Marco Franssen
5dc93da6b8
Bump to latest Helm and Python versions
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-23 10:35:46 +01:00
Marco Franssen
d46c3fc14d
Test without ACME tos Accepted
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-23 10:35:46 +01:00
Marco Franssen
8d97803c8a
Bump chart version to 0.2.0 and appVersion to 1.5.5
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-23 10:34:52 +01:00
Marco Franssen
49a68c3aed
Add test for spire-oidc
...
Using the nginx insecure option, because we can't rely on the ACME
protocol as this server isn't reachable.
Signed-off-by: Marco Franssen <[email protected]
2023-02-23 10:33:29 +01:00
Marco Franssen
c9779b24ed
Add test for upstream-authority-disk
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-23 10:33:28 +01:00
Marco Franssen
b24faa9373
Add test for disabled spire-controller-manager
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-23 10:33:28 +01:00
Marco Franssen
ec26d85f61
Enable spire-controller-manager by default
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-23 10:33:28 +01:00
Marco Franssen
9135086f8e
Add infrastructure to test charts without defaulted values
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-23 10:33:28 +01:00
kfox1111 and Faisal Memon
8a3ae10da5
Add the option to disable unix workloadattestor ( #26 )
...
Co-authored-by: Faisal Memon <[email protected] [email protected]
2023-02-23 10:32:35 +01:00
Marco Franssen
115d9bdf80
Add category and license annotations for artifacthub
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-22 12:37:00 +01:00
Marco Franssen
b804b0a932
Fix workflow trigger path
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-21 20:28:53 +01:00
Kevin Fox
32303d7eba
Remove the need for hostpath on oidc provider
...
The hostpath isn't needed. This patch removes the extra mount and changes
it to an emptyDir.
Signed-off-by: Kevin Fox <[email protected]
2023-02-21 15:48:02 +01:00
Marco Franssen
8974a3086d
Disable jekyll for gh-pages
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-21 15:47:06 +01:00
Marco Franssen
9dee09e38e
Merge pull request #14 from spiffe/base-chart
2023-02-20 10:59:32 +01:00
Marco Franssen
cb3f94022f
Remove duplicate volume creation
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:37:31 +01:00
Marco Franssen
73d4ed2ee5
Add .gitignore for the bin folder containing helm-docs
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:37:31 +01:00
Marco Franssen
99d32050ba
Remove option to choose different agent socket path
...
Resolves #19
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:23:36 +01:00
Marco Franssen and Faisal Memon
50846ebe9a
Improve spiffe-csi security-context
...
Co-authored-by: Faisal Memon <[email protected] [email protected]
2023-02-18 13:04:15 +01:00
Marco Franssen
4e1d3d78bb
Improve README.md and artifacthub.io
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:15 +01:00
Marco Franssen
ff9ab8693c
Replace LICENSE
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:15 +01:00
Marco Franssen
b3248e5c9c
Remove deprecated k8s workload registrar support
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:15 +01:00
Ken Huffman and Marco Franssen
3448897316
Add namespaceSelector for spire-controller-manager ( #112 )
...
Co-authored-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:15 +01:00
Marco Franssen
bba395b015
Add test for oidc discovery provider
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:15 +01:00
Marco Franssen
7d9ab07e23
Add the namespace to the oidc-discovery-provider allowed dns names
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:14 +01:00
Marco Franssen
5c8f1a7c9b
Add spire-controller-manager keyword to chart
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:14 +01:00
Marco Franssen
5fe83469ba
Fix link to sources
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:14 +01:00
Marco Franssen
8be96e4530
Fix spire validating webhook configuration
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:14 +01:00
Marco Franssen
3018ef8469
Add icon to spire chart
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:14 +01:00
Marco Franssen and Gert Jan Kamstra
225931565a
Include spire namespace to fix oidc-provider
...
Signed-off-by: Marco Franssen <[email protected] [email protected] [email protected]
2023-02-18 13:04:13 +01:00
Marco Franssen
456c9cc53b
Add by default k8s workload registrar compatible SPIFFEIDs to controller-manager setup
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:13 +01:00
Marco Franssen
31a75aeb43
Bump minimum spire version to 1.5.4
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:13 +01:00
Marco Franssen
0d49280cda
Add support for spire-controller-manager
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:13 +01:00
Marco Franssen
977468bc6a
Fix agent connectivity if deployed with different name
...
e.g. if deploying with spire-65de556ac
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:13 +01:00
Marco Franssen
875b17a948
Fix RBAC permissions k8s-workload-registrar
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:13 +01:00
Marco Franssen
016e8336d0
Fix agent connectivity if deployed with different name
...
e.g. if deploying with spire-65de556ac
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:12 +01:00
Marco Franssen
9921d1df40
Use correct helper function for upstream-ca-secret
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:12 +01:00
Marco Franssen
4a2b0ac69a
Add spire-k8s-registrar service
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:12 +01:00
Marco Franssen
175d448341
Utilize helper function for spire-k8s-workload-registrar
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:12 +01:00
Marco Franssen
5ff662acea
Update statement on minimum required spire version
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:12 +01:00
Marco Franssen
065689a6a4
Fix k8s workload registrar image pullPolicy
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:12 +01:00
Marco Franssen
05e1c2f736
Bump spire to latest 1.5.4 patch release
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:11 +01:00
Marco Franssen
8277bf0bd4
Patch wait-for-it to latest Januari release
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:11 +01:00
Marco Franssen
f0921014cf
Use template function from the right chart for oidc discovery provider configmap
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:11 +01:00
Marco Franssen
92440c72cc
Add note on scaling spire-server to value docs
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:11 +01:00
Marco Franssen
0a0ddb4a9b
Move the k8s-workload-registrar back into same pod as spire-server
...
The k8s-workload-registrar needs access to the spire-server socket and
therefore has to run in the same pod to be able to mount the socket
into the container.
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:11 +01:00
Marco Franssen
738842de16
Fix oidc-discovery-provider config mount
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:11 +01:00
Marco Franssen
2c8ca0a237
List spire-server and spire-agent in dependencies
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:10 +01:00
Marco Franssen
c7ebf72d13
Remove unused helpers from root
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:10 +01:00
Marco Franssen
cdbee1bc1b
Cleanup values.yaml
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:10 +01:00
Marco Franssen
b3d5b7d80a
Remove unused template + fix spiffe-csi-driver
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:10 +01:00
Marco Franssen