Commit Graph
842 Commits
Author SHA1 Message Date
spire-helm-version-checker[bot]andmarcofranssen de5ec47613 Bump test chart dependencies (#445)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-09-02 05:51:02 -07:00
dependabot[bot] 15ad08c64f Bump github.com/onsi/gomega from 1.34.1 to 1.34.2 in /tests (#442)
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.34.1 to 1.34.2.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.34.1...v1.34.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-29 13:20:29 +02:00
dependabot[bot] 7297130a27 Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.20.2 in /tests (#443)
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.20.1 to 2.20.2.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.20.1...v2.20.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-29 04:09:00 -07:00
kfox1111andFaisal Memon e72b94fc13 Add all built in BundlePublishers (#430)
* Add all built in BundlePublishers

Signed-off-by: Kevin Fox <[email protected]>

* Add secret management

Signed-off-by: Kevin Fox <[email protected]>

* Fix typo

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-server/values.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-08-27 12:35:23 -07:00
spire-helm-version-checker[bot]andmarcofranssen 532852d907 Bump test chart dependencies (#440)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-08-26 09:45:03 -07:00
kfox1111 6e8ad569b3 Add a spire-agent auto kubelet verification mode (#435)
* Add a spire-agent auto kubelet verification mode

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2024-08-23 15:09:55 -07:00
kfox1111 50c741e047 Remove extra check that sometimes breaks oidc (#437)
Signed-off-by: Kevin Fox <[email protected]>
2024-08-22 12:08:18 -07:00
kfox1111 f6872299e7 Fix delayed ingress startup in tests (#438)
* Fix delayed ingress startup in tests

Signed-off-by: Kevin Fox <[email protected]>

* Fix lint

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2024-08-22 09:40:41 -07:00
dependabot[bot] 16283b5365 Bump github.com/onsi/ginkgo/v2 from 2.20.0 to 2.20.1 in /tests (#436)
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.20.0 to 2.20.1.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.20.0...v2.20.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-22 05:28:21 -07:00
kfox1111 e062b9f196 Support ipv4 only clusters (#434)
* Support ipv4 only clusters

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spiffe-oidc-discovery-provider/templates/configmap.yaml

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
2024-08-21 12:00:38 -07:00
kfox1111andFaisal Memon b96e07e349 Enable more forms of kubelet certificate verification (#426)
* Enable kubelet certificate verification by default

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/README.md

Signed-off-by: kfox1111 <[email protected]>

* Update charts/spire/charts/spire-agent/templates/configmap.yaml

Signed-off-by: kfox1111 <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Fix image

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Signed-off-by: kfox1111 <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-agent/templates/configmap.yaml

Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-08-20 22:08:39 -07:00
Erik Godding Boye f92d729137 Add missing properties required by SecurityContextConstraints CRD (#432)
Signed-off-by: Erik Godding Boye <[email protected]>
2024-08-20 08:55:35 -07:00
spire-helm-version-checker[bot]andmarcofranssen 8553a78f6c Bump test chart dependencies (#431)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-08-19 12:39:18 +02:00
Faisal Memonandkfox1111 ba35e81247 Bump spire-nested Helm Chart version from 0.21.1 to 0.22.0 (#429)
* 827a3ea Bump spire to 1.10.1 (#424)

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2024-08-15 10:13:02 -07:00
Faisal Memon de1e98337a Bump spire Helm Chart version from 0.21.1 to 0.22.0 (#428)
* 9b2d72f Fix permission issue with 1.10 and defaults when upgraded (#423)
* 827a3ea Bump spire to 1.10.1 (#424)
* 0289e5f Revert "Added support for specifying Kubelet CA Path (#415)" (#422)
* bf40797 Bump test chart dependencies (#418)
* abcf019 Added support for specifying Kubelet CA Path (#415)
* 6d4d526 Allow configuring persistence in the spire-agent (#414)

Signed-off-by: Faisal Memon <[email protected]>
2024-08-15 13:59:31 +00:00
dependabot[bot] 3e9256ab5c Bump helm.sh/helm/v3 from 3.15.3 to 3.15.4 in /tests (#427)
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.15.3 to 3.15.4.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.15.3...v3.15.4)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-15 06:32:36 -07:00
kfox1111 9b2d72f6a2 Fix permission issue with 1.10 and defaults when upgraded (#423)
* Fix permission issue with 1.10 and defaults when upgraded

