panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,220 Commits 1 Branch 2 Tags
f1dddf2e85a5c062eb0f827181e18240c611cb1e
Commit Graph
761 Commits
Author SHA1 Message Date
Daniel Schlatter 8dffc8eda1 use spire-agent.hostCert.resources to set resources for corresponding spire-agent init container (#691) 
* use spire-agent.resources to set resources for associated initContainers, remove specific keys for those initContainers corresponding resources

Signed-off-by: Daniel Schlatter <[email protected]>

* set resources for spire-agent init containers fingerprint-tpm and init-tpm-direct

Signed-off-by: Daniel Schlatter <[email protected]>

* use spiffe-csi-driver.resources to set resources for associated initContainers, remove specific keys for those initContainers corresponding resources

Signed-off-by: Daniel Schlatter <[email protected]>

* set resources for spiffe-csi-driver init container set-context

Signed-off-by: Daniel Schlatter <[email protected]>

---------

Signed-off-by: Daniel Schlatter <[email protected]>
 2025-11-20 21:47:59 -08:00
spire-helm-version-checker[bot]andmarcofranssen e75e095e1e Bump test chart dependencies (#696) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-11-18 17:21:32 -08:00
spire-helm-version-checker[bot]andmarcofranssen aab7c68d02 Bump test chart dependencies (#692) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-11-10 09:45:37 +01:00
marcofranssen ca6e9f342d Bump test chart dependencies 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-11-03 12:34:59 +01:00
marcofranssen a373924405 Bump test chart dependencies 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-10-27 12:08:37 +01:00
Monfortonandkfox1111 c52edb9928 chore: update SPIRE to 1.13.2 (#681) 
Signed-off-by: Monforton <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-10-13 10:59:13 -07:00
Daniel Schlatterandkfox1111 41bd5b9598 fix socketAlternate names throwing an error if set to an empty list (#678) 
Signed-off-by: Daniel Schlatter <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-10-13 10:11:53 -07:00
spire-helm-version-checker[bot]andmarcofranssen 54024730d0 Bump test chart dependencies (#684) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-10-13 09:49:17 -07:00
spire-helm-version-checker[bot]marcofranssenKevin Fox
 		892597576f Bump test chart dependencies (#674) 
* Bump test chart dependencies

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* Fix bitnami chart support

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: Kevin Fox <[email protected]>
 2025-10-08 08:04:48 -07:00
spire-helm-version-checker[bot]andmarcofranssen 0f5bb04a6d Bump test chart dependencies (#672) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-09-29 06:13:36 -07:00
Faisal Memon 4da35fabeb Bump spire Helm Chart version from 0.26.1 to 0.27.0 (#670) 
* e73d76a0 Bump test chart dependencies (#669)
* 1ab06a1b Support for Cloud SQL Proxy in GCP (#646)
* 3c3718c9 Update spire to 1.13.0 (#667)
* 1feeca1c make spire server's auth_opa_policy_engine configurable in the helm chart (#663)
* d51bf52a Bump test chart dependencies (#666)
* c1b0cfe3 Add controller manager configs gcInterval, logLevel, and make entryIDPrefix configurable (#662)
* bb876121 Spire agent helm chart: allow configuring logFormat (#661)
* d6edae68 Add labels to the spiffe-oidc-discovery-provider values.yaml (#656)
* 6376190b Bump test chart dependencies (#660)
* 9a802563 Bump test chart dependencies (#658)
* 5e5810be Bump test chart dependencies (#653)
* 86feac63 Bump test chart dependencies (#647)
* 5e40cfb2 Update imagePullPolicy to IfNotPresent (#643)
* 86f0aecc Bump test chart dependencies (#641)
* 3ef5fe6c Add Datadog as telemetry option (#639)

Signed-off-by: Faisal Memon <[email protected]>
 2025-09-24 07:08:26 -07:00
spire-helm-version-checker[bot]marcofranssenFaisal Memon
 		e73d76a039 Bump test chart dependencies (#669) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2025-09-23 06:17:20 +00:00
Hamdan Al-Radaidehdependabot[bot]kfox1111marcofranssenspire-helm-version-checker[bot]tuxotronNikolaiDaniel Schlatter
 		1ab06a1b11 Support for Cloud SQL Proxy in GCP (#646) 
* allow IAM auth for non-password methods

Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* add example, patch charts' versions and values

Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* updates

Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Bump test chart dependencies (#647)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.24.0 in /tests (#648)

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.23.4 to 2.24.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.23.4...v2.24.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Bump helm.sh/helm/v3 from 3.18.4 to 3.18.6 in /tests (#650)

Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.18.4 to 3.18.6.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.18.4...v3.18.6)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.18.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Bump github.com/onsi/ginkgo/v2 from 2.24.0 to 2.25.1 in /tests (#651)

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.24.0 to 2.25.1.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.24.0...v2.25.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.25.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Bump test chart dependencies (#653)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Bump github.com/onsi/gomega from 1.38.0 to 1.38.1 in /tests (#652)

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.38.0 to 1.38.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.38.0...v1.38.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.38.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Bump github.com/onsi/gomega from 1.38.1 to 1.38.2 in /tests (#654)

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.38.1 to 1.38.2.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.38.1...v1.38.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Bump test chart dependencies (#658)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Bump github.com/onsi/ginkgo/v2 from 2.25.1 to 2.25.3 in /tests (#659)

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.25.1 to 2.25.3.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.25.1...v2.25.3)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Bump test chart dependencies (#660)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Add labels to the spiffe-oidc-discovery-provider values.yaml (#656)

* add labels to the spiffe-oidc-discovery-provider values.yaml

Signed-off-by: tuxotron <[email protected]>

* add labels to readme

Signed-off-by: tuxotron <[email protected]>

* Bump github.com/onsi/gomega from 1.38.1 to 1.38.2 in /tests (#654)

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.38.1 to 1.38.2.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.38.1...v1.38.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: tuxotron <[email protected]>

* Bump test chart dependencies (#658)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Signed-off-by: tuxotron <[email protected]>

---------

Signed-off-by: tuxotron <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: spire-helm-version-checker[bot] <161522935+spire-helm-version-checker[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Bump helm.sh/helm/v3 from 3.18.6 to 3.19.0 in /tests (#664)

Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.18.6 to 3.19.0.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.18.6...v3.19.0)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* blend into same logic in the chart for the new auth method, add the ability to add loadbalancer ip

Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* remove whitespaces

Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* update README and values file

Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Spire agent helm chart: allow configuring logFormat (#661)

* Spire agent helm chart: allow configuring logFormat

Signed-off-by: Nikolai Tihhomirov <[email protected]>

* Fixup: wrong doc parameter

Signed-off-by: Nikolai Tihhomirov <[email protected]>

---------

Signed-off-by: Nikolai Tihhomirov <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Add controller manager configs gcInterval, logLevel, and make entryIDPrefix configurable (#662)

* Make controller manager gcInterval configurable in spire-server helm chart

Signed-off-by: Daniel Schlatter <[email protected]>

* Make controller manager logLevel configurable in spire-server helm chart

Signed-off-by: Daniel Schlatter <[email protected]>

* Make controller manager entryIDPrefix configurable in spire-server helm chart

Signed-off-by: Daniel Schlatter <[email protected]>

* change configurable entryIDPrefix to a binary option of add the cluster name or not

Signed-off-by: Daniel Schlatter <[email protected]>

---------

Signed-off-by: Daniel Schlatter <[email protected]>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Bump test chart dependencies (#666)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* make spire server's auth_opa_policy_engine configurable in the helm chart (#663)

Signed-off-by: Hamdan Al-Radaideh <[email protected]>

* Update spire to 1.13.0 (#667)

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: Hamdan Al-Radaideh <[email protected]>

---------

Signed-off-by: Hamdan Al-Radaideh <[email protected]>
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: tuxotron <[email protected]>
Signed-off-by: Nikolai Tihhomirov <[email protected]>
Signed-off-by: Daniel Schlatter <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Co-authored-by: spire-helm-version-checker[bot] <161522935+spire-helm-version-checker[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: tuxotron <[email protected]>
Co-authored-by: Nikolai <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: Daniel Schlatter <[email protected]>
 2025-09-23 02:46:18 +00:00
kfox1111 3c3718c904 Update spire to 1.13.0 (#667) 
Signed-off-by: Kevin Fox <[email protected]>
 2025-09-16 22:13:29 -07:00
Daniel Schlatter 1feeca1ce1 make spire server's auth_opa_policy_engine configurable in the helm chart (#663) 2025-09-16 16:58:37 -07:00
spire-helm-version-checker[bot]andmarcofranssen d51bf52a91 Bump test chart dependencies (#666) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-09-15 23:09:42 -07:00
Daniel Schlatter c1b0cfe390 Add controller manager configs gcInterval, logLevel, and make entryIDPrefix configurable (#662) 
* Make controller manager gcInterval configurable in spire-server helm chart

