* Bump spire Helm Chart version from 0.18.1 to 0.18.2
* fd3b7d5 Fix duplicate securityContext section in spire-agent (#279)
Signed-off-by: Faisal Memon <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Add spire-server as deployment
Signed-off-by: aniket patel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Add stateless-server example
Signed-off-by: aniket patel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Update README.md to add deploymentType
Signed-off-by: anhpatel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Set hpa type based on deploymentType
Signed-off-by: aniket patel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Change deploymentType values to lowercase in README
Signed-off-by: aniket patel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Update readme for stateless-server
Signed-off-by: aniket patel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Revert README changes
Signed-off-by: aniket patel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Update readme for deploymentType
Signed-off-by: aniket patel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Failure handling only when deployment type checked
Signed-off-by: aniket patel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Fix issue with tests not running on automated PRs (#266)
* Use github app for version checker
Signed-off-by: Faisal Memon <[email protected]>
* Use full version
Signed-off-by: Faisal Memon <[email protected]>
---------
Signed-off-by: Faisal Memon <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Bump test chart dependencies (#282)
Co-authored-by: marcofranssen <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Bump peter-evans/create-pull-request from 6.0.1 to 6.0.2 (#283)
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v6.0.1...v6.0.2)
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: aniket patel <[email protected]>
* Complete Server K8S PSAT support (#242)
* Complete Server K8S PSAT support
Add all the SPIRE Server supported options for the K8S PSAT attestor. This retains the
ease of use for configuring local cluster support while adding the ability to configure
multiple/external clusters as well. Kubeconfig support is added in its own config block
as it will be used/shared with spire-controller-manager support in the future.
Signed-off-by: Kevin Fox <[email protected]>
* Fix merge conflict
Signed-off-by: Kevin Fox <[email protected]>
* Add support for integration tests in the tests/integration dir
Signed-off-by: Kevin Fox <[email protected]>
* Fix split issue and typo
Signed-off-by: Kevin Fox <[email protected]>
* Add basic psat test
Signed-off-by: Kevin Fox <[email protected]>
* Fix linter
Signed-off-by: Kevin Fox <[email protected]>
* Fix up test
Signed-off-by: Kevin Fox <[email protected]>
* Add missing file
Signed-off-by: Kevin Fox <[email protected]>
* Better encode config
Signed-off-by: Kevin Fox <[email protected]>
* Update charts/spire/charts/spire-server/values.yaml
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Update docs
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Update charts/spire/charts/spire-server/values.yaml
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Update default
Signed-off-by: Kevin Fox <[email protected]>
* Fix config file layout. Incorperate feedback.
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Fix up kind
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Add external k8s bundler (#270)
* Complete Server K8S PSAT support
Add all the SPIRE Server supported options for the K8S PSAT attestor. This retains the
ease of use for configuring local cluster support while adding the ability to configure
multiple/external clusters as well. Kubeconfig support is added in its own config block
as it will be used/shared with spire-controller-manager support in the future.
Signed-off-by: Kevin Fox <[email protected]>
* Fix merge conflict
Signed-off-by: Kevin Fox <[email protected]>
* Add support for integration tests in the tests/integration dir
Signed-off-by: Kevin Fox <[email protected]>
* Fix split issue and typo
Signed-off-by: Kevin Fox <[email protected]>
* Add basic psat test
Signed-off-by: Kevin Fox <[email protected]>
* Fix linter
Signed-off-by: Kevin Fox <[email protected]>
* Fix up test
Signed-off-by: Kevin Fox <[email protected]>
* Add missing file
Signed-off-by: Kevin Fox <[email protected]>
* Better encode config
Signed-off-by: Kevin Fox <[email protected]>
* Update charts/spire/charts/spire-server/values.yaml
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Update docs
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Update charts/spire/charts/spire-server/values.yaml
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Add external k8s bundler
Adds support to sync the CA bundle to configmaps in external
Kubernetes clusters
Signed-off-by: Kevin Fox <[email protected]>
* Update default
Signed-off-by: Kevin Fox <[email protected]>
* Fix config file layout. Incorperate feedback.
