panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
510 Commits 1 Branch 2 Tags
cd386eb8ae709dacd117589d0c578497d8ee41c0
Commit Graph
510 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mariusz Sabath cd386eb8ae Merge branch 'main' into examples-doc 2023-10-06 21:49:02 -04:00
Mariusz Sabath 12937db24b Update Example README 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-10-06 21:31:59 -04:00
github-actions[bot]andfaisal-memon 06d6690d71 Bump test chart dependencies (#20) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: faisal-memon <[email protected]>
 2023-10-05 11:21:51 -07:00
kfox1111 8aca48f14c Push the changes that update-tags creates (#19) 
* Exit code from diff indicating changes should not block commit.

Signed-off-by: Kevin Fox <[email protected]>

* Push the changes that update-tags creates

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2023-10-05 10:40:32 -07:00
kfox1111 a6cb3974ac Exit code from diff indicating changes should not block commit. (#17) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-10-05 10:23:50 -07:00
Faisal Memon ebfa518a4b Update FAQ from repo switch (#15) 
* Update FAQ from repo switch

Signed-off-by: Faisal Memon <[email protected]>

* Add note about repo name

Signed-off-by: Faisal Memon <[email protected]>

* Clarify old and new forks

Signed-off-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Faisal Memon <[email protected]>
 2023-10-04 09:11:58 -07:00
Faisal Memon c23e6cb3b1 Fix issue with version checker not running 
Signed-off-by: Faisal Memon <[email protected]>
 2023-10-03 09:00:20 +02:00
dependabot[bot] 51c20b1ec2 Bump actions/checkout from 4.0.0 to 4.1.0 (#9) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v4.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-02 21:12:05 -07:00
kfox1111andFaisal Memon 21db1e4b9a Add a test to ensure upgrades work (#6) 
* Add a test to ensure upgrades work

Signed-off-by: Kevin Fox <[email protected]>

* Update examples/production/run-tests.sh

Co-authored-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-10-02 17:05:25 -07:00
dependabot[bot] f86648f318 Bump github.com/onsi/gomega from 1.27.10 to 1.28.0 in /tests 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.27.10 to 1.28.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.27.10...v1.28.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-10-02 09:43:43 +02:00
dependabot[bot] babd677649 Bump helm.sh/helm/v3 from 3.12.3 to 3.13.0 in /tests 
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.12.3 to 3.13.0.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.12.3...v3.13.0)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-10-02 09:23:56 +02:00
Marco Franssen 45187fe3ea Add back CODE-OF-CONDUCT 
Signed-off-by: Marco Franssen <[email protected]>
 2023-10-02 09:17:34 +02:00
kfox1111 50825d9fc9 Deny production runs of example.org trust domains (#229) 2023-09-25 12:06:48 -07:00
dependabot[bot] 712a0f6fbe Bump actions/checkout from 4.0.0 to 4.1.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.0.0...v4.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-09-25 19:54:27 +02:00
Faisal Memon f04bdc3618 Add support for experimental flags (#492) 
Add support for the experimental section of the config. Needed for
developers. This PR doesnt add support for the `auth_opa_policy_engine`
experimental config.

