Commit Graph
1235 Commits
Author SHA1 Message Date
dependabot[bot] f17e024a66 Bump azure/setup-helm from 3.5 to 5
Bumps [azure/setup-helm](https://github.com/azure/setup-helm) from 3.5 to 5.
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](https://github.com/azure/setup-helm/compare/v3.5...v5)

---
updated-dependencies:
- dependency-name: azure/setup-helm
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-04-28 14:03:36 +02:00
dependabot[bot] 5d4c0438c2 Bump helm/kind-action from 1.9.0 to 1.14.0 (#810)
Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.9.0 to 1.14.0.
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](https://github.com/helm/kind-action/compare/v1.9.0...v1.14.0)

---
updated-dependencies:
- dependency-name: helm/kind-action
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 14:56:27 +00:00
dependabot[bot] bd9fc402e5 Bump helm/chart-releaser-action from 1.6.0 to 1.7.0 (#806)
Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/helm/chart-releaser-action/releases)
- [Commits](https://github.com/helm/chart-releaser-action/compare/v1.6.0...v1.7.0)

---
updated-dependencies:
- dependency-name: helm/chart-releaser-action
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 14:47:19 +00:00
dependabot[bot] 4d4f2490f5 Bump peter-evans/create-pull-request from 6.0.2 to 8.1.1 (#805)
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6.0.2 to 8.1.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v6.0.2...v8.1.1)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 14:45:07 +00:00
dependabot[bot] 2dd8efae28 Bump actions/setup-go from 5.0.0 to 6.4.0 (#809)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.0.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v5.0.0...v6.4.0)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 16:44:04 +02:00
dependabot[bot] 72f15a87f3 Bump helm/chart-testing-action from 2.6.1 to 2.8.0 (#807)
Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.6.1 to 2.8.0.
- [Release notes](https://github.com/helm/chart-testing-action/releases)
- [Commits](https://github.com/helm/chart-testing-action/compare/v2.6.1...v2.8.0)

---
updated-dependencies:
- dependency-name: helm/chart-testing-action
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 16:43:39 +02:00
dependabot[bot] 8fbf7e8e67 Bump actions/setup-python from 5 to 6
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-04-24 19:53:46 +02:00
dependabot[bot] 40a3ba5ea4 Bump actions/checkout from 4.1.1 to 6.0.2
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v4.1.1...v6.0.2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-04-24 19:45:43 +02:00
dependabot[bot] c430a55529 Bump regclient/actions
Bumps [regclient/actions](https://github.com/regclient/actions) from b6614f5f56245066b533343a85f4109bdc38c8cc to f3c6d87835906c175eb6ccfc18b348b69bb447e7.
- [Release notes](https://github.com/regclient/actions/releases)
- [Changelog](https://github.com/regclient/actions/blob/main/RELEASE.md)
- [Commits](https://github.com/regclient/actions/compare/b6614f5f56245066b533343a85f4109bdc38c8cc...f3c6d87835906c175eb6ccfc18b348b69bb447e7)

---
updated-dependencies:
- dependency-name: regclient/actions
  dependency-version: f3c6d87835906c175eb6ccfc18b348b69bb447e7
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-04-24 19:44:28 +02:00
dependabot[bot] bf8519364c Bump sigstore/cosign-installer from 3.4.0 to 4.1.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.4.0 to 4.1.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.4.0...v4.1.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-04-24 19:43:10 +02:00
dependabot[bot] bf16ddf75a Bump imjasonh/setup-crane from 0.3 to 0.5
Bumps [imjasonh/setup-crane](https://github.com/imjasonh/setup-crane) from 0.3 to 0.5.
- [Release notes](https://github.com/imjasonh/setup-crane/releases)
- [Commits](https://github.com/imjasonh/setup-crane/compare/v0.3...v0.5)

---
updated-dependencies:
- dependency-name: imjasonh/setup-crane
  dependency-version: '0.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-04-24 19:41:43 +02:00
Daniel Schlatter f537f7702f allow unsupported built-in key manager plugins to be used (#798)
Signed-off-by: Daniel Schlatter <[email protected]>
2026-04-23 05:31:17 -07:00
spire-helm-version-checker[bot]andmarcofranssen c5ba8213df Bump test chart dependencies (#797)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2026-04-20 04:27:18 -07:00
Jesper Engbergandkfox1111 dfe8089160 feat: add gcp_iit node attestor configuration options (#796)
* feat: add gcp_iit node attestor configuration options

