panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
520 Commits 1 Branch 2 Tags
df1abf62351f4aeb91f219f13dde0c8889ea3ffa
Commit Graph
27 Commits
Author SHA1 Message Date
kfox1111 0fa43a507d Add plugin support to the spire agent (#22) 
* Exit code from diff indicating changes should not block commit.

Signed-off-by: Kevin Fox <[email protected]>

* Push the changes that update-tags creates

Signed-off-by: Kevin Fox <[email protected]>

* Add plugin support to the spire agent

This adapts the existing spire server plugin support to be usable by
the agent as well.

Signed-off-by: Kevin Fox <[email protected]>

* Fix notes

Signed-off-by: Kevin Fox <[email protected]>

* Add plugin support to the spire agent

This adapts the existing spire server plugin support to be usable by
the agent as well.

Signed-off-by: Kevin Fox <[email protected]>

* Fix notes

Signed-off-by: Kevin Fox <[email protected]>

* Update documentation

Signed-off-by: Kevin Fox <[email protected]>

* Update example

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
 2023-10-10 08:09:11 +00:00
Mariusz Sabath 12937db24b Update Example README 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-10-06 21:31:59 -04:00
kfox1111andFaisal Memon 21db1e4b9a Add a test to ensure upgrades work (#6) 
* Add a test to ensure upgrades work

Signed-off-by: Kevin Fox <[email protected]>

* Update examples/production/run-tests.sh

Co-authored-by: Faisal Memon <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-10-02 17:05:25 -07:00
kfox1111 50825d9fc9 Deny production runs of example.org trust domains (#229) 2023-09-25 12:06:48 -07:00
Inverse Integral 1f908676bb Allow configuration of priorityClassName on spire-server statefulset (#480) 2023-09-12 22:31:23 +02:00
kfox1111 5273f4e530 Switch mysql and postgresql tests to HA Production configs (#471) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-09-01 12:25:07 -07:00
kfox1111andMarco Franssen e81a59a7e5 ingress-nginx production tests and spiffe-oidc-discovery-provider example (#136) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-29 15:22:00 +00:00
kfox1111Edwin BuckFaisal Memon
 		51cba5b530 Add customPlugins and unsupportedBuiltInPlugins sections to spire-server (#198) 
This patch enables end users to configure external plugins in the
spire-server config. Unsupported internal plugins are not able to be
set.

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Edwin Buck <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-08-24 21:13:28 +00:00
kfox1111 ae8941c49d Support Nested Spire with External Agent (#117) 2023-08-16 16:35:41 +02:00
Mariusz Sabath f40743d484 Improve Tornjak documentation (#439) 2023-08-16 14:27:27 +00:00
Marco Franssen 54ed71f969 Add back tests for examples 
Signed-off-by: Marco Franssen <[email protected]>
 2023-07-19 22:49:22 +02:00
kfox1111andMarco Franssen c1b1dd3d88 Add additional domains to JWT issued items. (#230) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-07-03 22:26:28 +02:00
Faisal Memon 1333b6ab34 Always add parseTime=true for mysql query string (#352) 2023-06-20 21:14:42 +02:00
kfox1111Marco FranssenFaisal Memon
 		a6dcf267d1 Allow for SPIRE Agent to run as non root user (#209) 
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-06-17 10:32:41 +02:00
kfox1111Faisal MemonMarco Franssendependabot[bot]
 		0ba03880a1 Add support for spire-server ingress (#68) 
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-05-23 13:58:58 +00:00
kfox1111 f8db5a313b Fix Tornjak persistence issue (#294) 2023-05-18 01:54:26 +02:00
Marco Franssen 6ddf6ab9fa Improve tornjak docs (#276) 
- Align tornjak backend naming with same convention as frontend
- Align Tornjak backend and frontend notes style
- Add disclaimer for Tornjak usage to example

---------

Signed-off-by: Marco Franssen <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz Sabath 91bdea2a1d Provide minimal resources to prevent accidental crashes due to resource exhaustion 
Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-16 19:31:38 +02:00
Mariusz SabathMarco Franssenkfox1111
 		5e827ee45e Add Tornjak Tests (#220) 
Signed-off-by: Mariusz Sabath <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-05-16 19:31:38 +02:00
kfox1111Faisal MemonMarco Franssen
 		d3da3eed55 External database configuration (#225) 
This patch makes all the database settings configurable.

fixes: https://github.com/spiffe/helm-charts/issues/37

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-05-10 14:04:34 +02:00
kfox1111 61e338df55 Fix example production typos (#244) 
Signed-off-by: kfox1111 <[email protected]>
 2023-04-27 14:02:48 -07:00
kfox1111 b82abab357 Revert "Switch to persistence" (#210) 
Reverts spiffe/helm-charts#200

Signed-off-by: Kevin Fox <[email protected]>
 2023-04-12 16:12:07 -04:00
kfox1111 0dec80e1d5 Switch to persistence (#200) 
This patch switches the value to persistence to follow the helm
convention.

fixes: https://github.com/spiffe/helm-charts/issues/199

Signed-off-by: Kevin Fox <[email protected]>
 2023-04-12 08:56:10 -07:00
Marco Franssen b54c41aee0 Enhance the production example 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-31 15:48:40 +02:00
Marco Franssen 64d010757c Resolve issue in prod example on volume mount (#143) 2023-03-21 04:39:59 -07:00
Kevin Fox 25c77fc0cb Fix the driver not coming up on overloaded nodes 
Add to the reference production example a fix for overloaded nodes.

fixes: https://github.com/spiffe/helm-charts/issues/80

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-14 20:10:51 +01:00
kfox1111 03db6bb5fe Namespace override 
This patch makes it possible to install the subcharts in different
namespaces as needed.

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-13 15:03:16 -07:00