panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,197 Commits 1 Branch 2 Tags
ba99ab3eb3de07add6909072567219f9336b5c5d
Commit Graph
1197 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot] 75bf39f853 Bump helm.sh/helm/v3 from 3.20.2 to 3.21.0 in /tests (#827) 
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.20.2 to 3.21.0.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.20.2...v3.21.0)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-15 21:21:59 +02:00
Bronson Mirafuentesandkfox1111 9bdfc10ffe wire ratelimit configuration option in spire-server configMap (#826) 
* feat(spire-server): add ratelimit.attestation and ratelimit.signing values

Signed-off-by: Bronson Mirafuentes <[email protected]>

* feat(spire-server): render ratelimit block in server config from values

Signed-off-by: Bronson Mirafuentes <[email protected]>

* chore: bump spire-server and spire chart versions for ratelimit feature

Signed-off-by: Bronson Mirafuentes <[email protected]>

* revert version bumps, use camelcase for rateLimit

Signed-off-by: Bronson Mirafuentes <[email protected]>

* update readme

Signed-off-by: Bronson Mirafuentes <[email protected]>

---------

Signed-off-by: Bronson Mirafuentes <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2026-05-14 13:18:56 -07:00
Pratik Lotia 806c6ae59e aws node attester: add org verification support (#825) 
* add verify org support for aws node attester

Signed-off-by: pratik-lotia <[email protected]>

* refactor with suggested changes

Signed-off-by: pratik-lotia <[email protected]>

---------

Signed-off-by: pratik-lotia <[email protected]>
 2026-05-12 12:25:07 -07:00
dependabot[bot] f9a2c443a6 Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#821) 
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v4.1.1...v4.1.2)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-11 06:42:03 +00:00
dependabot[bot] dcbb10cbc0 Bump regclient/actions 
Bumps [regclient/actions](https://github.com/regclient/actions) from f3c6d87835906c175eb6ccfc18b348b69bb447e7 to c70ad64367908075211b10dcd2ab9fad4bfa1816.
- [Release notes](https://github.com/regclient/actions/releases)
- [Changelog](https://github.com/regclient/actions/blob/main/RELEASE.md)
- [Commits](https://github.com/regclient/actions/compare/f3c6d87835906c175eb6ccfc18b348b69bb447e7...c70ad64367908075211b10dcd2ab9fad4bfa1816)

---
updated-dependencies:
- dependency-name: regclient/actions
  dependency-version: c70ad64367908075211b10dcd2ab9fad4bfa1816
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-05-11 08:40:48 +02:00
Faisal Memonandkfox1111 574fa87d57 Bump spire Helm Chart version from 0.28.4 to 0.28.5 (#817) 
* c489dfc4 Update helper images in spiffe-csi-driver (#815)
* f537f770 allow unsupported built-in key manager plugins to be used (#798)
* c5ba8213 Bump test chart dependencies (#797)
* dfe80891 feat: add gcp_iit node attestor configuration options (#796)
* 21969d20 Bump test chart dependencies (#795)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2026-05-07 05:04:38 -07:00
Faisal Memon 146cf1add6 Bump spire-nested Helm Chart version from 0.28.4 to 0.28.5 (#818) 
Signed-off-by: Faisal Memon <[email protected]>
 2026-05-03 05:52:41 -07:00
Daniel Schlatter c489dfc4db Update helper images in spiffe-csi-driver (#815) 
csi-node-driver-registrar -> 2.15.0
ubi9 -> ubi10/ubi-minimal:10.1-1776834797

Signed-off-by: Daniel Schlatter <[email protected]>
 2026-05-02 00:25:29 -07:00
dependabot[bot] 9226e4f147 Bump github.com/onsi/ginkgo/v2 from 2.28.2 to 2.28.3 in /tests 
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.28.2 to 2.28.3.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.28.2...v2.28.3)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.28.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-04-29 11:08:16 +02:00
dependabot[bot] 53889562c4 Bump github.com/onsi/gomega from 1.39.1 to 1.40.0 in /tests 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.39.1 to 1.40.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.39.1...v1.40.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-04-29 10:56:22 +02:00
dependabot[bot] ad41ac1fa2 Bump docker/login-action from 3.1.0 to 4.1.0 
Bumps [docker/login-action](https://github.com/docker/login-action) from 3.1.0 to 4.1.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v3.1.0...v4.1.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-04-28 14:38:20 +02:00
dependabot[bot] 7f311dcd5e Bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.2 in /tests 
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.28.1 to 2.28.2.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.28.1...v2.28.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.28.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-04-28 14:13:02 +02:00
dependabot[bot] f17e024a66 Bump azure/setup-helm from 3.5 to 5 
Bumps [azure/setup-helm](https://github.com/azure/setup-helm) from 3.5 to 5.
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](https://github.com/azure/setup-helm/compare/v3.5...v5)

