panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
227 Commits 1 Branch 2 Tags
e2ec6ac47d0e91c3c01db3da40707e10150553fb
Commit Graph
19 Commits
Author SHA1 Message Date
kfox1111andMarco Franssen b25dc773bc Test fixing the tests (#148) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-03-22 09:49:33 +01:00
kfox1111 d4fd2ced39 Extract the namespace override test out of the old lockdown test. (#145) 
This patch removes the production bits of the old lockdown test
and establishes the namespace override test as its own test.

---------

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-21 22:13:26 +01:00
Marco Franssen 4f85802ae0 Update lockdown test to test the production example 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-21 21:55:20 +01:00
kfox1111 04a1305556 Fork the lockdown test to two tests as it is doing the work of 2 (#134) 
This patch makes a second copy of the existing lockdown test
because it is doing double duty. In follow on patches we will
make each test do one thing only.

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-21 10:14:38 -07:00
Pete Cable 811a2f6b01 Add option to enable federation on spire-server (#97) 2023-03-16 20:36:13 +01:00
Kevin FoxandMarco Franssen 6322a9a138 Fix tests 
Signed-off-by: Kevin Fox <[email protected]>

Co-authored-by: Marco Franssen <[email protected]>
 2023-03-16 18:58:31 +01:00
Kevin FoxandMarco Franssen cc7121e021 Add ingress support for OIDC discovery provider 
This patch enables exposing the oidc server out with an ingress
along with tests to ensure it works.

Signed-off-by: Kevin Fox <[email protected]>

Co-authored-by: Marco Franssen <[email protected]>
 2023-03-16 10:02:22 +01:00
kfox1111 80e3b58dcd Remove dead file from failed rebase. (#121) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-03-14 13:23:02 -07:00
kfox1111 03db6bb5fe Namespace override 
This patch makes it possible to install the subcharts in different
namespaces as needed.

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-13 15:03:16 -07:00
Kevin Fox 09b21acca2 Fix the gate 
Signed-off-by: Kevin Fox <[email protected]>
 2023-03-11 19:21:59 +01:00
kfox1111 b6716aee17 Test that it is possible to lock down security of pods (#84) 2023-03-11 12:11:19 +01:00
Kevin Fox 7d1f8217ce Fix test. 
Signed-off-by: Kevin Fox <[email protected]>
 2023-03-09 10:09:50 -08:00
kfox1111 d341c5ad58 UpstreamAuthority cert-manager support (#82) 2023-03-03 20:48:35 +01:00
Kevin Fox b7f8c86478 Add extra initContainers, containers, volumes to agent and server 
With plugin support, agents and servers need more customization.
This patch enables initContainers, extraContainers, extraVolumes
and extraVolumeMounts to be added to those services.

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-02 08:02:19 -08:00
kfox1111andMarco Franssen 35eb3bb42e Basic Prometheus support (#28) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-02-24 22:39:15 +01:00
Marco Franssen d46c3fc14d Test without ACME tos Accepted 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:35:46 +01:00
Marco Franssen 49a68c3aed Add test for spire-oidc 
Using the nginx insecure option, because we can't rely on the ACME
protocol as this server isn't reachable.

Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:29 +01:00
Marco Franssen c9779b24ed Add test for upstream-authority-disk 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:28 +01:00
Marco Franssen b24faa9373 Add test for disabled spire-controller-manager 
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-23 10:33:28 +01:00