helm-charts-hardened

Author	SHA1	Message	Date
kfox1111andFaisal Memon	b08e8bf9b1	Agent support for bundle on host path (#478 ) * Agent support for bundle on host path Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-agent/values.yaml Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-10-17 15:12:27 -07:00
Yann Soubeyrandandkfox1111	7b409ed912	Fix cert-manager upstream authority when enabling recommendations (#476 ) Signed-off-by: Yann Soubeyrand <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-10-17 14:14:20 -07:00
kfox1111andFaisal Memon	ba8d993ff4	Changes to make the nested-full test more reliable (#480 ) Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-10-17 19:56:51 +00:00
kfox1111	01c7227b13	Add support for the new fallback spire-controller-manager feature (#471 ) * Add support for the new fallback spire-controller-manager feature Signed-off-by: Kevin Fox <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-10-17 12:38:25 -07:00
spire-helm-version-checker[bot]andmarcofranssen	0a6dd19906	Bump test chart dependencies (#477 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-10-14 06:26:40 -07:00
kfox1111	fcbd64e011	Support federation bundle endpoint profile http_web certificates (#469 ) * Support federation bundle endpoint profile http_web certificates Signed-off-by: Kevin Fox <[email protected]> * Fix var Signed-off-by: Kevin Fox <[email protected]> * Fix key Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-10-10 12:03:54 -07:00
dependabot[bot]	cecf51c27c	Bump helm.sh/helm/v3 from 3.16.1 to 3.16.2 in /tests (#475 ) Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.16.1 to 3.16.2. - [Release notes](https://github.com/helm/helm/releases) - [Commits](https://github.com/helm/helm/compare/v3.16.1...v3.16.2) --- updated-dependencies: - dependency-name: helm.sh/helm/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-10-10 02:13:56 -07:00
kfox1111 Faisal Memon Marco Franssen	c29f45fc30	Add AWS DB types (#464 ) * Add remaining data store options Signed-off-by: Kevin Fox <[email protected]> * Fix env var Signed-off-by: Kevin Fox <[email protected]> * Add aws db types Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix mysql vars Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Fix missing ) Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-server/values.yaml Co-authored-by: Marco Franssen <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix readme Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]> Co-authored-by: Marco Franssen <[email protected]>	2024-10-08 10:50:32 -07:00
kfox1111andFaisal Memon	898a349297	Add remaining data store options (#463 ) * Add remaining data store options Signed-off-by: Kevin Fox <[email protected]> * Fix env var Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-10-07 16:18:06 -07:00
spire-helm-version-checker[bot]andmarcofranssen	2443515682	Bump test chart dependencies (#474 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-10-07 14:04:33 -07:00
kfox1111andFaisal Memon	c46179472c	Update the spire-controller-manager to 0.6.0 (#473 ) Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-10-03 16:27:23 -07:00
kfox1111	5d07eaff52	Align more settings to convention (#467 ) * Align more settings to convention Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-10-03 12:06:38 -07:00
spire-helm-version-checker[bot]andmarcofranssen	ea2d673830	Bump test chart dependencies (#470 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-09-30 17:06:39 -07:00
spire-helm-version-checker[bot]andmarcofranssen	352aee2f0d	Bump test chart dependencies (#468 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-09-23 06:50:10 -07:00
Faisal Memonandkfox1111	c3c8514333	Change curl --caPath to --capath (#462 ) Signed-off-by: Faisal Memon <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-09-17 14:02:06 -07:00
kfox1111andFaisal Memon	68d21ccade	Add an initial json schema file for spire-agent (#458 ) * Add an initial json schema file for spire-agent Signed-off-by: Kevin Fox <[email protected]> * Fix tab Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-09-17 13:39:22 -07:00
Erik Godding BoyeandFaisal Memon	b7e9823a65	Add new config.jwtDomain value to oidc-discovery chart (#457 ) Signed-off-by: Erik Godding Boye <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-09-17 12:36:52 -07:00
kfox1111	ee7aacf61b	Fix autoupdate patterns for spiffe-helper (#460 ) Signed-off-by: Kevin Fox <[email protected]>	2024-09-17 08:27:01 -07:00