---
updated-dependencies:
- dependency-name: azure/setup-helm
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-04-28 14:03:36 +02:00
dependabot[bot] 5d4c0438c2 Bump helm/kind-action from 1.9.0 to 1.14.0 (#810) 
Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.9.0 to 1.14.0.
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](https://github.com/helm/kind-action/compare/v1.9.0...v1.14.0)

---
updated-dependencies:
- dependency-name: helm/kind-action
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-27 14:56:27 +00:00
dependabot[bot] bd9fc402e5 Bump helm/chart-releaser-action from 1.6.0 to 1.7.0 (#806) 
Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/helm/chart-releaser-action/releases)
- [Commits](https://github.com/helm/chart-releaser-action/compare/v1.6.0...v1.7.0)

---
updated-dependencies:
- dependency-name: helm/chart-releaser-action
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-27 14:47:19 +00:00
dependabot[bot] 4d4f2490f5 Bump peter-evans/create-pull-request from 6.0.2 to 8.1.1 (#805) 
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6.0.2 to 8.1.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v6.0.2...v8.1.1)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-27 14:45:07 +00:00
dependabot[bot] 2dd8efae28 Bump actions/setup-go from 5.0.0 to 6.4.0 (#809) 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.0.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v5.0.0...v6.4.0)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-27 16:44:04 +02:00
dependabot[bot] 72f15a87f3 Bump helm/chart-testing-action from 2.6.1 to 2.8.0 (#807) 
Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.6.1 to 2.8.0.
- [Release notes](https://github.com/helm/chart-testing-action/releases)
- [Commits](https://github.com/helm/chart-testing-action/compare/v2.6.1...v2.8.0)

---
updated-dependencies:
- dependency-name: helm/chart-testing-action
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-27 16:43:39 +02:00
dependabot[bot] 8fbf7e8e67 Bump actions/setup-python from 5 to 6 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-04-24 19:53:46 +02:00
dependabot[bot] 40a3ba5ea4 Bump actions/checkout from 4.1.1 to 6.0.2 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v4.1.1...v6.0.2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-04-24 19:45:43 +02:00
dependabot[bot] c430a55529 Bump regclient/actions 
Bumps [regclient/actions](https://github.com/regclient/actions) from b6614f5f56245066b533343a85f4109bdc38c8cc to f3c6d87835906c175eb6ccfc18b348b69bb447e7.
- [Release notes](https://github.com/regclient/actions/releases)
- [Changelog](https://github.com/regclient/actions/blob/main/RELEASE.md)
- [Commits](https://github.com/regclient/actions/compare/b6614f5f56245066b533343a85f4109bdc38c8cc...f3c6d87835906c175eb6ccfc18b348b69bb447e7)

---
updated-dependencies:
- dependency-name: regclient/actions
  dependency-version: f3c6d87835906c175eb6ccfc18b348b69bb447e7
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-04-24 19:44:28 +02:00
dependabot[bot] bf8519364c Bump sigstore/cosign-installer from 3.4.0 to 4.1.1 
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.4.0 to 4.1.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.4.0...v4.1.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-04-24 19:43:10 +02:00
dependabot[bot] bf16ddf75a Bump imjasonh/setup-crane from 0.3 to 0.5 
Bumps [imjasonh/setup-crane](https://github.com/imjasonh/setup-crane) from 0.3 to 0.5.
- [Release notes](https://github.com/imjasonh/setup-crane/releases)
- [Commits](https://github.com/imjasonh/setup-crane/compare/v0.3...v0.5)

---
updated-dependencies:
- dependency-name: imjasonh/setup-crane
  dependency-version: '0.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-04-24 19:41:43 +02:00
Daniel Schlatter f537f7702f allow unsupported built-in key manager plugins to be used (#798) 
Signed-off-by: Daniel Schlatter <[email protected]>
 2026-04-23 05:31:17 -07:00
spire-helm-version-checker[bot]andmarcofranssen c5ba8213df Bump test chart dependencies (#797) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2026-04-20 04:27:18 -07:00
Jesper Engbergandkfox1111 dfe8089160 feat: add gcp_iit node attestor configuration options (#796) 
* feat: add gcp_iit node attestor configuration options

