panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
787 Commits 1 Branch 2 Tags
d29ad0649f7a05cff5db813a4cc440a7e7cf0913
Commit Graph
223 Commits
Author SHA1 Message Date
kfox1111 8615cb0840 Add devcontainer support to the repo (#98) 2023-12-12 12:50:32 +01:00
marcofranssen a3d3702049 Bump test chart dependencies 
Signed-off-by: GitHub <[email protected]>
 2023-12-11 10:44:48 +01:00
github-actions[bot]marcofranssenkfox1111
 		80c7653a21 Bump test chart dependencies (#134) 
* Bump test chart dependencies

Signed-off-by: GitHub <[email protected]>

* Update charts/spire/charts/spiffe-oidc-discovery-provider/values.yaml

Signed-off-by: kfox1111 <[email protected]>

* Fix Docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: GitHub <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-12-07 22:47:38 +00:00
dependabot[bot] c017d82594 Bump actions/setup-python from 4 to 5 (#137) 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 5.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-07 12:40:31 +00:00
dependabot[bot] 6fda639237 Bump actions/setup-go from 4.1.0 to 5.0.0 (#136) 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4.1.0 to 5.0.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v4.1.0...v5.0.0)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-07 04:32:42 -08:00
kfox1111Faisal MemonMarco Franssen
 		e030fa171b Allow additional CRs to be managed by the chart (#117) 
* Add support for the new spire-controller-manager class feature

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs. Swich nested deployment to use controller manager

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Test with nightly

Signed-off-by: Kevin Fox <[email protected]>

* Fix global object naming clash

Signed-off-by: Kevin Fox <[email protected]>

* Fix missing dot

Signed-off-by: Kevin Fox <[email protected]>

* Fix naming conflict with cluster ids

Signed-off-by: Kevin Fox <[email protected]>

* Fix scoping issue

Signed-off-by: Kevin Fox <[email protected]>

* Fix typo

Signed-off-by: Kevin Fox <[email protected]>

* Fix webhook name collision

Signed-off-by: Kevin Fox <[email protected]>

* Fix webhook reference and add note to user about className

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade has to work on the old version of the object before rename

Signed-off-by: Kevin Fox <[email protected]>

* Fix formatting

Signed-off-by: Kevin Fox <[email protected]>

* Remove extra junk from job

Signed-off-by: Kevin Fox <[email protected]>

* Easier local runs and wait for crds

Signed-off-by: Kevin Fox <[email protected]>

* Add missing crd upgrade

Signed-off-by: Kevin Fox <[email protected]>

* Update upgrade notes

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-server/templates/controller-manager-cluster-ids.yaml

Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Bump version to the released 0.4.0

Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Merge in crd changes from upstream

Signed-off-by: Kevin Fox <[email protected]>

* Add auto populate dns

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/README.md

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Add missing ClusterSPIFFEID fields

There are a few options in the CRD not available via the chart.
Sync them to the chart.

Signed-off-by: Kevin Fox <[email protected]>

* Add another missing one

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Allow additional CRs to be managed by the chart

Sometimes additional ClusterSPIFFEIDs and the other CRs are needed. Add
support for the end user to manage those extra CRs via the chart.

Signed-off-by: Kevin Fox <[email protected]>

* Add validation

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Add className to crs

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Fix readme formatting

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/README.md

Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

* Remove dead code

Signed-off-by: Kevin Fox <[email protected]>

* Fix extra newline

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-11-28 09:15:23 -08:00
github-actions[bot]andmarcofranssen e68f6170a6 Bump test chart dependencies (#116) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-11-27 06:20:42 -08:00
marcofranssen 95e1eb7c57 Bump test chart dependencies 
Signed-off-by: GitHub <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-11-20 10:34:08 +01:00
marcofranssen 889d0af84d Bump test chart dependencies 
Signed-off-by: GitHub <[email protected]>
 2023-11-13 13:49:52 +01:00
kfox1111Faisal MemonMariusz Sabath
 		f2758a8b2b Autogen jwtIssuer (#88) 
* Autogen jwtIssuer

Unset a default for jwtIssuer and global.spire.jwtIssuer. When unset,
generate it to the default of oidc-discovery.$trustDomain so in many
cases the user doesn't need to set it at all.