nweisenauer	8832da39b4	Protects SPIRE Agent's Chart Against YAML Template Injection (#450 ) * protects agent's chart against template injection Signed-off-by: Nico Weisenauer <[email protected]> * removes unnecessary braces and whitespace Signed-off-by: Nico Weisenauer <[email protected]> * Removes int type validation via cast Signed-off-by: Nico Weisenauer <[email protected]> --------- Signed-off-by: Nico Weisenauer <[email protected]>	2024-09-16 06:23:01 -07:00
dependabot[bot]	ea710023f4	Bump helm.sh/helm/v3 from 3.16.0 to 3.16.1 in /tests (#456 ) Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.16.0 to 3.16.1. - [Release notes](https://github.com/helm/helm/releases) - [Commits](https://github.com/helm/helm/compare/v3.16.0...v3.16.1) --- updated-dependencies: - dependency-name: helm.sh/helm/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-09-14 04:38:50 -07:00
kfox1111	3bc70255e7	Update spiffe-helper (#453 ) * Update spiffe-helper Signed-off-by: Kevin Fox <[email protected]> * Update .github/tests/images.json Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>	2024-09-12 09:49:14 -07:00
dependabot[bot]	98b332b63e	Bump helm.sh/helm/v3 from 3.15.4 to 3.16.0 in /tests (#452 ) Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.15.4 to 3.16.0. - [Release notes](https://github.com/helm/helm/releases) - [Commits](https://github.com/helm/helm/compare/v3.15.4...v3.16.0) --- updated-dependencies: - dependency-name: helm.sh/helm/v3 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-09-12 06:48:30 -07:00
spire-helm-version-checker[bot]andmarcofranssen	86d6fcac25	Bump test chart dependencies (#449 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-09-09 06:36:28 -07:00
Faisal Memon	01b1114e26	Bump spire Helm Chart version from 0.22.0 to 0.23.0 * `7df063f` Upgrade SPIRE to 1.10.3 (#412) * `de5ec47` Bump test chart dependencies (#445) * `e72b94f` Add all built in BundlePublishers (#430) * `532852d` Bump test chart dependencies (#440) * `6e8ad56` Add a spire-agent auto kubelet verification mode (#435) * `50c741e` Remove extra check that sometimes breaks oidc (#437) * `e062b9f` Support ipv4 only clusters (#434) * `b96e07e` Enable more forms of kubelet certificate verification (#426) * `f92d729` Add missing properties required by SecurityContextConstraints CRD (#432) * `8553a78` Bump test chart dependencies (#431) Signed-off-by: Faisal Memon <[email protected]>	2024-09-04 14:00:46 -07:00
Faisal Memon	080d101787	Bump spire-nested Helm Chart version from 0.22.0 to 0.23.0 (#447 ) * `7df063f` Upgrade SPIRE to 1.10.3 (#412) Signed-off-by: Faisal Memon <[email protected]>	2024-09-04 13:39:53 -07:00
kfox1111andFaisal Memon	7df063f8db	Upgrade SPIRE to 1.10.3 (#412 ) * Update SPIRE to 1.10.3 Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-agent/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-09-04 13:16:50 -07:00
spire-helm-version-checker[bot]andmarcofranssen	de5ec47613	Bump test chart dependencies (#445 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-09-02 05:51:02 -07:00
dependabot[bot]	15ad08c64f	Bump github.com/onsi/gomega from 1.34.1 to 1.34.2 in /tests (#442 ) Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.34.1 to 1.34.2. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/gomega/compare/v1.34.1...v1.34.2) --- updated-dependencies: - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-08-29 13:20:29 +02:00
dependabot[bot]	7297130a27	Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.20.2 in /tests (#443 ) Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.20.1 to 2.20.2. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.20.1...v2.20.2) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-08-29 04:09:00 -07:00
kfox1111andFaisal Memon	e72b94fc13	Add all built in BundlePublishers (#430 ) * Add all built in BundlePublishers Signed-off-by: Kevin Fox <[email protected]> * Add secret management Signed-off-by: Kevin Fox <[email protected]> * Fix typo Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-server/values.yaml Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-08-27 12:35:23 -07:00
spire-helm-version-checker[bot]andmarcofranssen	532852d907	Bump test chart dependencies (#440 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-08-26 09:45:03 -07:00
kfox1111	6e8ad569b3	Add a spire-agent auto kubelet verification mode (#435 ) * Add a spire-agent auto kubelet verification mode Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-08-23 15:09:55 -07:00
kfox1111	50c741e047	Remove extra check that sometimes breaks oidc (#437 ) Signed-off-by: Kevin Fox <[email protected]>	2024-08-22 12:08:18 -07:00
kfox1111	f6872299e7	Fix delayed ingress startup in tests (#438 ) * Fix delayed ingress startup in tests Signed-off-by: Kevin Fox <[email protected]> * Fix lint Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-08-22 09:40:41 -07:00