Signed-off-by: Jesper Engberg <[email protected]>

* fix: align indentation

Signed-off-by: Jesper Engberg <[email protected]>

* fix: remove unused var

Signed-off-by: Jesper Engberg <[email protected]>

---------

Signed-off-by: Jesper Engberg <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2026-04-15 16:33:53 +00:00
Dávid Szakállas 3c1dec3035 fix casing of svidStore (#787)
Signed-off-by: Dávid Szakállas <[email protected]>
2026-04-15 09:08:25 -07:00
spire-helm-version-checker[bot]andmarcofranssen 21969d20f3 Bump test chart dependencies (#795)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2026-04-14 11:34:08 +02:00
Faisal Memon d334bfde50 Bump spiffe-step-ssh Helm Chart version from 0.1.1 to 0.1.2 (#794)
* 9273f11f Support root-level spire-lib chart reuse (#785)

Signed-off-by: Faisal Memon <[email protected]>
2026-04-11 08:52:09 -07:00
Faisal Memonandkfox1111 d65890e409 Bump spire-nested Helm Chart version from 0.28.3 to 0.28.4 (#792)
* 86787b59 Add initial spire-ha-agent support to the spire-nested chart (#790)
* 040ccf90 Bump versions to 1.14.5 (#789)
* 9273f11f Support root-level spire-lib chart reuse (#785)
* 96773a31 Bump versions (#777)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2026-04-10 23:32:47 -07:00
Faisal Memon a062e49c91 Bump spire Helm Chart version from 0.28.3 to 0.28.4
* 01342172 Fix typos in error messages (#788)
* 040ccf90 Bump versions to 1.14.5 (#789)
* 9273f11f Support root-level spire-lib chart reuse (#785)
* 145f3a36 chore: Add configurable probes for controller-manager (#784)
* a27acbcb Bump test chart dependencies (#786)
* 838a3535 Label chart (#783)
* 59de7aa3 Bump test chart dependencies (#779)
* 96773a31 Bump versions (#777)
* aad7527c Add set_key_use configuration option (#774)
* de59147f fix gather hostcert edge case issues (#775)
* bf4bd819 feature: add awsSecretsManager upstreamAuthority (#772)
* f78c1d42 Bump test chart dependencies (#773)
* 7afffd75 Bump test chart dependencies (#771)
* 60899fc9 Add configurable hostNetwork support to spiffe-csi-driver (#769)
* 2de363a4 Bump test chart dependencies (#767)
* 6631349b feat(spire-server): add logEncoding parameter for controller-manager (#766)

Signed-off-by: Faisal Memon <[email protected]>
2026-04-10 15:48:58 -07:00
013421724f Fix typos in error messages (#788)
* nit: fix typos

Signed-off-by: Dávid Szakállas <[email protected]>

* Apply suggestion from @kfox1111

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Dávid Szakállas <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2026-04-10 16:56:50 +00:00
kfox1111 86787b5912 Add initial spire-ha-agent support to the spire-nested chart (#790)
* Add initial spire-ha-agent support to the spire-nested chart

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Fix lint issue

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2026-04-10 08:46:28 +00:00
dependabot[bot] c71ffc3c4e Bump helm.sh/helm/v3 from 3.20.1 to 3.20.2 in /tests (#791)
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.20.1 to 3.20.2.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.20.1...v3.20.2)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 01:28:51 -07:00
kfox1111 040ccf905b Bump versions to 1.14.5 (#789)
Signed-off-by: Kevin Fox <[email protected]>
2026-04-09 10:07:37 -07:00
Faisal Memon 9273f11f0a Support root-level spire-lib chart reuse (#785)
* Add root-level spire-lib chart

