dependabot[bot]
bf16ddf75a
Bump imjasonh/setup-crane from 0.3 to 0.5
...
Bumps [imjasonh/setup-crane](https://github.com/imjasonh/setup-crane ) from 0.3 to 0.5.
- [Release notes](https://github.com/imjasonh/setup-crane/releases )
- [Commits](https://github.com/imjasonh/setup-crane/compare/v0.3...v0.5 )
---
updated-dependencies:
- dependency-name: imjasonh/setup-crane
dependency-version: '0.5'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-24 19:41:43 +02:00
Daniel Schlatter
f537f7702f
allow unsupported built-in key manager plugins to be used ( #798 )
...
Signed-off-by: Daniel Schlatter <[email protected]
2026-04-23 05:31:17 -07:00
spire-helm-version-checker[bot] and marcofranssen
c5ba8213df
Bump test chart dependencies ( #797 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2026-04-20 04:27:18 -07:00
Jesper Engberg and kfox1111
dfe8089160
feat: add gcp_iit node attestor configuration options ( #796 )
...
* feat: add gcp_iit node attestor configuration options
Signed-off-by: Jesper Engberg <[email protected] [email protected] [email protected] [email protected] [email protected]
2026-04-15 16:33:53 +00:00
Dávid Szakállas
3c1dec3035
fix casing of svidStore ( #787 )
...
Signed-off-by: Dávid Szakállas <[email protected]
2026-04-15 09:08:25 -07:00
spire-helm-version-checker[bot] and marcofranssen
21969d20f3
Bump test chart dependencies ( #795 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2026-04-14 11:34:08 +02:00
Faisal Memon
d334bfde50
Bump spiffe-step-ssh Helm Chart version from 0.1.1 to 0.1.2 ( #794 )
...
* 9273f11f#785 )
Signed-off-by: Faisal Memon <[email protected]
2026-04-11 08:52:09 -07:00
Faisal Memon and kfox1111
d65890e409
Bump spire-nested Helm Chart version from 0.28.3 to 0.28.4 ( #792 )
...
* 86787b59#790 )
* 040ccf90#789 )
* 9273f11f#785 )
* 96773a31#777 )
Signed-off-by: Faisal Memon <[email protected] [email protected]
2026-04-10 23:32:47 -07:00
Faisal Memon
a062e49c91
Bump spire Helm Chart version from 0.28.3 to 0.28.4
...
* 01342172#788 )
* 040ccf90#789 )
* 9273f11f#785 )
* 145f3a36#784 )
* a27acbcb#786 )
* 838a3535#783 )
* 59de7aa3#779 )
* 96773a31#777 )
* aad7527c#774 )
* de59147f#775 )
* bf4bd819#772 )
* f78c1d42#773 )
* 7afffd75#771 )
* 60899fc9#769 )
* 2de363a4#767 )
* 6631349b#766 )
Signed-off-by: Faisal Memon <[email protected]
2026-04-10 15:48:58 -07:00
013421724f
Fix typos in error messages ( #788 )
...
* nit: fix typos
Signed-off-by: Dávid Szakállas <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-04-10 16:56:50 +00:00
kfox1111
86787b5912
Add initial spire-ha-agent support to the spire-nested chart ( #790 )
...
* Add initial spire-ha-agent support to the spire-nested chart
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected]
2026-04-10 08:46:28 +00:00
dependabot[bot]
c71ffc3c4e
Bump helm.sh/helm/v3 from 3.20.1 to 3.20.2 in /tests ( #791 )
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.20.1 to 3.20.2.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.20.1...v3.20.2 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.20.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-10 01:28:51 -07:00
kfox1111
040ccf905b
Bump versions to 1.14.5 ( #789 )
...
Signed-off-by: Kevin Fox <[email protected]
2026-04-09 10:07:37 -07:00
Faisal Memon
9273f11f0a
Support root-level spire-lib chart reuse ( #785 )
...
* Add root-level spire-lib chart
Signed-off-by: Faisal Memon <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-04-09 05:14:05 -07:00
Shubham Hibare and kfox1111
145f3a36b5
chore: Add configurable probes for controller-manager ( #784 )
...
Signed-off-by: Shubham Hibare <[email protected] [email protected]
2026-04-06 18:30:43 +00:00
spire-helm-version-checker[bot] and marcofranssen
a27acbcbca
Bump test chart dependencies ( #786 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2026-04-06 07:12:47 -07:00
kfox1111
838a353567
Label chart ( #783 )
...
Signed-off-by: Kevin Fox <[email protected]
2026-04-05 08:47:27 -07:00
kfox1111
419af5c901
Update package version for spire-ha-agent ( #778 )
...
Signed-off-by: Kevin Fox <[email protected]
2026-03-30 04:09:20 -07:00
spire-helm-version-checker[bot] and marcofranssen
59de7aa314
Bump test chart dependencies ( #779 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2026-03-30 12:03:11 +02:00
kfox1111
96773a310f
Bump versions ( #777 )
...
* Bump versions
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected]
2026-03-29 12:13:59 -07:00
Alan Cha and Kevin Fox
aad7527c0c
Add set_key_use configuration option ( #774 )
...
