panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
759 Commits 1 Branch 2 Tags
b759abea7fa334eae9e23f998ae02ce753dba4d3
Commit Graph
449 Commits
Author SHA1 Message Date
kfox1111andFaisal Memon af155c2edc Add support for running spiffe secured discovery provider (default) (#163) 
* SPIFFE OIDC Discovery Provider Rework

Fixes: https://github.com/spiffe/helm-charts-hardened/issues/151

Signed-off-by: Kevin Fox <[email protected]>

* Enhance clusterspiffeid's so the discovery provider is independently configurable

Signed-off-by: Kevin Fox <[email protected]>

* Fix tests

Signed-off-by: Kevin Fox <[email protected]>

* More fix tests

Signed-off-by: Kevin Fox <[email protected]>

* More fix tests

Signed-off-by: Kevin Fox <[email protected]>

* Undo

Signed-off-by: Kevin Fox <[email protected]>

* Fix logging

Signed-off-by: Kevin Fox <[email protected]>

* Try to get output

Signed-off-by: Kevin Fox <[email protected]>

* Try and get error code

Signed-off-by: Kevin Fox <[email protected]>

* Fix more logging. Switch port used.

Signed-off-by: Kevin Fox <[email protected]>

* Fix logging

Signed-off-by: Kevin Fox <[email protected]>

* Fix port

Signed-off-by: Kevin Fox <[email protected]>

* Fix up logs for nested test and fix values

Signed-off-by: Kevin Fox <[email protected]>

* Make consistent

Signed-off-by: Kevin Fox <[email protected]>

* Fix nested test

Signed-off-by: Kevin Fox <[email protected]>

* Fix insecure mode and test.

Signed-off-by: Kevin Fox <[email protected]>

* Fix test.

Signed-off-by: Kevin Fox <[email protected]>

* Fix var scoping issue

Signed-off-by: Kevin Fox <[email protected]>

* Set the right flags for ingress

Signed-off-by: Kevin Fox <[email protected]>

* Update dns template

Signed-off-by: Kevin Fox <[email protected]>

* Use more standard port

Signed-off-by: Kevin Fox <[email protected]>

* Fix test logging

Signed-off-by: Kevin Fox <[email protected]>

* Allow reencrypt.

Signed-off-by: Kevin Fox <[email protected]>

* Remove testing changes

Signed-off-by: Kevin Fox <[email protected]>

* Fix formatting

Signed-off-by: Kevin Fox <[email protected]>

* Add LetsEncrypt/ACME/cert-manager support. Remove broken ACME support.

Signed-off-by: Kevin Fox <[email protected]>

* Use spiffe-helper as a sidecar. Significant space savings and read only cert dir

Signed-off-by: Kevin Fox <[email protected]>

* Fix the nested test

Signed-off-by: Kevin Fox <[email protected]>

* Fix merge issue

Signed-off-by: Kevin Fox <[email protected]>

* Remove 1.29.0 until deps catch up.

Related issue: https://github.com/rancher/kubectl/pull/94

Signed-off-by: Kevin Fox <[email protected]>

* Add more error checking

Signed-off-by: Kevin Fox <[email protected]>

* Remove testing code

Signed-off-by: Kevin Fox <[email protected]>

* Simplify the ids. Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Fix logic

Signed-off-by: Kevin Fox <[email protected]>

* Fix var

Signed-off-by: Kevin Fox <[email protected]>

* Make cert-manager bits more readable

Signed-off-by: Kevin Fox <[email protected]>

* Fix template

Signed-off-by: Kevin Fox <[email protected]>

* Fix openshift ingress

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

* Add resource spec

Signed-off-by: Kevin Fox <[email protected]>

* Remove parts that cant merge yet

Signed-off-by: Kevin Fox <[email protected]>

* Add support for running spiffe secured discovery provider (default)

Signed-off-by: Kevin Fox <[email protected]>

* Fix tests

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Fix test

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Fix test

Signed-off-by: Kevin Fox <[email protected]>

* Fix test

Signed-off-by: Kevin Fox <[email protected]>

* Fix merge conflict

Signed-off-by: Kevin Fox <[email protected]>

* Fix merge conflict

Signed-off-by: Kevin Fox <[email protected]>

* Remove defaults

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Add missing configurable for the discovery providers csi driver