---------

Signed-off-by: Faisal Memon <[email protected]>
 2023-09-22 14:55:03 -07:00
dependabot[bot] 7cdae92333 Bump github.com/onsi/ginkgo/v2 from 2.12.0 to 2.12.1 in /tests (#490) 
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from
2.12.0 to 2.12.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/onsi/ginkgo/releases">github.com/onsi/ginkgo/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.12.1</h2>
<h2>2.12.1</h2>
<h3>Fixes</h3>
<ul>
<li>Print logr prefix if it exists (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1275">#1275</a>)
[90d4846]</li>
</ul>
<h3>Maintenance</h3>
<ul>
<li>Bump actions/checkout from 3 to 4 (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1271">#1271</a>)
[555f543]</li>
<li>Bump golang.org/x/sys from 0.11.0 to 0.12.0 (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1270">#1270</a>)
[d867b7d]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md">github.com/onsi/ginkgo/v2's
changelog</a>.</em></p>
<blockquote>
<h2>2.12.1</h2>
<h3>Fixes</h3>
<ul>
<li>Print logr prefix if it exists (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1275">#1275</a>)
[90d4846]</li>
</ul>
<h3>Maintenance</h3>
<ul>
<li>Bump actions/checkout from 3 to 4 (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1271">#1271</a>)
[555f543]</li>
<li>Bump golang.org/x/sys from 0.11.0 to 0.12.0 (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1270">#1270</a>)
[d867b7d]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/onsi/ginkgo/commit/1d2fb67b14d3a770782be056751836928af84c5d"><code>1d2fb67</code></a>
v2.12.1</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/90d4846e63cf95e9100b16eb3ff537494f3fb0a0"><code>90d4846</code></a>
Print logr prefix if it exists (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1275">#1275</a>)</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/555f54392ef559e1df4f0f6dd34254c59cd9f26f"><code>555f543</code></a>
Bump actions/checkout from 3 to 4 (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1271">#1271</a>)</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/d867b7dbcdefeac7a6262ef84d93d9ef0fa5094a"><code>d867b7d</code></a>
Bump golang.org/x/sys from 0.11.0 to 0.12.0 (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1270">#1270</a>)</li>
<li>See full diff in <a
href="https://github.com/onsi/ginkgo/compare/v2.12.0...v2.12.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/onsi/ginkgo/v2&package-manager=go_modules&previous-version=2.12.0&new-version=2.12.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-09-20 09:12:38 -07:00
unufr33andFaisal Memon d3091a829c Fix spire-server configmap UpstreamAuthority/aws_pca and KeyManager/a… (#489) 
Current configmap template renders to a wrong KeyManager and
UpstreamAuthority configurarion when aws_kms and aws_pca are enabled and
container is crashing. The proposed changes will fix the issue.

---------

Signed-off-by: unufree <[email protected]>
Signed-off-by: unufr33 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-09-20 09:12:11 -07:00
Marco Franssen 7a96175f06 Remove developer-guy as a CODEOWNER 
Due to time constraints he steps down as a maintainer.

Signed-off-by: Marco Franssen <[email protected]>
 2023-09-18 17:52:01 +02:00
Marco Franssen 800362a121 Bump spire Helm Chart version from 0.12.0 to 0.13.0 (#484) 2023-09-15 09:23:44 -07:00
LaithLiteandMarco Franssen 38f0af4491 Add support for Vault UpstreamAuthority plugin - K8s Auth (#415) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-09-15 08:48:56 +02:00
dependabot[bot] 1aac2d483d Bump docker/login-action from 2 to 3 
Bumps [docker/login-action](https://github.com/docker/login-action) from 2 to 3.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-09-13 17:59:54 +02:00
Inverse Integral 1f908676bb Allow configuration of priorityClassName on spire-server statefulset (#480) 2023-09-12 22:31:23 +02:00
grameshtwilioandMarco Franssen 9ad2ed59b1 option to configure agent sds (#479) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-09-11 11:42:27 +00:00
Krishnakumar Venkataraman 693ce08425 Remove ## values section from chart readms 
Signed-off-by: Krishnakumar Venkataraman <[email protected]>
 2023-09-08 19:11:51 +02:00
KrishnaKrishnakumar VenkataramanMarco Franssen
 		65d56957de Migrate to readme-generator for helm maintained by bitnami (#431) 
Co-authored-by: Krishnakumar Venkataraman <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-09-08 09:39:30 +02:00
Simon Ostendorf dcc60a2896 fix(charts/spire/spire-agent): podmonitor templating (#478) 2023-09-08 09:31:18 +02:00
dependabot[bot] 48adb8869f Bump actions/checkout from 3.6.0 to 4.0.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.6.0 to 4.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.6.0...v4.0.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-09-05 18:05:51 +02:00
dependabot[bot] d1f52d6995 Bump sigstore/cosign-installer from 3.1.1 to 3.1.2 (#473) 2023-09-04 06:52:44 +00:00
kfox1111 5273f4e530 Switch mysql and postgresql tests to HA Production configs (#471) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-09-01 12:25:07 -07:00
kfox1111andMarco Franssen e81a59a7e5 ingress-nginx production tests and spiffe-oidc-discovery-provider example (#136) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-29 15:22:00 +00:00
dependabot[bot] b05175e2b6 Bump actions/checkout from 3.5.3 to 3.6.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.3 to 3.6.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.5.3...v3.6.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-08-25 16:31:52 +02:00
kfox1111Edwin BuckFaisal Memon
 		51cba5b530 Add customPlugins and unsupportedBuiltInPlugins sections to spire-server (#198) 
This patch enables end users to configure external plugins in the
spire-server config. Unsupported internal plugins are not able to be
set.