dependabot[bot]	16283b5365	Bump github.com/onsi/ginkgo/v2 from 2.20.0 to 2.20.1 in /tests (#436 ) Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.20.0 to 2.20.1. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.20.0...v2.20.1) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-08-22 05:28:21 -07:00
kfox1111	e062b9f196	Support ipv4 only clusters (#434 ) * Support ipv4 only clusters Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spiffe-oidc-discovery-provider/templates/configmap.yaml Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>	2024-08-21 12:00:38 -07:00
kfox1111andFaisal Memon	b96e07e349	Enable more forms of kubelet certificate verification (#426 ) * Enable kubelet certificate verification by default Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/README.md Signed-off-by: kfox1111 <[email protected]> * Update charts/spire/charts/spire-agent/templates/configmap.yaml Signed-off-by: kfox1111 <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Fix image Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-agent/templates/configmap.yaml Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-08-20 22:08:39 -07:00
Erik Godding Boye	f92d729137	Add missing properties required by SecurityContextConstraints CRD (#432 ) Signed-off-by: Erik Godding Boye <[email protected]>	2024-08-20 08:55:35 -07:00
spire-helm-version-checker[bot]andmarcofranssen	8553a78f6c	Bump test chart dependencies (#431 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-08-19 12:39:18 +02:00
Faisal Memonandkfox1111	ba35e81247	Bump spire-nested Helm Chart version from 0.21.1 to 0.22.0 (#429 ) * `827a3ea` Bump spire to 1.10.1 (#424) Signed-off-by: Faisal Memon <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-08-15 10:13:02 -07:00
Faisal Memon	de1e98337a	Bump spire Helm Chart version from 0.21.1 to 0.22.0 (#428 ) * `9b2d72f` Fix permission issue with 1.10 and defaults when upgraded (#423) * `827a3ea` Bump spire to 1.10.1 (#424) * `0289e5f` Revert "Added support for specifying Kubelet CA Path (#415)" (#422) * `bf40797` Bump test chart dependencies (#418) * `abcf019` Added support for specifying Kubelet CA Path (#415) * `6d4d526` Allow configuring persistence in the spire-agent (#414) Signed-off-by: Faisal Memon <[email protected]>	2024-08-15 13:59:31 +00:00
dependabot[bot]	3e9256ab5c	Bump helm.sh/helm/v3 from 3.15.3 to 3.15.4 in /tests (#427 ) Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.15.3 to 3.15.4. - [Release notes](https://github.com/helm/helm/releases) - [Commits](https://github.com/helm/helm/compare/v3.15.3...v3.15.4) --- updated-dependencies: - dependency-name: helm.sh/helm/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-08-15 06:32:36 -07:00
kfox1111	9b2d72f6a2	Fix permission issue with 1.10 and defaults when upgraded (#423 ) * Fix permission issue with 1.10 and defaults when upgraded Signed-off-by: Kevin Fox <[email protected]> * Fix indenting Signed-off-by: Kevin Fox <[email protected]> * incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-08-13 22:21:20 -07:00
kfox1111	827a3ea80c	Bump spire to 1.10.1 (#424 ) Signed-off-by: Kevin Fox <[email protected]>	2024-08-13 11:44:07 -07:00
kfox1111	0289e5fb00	Revert "Added support for specifying Kubelet CA Path (#415 )" (#422 ) This reverts commit `abcf01958a`. Signed-off-by: Kevin Fox <[email protected]>	2024-08-13 11:03:31 -07:00
spire-helm-version-checker[bot]andmarcofranssen	bf40797049	Bump test chart dependencies (#418 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-08-12 07:05:38 -07:00
Andrew BlockandFaisal Memon	abcf01958a	Added support for specifying Kubelet CA Path (#415 ) Signed-off-by: Andrew Block <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-08-09 04:56:11 +00:00
kfox1111andFaisal Memon	41dce8c32f	Add oci registry style chart support to infrastructure (#405 ) Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-08-08 21:35:22 -07:00
kfox1111	6d4d52604a	Allow configuring persistence in the spire-agent (#414 ) * Allow configuring persistence in the spire-agent Signed-off-by: Kevin Fox <[email protected]> * Better wording. Leave space for other services if needed some day. Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-08-08 20:06:06 -07:00
dependabot[bot]	84f4f45e35	Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.0 in /tests (#413 ) Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.19.1 to 2.20.0. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.19.1...v2.20.0) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-08-08 06:42:03 -07:00

1 2 3 4 5 ...