Signed-off-by: Faisal Memon <[email protected]>

* Make spire consume root-level spire-lib

Signed-off-by: Faisal Memon <[email protected]>

* Prepare chart dependencies in CI

Signed-off-by: Faisal Memon <[email protected]>

* Document DCO requirement in CODEX

Signed-off-by: Faisal Memon <[email protected]>

* Centralize local chart dependency prep

Signed-off-by: Faisal Memon <[email protected]>

* Exclude spire-lib from chart-testing install

Signed-off-by: Faisal Memon <[email protected]>

* Rename CODEX guide to AGENTS

Signed-off-by: Faisal Memon <[email protected]>

* Add make target for chart dependencies

Signed-off-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
2026-04-09 05:14:05 -07:00
Shubham Hibareandkfox1111 145f3a36b5 chore: Add configurable probes for controller-manager (#784)
Signed-off-by: Shubham Hibare <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2026-04-06 18:30:43 +00:00
spire-helm-version-checker[bot]andmarcofranssen a27acbcbca Bump test chart dependencies (#786)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2026-04-06 07:12:47 -07:00
kfox1111 838a353567 Label chart (#783)
Signed-off-by: Kevin Fox <[email protected]>
2026-04-05 08:47:27 -07:00
kfox1111 419af5c901 Update package version for spire-ha-agent (#778)
Signed-off-by: Kevin Fox <[email protected]>
2026-03-30 04:09:20 -07:00
spire-helm-version-checker[bot]andmarcofranssen 59de7aa314 Bump test chart dependencies (#779)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2026-03-30 12:03:11 +02:00
kfox1111 96773a310f Bump versions (#777)
* Bump versions

Signed-off-by: Kevin Fox <[email protected]>

* Try this

Signed-off-by: Kevin Fox <[email protected]>

* Fix test for newer spire

Signed-off-by: Kevin Fox <[email protected]>

* Bump controller manager version

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2026-03-29 12:13:59 -07:00
Alan ChaandKevin Fox aad7527c0c Add set_key_use configuration option (#774)
* Add set_key_use configuration option

Add a setKeyUse boolean configuration option to control the set_key_use
field in the SPIFFE OIDC Discovery Provider configuration.

When enabled, this adds the 'use': 'sig' field to JWKS keys, which is
required for compatibility with Keycloak's SPIFFE identity provider.

Defaults to false to maintain backward compatibility.

Signed-off-by: Alan Cha <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Alan Cha <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
2026-03-29 09:34:30 -07:00
Daniel Schlatter de59147fc5 fix gather hostcert edge case issues (#775)
* Check each conditional of gather host cert in case a command to create the host cert fails

Signed-off-by: Daniel Schlatter <[email protected]>

* Change curl command to use --cacert in gather-host-cert init container

--capath is for directories. --cacert is the correct option for a single cert.

Signed-off-by: Daniel Schlatter <[email protected]>

---------

Signed-off-by: Daniel Schlatter <[email protected]>
2026-03-29 16:13:20 +00:00
kfox1111 9960e106eb spire-ha-agent chart (#519)
* Initial swag at a spire-ha-agent chart

Signed-off-by: Kevin Fox <[email protected]>

* Fix default

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Use released cid2pid

Signed-off-by: Kevin Fox <[email protected]>

* Fix test and pdate chart

Signed-off-by: Kevin Fox <[email protected]>

* Bump version

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2026-03-29 08:09:50 -07:00
bf4bd8199e feature: add awsSecretsManager upstreamAuthority (#772)
* feature: add awsSecretsManager upstreamAuthority

Signed-off-by: gcavalcante8808 <[email protected]>

* Bump test chart dependencies (#773)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Signed-off-by: gcavalcante8808 <[email protected]>

* Fix docs (#1)

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: gcavalcante8808 <[email protected]>