* Add set_key_use configuration option
Add a setKeyUse boolean configuration option to control the set_key_use
field in the SPIFFE OIDC Discovery Provider configuration.
When enabled, this adds the 'use': 'sig' field to JWKS keys, which is
required for compatibility with Keycloak's SPIFFE identity provider.
Defaults to false to maintain backward compatibility.
Signed-off-by: Alan Cha <[email protected] [email protected] [email protected] [email protected] [email protected]
2026-03-29 09:34:30 -07:00
Daniel Schlatter
de59147fc5
fix gather hostcert edge case issues ( #775 )
...
* Check each conditional of gather host cert in case a command to create the host cert fails
Signed-off-by: Daniel Schlatter <[email protected] [email protected] [email protected]
2026-03-29 16:13:20 +00:00
kfox1111
9960e106eb
spire-ha-agent chart ( #519 )
...
* Initial swag at a spire-ha-agent chart
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-03-29 08:09:50 -07:00
bf4bd8199e
feature: add awsSecretsManager upstreamAuthority ( #772 )
...
* feature: add awsSecretsManager upstreamAuthority
Signed-off-by: gcavalcante8808 <[email protected] #773 )
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected] [email protected] #1 )
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-03-26 11:43:19 -07:00
spire-helm-version-checker[bot] and marcofranssen
f78c1d4246
Bump test chart dependencies ( #773 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2026-03-23 06:59:16 -07:00
spire-helm-version-checker[bot] and marcofranssen
7afffd75ca
Bump test chart dependencies ( #771 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2026-03-16 11:36:52 +01:00
dependabot[bot]
0370d3170a
Bump helm.sh/helm/v3 from 3.20.0 to 3.20.1 in /tests
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.20.0 to 3.20.1.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.20.0...v3.20.1 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.20.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2026-03-13 16:02:53 +01:00
anhpatel
60899fc9d2
Add configurable hostNetwork support to spiffe-csi-driver ( #769 )
...
Signed-off-by: aniket patel <[email protected]
2026-03-10 14:09:31 -07:00
spire-helm-version-checker[bot] and marcofranssen
2de363a4a6
Bump test chart dependencies ( #767 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2026-03-09 09:01:33 -07:00
Shubham Hibare
6631349bbb
feat(spire-server): add logEncoding parameter for controller-manager ( #766 )
...
Signed-off-by: Shubham Hibare <[email protected]
2026-03-05 09:57:44 -08:00
Faisal Memon
8afe8cf6e7
Bump spire Helm Chart version from 0.28.2 to 0.28.3
...
* 2385c2d7#763 )
Signed-off-by: Faisal Memon <[email protected]
2026-03-04 07:58:57 -08:00
Faisal Memon
20940774d1
Bump spire-nested Helm Chart version from 0.28.2 to 0.28.3
...
* 2385c2d7#763 )
Signed-off-by: Faisal Memon <[email protected]
2026-03-04 07:38:32 -08:00
kfox1111
2385c2d7a2
Bump spire to 1.14.2 ( #763 )
2026-03-04 00:57:14 +00:00
Faisal Memon
85989b45eb
Bump spire Helm Chart version from 0.28.1 to 0.28.2
...
* 24b3a173#758 )
* 0133d4a5#755 )
* 0a841c76#759 )
* a9bee70c#757 )
* bb4c0f33#756 )
* 3e8f3f18#753 )
* b0aa3e42#751 )
* 3daadc64#752 )
* 730b76bb#750 )
* e849a1fb#749 )
* 982d53c2#746 )
* 8abac78a#740 )
* 75ffbd06#741 )
* 141c8865#744 )
* 6b5d01b7#743 )
* ba2b6a5a#748 )
* 86a806f3#742 )
* 7d266454#715 )
* 666d304c#738 )
* a7ac6a49#735 )
Signed-off-by: Faisal Memon <[email protected]
2026-03-03 15:21:39 -08:00
Faisal Memon
6937ae01a2
Bump spire-nested Helm Chart version from 0.28.1 to 0.28.2
...
Signed-off-by: Faisal Memon <[email protected]
2026-03-03 15:02:10 -08:00
Faisal Memon
24b3a1730e
Change hostNetwork to auto ( #758 )
2026-03-03 21:56:48 +00:00
Daniel Schlatter and kfox1111
0133d4a5a7
add key experimental.requirePQKEM for spire-server and spire-agent ( #755 )
...
Signed-off-by: Daniel Schlatter <[email protected] [email protected]
2026-03-03 06:31:44 -08:00
Marco Franssen
50afee93c0
Bump CI to last 3 k8s minors
...
Signed-off-by: Marco Franssen <[email protected]
2026-03-02 19:32:48 +01:00
spire-helm-version-checker[bot] and marcofranssen
0a841c76a2
Bump test chart dependencies ( #759 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2026-03-02 10:03:57 +01:00
Shubham Hibare
a9bee70c0b
feat(spiffe-oidc-discovery-provider): Add configurable log format option. ( #757 )
...