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Update based on parent pr feedback
Signed-off-by: Kevin Fox <[email protected]>
* Reformat config file
Signed-off-by: Kevin Fox <[email protected]>
* Fix some things
Signed-off-by: Kevin Fox <[email protected]>
* Reconfigure kind
Signed-off-by: Kevin Fox <[email protected]>
* More debugging
Signed-off-by: Kevin Fox <[email protected]>
* Fix up kind
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Bump helm.sh/helm/v3 from 3.14.2 to 3.14.3 in /tests (#285)
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.14.2 to 3.14.3.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.14.2...v3.14.3)
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: aniket patel <[email protected]>
* Bump docker/login-action from 3.0.0 to 3.1.0 (#286)
Bumps [docker/login-action](https://github.com/docker/login-action) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v3...v3.1.0)
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: aniket patel <[email protected]>
* Bump test chart dependencies
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: aniket patel <[email protected]>
* Bump github.com/onsi/gomega from 1.31.1 to 1.32.0 in /tests (#291)
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.31.1 to 1.32.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.31.1...v1.32.0)
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: aniket patel <[email protected]>
* Bump github.com/onsi/ginkgo/v2 from 2.16.0 to 2.17.0 in /tests (#292)
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.16.0 to 2.17.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.16.0...v2.17.0)
---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: aniket patel <[email protected]>
* Update examples/stateless-server/README.md
Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: anhpatel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Update charts/spire/charts/spire-server/templates/hpa.yaml
Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: anhpatel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Update examples/stateless-server/README.md
Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: anhpatel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Update examples/stateless-server/README.md
Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: anhpatel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Move spire-server pod spec to _pod_spec
Signed-off-by: aniket patel <[email protected]>
* Support hybrid nodes with different attestors or config (#218)
* Add direct tpm support for spire-agent
Signed-off-by: Kevin Fox <[email protected]>
* Add fingerprinting support
Signed-off-by: Kevin Fox <[email protected]>
* Add example
Signed-off-by: Kevin Fox <[email protected]>
* Update charts/spire/charts/spire-agent/templates/configmap.yaml
Signed-off-by: kfox1111 <[email protected]>
* Support hybrid nodes with different attestors
In some clusters, you may have a mix of nodes with differing attestor
needs. For example, some nodes have hardware TPMs and some without.
This patch enables configuring multiple daemonsets for the agent
that you can target to pools of nodes.
Signed-off-by: Kevin Fox <[email protected]>
* Remove extra slash
Signed-off-by: Kevin Fox <[email protected]>
* Update docs
Signed-off-by: Kevin Fox <[email protected]>
* Update charts/spire/charts/spire-agent/templates/configmap.yaml
Signed-off-by: kfox1111 <[email protected]>
* Fix broken tests
Signed-off-by: Kevin Fox <[email protected]>
* Add daemonset labels
Signed-off-by: Kevin Fox <[email protected]>
* Add temporary upgrade hook
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Fix include
Signed-off-by: Kevin Fox <[email protected]>
* Add missing values
Signed-off-by: Kevin Fox <[email protected]>
* Fix perms, add upgrade note
Signed-off-by: Kevin Fox <[email protected]>
* Fix hardcoded nodeAttestor and keyManager in spire-agent
Fixes: https://github.com/spiffe/helm-charts-hardened/issues/220
Signed-off-by: Kevin Fox <[email protected]>
* Fix merge issues
Signed-off-by: Kevin Fox <[email protected]>
* Fix unit tests
Signed-off-by: Kevin Fox <[email protected]>
* Pass the agent's securityContext on to Kubernetes
Currently its ignored.
Signed-off-by: Kevin Fox <[email protected]>
* Update example to be usable
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Signed-off-by: kfox1111 <[email protected]>
* Update example
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Fix merge conflict issue
Signed-off-by: Kevin Fox <[email protected]>
* Update to the newest release
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Signed-off-by: kfox1111 <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix version numbers in docs
Signed-off-by: Kevin Fox <[email protected]>
* Remove merge conflicted extra code
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Change production example to be an integration test (#237)
* Change production example to be an integration test
The documentation is a better example then the test now. Separate the
two.