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Mariusz Sabath <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-11-09 20:31:48 +00:00
kfox1111Marco FranssenFaisal Memon
 		805d8696d0 spire-controller-manager 0.4.0 support (#60) 
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-11-08 10:43:19 +00:00
dependabot[bot] edf2381aad Bump sigstore/cosign-installer from 3.1.2 to 3.2.0 (#85) 
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.1.2 to 3.2.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.1.2...v3.2.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-07 22:56:47 -08:00
marcofranssen 0ed6d9244d Bump test chart dependencies 
Signed-off-by: GitHub <[email protected]>
 2023-11-06 13:15:02 +01:00
dependabot[bot] 9b31f3d40b Bump helm/chart-testing-action from 2.6.0 to 2.6.1 
Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/helm/chart-testing-action/releases)
- [Commits](https://github.com/helm/chart-testing-action/compare/v2.6.0...v2.6.1)

---
updated-dependencies:
- dependency-name: helm/chart-testing-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-11-05 23:21:35 -08:00
dependabot[bot] 2dce90f44e Bump helm/chart-releaser-action from 1.5.0 to 1.6.0 (#75) 
Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/helm/chart-releaser-action/releases)
- [Commits](https://github.com/helm/chart-releaser-action/compare/v1.5.0...v1.6.0)

---
updated-dependencies:
- dependency-name: helm/chart-releaser-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-02 23:12:20 -07:00
kfox1111 6a6aa1c850 Cosign download fix (#72) 2023-10-31 16:44:52 +00:00
github-actions[bot]andmarcofranssen 09ebfc9ee3 Bump test chart dependencies (#68) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-10-30 09:30:10 -07:00
github-actions[bot]marcofranssenFaisal Memon
 		0b174345ab Bump test chart dependencies (#54) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-10-23 20:40:30 +00:00
dependabot[bot]andFaisal Memon cf226a73d5 Bump actions/checkout from 4.1.0 to 4.1.1 (#42) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.1.0...v4.1.1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Faisal Memon <[email protected]>
 2023-10-18 21:17:40 +00:00
kfox1111Faisal MemonMarco Franssen
 		56445c4f94 Spire controller manager upgrade (#8) 
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-10-17 19:54:12 +00:00
github-actions[bot]andmarcofranssen 2644e4b198 Bump test chart dependencies (#38) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-10-16 18:00:04 +00:00
github-actions[bot]andfaisal-memon 06d6690d71 Bump test chart dependencies (#20) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: faisal-memon <[email protected]>
 2023-10-05 11:21:51 -07:00
kfox1111 8aca48f14c Push the changes that update-tags creates (#19) 
* Exit code from diff indicating changes should not block commit.

Signed-off-by: Kevin Fox <[email protected]>

* Push the changes that update-tags creates

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2023-10-05 10:40:32 -07:00
kfox1111 a6cb3974ac Exit code from diff indicating changes should not block commit. (#17) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-10-05 10:23:50 -07:00
Faisal Memon c23e6cb3b1 Fix issue with version checker not running 
Signed-off-by: Faisal Memon <[email protected]>
 2023-10-03 09:00:20 +02:00
dependabot[bot] 51c20b1ec2 Bump actions/checkout from 4.0.0 to 4.1.0 (#9) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v4.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-02 21:12:05 -07:00
kfox1111andFaisal Memon 21db1e4b9a Add a test to ensure upgrades work (#6) 
* Add a test to ensure upgrades work

