helm-charts-hardened

Author	SHA1	Message	Date
kfox1111andFaisal Memon	ec7259699f	spiffe-step-ssh server (#198 ) * Initial prototype of spire-step-ssh integration Signed-off-by: Kevin Fox <[email protected]> * Ingress work, image cleanup and misc cleanup Signed-off-by: Kevin Fox <[email protected]> * More values rework Signed-off-by: Kevin Fox <[email protected]> * Rename chart spiffe-step-ssh Signed-off-by: Kevin Fox <[email protected]> * Update to use shared lib Signed-off-by: Kevin Fox <[email protected]> * Update spiffe-helper Signed-off-by: Kevin Fox <[email protected]> * Use URLSAN rather then CN Signed-off-by: Kevin Fox <[email protected]> * Lookup the sans. Signed-off-by: Kevin Fox <[email protected]> * Make trust domain configurable Signed-off-by: Kevin Fox <[email protected]> * Add flag Signed-off-by: Kevin Fox <[email protected]> * Make driver configurable Signed-off-by: Kevin Fox <[email protected]> * Add more configurables. Fix up docs to pass test. Signed-off-by: Kevin Fox <[email protected]> * Add some metadata Signed-off-by: Kevin Fox <[email protected]> * Fix metadata Signed-off-by: Kevin Fox <[email protected]> * Add default values for lint Signed-off-by: Kevin Fox <[email protected]> * Forgot values updates Signed-off-by: Kevin Fox <[email protected]> * Fix metadata Signed-off-by: Kevin Fox <[email protected]> * Start working on integration test Signed-off-by: Kevin Fox <[email protected]> * Test Signed-off-by: Kevin Fox <[email protected]> * Test Signed-off-by: Kevin Fox <[email protected]> * Fix names Signed-off-by: Kevin Fox <[email protected]> * More test bits Signed-off-by: Kevin Fox <[email protected]> * More test bits Signed-off-by: Kevin Fox <[email protected]> * More test bits Signed-off-by: Kevin Fox <[email protected]> * More test bits Signed-off-by: Kevin Fox <[email protected]> * More test bits Signed-off-by: Kevin Fox <[email protected]> * More test bits Signed-off-by: Kevin Fox <[email protected]> * More fixes Signed-off-by: Kevin Fox <[email protected]> * More fixes Signed-off-by: Kevin Fox <[email protected]> * More fixes Signed-off-by: Kevin Fox <[email protected]> * Fix name conflict. Align naming Signed-off-by: Kevin Fox <[email protected]> * Fix name Signed-off-by: Kevin Fox <[email protected]> * Add more logging Signed-off-by: Kevin Fox <[email protected]> * Disable unneeded test. Add missing file. Signed-off-by: Kevin Fox <[email protected]> * Setup more things Signed-off-by: Kevin Fox <[email protected]> * Add missing conf file Signed-off-by: Kevin Fox <[email protected]> * Fix multiple svids Signed-off-by: Kevin Fox <[email protected]> * Fix ci defaults Signed-off-by: Kevin Fox <[email protected]> * Fix filename Signed-off-by: Kevin Fox <[email protected]> * Try and get the linter to stop complaining... Signed-off-by: Kevin Fox <[email protected]> * Fix perms Signed-off-by: Kevin Fox <[email protected]> * More logs Signed-off-by: Kevin Fox <[email protected]> * More setup Signed-off-by: Kevin Fox <[email protected]> * Fixes Signed-off-by: Kevin Fox <[email protected]> * Fixes Signed-off-by: Kevin Fox <[email protected]> * Add wait Signed-off-by: Kevin Fox <[email protected]> * More logging Signed-off-by: Kevin Fox <[email protected]> * Test ssh Signed-off-by: Kevin Fox <[email protected]> * Restart fetchca on updates too Signed-off-by: Kevin Fox <[email protected]> * Fix formating Signed-off-by: Kevin Fox <[email protected]> * Add missing file flag Signed-off-by: Kevin Fox <[email protected]> * Increase timeout Signed-off-by: Kevin Fox <[email protected]> * More flags Signed-off-by: Kevin Fox <[email protected]> * Fix name Signed-off-by: Kevin Fox <[email protected]> * Finish end to end test Signed-off-by: Kevin Fox <[email protected]> * Fix ingress setting Signed-off-by: Kevin Fox <[email protected]> * More logging/tests Signed-off-by: Kevin Fox <[email protected]> * More testing Signed-off-by: Kevin Fox <[email protected]> * Fix namespace Signed-off-by: Kevin Fox <[email protected]> * Fetch correct bundle Signed-off-by: Kevin Fox <[email protected]> * Chart testing will fail as it depends on spire to be preinstalled. Weird dependency loop. Signed-off-by: Kevin Fox <[email protected]> * Dont skip tls for testing