Signed-off-by: Kevin Fox <[email protected]>
* Fix job name reference
Signed-off-by: Kevin Fox <[email protected]>
* Fix job name reference
Signed-off-by: Kevin Fox <[email protected]>
* Update postgresql example
Signed-off-by: Kevin Fox <[email protected]>
* Update mysql example
Signed-off-by: Kevin Fox <[email protected]>
* Update nested and mysql
Signed-off-by: Kevin Fox <[email protected]>
* Fix typo
Signed-off-by: Kevin Fox <[email protected]>
* Add support for integration tests in the tests/integration dir
Signed-off-by: Kevin Fox <[email protected]>
* Fix split issue and typo
Signed-off-by: Kevin Fox <[email protected]>
* Fix split issue
Signed-off-by: Kevin Fox <[email protected]>
* Try folding example your values into bash so that its not laying around in an fs for a user to accidently use.
Signed-off-by: Kevin Fox <[email protected]>
* Fix test
Signed-off-by: Kevin Fox <[email protected]>
* Fix test
Signed-off-by: Kevin Fox <[email protected]>
* Fix test
Signed-off-by: Kevin Fox <[email protected]>
* Fix test
Signed-off-by: Kevin Fox <[email protected]>
* Fix test
Signed-off-by: Kevin Fox <[email protected]>
* Fix test
Signed-off-by: Kevin Fox <[email protected]>
* Cleanup
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Remove production values reference
Signed-off-by: aniket patel <[email protected]>
* Update charts/spire/charts/spire-server/templates/pre-delete-hook.yaml
Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: anhpatel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Update examples/stateless-server/run-tests.sh
Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: anhpatel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Bump spire Helm Chart version from 0.18.2 to 0.19.0
* 72768ec Support hybrid nodes with different attestors or config (#218)
* 5299642 Bump test chart dependencies
* 36e9315 Add external k8s bundler (#270)
* ef610df Complete Server K8S PSAT support (#242)
* d96271c Bump test chart dependencies (#282)
Signed-off-by: Faisal Memon <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Fix production test (#297)
Signed-off-by: aniket patel <[email protected]>
* Bump test chart dependencies (#299)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Bump github.com/onsi/ginkgo/v2 from 2.17.0 to 2.17.1 in /tests (#298)
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.17.0 to 2.17.1.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.17.0...v2.17.1)
---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Fix documentation issue (#300)
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: aniket patel <[email protected]>
* Move statefulset and deployment to server-resource
Signed-off-by: aniket patel <[email protected]>
* Change deploymentType to kind
Signed-off-by: aniket patel <[email protected]>
---------
Signed-off-by: Faisal Memon <[email protected]>
Signed-off-by: aniket patel <[email protected]>
Signed-off-by: aniket patel <[email protected]>
Signed-off-by: anhpatel <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: aniket patel <[email protected]>
Co-authored-by: spire-helm-version-checker[bot] <161522935+spire-helm-version-checker[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: kfox1111 <[email protected]>
* Change production example to be an integration test
The documentation is a better example then the test now. Separate the
two.
Signed-off-by: Kevin Fox <[email protected]>
* Fix job name reference
Signed-off-by: Kevin Fox <[email protected]>
* Fix job name reference
Signed-off-by: Kevin Fox <[email protected]>
* Update postgresql example
Signed-off-by: Kevin Fox <[email protected]>
* Update mysql example
Signed-off-by: Kevin Fox <[email protected]>
* Update nested and mysql
Signed-off-by: Kevin Fox <[email protected]>
* Fix typo
Signed-off-by: Kevin Fox <[email protected]>
* Add support for integration tests in the tests/integration dir
Signed-off-by: Kevin Fox <[email protected]>
* Fix split issue and typo
Signed-off-by: Kevin Fox <[email protected]>
* Fix split issue
Signed-off-by: Kevin Fox <[email protected]>
* Try folding example your values into bash so that its not laying around in an fs for a user to accidently use.
Signed-off-by: Kevin Fox <[email protected]>
* Fix test
Signed-off-by: Kevin Fox <[email protected]>
* Fix test
Signed-off-by: Kevin Fox <[email protected]>
* Fix test
Signed-off-by: Kevin Fox <[email protected]>
* Fix test
Signed-off-by: Kevin Fox <[email protected]>
* Fix test
Signed-off-by: Kevin Fox <[email protected]>
* Fix test
Signed-off-by: Kevin Fox <[email protected]>
* Cleanup
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
* Add direct tpm support for spire-agent
Signed-off-by: Kevin Fox <[email protected]>
* Add fingerprinting support
Signed-off-by: Kevin Fox <[email protected]>
* Add example
Signed-off-by: Kevin Fox <[email protected]>
* Update charts/spire/charts/spire-agent/templates/configmap.yaml
Signed-off-by: kfox1111 <[email protected]>
* Support hybrid nodes with different attestors
In some clusters, you may have a mix of nodes with differing attestor
needs. For example, some nodes have hardware TPMs and some without.