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Edwin Buck <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-08-24 21:13:28 +00:00
dependabot[bot] f4ee2c2b3a Bump github.com/onsi/ginkgo/v2 from 2.11.0 to 2.12.0 in /tests (#468) 2023-08-24 09:15:42 +02:00
grameshtwilioandFaisal Memon c817dd2411 support datastore password secret created by external resources (#464) 
This allows the datastore secret object to be created by external agents
such as https://github.com/external-secrets/external-secrets

---------

Signed-off-by: grameshtwilio <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-08-22 16:08:52 -07:00
Marco Franssen 71ac5afa11 Split steps in check-versions wf for easier debugging (#467) 2023-08-22 19:11:57 +00:00
kfox1111andMarco Franssen d91403af3a Scan for updates to new images (#466) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-22 12:05:44 -07:00
dependabot[bot]andFaisal Memon 7a5456e404 Bump helm.sh/helm/v3 from 3.11.3 to 3.12.3 in /tests (#462) 
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.11.3 to
3.12.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/helm/helm/releases">helm.sh/helm/v3's
releases</a>.</em></p>
<blockquote>
<p>Helm v3.12.3 is a patch release. Users are encouraged to upgrade for
the best experience. Users are encouraged to upgrade for the best
experience.</p>
<p>The community keeps growing, and we'd love to see you there!</p>
<ul>
<li>Join the discussion in <a
href="https://kubernetes.slack.com">Kubernetes Slack</a>:
<ul>
<li>for questions and just to hang out</li>
<li>for discussing PRs, code, and bugs</li>
</ul>
</li>
<li>Hang out at the Public Developer Call: Thursday, 9:30 Pacific via <a
href="https://zoom.us/j/696660622">Zoom</a></li>
<li>Test, debug, and contribute charts: <a
href="https://artifacthub.io/packages/search?kind=0">ArtifactHub/packages</a></li>
</ul>
<h2>Installation and Upgrading</h2>
<p>Download Helm v3.12.3. The common platform binaries are here:</p>
<ul>
<li><a href="https://get.helm.sh/helm-v3.12.3-darwin-amd64.tar.gz">MacOS
amd64</a> (<a
href="https://get.helm.sh/helm-v3.12.3-darwin-amd64.tar.gz.sha256sum">checksum</a>
/ 1bdbbeec5a12dd0c1cd4efd8948a156d33e1e2f51140e2a51e1e5e7b11b81d47)</li>
<li><a href="https://get.helm.sh/helm-v3.12.3-darwin-arm64.tar.gz">MacOS
arm64</a> (<a
href="https://get.helm.sh/helm-v3.12.3-darwin-arm64.tar.gz.sha256sum">checksum</a>
/ 240b0a7da9cae208000eff3d3fb95e0fa1f4903d95be62c3f276f7630b12dae1)</li>
<li><a href="https://get.helm.sh/helm-v3.12.3-linux-amd64.tar.gz">Linux
amd64</a> (<a
href="https://get.helm.sh/helm-v3.12.3-linux-amd64.tar.gz.sha256sum">checksum</a>
/ 1b2313cd198d45eab00cc37c38f6b1ca0a948ba279c29e322bdf426d406129b5)</li>
<li><a href="https://get.helm.sh/helm-v3.12.3-linux-arm.tar.gz">Linux
arm</a> (<a
href="https://get.helm.sh/helm-v3.12.3-linux-arm.tar.gz.sha256sum">checksum</a>
/ 6b67cf5fc441c1fcb4a860629b2ec613d0e6c8ac536600445f52a033671e985e)</li>
<li><a href="https://get.helm.sh/helm-v3.12.3-linux-arm64.tar.gz">Linux
arm64</a> (<a
href="https://get.helm.sh/helm-v3.12.3-linux-arm64.tar.gz.sha256sum">checksum</a>
/ 79ef06935fb47e432c0c91bdefd140e5b543ec46376007ca14a52e5ed3023088)</li>
<li><a href="https://get.helm.sh/helm-v3.12.3-linux-386.tar.gz">Linux
i386</a> (<a
href="https://get.helm.sh/helm-v3.12.3-linux-386.tar.gz.sha256sum">checksum</a>
/ cb789c4753bf66c8426f6be4091349c0780aaf996af0a1de48318f9f8d6b7bc8)</li>
<li><a
href="https://get.helm.sh/helm-v3.12.3-linux-ppc64le.tar.gz">Linux
ppc64le</a> (<a
href="https://get.helm.sh/helm-v3.12.3-linux-ppc64le.tar.gz.sha256sum">checksum</a>
/ 8f2182ae53dd129a176ee15a09754fa942e9e7e9adab41fd60a39833686fe5e6)</li>
<li><a href="https://get.helm.sh/helm-v3.12.3-linux-s390x.tar.gz">Linux
s390x</a> (<a
href="https://get.helm.sh/helm-v3.12.3-linux-s390x.tar.gz.sha256sum">checksum</a>
/ f5d5c7a4e831dedc8dac5913d4c820e0da10e904debb59dec65bde203fad1af0)</li>
<li><a href="https://get.helm.sh/helm-v3.12.3-windows-amd64.zip">Windows
amd64</a> (<a
href="https://get.helm.sh/helm-v3.12.3-windows-amd64.zip.sha256sum">checksum</a>
/ f3e2e9d69bb0549876aef6e956976f332e482592494874d254ef49c4862c5712)</li>
</ul>
<p>This release was signed with <code>672C 657B E06B 4B30 969C 4A57 4614