Signed-off-by: Jesper Engberg <[email protected]>

* fix: align indentation

Signed-off-by: Jesper Engberg <[email protected]>

* fix: remove unused var

Signed-off-by: Jesper Engberg <[email protected]>

---------

Signed-off-by: Jesper Engberg <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2026-04-15 16:33:53 +00:00
Dávid Szakállas 3c1dec3035 fix casing of svidStore (#787) 
Signed-off-by: Dávid Szakállas <[email protected]>
 2026-04-15 09:08:25 -07:00
spire-helm-version-checker[bot]andmarcofranssen 21969d20f3 Bump test chart dependencies (#795) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2026-04-14 11:34:08 +02:00
Faisal Memon d334bfde50 Bump spiffe-step-ssh Helm Chart version from 0.1.1 to 0.1.2 (#794) 
* 9273f11f Support root-level spire-lib chart reuse (#785)

Signed-off-by: Faisal Memon <[email protected]>
 2026-04-11 08:52:09 -07:00
Faisal Memonandkfox1111 d65890e409 Bump spire-nested Helm Chart version from 0.28.3 to 0.28.4 (#792) 
* 86787b59 Add initial spire-ha-agent support to the spire-nested chart (#790)
* 040ccf90 Bump versions to 1.14.5 (#789)
* 9273f11f Support root-level spire-lib chart reuse (#785)
* 96773a31 Bump versions (#777)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2026-04-10 23:32:47 -07:00
Faisal Memon a062e49c91 Bump spire Helm Chart version from 0.28.3 to 0.28.4 
* 01342172 Fix typos in error messages (#788)
* 040ccf90 Bump versions to 1.14.5 (#789)
* 9273f11f Support root-level spire-lib chart reuse (#785)
* 145f3a36 chore: Add configurable probes for controller-manager (#784)
* a27acbcb Bump test chart dependencies (#786)
* 838a3535 Label chart (#783)
* 59de7aa3 Bump test chart dependencies (#779)
* 96773a31 Bump versions (#777)
* aad7527c Add set_key_use configuration option (#774)
* de59147f fix gather hostcert edge case issues (#775)
* bf4bd819 feature: add awsSecretsManager upstreamAuthority (#772)
* f78c1d42 Bump test chart dependencies (#773)
* 7afffd75 Bump test chart dependencies (#771)
* 60899fc9 Add configurable hostNetwork support to spiffe-csi-driver (#769)
* 2de363a4 Bump test chart dependencies (#767)
* 6631349b feat(spire-server): add logEncoding parameter for controller-manager (#766)

Signed-off-by: Faisal Memon <[email protected]>
 2026-04-10 15:48:58 -07:00
Dávid SzakállasFaisal Memonkfox1111kfox1111
 		013421724f Fix typos in error messages (#788) 
* nit: fix typos

Signed-off-by: Dávid Szakállas <[email protected]>

* Apply suggestion from @kfox1111

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Dávid Szakállas <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2026-04-10 16:56:50 +00:00
kfox1111 86787b5912 Add initial spire-ha-agent support to the spire-nested chart (#790) 
* Add initial spire-ha-agent support to the spire-nested chart

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Fix lint issue

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2026-04-10 08:46:28 +00:00
dependabot[bot] c71ffc3c4e Bump helm.sh/helm/v3 from 3.20.1 to 3.20.2 in /tests (#791) 
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.20.1 to 3.20.2.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.20.1...v3.20.2)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-10 01:28:51 -07:00
kfox1111 040ccf905b Bump versions to 1.14.5 (#789) 
Signed-off-by: Kevin Fox <[email protected]>
 2026-04-09 10:07:37 -07:00
Faisal Memon 9273f11f0a Support root-level spire-lib chart reuse (#785) 
* Add root-level spire-lib chart