Signed-off-by: Daniel Schlatter <[email protected]>

* Make controller manager logLevel configurable in spire-server helm chart

Signed-off-by: Daniel Schlatter <[email protected]>

* Make controller manager entryIDPrefix configurable in spire-server helm chart

Signed-off-by: Daniel Schlatter <[email protected]>

* change configurable entryIDPrefix to a binary option of add the cluster name or not

Signed-off-by: Daniel Schlatter <[email protected]>

---------

Signed-off-by: Daniel Schlatter <[email protected]>
 2025-09-14 06:14:43 -07:00
Nikolaiandkfox1111 bb87612140 Spire agent helm chart: allow configuring logFormat (#661) 
* Spire agent helm chart: allow configuring logFormat

Signed-off-by: Nikolai Tihhomirov <[email protected]>

* Fixup: wrong doc parameter

Signed-off-by: Nikolai Tihhomirov <[email protected]>

---------

Signed-off-by: Nikolai Tihhomirov <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-09-13 11:44:17 -07:00
tuxotrondependabot[bot]marcofranssenspire-helm-version-checker[bot]
 		d6edae682b Add labels to the spiffe-oidc-discovery-provider values.yaml (#656) 
* add labels to the spiffe-oidc-discovery-provider values.yaml

Signed-off-by: tuxotron <[email protected]>

* add labels to readme

Signed-off-by: tuxotron <[email protected]>

* Bump github.com/onsi/gomega from 1.38.1 to 1.38.2 in /tests (#654)

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.38.1 to 1.38.2.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.38.1...v1.38.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: tuxotron <[email protected]>

* Bump test chart dependencies (#658)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Signed-off-by: tuxotron <[email protected]>

---------

Signed-off-by: tuxotron <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: spire-helm-version-checker[bot] <161522935+spire-helm-version-checker[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-09-10 06:36:03 -07:00
spire-helm-version-checker[bot]andmarcofranssen 6376190b0b Bump test chart dependencies (#660) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-09-08 06:39:44 -07:00
spire-helm-version-checker[bot]andmarcofranssen 9a802563e3 Bump test chart dependencies (#658) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-09-01 15:19:43 -07:00
spire-helm-version-checker[bot]andmarcofranssen 5e5810be1f Bump test chart dependencies (#653) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-08-25 06:56:02 -07:00
spire-helm-version-checker[bot]andmarcofranssen 86feac63d4 Bump test chart dependencies (#647) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-08-18 07:43:20 -07:00
Eric Cavalcanti 5e40cfb222 Update imagePullPolicy to IfNotPresent (#643) 
* Change selinux image pullpolicy and tag version

Signed-off-by: Eric Cavalcanti <[email protected]>

* Change image pullpolicy

Signed-off-by: Eric Cavalcanti <[email protected]>

* Update readme

Signed-off-by: Eric Cavalcanti <[email protected]>

* update examples

Signed-off-by: Eric Cavalcanti <[email protected]>

* Update image pullpolicy

Signed-off-by: Eric Cavalcanti <[email protected]>

* Fix readme as well

Signed-off-by: Eric Cavalcanti <[email protected]>

* Undo pullpolicy readme

Signed-off-by: Eric Cavalcanti <[email protected]>

* Add selinux

Signed-off-by: Eric Cavalcanti <[email protected]>

* Revert code block

Signed-off-by: Eric Cavalcanti <[email protected]>

* Change regex

Signed-off-by: Eric Cavalcanti <[email protected]>

---------

Signed-off-by: Eric Cavalcanti <[email protected]>
 2025-08-11 06:19:27 -07:00
spire-helm-version-checker[bot]marcofranssenkfox1111
 		86f0aecc57 Bump test chart dependencies (#641) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-08-07 07:27:41 -07:00
Eric Cavalcantiandkfox1111 3ef5fe6c49 Add Datadog as telemetry option (#639) 
* Add Datadog as telemetry option

Signed-off-by: Eric Cavalcanti <[email protected]>

* Use correct local domain

Signed-off-by: Eric Cavalcanti <[email protected]>

* Change doc

Signed-off-by: Eric Cavalcanti <[email protected]>

* Add docs

Signed-off-by: Eric Cavalcanti <[email protected]>

* remove .cluster.local

Signed-off-by: Eric Cavalcanti <[email protected]>

* Remove cluster.local

Signed-off-by: Eric Cavalcanti <[email protected]>

* Fix doc

Signed-off-by: Eric Cavalcanti <[email protected]>

---------

Signed-off-by: Eric Cavalcanti <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-08-07 07:03:15 -07:00
Faisal Memon acfcc9d0a4 Bump spire Helm Chart version from 0.26.0 to 0.26.1 (#636) 
* 64b9c40 Bump test chart dependencies (#635)
* d516de0 Update spike to 0.4.2 (#632)
* 8904b96 Bump test chart dependencies (#633)
* 6581b11 Add disk based KeyManager (#627)
* d2913ff Remove region from awsiid node attestor (#630)
* 3218db7 Bump test chart dependencies (#628)
* 57a6143 Add aws_iid to helm chart (#620)
* 9a8e5a8 Add Agent TTL to Spire Server (#626)
* 093c593 spire-server: Replace chown image with busybox
* a7d536c tools: Replace rancher/kubectl with registry.k8s.io/kubectl
* fc1791f Bump test chart dependencies (#618)

