improve README.md and artifacthub.io 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:15 +01:00
Marco Franssen ff9ab8693c Replace LICENSE 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:15 +01:00
Marco Franssen b3248e5c9c Remove deprecated k8s workload registrar support 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:15 +01:00
Ken HuffmanandMarco Franssen 3448897316 Add namespaceSelector for spire-controller-manager (#112) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:15 +01:00
Marco Franssen bba395b015 Add test for oidc discovery provider 
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:15 +01:00
Marco Franssen 7d9ab07e23 Add the namespace to the oidc-discovery-provider allowed dns names 
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:14 +01:00
Marco Franssen 5c8f1a7c9b Add spire-controller-manager keyword to chart 
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:14 +01:00
Marco Franssen 5fe83469ba Fix link to sources 
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:14 +01:00
Marco Franssen 8be96e4530 Fix spire validating webhook configuration 
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:14 +01:00
Marco Franssen 3018ef8469 Add icon to spire chart 
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:14 +01:00
Marco FranssenandGert Jan Kamstra 225931565a Include spire namespace to fix oidc-provider 
Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Gert Jan Kamstra <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:13 +01:00
Marco Franssen 456c9cc53b Add by default k8s workload registrar compatible SPIFFEIDs to controller-manager setup 
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:13 +01:00
Marco Franssen 31a75aeb43 Bump minimum spire version to 1.5.4 
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:13 +01:00
Marco Franssen 0d49280cda Add support for spire-controller-manager 
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:13 +01:00
Marco Franssen 977468bc6a Fix agent connectivity if deployed with different name 
e.g. if deploying with spire-65de556ac

Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:13 +01:00
Marco Franssen 875b17a948 Fix RBAC permissions k8s-workload-registrar 
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:13 +01:00
Marco Franssen 016e8336d0 Fix agent connectivity if deployed with different name 
e.g. if deploying with spire-65de556ac

Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:12 +01:00