Signed-off-by: Faisal Memon <[email protected]>

* Make spire consume root-level spire-lib

Signed-off-by: Faisal Memon <[email protected]>

* Prepare chart dependencies in CI

Signed-off-by: Faisal Memon <[email protected]>

* Document DCO requirement in CODEX

Signed-off-by: Faisal Memon <[email protected]>

* Centralize local chart dependency prep

Signed-off-by: Faisal Memon <[email protected]>

* Exclude spire-lib from chart-testing install

Signed-off-by: Faisal Memon <[email protected]>

* Rename CODEX guide to AGENTS

Signed-off-by: Faisal Memon <[email protected]>

* Add make target for chart dependencies

Signed-off-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
 2026-04-09 05:14:05 -07:00
Shubham Hibareandkfox1111 145f3a36b5 chore: Add configurable probes for controller-manager (#784) 
Signed-off-by: Shubham Hibare <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2026-04-06 18:30:43 +00:00
spire-helm-version-checker[bot]andmarcofranssen a27acbcbca Bump test chart dependencies (#786) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2026-04-06 07:12:47 -07:00
kfox1111 838a353567 Label chart (#783) 
Signed-off-by: Kevin Fox <[email protected]>
 2026-04-05 08:47:27 -07:00
kfox1111 419af5c901 Update package version for spire-ha-agent (#778) 
Signed-off-by: Kevin Fox <[email protected]>
 2026-03-30 04:09:20 -07:00
spire-helm-version-checker[bot]andmarcofranssen 59de7aa314 Bump test chart dependencies (#779) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2026-03-30 12:03:11 +02:00
kfox1111 96773a310f Bump versions (#777) 
* Bump versions

Signed-off-by: Kevin Fox <[email protected]>

* Try this

Signed-off-by: Kevin Fox <[email protected]>

* Fix test for newer spire

Signed-off-by: Kevin Fox <[email protected]>

* Bump controller manager version

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2026-03-29 12:13:59 -07:00
Alan ChaandKevin Fox aad7527c0c Add set_key_use configuration option (#774) 
* Add set_key_use configuration option

Add a setKeyUse boolean configuration option to control the set_key_use
field in the SPIFFE OIDC Discovery Provider configuration.

When enabled, this adds the 'use': 'sig' field to JWKS keys, which is
required for compatibility with Keycloak's SPIFFE identity provider.

Defaults to false to maintain backward compatibility.

Signed-off-by: Alan Cha <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Alan Cha <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
 2026-03-29 09:34:30 -07:00
Daniel Schlatter de59147fc5 fix gather hostcert edge case issues (#775) 
* Check each conditional of gather host cert in case a command to create the host cert fails

Signed-off-by: Daniel Schlatter <[email protected]>

* Change curl command to use --cacert in gather-host-cert init container

--capath is for directories. --cacert is the correct option for a single cert.

Signed-off-by: Daniel Schlatter <[email protected]>

---------

Signed-off-by: Daniel Schlatter <[email protected]>
 2026-03-29 16:13:20 +00:00
kfox1111 9960e106eb spire-ha-agent chart (#519) 
* Initial swag at a spire-ha-agent chart

Signed-off-by: Kevin Fox <[email protected]>

* Fix default

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Use released cid2pid

Signed-off-by: Kevin Fox <[email protected]>

* Fix test and pdate chart

Signed-off-by: Kevin Fox <[email protected]>

* Bump version

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2026-03-29 08:09:50 -07:00
Gabriel Abdalla Cavalcantemarcofranssenspire-helm-version-checker[bot]kfox1111
 		bf4bd8199e feature: add awsSecretsManager upstreamAuthority (#772) 
* feature: add awsSecretsManager upstreamAuthority

Signed-off-by: gcavalcante8808 <[email protected]>

* Bump test chart dependencies (#773)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Signed-off-by: gcavalcante8808 <[email protected]>

* Fix docs (#1)

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: gcavalcante8808 <[email protected]>

---------

Signed-off-by: gcavalcante8808 <[email protected]>
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: spire-helm-version-checker[bot] <161522935+spire-helm-version-checker[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2026-03-26 11:43:19 -07:00
spire-helm-version-checker[bot]andmarcofranssen f78c1d4246 Bump test chart dependencies (#773) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2026-03-23 06:59:16 -07:00
spire-helm-version-checker[bot]andmarcofranssen 7afffd75ca Bump test chart dependencies (#771) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2026-03-16 11:36:52 +01:00
dependabot[bot] 0370d3170a Bump helm.sh/helm/v3 from 3.20.0 to 3.20.1 in /tests 
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.20.0 to 3.20.1.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.20.0...v3.20.1)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-03-13 16:02:53 +01:00
anhpatel 60899fc9d2 Add configurable hostNetwork support to spiffe-csi-driver (#769) 
Signed-off-by: aniket patel <[email protected]>
 2026-03-10 14:09:31 -07:00