Signed-off-by: Kevin Fox <[email protected]> * More logging Signed-off-by: Kevin Fox <[email protected]> * More debug Signed-off-by: Kevin Fox <[email protected]> * More debug Signed-off-by: Kevin Fox <[email protected]> * Pass intermediates Signed-off-by: Kevin Fox <[email protected]> * Fix trustdomain Signed-off-by: Kevin Fox <[email protected]> * Add ca authority prefix Signed-off-by: Kevin Fox <[email protected]> * fix Signed-off-by: Kevin Fox <[email protected]> * fix Signed-off-by: Kevin Fox <[email protected]> * fix Signed-off-by: Kevin Fox <[email protected]> * ci test is just broken. Revert trying to fix it. Signed-off-by: Kevin Fox <[email protected]> * Update charts/spiffe-step-ssh/files/ssh_x5c.tpl Signed-off-by: kfox1111 <[email protected]> * Self review feedback Signed-off-by: Kevin Fox <[email protected]> * Switch ingress to our more functional/easy type Signed-off-by: Kevin Fox <[email protected]> * Simplify the template Signed-off-by: Kevin Fox <[email protected]> * Add cast Signed-off-by: Kevin Fox <[email protected]> * Add install notes Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Update tests for updated client Signed-off-by: Kevin Fox <[email protected]> * Fix logging and entry Signed-off-by: Kevin Fox <[email protected]> * Add missing dir Signed-off-by: Kevin Fox <[email protected]> * Fix file location Signed-off-by: Kevin Fox <[email protected]> * Update timeout Signed-off-by: Kevin Fox <[email protected]> * More logging Signed-off-by: Kevin Fox <[email protected]> * Fix filename Signed-off-by: Kevin Fox <[email protected]> * Fix perms Signed-off-by: Kevin Fox <[email protected]> * Update charts/spiffe-step-ssh/README.md Signed-off-by: kfox1111 <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-11-07 23:43:26 -08:00
spire-helm-version-checker[bot]andmarcofranssen	d5777c3dd2	Bump test chart dependencies (#493 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-11-04 05:39:24 -08:00
Mattias Gees	4993b671b5	Fix GCS Bundle endpoint format variable (#491 ) The GCS Bundle endpoint configuration was pointing to the S3 Format variable instead of the GCS one. Signed-off-by: Mattias Gees <[email protected]>	2024-11-01 13:26:15 +01:00
Faisal Memon	5b16168e70	Bump spire Helm Chart version from 0.23.0 to 0.24.0 (#487 ) * `a3e607e` Bump test chart dependencies (#484) * `a360646` Add validating admission policy to restrict upstream driver access (#482) * `a7368ee` Upgrade to spire 1.11.0 (#483) * `fe5464b` Update notes (#479) * `29e9866` Bump test chart dependencies (#481) * `13736cd` Add support for the new hint spire-controller-manager feature (#472) * `b08e8bf` Agent support for bundle on host path (#478) * `7b409ed` Fix cert-manager upstream authority when enabling recommendations (#476) * `01c7227` Add support for the new fallback spire-controller-manager feature (#471) * `0a6dd19` Bump test chart dependencies (#477) * `fcbd64e` Support federation bundle endpoint profile http_web certificates (#469) * `c29f45f` Add AWS DB types (#464) * `898a349` Add remaining data store options (#463) * `2443515` Bump test chart dependencies (#474) * `c461794` Update the spire-controller-manager to 0.6.0 (#473) * `5d07eaf` Align more settings to convention (#467) * `ea2d673` Bump test chart dependencies (#470) * `352aee2` Bump test chart dependencies (#468) * `c3c8514` Change curl --caPath to --capath (#462) * `68d21cc` Add an initial json schema file for spire-agent (#458) * `b7e9823` Add new config.jwtDomain value to oidc-discovery chart (#457) * `8832da3` Protects SPIRE Agent's Chart Against YAML Template Injection (#450) * `3bc7025` Update spiffe-helper (#453) * `86d6fca` Bump test chart dependencies (#449) Signed-off-by: Faisal Memon <[email protected]>	2024-10-28 18:36:17 +00:00
Faisal Memon	6e375ef260	Bump spire-nested Helm Chart version from 0.23.0 to 0.24.0 (#486 ) * `a7368ee` Upgrade to spire 1.11.0 (#483) * `5d07eaf` Align more settings to convention (#467) Signed-off-by: Faisal Memon <[email protected]>	2024-10-28 18:12:27 +00:00
Faisal Memon	cd7c192ad2	Bump spire-crds Helm Chart version from 0.4.0 to 0.5.0 (#485 ) * `13736cd` Add support for the new hint spire-controller-manager feature (#472) * `01c7227` Add support for the new fallback spire-controller-manager feature (#471) Signed-off-by: Faisal Memon <[email protected]>	2024-10-28 11:04:42 -07:00