This patch enables configuring multiple daemonsets for the agent
that you can target to pools of nodes.
Signed-off-by: Kevin Fox <[email protected]>
* Remove extra slash
Signed-off-by: Kevin Fox <[email protected]>
* Update docs
Signed-off-by: Kevin Fox <[email protected]>
* Update charts/spire/charts/spire-agent/templates/configmap.yaml
Signed-off-by: kfox1111 <[email protected]>
* Fix broken tests
Signed-off-by: Kevin Fox <[email protected]>
* Add daemonset labels
Signed-off-by: Kevin Fox <[email protected]>
* Add temporary upgrade hook
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Fix include
Signed-off-by: Kevin Fox <[email protected]>
* Add missing values
Signed-off-by: Kevin Fox <[email protected]>
* Fix perms, add upgrade note
Signed-off-by: Kevin Fox <[email protected]>
* Fix hardcoded nodeAttestor and keyManager in spire-agent
Fixes: https://github.com/spiffe/helm-charts-hardened/issues/220
Signed-off-by: Kevin Fox <[email protected]>
* Fix merge issues
Signed-off-by: Kevin Fox <[email protected]>
* Fix unit tests
Signed-off-by: Kevin Fox <[email protected]>
* Pass the agent's securityContext on to Kubernetes
Currently its ignored.
Signed-off-by: Kevin Fox <[email protected]>
* Update example to be usable
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Signed-off-by: kfox1111 <[email protected]>
* Update example
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Fix merge conflict issue
Signed-off-by: Kevin Fox <[email protected]>
* Update to the newest release
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Signed-off-by: kfox1111 <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix version numbers in docs
Signed-off-by: Kevin Fox <[email protected]>
* Remove merge conflicted extra code
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
* Add example for using Spire for mTLS with Keycloak
Signed-off-by: Moritz Schmitz von Hülst <[email protected]>
* Minor improvement to the README.md
Signed-off-by: Moritz Schmitz von Hülst <[email protected]>
* But I still need to learn GitHub Markdown format
Signed-off-by: Moritz Schmitz von Hülst <[email protected]>
* Make it more obvious that it works without a (correct) password
Signed-off-by: Moritz Schmitz von Hülst <[email protected]>
* Add warning for Kubernetes 1.29+ feature
Signed-off-by: Moritz Schmitz von Hülst <[email protected]>
* Move ghostunnel into an initContainer with restartPolicy=Always
Signed-off-by: Moritz Schmitz von Hülst <[email protected]>
* Apply suggestions from code review
Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Moritz Schmitz von Hülst <[email protected]>
* Move java-spiffe-helper-properties into extraDeploy of the Keycloak chart and pin node version to it has a matching rancher/kubectl image
Signed-off-by: Moritz Schmitz von Hülst <[email protected]>
---------
Signed-off-by: Moritz Schmitz von Hülst <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Its pretty much only useful if you want to port forward the
discovery provider and use localhost to access it. An uncommon
use case. Its easy to add back for that case. This simplifies
production deploymnet.
Signed-off-by: Kevin Fox <[email protected]>
* Tornjak UBI support
The Tornjak containers now have two different flavors. Vanilla and UBI.
Automatically select the UBI image when deploying on OpenShift.
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Mariusz Sabath <[email protected]>
* SELinux support
Add support to the chart to set the SELinux context to enable a working
system. Enable it by default on OpenShift clusters.