---------

Signed-off-by: gcavalcante8808 <[email protected]>
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: spire-helm-version-checker[bot] <161522935+spire-helm-version-checker[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2026-03-26 11:43:19 -07:00
spire-helm-version-checker[bot]andmarcofranssen f78c1d4246 Bump test chart dependencies (#773)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2026-03-23 06:59:16 -07:00
spire-helm-version-checker[bot]andmarcofranssen 7afffd75ca Bump test chart dependencies (#771)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2026-03-16 11:36:52 +01:00
dependabot[bot] 0370d3170a Bump helm.sh/helm/v3 from 3.20.0 to 3.20.1 in /tests
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.20.0 to 3.20.1.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.20.0...v3.20.1)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-03-13 16:02:53 +01:00
anhpatel 60899fc9d2 Add configurable hostNetwork support to spiffe-csi-driver (#769)
Signed-off-by: aniket patel <[email protected]>
2026-03-10 14:09:31 -07:00
spire-helm-version-checker[bot]andmarcofranssen 2de363a4a6 Bump test chart dependencies (#767)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2026-03-09 09:01:33 -07:00
Shubham Hibare 6631349bbb feat(spire-server): add logEncoding parameter for controller-manager (#766)
Signed-off-by: Shubham Hibare <[email protected]>
2026-03-05 09:57:44 -08:00
Faisal Memon 8afe8cf6e7 Bump spire Helm Chart version from 0.28.2 to 0.28.3
* 2385c2d7 Bump spire to 1.14.2 (#763)

Signed-off-by: Faisal Memon <[email protected]>
2026-03-04 07:58:57 -08:00
Faisal Memon 20940774d1 Bump spire-nested Helm Chart version from 0.28.2 to 0.28.3
* 2385c2d7 Bump spire to 1.14.2 (#763)

Signed-off-by: Faisal Memon <[email protected]>
2026-03-04 07:38:32 -08:00
kfox1111 2385c2d7a2 Bump spire to 1.14.2 (#763) 2026-03-04 00:57:14 +00:00
Faisal Memon 85989b45eb Bump spire Helm Chart version from 0.28.1 to 0.28.2
* 24b3a173 Change hostNetwork to auto (#758)
* 0133d4a5 add key experimental.requirePQKEM for spire-server and spire-agent (#755)
* 0a841c76 Bump test chart dependencies (#759)
* a9bee70c feat(spiffe-oidc-discovery-provider): Add configurable log format option. (#757)
* bb4c0f33 chore: Bump controller manager image tag to 0.6.3 in README and values.yaml (#756)
* 3e8f3f18 Bump test chart dependencies (#753)
* b0aa3e42 Fix duplicate port names in controller-manager containers (#751)
* 3daadc64 fix(spire-server): Support duration strings for connMaxLifetime (#752)
* 730b76bb Bump test chart dependencies (#750)
* e849a1fb Add configurable hostNetwork parameter for spire-agent (#749)
* 982d53c2 Add ContainerResource scaling to spire-server HPA (#746)
* 8abac78a Support leaderElection values in controller manager (#740)
* 75ffbd06 Add imagePullSecrets support to helm hook jobs (#741)
* 141c8865 Add pobLabels support to csi and oidc (#744)
* 6b5d01b7 Bump test chart dependencies (#743)
* ba2b6a5a Add controller-manager metrics to PodMonitor (#748)
* 86a806f3 Add tolerations to spire-server hook pods (#742)
* 7d266454 Fix keyManager check stopping use of unsupported bulit-in plugin (#715)
* 666d304c Bump test chart dependencies (#738)
* a7ac6a49 feat(spire-server): add logFormat configuration option (#735)

Signed-off-by: Faisal Memon <[email protected]>
2026-03-03 15:21:39 -08:00
Faisal Memon 6937ae01a2 Bump spire-nested Helm Chart version from 0.28.1 to 0.28.2
Signed-off-by: Faisal Memon <[email protected]>
2026-03-03 15:02:10 -08:00
Faisal Memon 24b3a1730e Change hostNetwork to auto (#758) 2026-03-03 21:56:48 +00:00
Daniel Schlatterandkfox1111 0133d4a5a7 add key experimental.requirePQKEM for spire-server and spire-agent (#755)
Signed-off-by: Daniel Schlatter <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2026-03-03 06:31:44 -08:00
Marco Franssen 50afee93c0 Bump CI to last 3 k8s minors
Signed-off-by: Marco Franssen <[email protected]>
2026-03-02 19:32:48 +01:00
spire-helm-version-checker[bot]andmarcofranssen 0a841c76a2 Bump test chart dependencies (#759)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2026-03-02 10:03:57 +01:00
Shubham Hibare a9bee70c0b feat(spiffe-oidc-discovery-provider): Add configurable log format option. (#757)
Signed-off-by: Shubham Hibare <[email protected]>
2026-02-25 14:20:59 -08:00