Signed-off-by: Kevin Fox <[email protected]>

* Fix indenting

Signed-off-by: Kevin Fox <[email protected]>

* incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Fix docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2024-08-13 22:21:20 -07:00
kfox1111 827a3ea80c Bump spire to 1.10.1 (#424)
Signed-off-by: Kevin Fox <[email protected]>
2024-08-13 11:44:07 -07:00
kfox1111 0289e5fb00 Revert "Added support for specifying Kubelet CA Path (#415)" (#422)
This reverts commit abcf01958a.

Signed-off-by: Kevin Fox <[email protected]>
2024-08-13 11:03:31 -07:00
spire-helm-version-checker[bot]andmarcofranssen bf40797049 Bump test chart dependencies (#418)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-08-12 07:05:38 -07:00
Andrew BlockandFaisal Memon abcf01958a Added support for specifying Kubelet CA Path (#415)
Signed-off-by: Andrew Block <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-08-09 04:56:11 +00:00
kfox1111andFaisal Memon 41dce8c32f Add oci registry style chart support to infrastructure (#405)
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-08-08 21:35:22 -07:00
kfox1111 6d4d52604a Allow configuring persistence in the spire-agent (#414)
* Allow configuring persistence in the spire-agent

Signed-off-by: Kevin Fox <[email protected]>

* Better wording. Leave space for other services if needed some day.

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
2024-08-08 20:06:06 -07:00
dependabot[bot] 84f4f45e35 Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.0 in /tests (#413)
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.19.1 to 2.20.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.19.1...v2.20.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-08 06:42:03 -07:00
Faisal Memon 42e702a8da Bump spire-nested Helm Chart version from 0.21.0 to 0.21.1 (#410)
* c3d1d39 Update to SPIRE 1.10.0 (#393)

Signed-off-by: Faisal Memon <[email protected]>
2024-08-06 09:31:12 -07:00
Faisal Memon b4d4d901b9 Bump spire Helm Chart version from 0.21.0 to 0.21.1 (#409)
* 82a6d5d Should be `admin_socket_path` not `admin_socket_dir` (#407)
* 6240c0b Bump test chart dependencies (#402)
* c3d1d39 Update to SPIRE 1.10.0 (#393)
* 741cd9c Bump test chart dependencies (#398)
* c507ee0 Bump test chart dependencies (#397)
* 199bb6f Add connect by hostname to agent cofigmap (#392)
* eb6d89b Update charts/spire/README.md
* c93ad87 Add valid kubectl version to examples
* 500fdd9 Bump test chart dependencies (#391)
* 08fc5f3 Bump test chart dependencies (#390)
* 6904295 Bump test chart dependencies (#389)
* fb7fb80 Fix format for ignoreNamespaces (#388)
* 7a0a77b Fix host path of "spire-agent-admin-socket-dir" volume (#386)
* 1d2d755 Add resource limits for upgrade and delete hook batch jobs (#366)
* f7e0d4b Update _spire-system-namespace.yaml (#381)
* 29d4b57 Bump test chart dependencies
* 4c9059e Bump test chart dependencies (#379)
* 1dc650f Apply wildcard for ignoreNamespaces in Controller Manager (#378)
* 6c2b5e6 Bump test chart dependencies (#376)

Signed-off-by: Faisal Memon <[email protected]>
2024-08-06 08:28:22 -07:00
Ben Leggett 82a6d5d410 Should be admin_socket_path not admin_socket_dir (#407)
Signed-off-by: Benjamin Leggett <[email protected]>
2024-08-05 15:49:01 -07:00
spire-helm-version-checker[bot]andmarcofranssen 1ca738fedc Bump test chart dependencies (#404)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-08-05 10:45:15 -07:00
dependabot[bot] 0fd587a7ad Bump github.com/onsi/gomega from 1.34.0 to 1.34.1 in /tests (#403)
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.34.0 to 1.34.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.34.0...v1.34.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-30 08:42:06 -07:00
6240c0b08c Bump test chart dependencies (#402)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2024-07-29 12:57:07 +00:00
dependabot[bot] 6679846c29 Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 in /tests (#401)
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.19.0 to 2.19.1.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.19.0...v2.19.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-29 05:35:35 -07:00
dependabot[bot] 6f38f525c8 Bump github.com/onsi/gomega from 1.33.1 to 1.34.0 in /tests (#400)
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.33.1 to 1.34.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.33.1...v1.34.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-26 07:33:26 -07:00
kfox1111andFaisal Memon c3d1d39ed7 Update to SPIRE 1.10.0 (#393)
* Update to SPIRE 1.10.0

Remove the options that were removed in 1.10, and update.