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
* Add support for the new spire-controller-manager class feature
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs. Swich nested deployment to use controller manager
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Test with nightly
Signed-off-by: Kevin Fox <[email protected]>
* Fix global object naming clash
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing dot
Signed-off-by: Kevin Fox <[email protected]>
* Fix naming conflict with cluster ids
Signed-off-by: Kevin Fox <[email protected]>
* Fix scoping issue
Signed-off-by: Kevin Fox <[email protected]>
* Fix typo
Signed-off-by: Kevin Fox <[email protected]>
* Fix webhook name collision
Signed-off-by: Kevin Fox <[email protected]>
* Fix webhook reference and add note to user about className
Signed-off-by: Kevin Fox <[email protected]>
* Upgrade has to work on the old version of the object before rename
Signed-off-by: Kevin Fox <[email protected]>
* Fix formatting
Signed-off-by: Kevin Fox <[email protected]>
* Remove extra junk from job
Signed-off-by: Kevin Fox <[email protected]>
* Easier local runs and wait for crds
Signed-off-by: Kevin Fox <[email protected]>
* Add missing crd upgrade
Signed-off-by: Kevin Fox <[email protected]>
* Update upgrade notes
Signed-off-by: Kevin Fox <[email protected]>
* Update charts/spire/charts/spire-server/templates/controller-manager-cluster-ids.yaml
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Bump version to the released 0.4.0
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Merge in crd changes from upstream
Signed-off-by: Kevin Fox <[email protected]>
* Add auto populate dns
Signed-off-by: Kevin Fox <[email protected]>
* Update charts/spire/README.md
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Add missing ClusterSPIFFEID fields
There are a few options in the CRD not available via the chart.
Sync them to the chart.
Signed-off-by: Kevin Fox <[email protected]>
* Add another missing one
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Allow additional CRs to be managed by the chart
Sometimes additional ClusterSPIFFEIDs and the other CRs are needed. Add
support for the end user to manage those extra CRs via the chart.
Signed-off-by: Kevin Fox <[email protected]>
* Add validation
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Add className to crs
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Fix readme formatting
Signed-off-by: Kevin Fox <[email protected]>
* Update charts/spire/README.md
Signed-off-by: kfox1111 <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Remove dead code
Signed-off-by: Kevin Fox <[email protected]>
* Fix extra newline
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
* Autogen jwtIssuer
Unset a default for jwtIssuer and global.spire.jwtIssuer. When unset,
generate it to the default of oidc-discovery.$trustDomain so in many
cases the user doesn't need to set it at all.
Signed-off-by: Kevin Fox <[email protected]>
* Autogen tornjak's apiServerURL
Unset the default tornjak apiServerURL. When unset, default to
https://tornjak-backend.$trustDomain so in many cases users don't
have to set it.
Signed-off-by: Kevin Fox <[email protected]>
* Do more autodetection
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Mariusz Sabath <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
* Autogen jwtIssuer
Unset a default for jwtIssuer and global.spire.jwtIssuer. When unset,
generate it to the default of oidc-discovery.$trustDomain so in many
cases the user doesn't need to set it at all.
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Mariusz Sabath <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
* Specify ingress controller type
Signed-off-by: Kevin Fox <[email protected]>
* Fix indenting, docs
Signed-off-by: Kevin Fox <[email protected]>
* Fix spacing
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing brackets
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing brackets
Signed-off-by: Kevin Fox <[email protected]>
* Add ingress-nginx support
Signed-off-by: Kevin Fox <[email protected]>
* Use the right example values for test version to upgrade from.
Signed-off-by: Kevin Fox <[email protected]>
* Fix var in wrong location
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing arg
Signed-off-by: Kevin Fox <[email protected]>
* Try this to checkout the right version
Signed-off-by: Kevin Fox <[email protected]>
* Switch to upgrading from 0.14.0
Signed-off-by: Kevin Fox <[email protected]>
* Install crds
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Enable unset ingress controller type to use with openshift later
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs after merge issue
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
* Production test don't cleanup flag
For use in the future with uprade tests, we add a flag -c to the production
test to not cleanup after the testing.
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
* Exit code from diff indicating changes should not block commit.
Signed-off-by: Kevin Fox <[email protected]>
* Push the changes that update-tags creates
Signed-off-by: Kevin Fox <[email protected]>
* Add plugin support to the spire agent
This adapts the existing spire server plugin support to be usable by
the agent as well.
Signed-off-by: Kevin Fox <[email protected]>
* Fix notes
Signed-off-by: Kevin Fox <[email protected]>
* Add plugin support to the spire agent
This adapts the existing spire server plugin support to be usable by
the agent as well.
Signed-off-by: Kevin Fox <[email protected]>
* Fix notes
Signed-off-by: Kevin Fox <[email protected]>
* Update documentation
Signed-off-by: Kevin Fox <[email protected]>
* Update example
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Add a test to ensure upgrades work
Signed-off-by: Kevin Fox <[email protected]>
* Update examples/production/run-tests.sh
Co-authored-by: Faisal Memon <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