49C2 5E36 B98E </code> and can be found at <a
href="https://github.com/mattfarina"><code>@​mattfarina</code></a> <a
href="https://keybase.io/mattfarina">keybase account</a>. Please use the
attached signatures for verifying this release using
<code>gpg</code>.</p>
<p>The <a href="https://helm.sh/docs/intro/quickstart/">Quickstart
Guide</a> will get you going from there. For <strong>upgrade
instructions</strong> or detailed installation notes, check the <a
href="https://helm.sh/docs/intro/install/">install guide</a>. You can
also use a <a
href="https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3">script
to install</a> on any system with <code>bash</code>.</p>
<h2>What's Next</h2>
<ul>
<li>3.13.0 is the next feature release and be on September 13,
2023.</li>
</ul>
<h2>Changelog</h2>
<ul>
<li>bump kubernetes modules to v0.27.3
3a31588ad33fe3b89af5a2a54ee1d25bfe6eaa5e (Joe Julian)</li>
<li>Add priority class to kind sorter
fb7415543b910e5661337e187e2be9d3f383638d (Stepan Dohnal)</li>
</ul>
<p>Helm v3.12.2 is a patch release. Users are encouraged to upgrade for
the best experience. Users are encouraged to upgrade for the best
experience.</p>
<p>The community keeps growing, and we'd love to see you there!</p>
<ul>
<li>Join the discussion in <a
href="https://kubernetes.slack.com">Kubernetes Slack</a>:
<ul>
<li>for questions and just to hang out</li>
<li>for discussing PRs, code, and bugs</li>
</ul>
</li>
<li>Hang out at the Public Developer Call: Thursday, 9:30 Pacific via <a
href="https://zoom.us/j/696660622">Zoom</a></li>
<li>Test, debug, and contribute charts: <a
href="https://artifacthub.io/packages/search?kind=0">ArtifactHub/packages</a></li>
</ul>
<h2>Installation and Upgrading</h2>
<p>Download Helm v3.12.2. The common platform binaries are here:</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/helm/helm/commit/3a31588ad33fe3b89af5a2a54ee1d25bfe6eaa5e"><code>3a31588</code></a>
bump kubernetes modules to v0.27.3</li>
<li><a
href="https://github.com/helm/helm/commit/fb7415543b910e5661337e187e2be9d3f383638d"><code>fb74155</code></a>
Add priority class to kind sorter</li>
<li><a
href="https://github.com/helm/helm/commit/1e210a2c8cc5117d1055bfaa5d40f51bbc2e345e"><code>1e210a2</code></a>
add GetRegistryClient method</li>
<li><a
href="https://github.com/helm/helm/commit/cfa7bc68fa131284fb2fafdb43cd0233dcc7a2b7"><code>cfa7bc6</code></a>
chore(deps): bump oras.land/oras-go from 1.2.2 to 1.2.3</li>
<li><a
href="https://github.com/helm/helm/commit/f32a527a060157990e2aa86bf45010dfb3cc8b8d"><code>f32a527</code></a>
add some test case</li>
<li><a
href="https://github.com/helm/helm/commit/91bb1e34e605a2bfc3fbc4de14921e071af84fd7"><code>91bb1e3</code></a>
fix comment grammar error.</li>
<li><a
href="https://github.com/helm/helm/commit/5217482c8eab1b44cc07dfcfd669c6ee47f3b9bc"><code>5217482</code></a>
bugfix:(<a
href="https://redirect.github.com/helm/helm/issues/11391">#11391</a>)
helm lint infinite loop</li>
<li><a
href="https://github.com/helm/helm/commit/524a0e745742ebda08fbf8965c2c45587a51ae54"><code>524a0e7</code></a>
chore(deps): bump github.com/opencontainers/runc from 1.1.4 to
1.1.5</li>
<li><a
href="https://github.com/helm/helm/commit/c60cdf62ab447ba056e75b5e9d82dd2e2843315a"><code>c60cdf6</code></a>
chore(deps): bump github.com/docker/distribution</li>
<li><a
href="https://github.com/helm/helm/commit/321f71a161706c1184604602408b05fe0097f6eb"><code>321f71a</code></a>
update autoscaling/v2beta1 to autoscaling/v2 in skeleton chart</li>
<li>Additional commits viewable in <a
href="https://github.com/helm/helm/compare/v3.11.3...v3.12.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=helm.sh/helm/v3&package-manager=go_modules&previous-version=3.11.3&new-version=3.12.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Faisal Memon <[email protected]>
 2023-08-22 20:17:44 +02:00
Drew Wellskfox1111Marco Franssen
 		cbe0001131 Federation test (#423) 
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-22 20:07:54 +02:00
Marco Franssen 8e9d42acf7 Bump spire Helm Chart version from 0.11.1 to 0.12.0 (#455) 
Please review the below changelog to ensure this matches up with the
semantic version being applied.