Signed-off-by: Faisal Memon <[email protected]>
 2025-07-28 12:30:10 -07:00
spire-helm-version-checker[bot]andmarcofranssen 64b9c400cc Bump test chart dependencies (#635) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-07-28 07:19:58 -07:00
kfox1111 d516de01bd Update spike to 0.4.2 (#632) 
Signed-off-by: Kevin Fox <[email protected]>
 2025-07-22 11:21:11 +00:00
spire-helm-version-checker[bot]andmarcofranssen 8904b96be8 Bump test chart dependencies (#633) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-07-21 08:18:22 -07:00
Eric Cavalcantiandkfox1111 6581b117a0 Add disk based KeyManager (#627) 
* Add disk based KeyManager

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* Change disk to false

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* Change disk to false

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* Fix per requirement

Signed-off-by: Eric Cavalcanti <[email protected]>

* Update information

Signed-off-by: Eric Cavalcanti <[email protected]>

* Detail doc

Signed-off-by: Eric Cavalcanti <[email protected]>

* Test change comment

Signed-off-by: Eric Cavalcanti <[email protected]>

* Commnet better before

Signed-off-by: Eric Cavalcanti <[email protected]>

---------

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
 2025-07-19 18:06:02 -07:00
Eric Cavalcanti d2913ffca0 Remove region from awsiid node attestor (#630) 
* Remove spire-server.nodeAttestor.awsIID.region

Signed-off-by: Eric Cavalcanti <[email protected]>

* Remove spire-server.nodeAttestor.awsIID.region

Signed-off-by: Eric Cavalcanti <[email protected]>

* Remove spire-server.nodeAttestor.awsIID.region

Signed-off-by: Eric Cavalcanti <[email protected]>

* Update README.md

Signed-off-by: Eric Cavalcanti <[email protected]>

---------

Signed-off-by: Eric Cavalcanti <[email protected]>
 2025-07-15 16:23:18 -07:00
spire-helm-version-checker[bot]andmarcofranssen 3218db7bbb Bump test chart dependencies (#628) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-07-14 09:36:36 -07:00
Eric Cavalcanti 57a61438be Add aws_iid to helm chart (#620) 
* Add aws_iid

Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIid

Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIid

Signed-off-by: Eric Cavalcanti <[email protected]>

* update helm

Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIID

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIID

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIID

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIID

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIID

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* Change to awsIID

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>

* add signed off

Signed-off-by: Eric Cavalcanti <[email protected]>

* Add doc

Signed-off-by: Eric Cavalcanti <[email protected]>

* remove not used config

Signed-off-by: Eric Cavalcanti <[email protected]>

* remove not used config

Signed-off-by: Eric Cavalcanti <[email protected]>

* add example awsiid

Signed-off-by: Eric Cavalcanti <[email protected]>

---------

Signed-off-by: Eric Cavalcanti <[email protected]>
Signed-off-by: Eric Cavalcanti <[email protected]>
 2025-07-10 22:27:07 +00:00
Eric Cavalcanti 9a8e5a8398 Add Agent TTL to Spire Server (#626) 
* Add Agent TTL

Signed-off-by: Eric Cavalcanti <[email protected]>

* Allow unset agentttl

Signed-off-by: Eric Cavalcanti <[email protected]>

---------

Signed-off-by: Eric Cavalcanti <[email protected]>
 2025-07-10 15:06:58 -07:00
Marco Franssen 093c593ff6 spire-server: Replace chown image with busybox 
This reduces the footprint for this initContainer to just 4.04MB.

The cgr.dev/chainguard/bash image is 35.2MB in size.

I have used the same tag as the busybox value to ensure no additional
versions have to be pulled on the node running spire-server components.