Signed-off-by: Kevin Fox <[email protected]>

* Update examples/production/run-tests.sh

Co-authored-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-10-02 17:05:25 -07:00
kfox1111 50825d9fc9 Deny production runs of example.org trust domains (#229) 2023-09-25 12:06:48 -07:00
dependabot[bot] 712a0f6fbe Bump actions/checkout from 4.0.0 to 4.1.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.0.0...v4.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-09-25 19:54:27 +02:00
dependabot[bot] 1aac2d483d Bump docker/login-action from 2 to 3 
Bumps [docker/login-action](https://github.com/docker/login-action) from 2 to 3.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-09-13 17:59:54 +02:00
KrishnaKrishnakumar VenkataramanMarco Franssen
 		65d56957de Migrate to readme-generator for helm maintained by bitnami (#431) 
Co-authored-by: Krishnakumar Venkataraman <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-09-08 09:39:30 +02:00
dependabot[bot] 48adb8869f Bump actions/checkout from 3.6.0 to 4.0.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.6.0 to 4.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.6.0...v4.0.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-09-05 18:05:51 +02:00
dependabot[bot] d1f52d6995 Bump sigstore/cosign-installer from 3.1.1 to 3.1.2 (#473) 2023-09-04 06:52:44 +00:00
kfox1111 5273f4e530 Switch mysql and postgresql tests to HA Production configs (#471) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-09-01 12:25:07 -07:00
kfox1111andMarco Franssen e81a59a7e5 ingress-nginx production tests and spiffe-oidc-discovery-provider example (#136) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-29 15:22:00 +00:00
dependabot[bot] b05175e2b6 Bump actions/checkout from 3.5.3 to 3.6.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.3 to 3.6.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.5.3...v3.6.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-08-25 16:31:52 +02:00
Marco Franssen 71ac5afa11 Split steps in check-versions wf for easier debugging (#467) 2023-08-22 19:11:57 +00:00
kfox1111andMarco Franssen d91403af3a Scan for updates to new images (#466) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-22 12:05:44 -07:00
Marco Franssen 413644d27d Merge pull request #456 from spiffe/fix-dependabot-include-go 2023-08-21 18:42:51 +02:00
dependabot[bot] eb1ad75d7f Bump imjasonh/setup-crane from 0.1 to 0.3 (#460) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-08-21 01:03:56 -07:00
dependabot[bot] 3d307a2ebf Bump actions/setup-go from 4.0.0 to 4.1.0 (#459) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-08-21 01:03:40 -07:00
Marco Franssen 9cb59dafb8 Include go dependencies in dependabot.yaml 
Signed-off-by: Marco Franssen <[email protected]>
 2023-08-21 09:29:04 +02:00
Marco Franssen 80b9a83873 Fix indentation issue in dependabot.yaml 
Signed-off-by: Marco Franssen <[email protected]>
 2023-08-21 09:29:04 +02:00
kfox1111andMarco Franssen 77fe43f37d Cron job to check for and update images (#249) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-18 09:49:50 +02:00
kfox1111 ae8941c49d Support Nested Spire with External Agent (#117) 2023-08-16 16:35:41 +02:00
Faisal Memon 0124f633e8 Bypass example-test for docs only changes (#449) 2023-08-16 16:23:32 +02:00
github-actions[bot]andmarcofranssen bd393e9597 Bump test chart dependencies (#445) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-08-15 17:55:19 +00:00
dependabot[bot] a167ce6890 Bump actions/setup-go from 4.0.1 to 4.1.0 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4.0.1 to 4.1.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v4.0.1...v4.1.0)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-08-09 17:52:39 +02:00
github-actions[bot]andmarcofranssen e774584c46 Bump test chart dependencies (#426) 
Co-authored-by: marcofranssen <[email protected]>
 2023-08-09 15:11:47 +00:00
github-actions[bot]andmarcofranssen a2e5c36cc9 Bump test chart dependencies (#416) 
Bump the Helm charts used in test scenarios to latest available
versions.

Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-07-31 18:00:20 +00:00