> **Note**: **Maintainers** ensure to run following after merging this
PR to trigger the release workflow:
>
> ```shell
> git checkout main
> git pull
> git checkout release
> git pull
> git merge main
> git push
> ```

**Changes in this release**

* 5e2e8a91 Adds AWS KMS KeyManager support (#435)
* 77fe43f3 Cron job to check for and update images (#249)
* b7e15255 Allow job hooks to be disabled (#434)
* 5e4cf6f5 Clarify project issues identified with nesting document
(#450)
* 72893515 Update spire bits to 1.7.2 (#452)
* dc8a4545 Array spacing in values is incorrect in a file. (#451)
* 94326d9c Fixup Helm docs
* ae8941c4 Support Nested Spire with External Agent (#117)
* f40743d4 Improve Tornjak documentation (#439)
* 0124f633 Bypass example-test for docs only changes (#449)
* 48a28980 Fix chainguard image references as per issue 442 (#443)
* bd393e95 Bump test chart dependencies (#445)
* a52818a7 Add a FAQ and switch rare issue from README to it (#437)
* e60f5287 option to set KeyManager memory in spire server (#444)
* a167ce68 Bump actions/setup-go from 4.0.1 to 4.1.0
* e774584c Bump test chart dependencies (#426)
* bfec27ef Fix jwtIssuer to allow for Uris including scheme (#425)
* 7a6e4f8d Change Tornjak backend default port (#436)
* 1e3039cc Bump spire Helm Chart version from 0.11.0 to 0.11.1 (#419)
* d2e16062 issuer naming should respect issuer_name override (#378)
* a2e5c36c Bump test chart dependencies (#416)
* a09e054d support annotations so oidc can be annotated (#391)
* 7d94b105 Update spire to 1.7.1 (#412)
* 9f4d4ace Add aws_pca to the spire-server (#404)
* af13f1fc Bump test chart dependencies (#401)
* 9a6768bc Add support for disabling container selectors (#399)
* 4687e20d Merge pull request #315 from spiffe/persistence-type
* e16210c6 Merge branch 'main' into persistence-type
* 624ca9cc Remove misadded lockfile (#400)
* 7ce67c62 Bump actions/checkout from 3.5.2 to 3.5.3 (#395)
* b85ba64d Bump helm/kind-action from 1.7.0 to 1.8.0 (#396)
* a6bdb4d1 Add persistence type flag

Signed-off-by: Marco Franssen <[email protected]>
 2023-08-21 10:43:47 -07:00
Marco FranssenandFaisal Memon c298510701 Fix initContainers spire-server statefulset (#458) 
To allow for inplace upgrades of spire-server statefulset we are not
allowed to
make changes to all fields of the statefulset spec.