Signed-off-by: Kevin Fox <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

* Fix uid mismatch issue on 1.10.0+

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-07-24 12:19:06 -07:00
spire-helm-version-checker[bot]andmarcofranssen 741cd9c6b4 Bump test chart dependencies (#398)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-07-22 07:41:57 -07:00
spire-helm-version-checker[bot]andmarcofranssen c507ee0ea3 Bump test chart dependencies (#397)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-07-15 15:14:13 +02:00
tuxotronandkfox1111 199bb6f998 Add connect by hostname to agent cofigmap (#392)
When setting the kubeletConnectByHostname to "true", the charts update the agent daemonset to define the MY_NODE_NAME environment variable, but it doesn't set the "node_name_env" setting in the WorkloadAttestor:k8s plugin, therefore the agent continues trying to connect to the kubelet using the localhost interface

Signed-off-by: tuxotron <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2024-07-11 12:47:57 -07:00
dependabot[bot] 9c77280e6e Bump helm.sh/helm/v3 from 3.15.2 to 3.15.3 in /tests (#395)
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.15.2 to 3.15.3.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.15.2...v3.15.3)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-11 07:53:04 +00:00
Mariusz Sabath 046d91cd90 Merge pull request #394 from spiffe/rancher-version
Add valid `rancher/kubectl` version to examples
2024-07-10 14:58:36 -04:00
Mariusz Sabathandkfox1111 eb6d89b472 Update charts/spire/README.md
Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
2024-07-09 14:08:55 -04:00
Mariusz Sabath c93ad87c15 Add valid kubectl version to examples
Signed-off-by: Mariusz Sabath <[email protected]>
2024-07-09 11:42:27 -04:00
spire-helm-version-checker[bot]andmarcofranssen 500fdd9ac3 Bump test chart dependencies (#391)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-07-08 12:03:03 +02:00
spire-helm-version-checker[bot]andmarcofranssen 08fc5f3d46 Bump test chart dependencies (#390)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-07-01 08:20:53 +00:00
spire-helm-version-checker[bot]andmarcofranssen 690429525c Bump test chart dependencies (#389)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-06-24 08:20:59 +00:00
Mariusz Sabath fb7fb809fa Fix format for ignoreNamespaces (#388)
Signed-off-by: Mariusz Sabath <[email protected]>
2024-06-23 16:29:39 -07:00
knp-sap 7a0a77b6b8 Fix host path of "spire-agent-admin-socket-dir" volume (#386)
Signed-off-by: knp-sap <[email protected]>
2024-06-23 09:54:39 -07:00
kfox1111andaniket patel 1d2d7550c5 Add resource limits for upgrade and delete hook batch jobs (#366)
* Add resource limits for upgrade and delete hook batch jobs

Signed-off-by: aniket patel <[email protected]>

* Fix value of resource

Signed-off-by: aniket patel <[email protected]>

* Fix resource limit in server template

Signed-off-by: aniket patel <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Fix up doc comment

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: aniket patel <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: aniket patel <[email protected]>
2024-06-19 12:50:21 -07:00
tuxotronandkfox1111 f7e0d4b831 Update _spire-system-namespace.yaml (#381)
set right namespace labels

Signed-off-by: tuxotron <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
2024-06-17 16:56:35 -07:00
marcofranssen 29d4b57373 Bump test chart dependencies
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2024-06-17 11:37:20 +02:00
dependabot[bot] 2fdebf09a8 Bump helm.sh/helm/v3 from 3.15.1 to 3.15.2 in /tests
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.15.1 to 3.15.2.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.15.1...v3.15.2)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
2024-06-14 09:41:43 +02:00
spire-helm-version-checker[bot]andmarcofranssen 4c9059ea52 Bump test chart dependencies (#379)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
2024-06-10 05:24:55 -07:00