spire-helm-version-checker[bot]andmarcofranssen	a3e607e7d8	Bump test chart dependencies (#484 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-10-28 06:01:02 -07:00
kfox1111andFaisal Memon	a360646842	Add validating admission policy to restrict upstream driver access (#482 ) * Add validating admission policy to restrict upstream driver access Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spiffe-csi-driver/templates/policy.yaml Signed-off-by: kfox1111 <[email protected]> * Fix logic Signed-off-by: Kevin Fox <[email protected]> * Upgrade helm Signed-off-by: Kevin Fox <[email protected]> * Upgrade kind and fix node version Signed-off-by: Kevin Fox <[email protected]> * Upgrade kind and fix node version Signed-off-by: Kevin Fox <[email protected]> * Upgrade kind and fix node version Signed-off-by: Kevin Fox <[email protected]> * Upgrade kind and fix node version Signed-off-by: Kevin Fox <[email protected]> * Add version info Signed-off-by: Kevin Fox <[email protected]> * Add version info Signed-off-by: Kevin Fox <[email protected]> * Fix kind version Signed-off-by: Kevin Fox <[email protected]> * Fix kind version Signed-off-by: Kevin Fox <[email protected]> * Fix kind version Signed-off-by: Kevin Fox <[email protected]> * Fix detection Signed-off-by: Kevin Fox <[email protected]> * Just for testing... Signed-off-by: Kevin Fox <[email protected]> * Just for testing... Signed-off-by: Kevin Fox <[email protected]> * Just for testing Signed-off-by: Kevin Fox <[email protected]> * Fix policy Signed-off-by: Kevin Fox <[email protected]> * Fix policy Signed-off-by: Kevin Fox <[email protected]> * Fix policy Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spiffe-csi-driver/values.yaml Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-10-26 07:40:29 -07:00
kfox1111	a7368eee1f	Upgrade to spire 1.11.0 (#483 ) Signed-off-by: Kevin Fox <[email protected]>	2024-10-25 22:36:59 -07:00
kfox1111andFaisal Memon	fe5464ba9f	Update notes (#479 ) * Update notes Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-10-24 10:17:46 -07:00
spire-helm-version-checker[bot]andmarcofranssen	29e9866a8c	Bump test chart dependencies (#481 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-10-21 04:59:26 -07:00
kfox1111	13736cdf6f	Add support for the new hint spire-controller-manager feature (#472 ) * Add support for the new hint spire-controller-manager feature Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>	2024-10-17 15:48:09 -07:00
kfox1111andFaisal Memon	b08e8bf9b1	Agent support for bundle on host path (#478 ) * Agent support for bundle on host path Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-agent/values.yaml Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-10-17 15:12:27 -07:00
Yann Soubeyrandandkfox1111	7b409ed912	Fix cert-manager upstream authority when enabling recommendations (#476 ) Signed-off-by: Yann Soubeyrand <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-10-17 14:14:20 -07:00
kfox1111	01c7227b13	Add support for the new fallback spire-controller-manager feature (#471 ) * Add support for the new fallback spire-controller-manager feature Signed-off-by: Kevin Fox <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-10-17 12:38:25 -07:00
spire-helm-version-checker[bot]andmarcofranssen	0a6dd19906	Bump test chart dependencies (#477 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-10-14 06:26:40 -07:00
kfox1111	fcbd64e011	Support federation bundle endpoint profile http_web certificates (#469 ) * Support federation bundle endpoint profile http_web certificates Signed-off-by: Kevin Fox <[email protected]> * Fix var Signed-off-by: Kevin Fox <[email protected]> * Fix key Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-10-10 12:03:54 -07:00
kfox1111 Faisal Memon Marco Franssen	c29f45fc30	Add AWS DB types (#464 ) * Add remaining data store options Signed-off-by: Kevin Fox <[email protected]> * Fix env var Signed-off-by: Kevin Fox <[email protected]> * Add aws db types Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix mysql vars Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Fix missing ) Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-server/values.yaml Co-authored-by: Marco Franssen <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix readme Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]> Co-authored-by: Marco Franssen <[email protected]>	2024-10-08 10:50:32 -07:00