When bumping from 0.8.1 to the latest version the `initContainers:`
field is added in the spec and therefore does not allow for updating the
statefulset.

This fix prevents the empty initContainers block when bumping from a
previous chart version.

Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-08-21 10:38:42 -07:00
dependabot[bot] ecb83d6dd4 Bump github.com/onsi/gomega from 1.27.6 to 1.27.10 in /tests (#461) 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from
1.27.6 to 1.27.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/onsi/gomega/releases">github.com/onsi/gomega's
releases</a>.</em></p>
<blockquote>
<h2>v1.27.10</h2>
<h2>1.27.10</h2>
<h3>Fixes</h3>
<ul>
<li>fix: go 1.21 adding goroutine ID to creator+location (<a
href="https://redirect.github.com/onsi/gomega/issues/685">#685</a>)
[bdc7803]</li>
</ul>
<h2>v1.27.9</h2>
<h2>1.27.9</h2>
<h3>Fixes</h3>
<ul>
<li>Prevent nil-dereference in format.Object for boxed nil error (<a
href="https://redirect.github.com/onsi/gomega/issues/681">#681</a>)
[3b31fc3]</li>
</ul>
<h3>Maintenance</h3>
<ul>
<li>Bump golang.org/x/net from 0.11.0 to 0.12.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/679">#679</a>)
[360849b]</li>
<li>chore: use String() instead of fmt.Sprintf (<a
href="https://redirect.github.com/onsi/gomega/issues/678">#678</a>)
[86f3659]</li>
<li>Bump golang.org/x/net from 0.10.0 to 0.11.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/674">#674</a>)
[642ead0]</li>
<li>chore: unnecessary use of fmt.Sprintf (<a
href="https://redirect.github.com/onsi/gomega/issues/677">#677</a>)
[ceb9ca6]</li>
<li>Bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/675">#675</a>)
[a2087d8]</li>
<li>docs: fix ContainSubstring references (<a
href="https://redirect.github.com/onsi/gomega/issues/673">#673</a>)
[fc9a89f]</li>
<li>Bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/671">#671</a>)
[9076019]</li>
</ul>
<h2>v1.27.8</h2>
<h2>1.27.8</h2>
<h3>Fixes</h3>
<ul>
<li>HaveExactElement should not call FailureMessage if a submatcher
returned an error [096f392]</li>
</ul>
<h3>Maintenance</h3>
<ul>
<li>Bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7 (<a
href="https://redirect.github.com/onsi/gomega/issues/669">#669</a>)
[8884bee]</li>
</ul>
<h2>v1.27.7</h2>
<h2>1.27.7</h2>
<h3>Fixes</h3>
<ul>
<li>fix: gcustom.MakeMatcher accepts nil as actual value (<a
href="https://redirect.github.com/onsi/gomega/issues/666">#666</a>)
[57054d5]</li>
</ul>
<h3>Maintenance</h3>
<ul>
<li>update gitignore [05c1bc6]</li>
<li>Bump github.com/onsi/ginkgo/v2 from 2.9.4 to 2.9.5 (<a
href="https://redirect.github.com/onsi/gomega/issues/663">#663</a>)
[7cadcf6]</li>
<li>Bump golang.org/x/net from 0.9.0 to 0.10.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/662">#662</a>)
[b524839]</li>
<li>Bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.9.4 (<a
href="https://redirect.github.com/onsi/gomega/issues/661">#661</a>)
[5f44694]</li>
<li>Bump commonmarker from 0.23.8 to 0.23.9 in /docs (<a
href="https://redirect.github.com/onsi/gomega/issues/657">#657</a>)
[05dc99a]</li>
<li>Bump nokogiri from 1.14.1 to 1.14.3 in /docs (<a
href="https://redirect.github.com/onsi/gomega/issues/658">#658</a>)
[3a033d1]</li>
<li>Replace deprecated NewGomegaWithT with NewWithT (<a
href="https://redirect.github.com/onsi/gomega/issues/659">#659</a>)
[a19238f]</li>
<li>Bump golang.org/x/net from 0.8.0 to 0.9.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/656">#656</a>)
[29ed041]</li>