Signed-off-by: Kevin Fox <[email protected]>

* Update for changes in spiffe-helper

Signed-off-by: Kevin Fox <[email protected]>

* Point at upstream

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2024-01-18 16:08:22 -08:00
kfox1111 3ccdb5e4c1 Add tls section to federation bundle endpoint and fix up annotations (#173) 
* Add cert-manager support to the federation bundle endpoint and fix up bundle endpoint ingress annotations

Signed-off-by: Kevin Fox <[email protected]>

* Add external secret too

Signed-off-by: Kevin Fox <[email protected]>

* Add forgotten files

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
 2024-01-17 00:17:15 -08:00
kfox1111 c7ab1319cc Add join_token server nodeattestor support (#187) 
Signed-off-by: Kevin Fox <[email protected]>
 2024-01-16 14:52:39 -08:00
github-actions[bot]andmarcofranssen 81e9523e03 Bump test chart dependencies (#186) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2024-01-15 06:11:02 -08:00
Mariusz Sabath 6d19a76f01 Fix agent daemonset format (#184) 
Signed-off-by: Mariusz Sabath <[email protected]>
 2024-01-12 21:20:10 +00:00
kfox1111 b61d4f5ae1 Add spire-agent to spire-agent pod path (#180) 2024-01-11 10:39:12 +00:00
kfox1111 befa074763 Fix notes bug (#178) 2024-01-11 10:31:02 +00:00
kfox1111 912c61e05c Remove deprecated version values (#179) 2024-01-11 10:29:56 +00:00
Jerome Meyer ae4ef6e992 Update HorizontalPodAutoscaler API to autoscaling/v2 (#153) 2024-01-11 11:19:41 +01:00
marcofranssen e7a61a9ec5 Bump test chart dependencies 
Signed-off-by: GitHub <[email protected]>
 2024-01-08 14:39:46 +01:00
kfox1111andFaisal Memon 183e9aa534 SPIFFE OIDC Discovery Provider Rework (#152) 
Co-authored-by: Faisal Memon <[email protected]>
 2024-01-03 11:40:14 +01:00
github-actions[bot]andmarcofranssen 8f1aba8ad3 Bump test chart dependencies (#171) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2024-01-01 06:05:30 -08:00
kfox1111 2454b8cd2a Fix links still pointing at older git repo (#167) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-12-27 17:10:49 -08:00
github-actions[bot]andmarcofranssen e5c5527fd7 Bump test chart dependencies (#165) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-12-25 14:32:18 -08:00
Drew Wellsandkfox1111 e6300087b7 Update jwt test to work with newer slim images (#139) 
* install newer version of slim debug

  - switch to step tool for jwt verification against jwk public keys

Signed-off-by: Drew Wells <[email protected]>

* use step-cli image

Signed-off-by: Drew Wells <[email protected]>

* Fix image tag and add upgrade logic

Signed-off-by: Kevin Fox <[email protected]>

* use registry for consistency

Signed-off-by: Kevin Fox <[email protected]>

* Fix merge conflicts

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Drew Wells <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-12-20 19:14:54 -08:00
kfox1111andMarco Franssen c39dd44526 Add recommendation for namespacePSS (#131) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-12-21 00:15:56 +00:00
kfox1111andMarco Franssen 49beb64584 Add recommendation for namespaceLayout (#127) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-12-19 15:02:57 +00:00
kfox1111 33cacd2ee8 Add recommendation for prometheus exporter (#144) 2023-12-19 11:38:20 +00:00
kfox1111andMarco Franssen 6997d6a904 Add recommendation for securityContext and podSecurityContext (#125) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-12-19 11:26:26 +00:00
kfox1111 50c4ac35b0 Add recommendation for strictMode (#143) 2023-12-19 12:12:53 +01:00
github-actions[bot]marcofranssenkfox1111
 		4fb9d18f50 Bump test chart dependencies (#155) 
* Bump test chart dependencies

Signed-off-by: GitHub <[email protected]>

* Revert broken image for now

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: GitHub <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-12-18 09:12:59 -08:00
Mariusz Sabath 811123a207 Update the Tornjak image version (#150) 2023-12-14 23:15:04 +01:00
kfox1111 1524537318 Update default for additionalDomains not to include localhost (#146) 
Its pretty much only useful if you want to port forward the
discovery provider and use localhost to access it. An uncommon
use case. Its easy to add back for that case. This simplifies
production deploymnet.

