panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
566 Commits 1 Branch 2 Tags
e458ca371fadb2e9ea23126f59e109d3bd534b66
Commit Graph
35 Commits
Author SHA1 Message Date
github-actions[bot]andmarcofranssen 2644e4b198 Bump test chart dependencies (#38) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
 2023-10-16 18:00:04 +00:00
marcofranssen 11072780ca Bump test chart dependencies 
Signed-off-by: GitHub <[email protected]>
 2023-10-09 15:53:46 +02:00
github-actions[bot]andfaisal-memon 06d6690d71 Bump test chart dependencies (#20) 
Signed-off-by: GitHub <[email protected]>
Co-authored-by: faisal-memon <[email protected]>
 2023-10-05 11:21:51 -07:00
KrishnaKrishnakumar VenkataramanMarco Franssen
 		65d56957de Migrate to readme-generator for helm maintained by bitnami (#431) 
Co-authored-by: Krishnakumar Venkataraman <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-09-08 09:39:30 +02:00
kfox1111andMarco Franssen e81a59a7e5 ingress-nginx production tests and spiffe-oidc-discovery-provider example (#136) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-29 15:22:00 +00:00
Drew Wellskfox1111Marco Franssen
 		cbe0001131 Federation test (#423) 
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>
 2023-08-22 20:07:54 +02:00
Faisal MemonMarco FranssenKevin Fox
 		b7e15255f3 Allow job hooks to be disabled (#434) 
Co-authored-by: Marco Franssen <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
 2023-08-18 09:48:14 +02:00
kfox1111 dc8a4545cc Array spacing in values is incorrect in a file. (#451) 2023-08-17 08:42:21 +02:00
kfox1111 48a2898016 Fix chainguard image references as per issue 442 (#443) 2023-08-16 16:22:09 +02:00
Drew Wells bfec27ef67 Fix jwtIssuer to allow for Uris including scheme (#425) 2023-08-09 16:53:21 +02:00
Drew WellsandFaisal Memon a09e054d04 support annotations so oidc can be annotated (#391) 
Signed-off-by: Drew Wells <[email protected]>
Signed-off-by: Drew Wells <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-07-31 10:54:01 -07:00
kfox1111andMarco Franssen c1b1dd3d88 Add additional domains to JWT issued items. (#230) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-07-03 22:26:28 +02:00
Marco Franssen c11a8c00e7 Implement pre-delete hook for graceful delete of spiffe-oidc-discovery-provider (#353) 2023-06-17 06:06:27 -07:00
kfox1111 4c0a1d52c5 Allow overriding test images (#186) 2023-06-14 21:17:08 +02:00
kfox1111 250fd5db00 Add missing global values to charts (#311) 2023-06-14 09:16:02 +02:00
Mariusz Sabath 1247b68f4d Parametrize probes (#310) 
This PR addresses #307 by parametrizing Probes and moving them to
values.yaml

---------

Signed-off-by: Mariusz Sabath <[email protected]>
 2023-05-25 08:53:44 -04:00
kfox1111 dd1ad495bd Update images for cve's found by the cronjob (#290) 
Signed-off-by: Kevin Fox <[email protected]>
 2023-05-18 14:55:39 -07:00
Marco Franssen d850486478 Instead of removing version, first deprecate version 
Deprecating version allows users of the chart to have a migration path

Signed-off-by: Marco Franssen <[email protected]>
 2023-05-17 20:21:07 +02:00
Marco Franssen 59e422b9e3 Add documentation for all image.tag values 
Signed-off-by: Marco Franssen <[email protected]>
 2023-05-17 20:21:07 +02:00
Kevin Fox d1f3cdb909 Switch image.version to image.tag 
The convention in most charts is to use image.tag. This patch updates the values
to use it instead of the less standard image.version.

Signed-off-by: Kevin Fox <[email protected]>
 2023-05-17 20:21:07 +02:00
Marco FranssenandFaisal Memon 65312f8525 Include dependency values in documentation (#275) 
I have added a flag to the helm-docs script to include the documentation
for dependencies.

This will add more complete documentation to
https://artifacthub.io/packages/helm/spiffe/spire#values so it is easier
for our users to get started and having a complete overview.

---------

Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2023-05-12 18:12:23 +00:00
Faisal Memonandkfox1111 b315324244 Allow for ConfigMaps to be annotated (#272) 
Without an annotation, spinnaker will rename the configmap.

---------

Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2023-05-11 10:49:06 -07:00
kfox1111andMarco Franssen 563e1f7920 Add podmonitors (#165) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-04 09:55:35 +02:00
kfox1111andMarco Franssen c661d0bc7e Make service dns domain configurable (#164) 
Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-04-03 19:52:36 +02:00
Marco Franssen a9b99febb3 Add some commented lines for best practice annotations on ingress 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-16 10:08:00 +01:00
Marco Franssen e970d52ea4 Align ingress hostname with jwtIssues in spire-server chart 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-16 10:05:33 +01:00
Kevin FoxandMarco Franssen cc7121e021 Add ingress support for OIDC discovery provider 
This patch enables exposing the oidc server out with an ingress
along with tests to ensure it works.

Signed-off-by: Kevin Fox <[email protected]>

Co-authored-by: Marco Franssen <[email protected]>
 2023-03-16 10:02:22 +01:00
Marco Franssen 5fdd35b426 Improve Chart API (#119) 
Because we are already in the context of spire-agent the API looks more
logical to not have another 'agent' part in the name.

Furthermore to make it more clear the oidc provider only requires the
name of the socket as opposed to the entire path like in the other
charts I made that more explicit in the name of the value.

---------

Signed-off-by: Marco Franssen <[email protected]>
 2023-03-14 09:55:24 -07:00
kfox1111 03db6bb5fe Namespace override 
This patch makes it possible to install the subcharts in different
namespaces as needed.

Signed-off-by: Kevin Fox <[email protected]>
 2023-03-13 15:03:16 -07:00
kfox1111 661000a29a Make the agent socket configurable (#114) 2023-03-13 20:35:27 +01:00
kfox1111 2e9510f3ad Switch to non root nginx (#89) 2023-03-04 15:43:03 +01:00
Marco Franssen 79889ff3ed Bump spiffe-oidc-discovery-provider image to 1.6.0 (arm64 support) 
Signed-off-by: Marco Franssen <[email protected]>
 2023-03-01 15:41:47 +01:00
kfox1111andMarco Franssen 35eb3bb42e Basic Prometheus support (#28) 
Co-authored-by: Marco Franssen <[email protected]>
 2023-02-24 22:39:15 +01:00
Marco Franssen 99d32050ba Remove option to choose different agent socket path 
Resolves #19

Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:23:36 +01:00
Marco FranssenandGert Jan Kamstra 99da500c1c Move oidc-discovery-provider to sub chart 
Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Gert Jan Kamstra <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
 2023-02-18 13:04:09 +01:00