Signed-off-by: Shubham Hibare <[email protected]
2026-02-25 14:20:59 -08:00
Shubham Hibare
bb4c0f33ce
chore: Bump controller manager image tag to 0.6.3 in README and values.yaml ( #756 )
...
* chore: Bump controller manager image tag to 0.6.3 in README and values.yaml
Signed-off-by: Shubham Hibare <[email protected] [email protected] [email protected]
2026-02-25 06:55:42 -08:00
3e8f3f1893
Bump test chart dependencies ( #753 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected] [email protected]
2026-02-23 16:15:40 +00:00
Rowan Ruseler and kfox1111
b0aa3e4266
Fix duplicate port names in controller-manager containers ( #751 )
...
* Fix duplicate port names in controller-manager containers
Multiple controller-manager containers were using the same "heathz" port
name, causing Kubernetes warnings about duplicate ports in the
StatefulSet. This also affected the prometheus port "prom-cm".
Changes:
* Renamed healthz port to hp-cm (health port - controller manager)
* Renamed prom-cm to pm-cm for consistency
* Addedd {{ .portSuffix }} variable to differentiate external controller
ports
* Implemented port suffix logic
The suffix logic handles cluster names by:
1. Names <9 chars: use full name as suffic
* e.g.: child01 -> -child01
2. Names with trailing numbers: preserve the number format users chose
* Detects 1-2 digit numbers with optional hyphen
* Truncates base name to fit within 15 chars
* e.g.: verlongcluster-01 -> -verylo-01
3. Names without numbers: use SHA-256 hash for uniqueness
* Trunactes name to 5 chars and appends 3-char hash
* e.g.: verlongclustername -> -veryl-a3f
The logic separates container suffix (full name) from port suffix
(truncated) so container names remain descriptive while port names stay
compliant.
Fixes #525 #655
Signed-off-by: Rowan Ruseler <[email protected] [email protected] [email protected] [email protected] [email protected]
2026-02-23 15:20:25 +01:00
Shubham Hibare
3daadc6456
fix(spire-server): Support duration strings for connMaxLifetime ( #752 )
...
* fix(spire-server): Support duration strings for connMaxLifetime
Signed-off-by: Shubham Hibare <[email protected] [email protected] [email protected]
2026-02-19 10:55:11 -08:00
spire-helm-version-checker[bot] and marcofranssen
730b76bbaa
Bump test chart dependencies ( #750 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]
2026-02-16 05:48:10 -08:00
Rowan Ruseler and kfox1111
e849a1fbd6
Add configurable hostNetwork parameter for spire-agent ( #749 )
...
* Add configurable hostNetwork parameter for spire-agent
Adds `hostNetwork` as a configurable parameter in the spire-agent chart.
We can now explicitly control whether the spire-agent daemonset uses
host networking.
Changes:
* Updated daemonset template
* Changed `dnsPolicy` logic to follow the computed `hostNetwork` instead
of kubelet mode directly
* Updated documentation
Behaviour:
If you leave `hostNetwork` empty (the default), it behaves like PR #705 :
* automatically disables when using hostname or hostip kubelet modes
* automatically enables for localhost
If you set it explicitly to `true` or `false`, that overrides the
automatic behaviour. When `hostNetwork` is enabled and you haven't set a
custom `dnsPolicy`, it defaults to `ClusterFirstWithHostNet`.
Fixes #704
Signed-off-by: Rowan Ruseler <[email protected] [email protected] [email protected] [email protected]
2026-02-14 00:57:20 +00:00
Jayme Howard and kfox1111
982d53c200
Add ContainerResource scaling to spire-server HPA ( #746 )
...
* Add ContainerResource scaling to spire-server HPA
Signed-off-by: Jayme Howard <[email protected] [email protected] [email protected] [email protected]
2026-02-14 00:29:22 +00:00
Pratik Lotia
8abac78a15
Support leaderElection values in controller manager ( #740 )
2026-02-11 15:58:54 -08:00
Rowan Ruseler
75ffbd06f5
Add imagePullSecrets support to helm hook jobs ( #741 )
...
* Add imagePullSecrets support to helm hook jobs
Hook jobs lacked imagePullSecrets configuration on their pod specs,
causing image pull failures in environments using private registries
with authentication
* spire-server: post-install, pre-upgrade, post-upgrade, pre-delete
hooks
* spire-oidc-discovery-provider: pre-delete hook
* spike-nexus: bootstrap hook
* spire: global imagePullSecrets
Fixes #649
Signed-off-by: Rowan Ruseler <[email protected] [email protected] [email protected] [email protected]
2026-02-11 15:16:16 -08:00
Rowan Ruseler and kfox1111
141c8865a3
Add pobLabels support to csi and oidc ( #744 )
...
spiffe-csi-driver and spiffe-oidc-discovery provider are now brought in
line with spire-server and spire-agent, which already support podLabels.
Changes:
* Add podLabels parameter
Fixes #719
Signed-off-by: Rowan Ruseler <[email protected] [email protected]
2026-02-10 15:03:54 -08:00
dependabot[bot]