Signed-off-by: Kevin Fox <[email protected]>
 2023-12-12 08:14:16 -08:00
kfox1111andFaisal Memon e35838c309 Add recommendation for priorityClass (#124) 
* Add a flag to enable recommendations

Signed-off-by: Kevin Fox <[email protected]>

* Add recommendation for priorityClass

Signed-off-by: Kevin Fox <[email protected]>

* Fix vars

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update docs. Fix typo.

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-12-11 11:42:40 -08:00
kfox1111 9f72a8f971 Use good and automatic defaults for tornjak frontend workingDir (#129) 
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
 2023-12-11 07:52:44 -08:00
kfox1111andMariusz Sabath 7726351955 Tornjak UBI support (#123) 
* Tornjak UBI support

The Tornjak containers now have two different flavors. Vanilla and UBI.
Automatically select the UBI image when deploying on OpenShift.

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Mariusz Sabath <[email protected]>
 2023-12-11 06:56:58 -08:00
kfox1111 89c07e2d04 Revert openssl 3.2 change (#142) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-12-11 06:33:24 -08:00
marcofranssen a3d3702049 Bump test chart dependencies 
Signed-off-by: GitHub <[email protected]>
 2023-12-11 10:44:48 +01:00
github-actions[bot]marcofranssenkfox1111
 		80c7653a21 Bump test chart dependencies (#134) 
* Bump test chart dependencies

Signed-off-by: GitHub <[email protected]>

* Update charts/spire/charts/spiffe-oidc-discovery-provider/values.yaml

Signed-off-by: kfox1111 <[email protected]>

* Fix Docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: GitHub <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-12-07 22:47:38 +00:00
kfox1111 13f6028ccd SELinux support (#122) 
* SELinux support

Add support to the chart to set the SELinux context to enable a working
system. Enable it by default on OpenShift clusters.

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2023-12-07 11:02:06 -08:00
kfox1111andFaisal Memon 3e8335c0ee Add a flag to enable recommendations (#121) 
* Add a flag to enable recommendations

Signed-off-by: Kevin Fox <[email protected]>

* Fix merge issue

Signed-off-by: Kevin Fox <[email protected]>

* Update after reaching consensus.

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-12-02 05:15:32 -08:00
kfox1111andFaisal Memon 692d463718 Remove unneeded lookup function from upgrade hook (#104) 
Those upgrading to 0.17.0 should no longer need the code to check for the old webhook.

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-12-01 10:49:29 -08:00
Andrew BlockMariusz Sabathkfox1111
 		8422b8d141 Added ability to create namespaces (#103) 
* Added ability to create namespaces

Signed-off-by: Andrew Block <[email protected]>

* Add openshift labels

Signed-off-by: Mariusz Sabath <[email protected]>

---------

Signed-off-by: Andrew Block <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
Co-authored-by: Mariusz Sabath <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-12-01 15:42:27 +00:00
Marco Franssenandkfox1111 78bb95ba35 Bump spire Helm Chart version from 0.15.1 to 0.16.0 
* b7d8590 Fix missing protocol in JWT Issuer  (#120)
* 1ef207c Add note about supported version upgrades (#119)
* 4281114 Fix missing release name from install documentation (#118)
* e030fa1 Allow additional CRs to be managed by the chart (#117)
* d936293 Enable agent to kubelet connection to use hostname (#112)
* e68f617 Bump test chart dependencies (#116)
* d616632 Bump spire version to 1.8.5 (#115)
* 95e1eb7 Bump test chart dependencies
* 966061c Auto add default CSIDriver labels on OpenShift
* c9885de Introduce ReadOnlyRootFilesystem for Tornjak frontend (#110)
* 8107095 Fix typo ClusterSPIFFEID for workloadTSelectoremplates (#107)
* 5c0ce97 Ordering of SecurityContextConstraint array items (#105)
* 889d0af Bump test chart dependencies
* f5d1376 Documentation cleanup (#97)