<li>Bump actions/setup-go from 3 to 4 (<a
href="https://redirect.github.com/onsi/gomega/issues/651">#651</a>)
[11b2080]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/onsi/gomega/blob/master/CHANGELOG.md">github.com/onsi/gomega's
changelog</a>.</em></p>
<blockquote>
<h2>1.27.10</h2>
<h3>Fixes</h3>
<ul>
<li>fix: go 1.21 adding goroutine ID to creator+location (<a
href="https://redirect.github.com/onsi/gomega/issues/685">#685</a>)
[bdc7803]</li>
</ul>
<h2>1.27.9</h2>
<h3>Fixes</h3>
<ul>
<li>Prevent nil-dereference in format.Object for boxed nil error (<a
href="https://redirect.github.com/onsi/gomega/issues/681">#681</a>)
[3b31fc3]</li>
</ul>
<h3>Maintenance</h3>
<ul>
<li>Bump golang.org/x/net from 0.11.0 to 0.12.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/679">#679</a>)
[360849b]</li>
<li>chore: use String() instead of fmt.Sprintf (<a
href="https://redirect.github.com/onsi/gomega/issues/678">#678</a>)
[86f3659]</li>
<li>Bump golang.org/x/net from 0.10.0 to 0.11.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/674">#674</a>)
[642ead0]</li>
<li>chore: unnecessary use of fmt.Sprintf (<a
href="https://redirect.github.com/onsi/gomega/issues/677">#677</a>)
[ceb9ca6]</li>
<li>Bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/675">#675</a>)
[a2087d8]</li>
<li>docs: fix ContainSubstring references (<a
href="https://redirect.github.com/onsi/gomega/issues/673">#673</a>)
[fc9a89f]</li>
<li>Bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/671">#671</a>)
[9076019]</li>
</ul>
<h2>1.27.8</h2>
<h3>Fixes</h3>
<ul>
<li>HaveExactElement should not call FailureMessage if a submatcher
returned an error [096f392]</li>
</ul>
<h3>Maintenance</h3>
<ul>
<li>Bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7 (<a
href="https://redirect.github.com/onsi/gomega/issues/669">#669</a>)
[8884bee]</li>
</ul>
<h2>1.27.7</h2>
<h3>Fixes</h3>
<ul>
<li>fix: gcustom.MakeMatcher accepts nil as actual value (<a
href="https://redirect.github.com/onsi/gomega/issues/666">#666</a>)
[57054d5]</li>
</ul>
<h3>Maintenance</h3>
<ul>
<li>update gitignore [05c1bc6]</li>
<li>Bump github.com/onsi/ginkgo/v2 from 2.9.4 to 2.9.5 (<a
href="https://redirect.github.com/onsi/gomega/issues/663">#663</a>)
[7cadcf6]</li>
<li>Bump golang.org/x/net from 0.9.0 to 0.10.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/662">#662</a>)
[b524839]</li>
<li>Bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.9.4 (<a
href="https://redirect.github.com/onsi/gomega/issues/661">#661</a>)
[5f44694]</li>
<li>Bump commonmarker from 0.23.8 to 0.23.9 in /docs (<a
href="https://redirect.github.com/onsi/gomega/issues/657">#657</a>)
[05dc99a]</li>
<li>Bump nokogiri from 1.14.1 to 1.14.3 in /docs (<a
href="https://redirect.github.com/onsi/gomega/issues/658">#658</a>)
[3a033d1]</li>
<li>Replace deprecated NewGomegaWithT with NewWithT (<a
href="https://redirect.github.com/onsi/gomega/issues/659">#659</a>)
[a19238f]</li>
<li>Bump golang.org/x/net from 0.8.0 to 0.9.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/656">#656</a>)
[29ed041]</li>
<li>Bump actions/setup-go from 3 to 4 (<a
href="https://redirect.github.com/onsi/gomega/issues/651">#651</a>)
[11b2080]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/onsi/gomega/commit/9cbf7b0019d4d489d668583b0d7a6ac889ee2bc8"><code>9cbf7b0</code></a>
v1.27.10</li>
<li><a
href="https://github.com/onsi/gomega/commit/bdc7803e66e0db777db09edea3bb6e85df8c9d6d"><code>bdc7803</code></a>
fix: go 1.21 adding goroutine ID to creator+location (<a