kfox1111andFaisal Memon	898a349297	Add remaining data store options (#463 ) * Add remaining data store options Signed-off-by: Kevin Fox <[email protected]> * Fix env var Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-10-07 16:18:06 -07:00
spire-helm-version-checker[bot]andmarcofranssen	2443515682	Bump test chart dependencies (#474 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-10-07 14:04:33 -07:00
kfox1111andFaisal Memon	c46179472c	Update the spire-controller-manager to 0.6.0 (#473 ) Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-10-03 16:27:23 -07:00
kfox1111	5d07eaff52	Align more settings to convention (#467 ) * Align more settings to convention Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-10-03 12:06:38 -07:00
spire-helm-version-checker[bot]andmarcofranssen	ea2d673830	Bump test chart dependencies (#470 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-09-30 17:06:39 -07:00
spire-helm-version-checker[bot]andmarcofranssen	352aee2f0d	Bump test chart dependencies (#468 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-09-23 06:50:10 -07:00
Faisal Memonandkfox1111	c3c8514333	Change curl --caPath to --capath (#462 ) Signed-off-by: Faisal Memon <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-09-17 14:02:06 -07:00
kfox1111andFaisal Memon	68d21ccade	Add an initial json schema file for spire-agent (#458 ) * Add an initial json schema file for spire-agent Signed-off-by: Kevin Fox <[email protected]> * Fix tab Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-09-17 13:39:22 -07:00
Erik Godding BoyeandFaisal Memon	b7e9823a65	Add new config.jwtDomain value to oidc-discovery chart (#457 ) Signed-off-by: Erik Godding Boye <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-09-17 12:36:52 -07:00
nweisenauer	8832da39b4	Protects SPIRE Agent's Chart Against YAML Template Injection (#450 ) * protects agent's chart against template injection Signed-off-by: Nico Weisenauer <[email protected]> * removes unnecessary braces and whitespace Signed-off-by: Nico Weisenauer <[email protected]> * Removes int type validation via cast Signed-off-by: Nico Weisenauer <[email protected]> --------- Signed-off-by: Nico Weisenauer <[email protected]>	2024-09-16 06:23:01 -07:00
kfox1111	3bc70255e7	Update spiffe-helper (#453 ) * Update spiffe-helper Signed-off-by: Kevin Fox <[email protected]> * Update .github/tests/images.json Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>	2024-09-12 09:49:14 -07:00
spire-helm-version-checker[bot]andmarcofranssen	86d6fcac25	Bump test chart dependencies (#449 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-09-09 06:36:28 -07:00
Faisal Memon	01b1114e26	Bump spire Helm Chart version from 0.22.0 to 0.23.0 * `7df063f` Upgrade SPIRE to 1.10.3 (#412) * `de5ec47` Bump test chart dependencies (#445) * `e72b94f` Add all built in BundlePublishers (#430) * `532852d` Bump test chart dependencies (#440) * `6e8ad56` Add a spire-agent auto kubelet verification mode (#435) * `50c741e` Remove extra check that sometimes breaks oidc (#437) * `e062b9f` Support ipv4 only clusters (#434) * `b96e07e` Enable more forms of kubelet certificate verification (#426) * `f92d729` Add missing properties required by SecurityContextConstraints CRD (#432) * `8553a78` Bump test chart dependencies (#431) Signed-off-by: Faisal Memon <[email protected]>	2024-09-04 14:00:46 -07:00
Faisal Memon	080d101787	Bump spire-nested Helm Chart version from 0.22.0 to 0.23.0 (#447 ) * `7df063f` Upgrade SPIRE to 1.10.3 (#412) Signed-off-by: Faisal Memon <[email protected]>	2024-09-04 13:39:53 -07:00
kfox1111andFaisal Memon	7df063f8db	Upgrade SPIRE to 1.10.3 (#412 ) * Update SPIRE to 1.10.3 Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-agent/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-09-04 13:16:50 -07:00
spire-helm-version-checker[bot]andmarcofranssen	de5ec47613	Bump test chart dependencies (#445 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-09-02 05:51:02 -07:00