Signed-off-by: Marco Franssen <[email protected]>

Co-authored-by: kfox1111 <[email protected]>
 2023-12-01 16:03:24 +01:00
Mariusz Sabath b7d8590b77 Fix missing protocol in JWT Issuer (#120) 
* Add missing protocol to jwt_issuer

Signed-off-by: Mariusz Sabath <[email protected]>

* Removed trailing spaces

Signed-off-by: Mariusz Sabath <[email protected]>

---------

Signed-off-by: Mariusz Sabath <[email protected]>
 2023-11-29 00:13:32 +00:00
Faisal Memon 1ef207c7b2 Add note about supported version upgrades (#119) 
Signed-off-by: Faisal Memon <[email protected]>
 2023-11-28 22:01:16 +00:00
kfox1111 4281114b49 Fix missing release name from install documentation (#118) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-11-28 12:57:11 -08:00
kfox1111Faisal MemonMarco Franssen
 		e030fa171b Allow additional CRs to be managed by the chart (#117) 
* Add support for the new spire-controller-manager class feature

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs. Swich nested deployment to use controller manager

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Test with nightly

Signed-off-by: Kevin Fox <[email protected]>

* Fix global object naming clash

Signed-off-by: Kevin Fox <[email protected]>

* Fix missing dot

Signed-off-by: Kevin Fox <[email protected]>

* Fix naming conflict with cluster ids

Signed-off-by: Kevin Fox <[email protected]>

* Fix scoping issue

Signed-off-by: Kevin Fox <[email protected]>

* Fix typo

Signed-off-by: Kevin Fox <[email protected]>

* Fix webhook name collision

Signed-off-by: Kevin Fox <[email protected]>

* Fix webhook reference and add note to user about className

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade has to work on the old version of the object before rename

Signed-off-by: Kevin Fox <[email protected]>

* Fix formatting

Signed-off-by: Kevin Fox <[email protected]>

* Remove extra junk from job

Signed-off-by: Kevin Fox <[email protected]>

* Easier local runs and wait for crds

Signed-off-by: Kevin Fox <[email protected]>

* Add missing crd upgrade

Signed-off-by: Kevin Fox <[email protected]>

* Update upgrade notes

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-server/templates/controller-manager-cluster-ids.yaml

Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Bump version to the released 0.4.0

Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Merge in crd changes from upstream

Signed-off-by: Kevin Fox <[email protected]>

* Add auto populate dns

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Add missing ClusterSPIFFEID fields

There are a few options in the CRD not available via the chart.
Sync them to the chart.

Signed-off-by: Kevin Fox <[email protected]>

* Add another missing one

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Allow additional CRs to be managed by the chart

Sometimes additional ClusterSPIFFEIDs and the other CRs are needed. Add
support for the end user to manage those extra CRs via the chart.

Signed-off-by: Kevin Fox <[email protected]>

* Add validation

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Add className to crs

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Fix readme formatting

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/README.md

Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Remove dead code

Signed-off-by: Kevin Fox <[email protected]>

* Fix extra newline

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-11-28 09:15:23 -08:00
kfox1111andMarco Franssen d936293d50 Enable agent to kubelet connection to use hostname (#112) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-11-28 08:43:09 +01:00
github-actions[bot]andmarcofranssen e68f6170a6 Bump test chart dependencies (#116) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-11-27 06:20:42 -08:00
kfox1111 d616632810 Bump spire version to 1.8.5 (#115) 2023-11-24 09:32:27 -08:00
marcofranssen 95e1eb7c57 Bump test chart dependencies 
Signed-off-by: GitHub <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-11-20 10:34:08 +01:00
Kevin Fox 966061c6c7 Auto add default CSIDriver labels on OpenShift 
Signed-off-by: Kevin Fox <[email protected]>
 2023-11-20 10:24:53 +01:00
Mariusz Sabath c9885de539 Introduce ReadOnlyRootFilesystem for Tornjak frontend (#110) 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-11-16 15:47:04 -08:00
Mattias Gees 810709533b Fix typo ClusterSPIFFEID for workloadTSelectoremplates (#107) 
Signed-off-by: Mattias Gees <[email protected]>
 2023-11-16 06:34:56 -08:00
Andrew BlockandFaisal Memon 5c0ce97ad1 Ordering of SecurityContextConstraint array items (#105) 
Signed-off-by: Andrew Block <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-11-15 04:54:17 +00:00
marcofranssen 889d0af84d Bump test chart dependencies 
Signed-off-by: GitHub <[email protected]>
 2023-11-13 13:49:52 +01:00
kfox1111 f5d1376cb6 Documentation cleanup (#97) 
Fix links to the repo after move. Remove references to other versions
of images we don't support.