href="https://redirect.github.com/onsi/gomega/issues/685">#685</a>)</li>
<li><a
href="https://github.com/onsi/gomega/commit/66bcd9de8fa08e35002e61e673c37d38a96fcd45"><code>66bcd9d</code></a>
v1.27.9</li>
<li><a
href="https://github.com/onsi/gomega/commit/3b31fc3875132cf36ce6e058180932da829fafec"><code>3b31fc3</code></a>
Prevent nil-dereference in format.Object for boxed nil error (<a
href="https://redirect.github.com/onsi/gomega/issues/681">#681</a>)</li>
<li><a
href="https://github.com/onsi/gomega/commit/360849b5eeaa51d7324a9f8485e951a35b952ed8"><code>360849b</code></a>
Bump golang.org/x/net from 0.11.0 to 0.12.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/679">#679</a>)</li>
<li><a
href="https://github.com/onsi/gomega/commit/86f3659f49faa273ed5f93a0b2cf5affee4bd068"><code>86f3659</code></a>
chore: use String() instead of fmt.Sprintf (<a
href="https://redirect.github.com/onsi/gomega/issues/678">#678</a>)</li>
<li><a
href="https://github.com/onsi/gomega/commit/642ead0c6d5354f23dc9f0e52cebe5729c7c435d"><code>642ead0</code></a>
Bump golang.org/x/net from 0.10.0 to 0.11.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/674">#674</a>)</li>
<li><a
href="https://github.com/onsi/gomega/commit/ceb9ca6a1cfa690c19c7b778b0fe76edc4e28b6c"><code>ceb9ca6</code></a>
chore: unnecessary use of fmt.Sprintf (<a
href="https://redirect.github.com/onsi/gomega/issues/677">#677</a>)</li>
<li><a
href="https://github.com/onsi/gomega/commit/a2087d8d97ab9af4ccd9fcea75ca6660bb595663"><code>a2087d8</code></a>
Bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 (<a
href="https://redirect.github.com/onsi/gomega/issues/675">#675</a>)</li>
<li><a
href="https://github.com/onsi/gomega/commit/fc9a89ffe7d842fb0389f42c034194075ed38ef0"><code>fc9a89f</code></a>
docs: fix ContainSubstring references (<a
href="https://redirect.github.com/onsi/gomega/issues/673">#673</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/onsi/gomega/compare/v1.27.6...v1.27.10">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/onsi/gomega&package-manager=go_modules&previous-version=1.27.6&new-version=1.27.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-08-21 10:10:52 -07:00
Marco Franssen 413644d27d Merge pull request #456 from spiffe/fix-dependabot-include-go 2023-08-21 18:42:51 +02:00
dependabot[bot] eb1ad75d7f Bump imjasonh/setup-crane from 0.1 to 0.3 (#460) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-08-21 01:03:56 -07:00
dependabot[bot] 3d307a2ebf Bump actions/setup-go from 4.0.0 to 4.1.0 (#459) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-08-21 01:03:40 -07:00
Marco Franssen 9cb59dafb8 Include go dependencies in dependabot.yaml 
Signed-off-by: Marco Franssen <[email protected]>
 2023-08-21 09:29:04 +02:00
Marco Franssen 80b9a83873 Fix indentation issue in dependabot.yaml 
Signed-off-by: Marco Franssen <[email protected]>
 2023-08-21 09:29:04 +02:00
Marco Franssen 76e3665396 Fix annotation for spire-oidc deployment (#457) 2023-08-18 10:06:15 -07:00
Maximiliano ChurichiMarco Franssenkfox1111
 		5e2e8a9188 Adds AWS KMS KeyManager support (#435) 
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-08-18 09:52:51 +02:00
kfox1111andMarco Franssen 77fe43f37d Cron job to check for and update images (#249) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-18 09:49:50 +02:00
Faisal MemonMarco FranssenKevin Fox
 		b7e15255f3 Allow job hooks to be disabled (#434) 
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
 2023-08-18 09:48:14 +02:00