kfox1111andFaisal Memon	e72b94fc13	Add all built in BundlePublishers (#430 ) * Add all built in BundlePublishers Signed-off-by: Kevin Fox <[email protected]> * Add secret management Signed-off-by: Kevin Fox <[email protected]> * Fix typo Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-server/values.yaml Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-08-27 12:35:23 -07:00
spire-helm-version-checker[bot]andmarcofranssen	532852d907	Bump test chart dependencies (#440 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-08-26 09:45:03 -07:00
kfox1111	6e8ad569b3	Add a spire-agent auto kubelet verification mode (#435 ) * Add a spire-agent auto kubelet verification mode Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-08-23 15:09:55 -07:00
kfox1111	50c741e047	Remove extra check that sometimes breaks oidc (#437 ) Signed-off-by: Kevin Fox <[email protected]>	2024-08-22 12:08:18 -07:00
kfox1111	e062b9f196	Support ipv4 only clusters (#434 ) * Support ipv4 only clusters Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spiffe-oidc-discovery-provider/templates/configmap.yaml Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>	2024-08-21 12:00:38 -07:00
kfox1111andFaisal Memon	b96e07e349	Enable more forms of kubelet certificate verification (#426 ) * Enable kubelet certificate verification by default Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/README.md Signed-off-by: kfox1111 <[email protected]> * Update charts/spire/charts/spire-agent/templates/configmap.yaml Signed-off-by: kfox1111 <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Fix image Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-agent/templates/configmap.yaml Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-08-20 22:08:39 -07:00
Erik Godding Boye	f92d729137	Add missing properties required by SecurityContextConstraints CRD (#432 ) Signed-off-by: Erik Godding Boye <[email protected]>	2024-08-20 08:55:35 -07:00
spire-helm-version-checker[bot]andmarcofranssen	8553a78f6c	Bump test chart dependencies (#431 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-08-19 12:39:18 +02:00
Faisal Memonandkfox1111	ba35e81247	Bump spire-nested Helm Chart version from 0.21.1 to 0.22.0 (#429 ) * `827a3ea` Bump spire to 1.10.1 (#424) Signed-off-by: Faisal Memon <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-08-15 10:13:02 -07:00
Faisal Memon	de1e98337a	Bump spire Helm Chart version from 0.21.1 to 0.22.0 (#428 ) * `9b2d72f` Fix permission issue with 1.10 and defaults when upgraded (#423) * `827a3ea` Bump spire to 1.10.1 (#424) * `0289e5f` Revert "Added support for specifying Kubelet CA Path (#415)" (#422) * `bf40797` Bump test chart dependencies (#418) * `abcf019` Added support for specifying Kubelet CA Path (#415) * `6d4d526` Allow configuring persistence in the spire-agent (#414) Signed-off-by: Faisal Memon <[email protected]>	2024-08-15 13:59:31 +00:00
kfox1111	9b2d72f6a2	Fix permission issue with 1.10 and defaults when upgraded (#423 ) * Fix permission issue with 1.10 and defaults when upgraded Signed-off-by: Kevin Fox <[email protected]> * Fix indenting Signed-off-by: Kevin Fox <[email protected]> * incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-08-13 22:21:20 -07:00
kfox1111	827a3ea80c	Bump spire to 1.10.1 (#424 ) Signed-off-by: Kevin Fox <[email protected]>	2024-08-13 11:44:07 -07:00
kfox1111	0289e5fb00	Revert "Added support for specifying Kubelet CA Path (#415 )" (#422 ) This reverts commit `abcf01958a`. Signed-off-by: Kevin Fox <[email protected]>	2024-08-13 11:03:31 -07:00
spire-helm-version-checker[bot]andmarcofranssen	bf40797049	Bump test chart dependencies (#418 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-08-12 07:05:38 -07:00
Andrew BlockandFaisal Memon	abcf01958a	Added support for specifying Kubelet CA Path (#415 ) Signed-off-by: Andrew Block <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-08-09 04:56:11 +00:00
kfox1111	6d4d52604a	Allow configuring persistence in the spire-agent (#414 ) * Allow configuring persistence in the spire-agent Signed-off-by: Kevin Fox <[email protected]> * Better wording. Leave space for other services if needed some day. Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-08-08 20:06:06 -07:00

... 3 4 5 6 7 ...