Signed-off-by: Kevin Fox <[email protected]>
 2023-11-11 12:28:41 -08:00
Marco Franssenandkfox1111 250666a2b0 Bump spire Helm Chart version from 0.15.0 to 0.15.1 
* 821ca12 Add Tornjak ingress example (#30)
* 6cd2282 Update SPIRE crds version (#93)

Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-11-10 14:00:58 +01:00
Faisal Memon 06d8cd2ae5 Bump spire Helm Chart version from 0.14.0 to 0.15.0 
* 6c0a4fb Auto tornjak url (#89)
* f2758a8 Autogen jwtIssuer (#88)
* 93c20c6 Merge pull request #83 from spiffe/doc-ingress-patch
* c662b0c Merge branch 'main' into doc-ingress-patch
* de8cbc8 Bump github.com/onsi/gomega from 1.29.0 to 1.30.0 in /tests (#90)
* 1de838e Bump helm.sh/helm/v3 from 3.13.1 to 3.13.2 in /tests (#91)
* daf9d55 Merge branch 'main' into doc-ingress-patch
* aaeca00 Fix tests after renaming files
* 0320c3f Cleanup documentation
* 37cd9f2 Update to SPIRE 1.8.4 (#84)
* bd7879a Fix the typo in the production ingress README
* 805d869 spire-controller-manager 0.4.0 support (#60)
* edf2381 Bump sigstore/cosign-installer from 3.1.2 to 3.2.0 (#85)
* 0ed6d92 Bump test chart dependencies
* f7b6140 Fix docs
* a7e8785 Add another missing one
* 3778597 Add missing ClusterSPIFFEID fields
* 9b31f3d Bump helm/chart-testing-action from 2.6.0 to 2.6.1
* d6583be Add missing no cleanup flags to example tests (#79)
* 81cc2dc Ingress type openshift (#52)
* 2dce90f Bump helm/chart-releaser-action from 1.5.0 to 1.6.0 (#75)
* f08ebd3 Patch Tornjak ingress (#74)
* 6a6aa1c Cosign download fix (#72)
* 3b01684 Support Openshift deployment  (#13)
* ed23d8b Simple ingress support (#48)
* b354413 Fix incorrect nesting of priorityClassName (#67)
* 09ebfc9 Bump test chart dependencies (#68)
* d50d78d Fix ingress annotation variable for tornjak server (#66)
* b813807 Update docs to simplify, clarify, and prioritize ease of install/upgrade (#62)
* 5ad35bd Merge pull request #59 from sabre1041/spire-agent-nodename
* 02d445c Update charts/spire/README.md
* 9bd7f43 Added environment variable to spire-agent to inject node name
* fb64f8d Bump github.com/onsi/gomega from 1.28.1 to 1.29.0 in /tests (#61)
* 30d0f59 Update helm-charts repository URL (#58)
* 7924323 Specify ingress controller type (#43)
* 0b17434 Bump test chart dependencies (#54)
* a419903 Bump github.com/onsi/gomega from 1.28.0 to 1.28.1 in /tests (#53)
* 5025025 Fix doc missing end tag (#46)
* cf226a7 Bump actions/checkout from 4.1.0 to 4.1.1 (#42)

Signed-off-by: Faisal Memon <[email protected]>
 2023-11-09 13:18:02 -08:00