Signed-off-by: Marco Franssen <[email protected]>
 2025-07-08 23:43:53 +02:00
Marco Franssen a7d536c025 tools: Replace rancher/kubectl with registry.k8s.io/kubectl 
To have an always up to date kubectl image it is probably better to get kubectl from registry.k8s.io

Signed-off-by: Marco Franssen <[email protected]>
 2025-07-08 19:24:08 +02:00
spire-helm-version-checker[bot]andmarcofranssen fc1791f2eb Bump test chart dependencies (#618) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-07-07 04:33:53 -07:00
Faisal Memon 88f0108e10 Bump spire Helm Chart version from 0.25.0 to 0.26.0 
* 255106da Update to Tornjak 2.1.0 (#597)
* f37d681b Enable running the oidc discovery provider without cluster-admin/CSI (#570)
* 892051c4 Update for 1.12.4 (#605)
* b74b10a0 Bump test chart dependencies (#615)
* e78400eb Initial spike support (#591)
* 38314ed6 Bump test chart dependencies (#611)
* bfd08bcf Bump test chart dependencies (#608)
* 971e4be7 Bump test chart dependencies (#606)
* ffe43901 Nit: Fix typo in param guide (#595)

Signed-off-by: Faisal Memon <[email protected]>
 2025-07-04 06:55:19 -07:00
Alan Cha 255106da84 Update to Tornjak 2.1.0 (#597) 
* Update to Tornjak 2.1.0

Signed-off-by: Alan Cha <[email protected]>

* Address comments

Signed-off-by: Alan Cha <[email protected]>

* Fix Tornjak tests

Signed-off-by: Alan Cha <[email protected]>

* revert namespace change

Signed-off-by: Alan Cha <[email protected]>

---------

Signed-off-by: Alan Cha <[email protected]>
 2025-07-02 14:42:18 -07:00
kfox1111andFaisal Memon f37d681bc2 Enable running the oidc discovery provider without cluster-admin/CSI (#570) 
* Update for 1.12.3

Signed-off-by: Kevin Fox <[email protected]>

* Fix typo. Use test image

Signed-off-by: Kevin Fox <[email protected]>

* Fix lint

Signed-off-by: Kevin Fox <[email protected]>

* Fix format flag. Update config location for k8s configmap bp

Signed-off-by: Kevin Fox <[email protected]>

* Fix role

Signed-off-by: Kevin Fox <[email protected]>

* Update rbac

Signed-off-by: Kevin Fox <[email protected]>

* Fix key

Signed-off-by: Kevin Fox <[email protected]>

* Fix format

Signed-off-by: Kevin Fox <[email protected]>

* Fix the bundle format for the fetchca bits

Signed-off-by: Kevin Fox <[email protected]>

* Update key

Signed-off-by: Kevin Fox <[email protected]>

* Fix test rather then reconfigure

Signed-off-by: Kevin Fox <[email protected]>

* Add namespace

Signed-off-by: Kevin Fox <[email protected]>

* Update to follow the new patch

Signed-off-by: Kevin Fox <[email protected]>

* Fix formatting

Signed-off-by: Kevin Fox <[email protected]>

* Fix formatting

Signed-off-by: Kevin Fox <[email protected]>

* Update filename based on format

Signed-off-by: Kevin Fox <[email protected]>

* Add upgrade notes

Signed-off-by: Kevin Fox <[email protected]>

* Enable running the oidc discovery provider without cluster-admin/CSI

Signed-off-by: Kevin Fox <[email protected]>

* Calm lint

Signed-off-by: Kevin Fox <[email protected]>

* Switch to testing nightly. Dont manage bundle configmap.

Signed-off-by: Kevin Fox <[email protected]>

* Update permissions

Signed-off-by: Kevin Fox <[email protected]>

* Update permissions

Signed-off-by: Kevin Fox <[email protected]>

* Update permissions

Signed-off-by: Kevin Fox <[email protected]>

* Update for final release

Signed-off-by: Kevin Fox <[email protected]>

* Update for final 1.12.4 release

Signed-off-by: Kevin Fox <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2025-07-01 17:26:58 -07:00
kfox1111 892051c466 Update for 1.12.4 (#605) 
* Update for 1.12.3

Signed-off-by: Kevin Fox <[email protected]>

* Fix typo. Use test image

Signed-off-by: Kevin Fox <[email protected]>

* Fix lint

Signed-off-by: Kevin Fox <[email protected]>

* Fix format flag. Update config location for k8s configmap bp

Signed-off-by: Kevin Fox <[email protected]>

* Fix role

Signed-off-by: Kevin Fox <[email protected]>

* Update rbac

Signed-off-by: Kevin Fox <[email protected]>

* Fix key

Signed-off-by: Kevin Fox <[email protected]>

* Fix format

Signed-off-by: Kevin Fox <[email protected]>

* Fix the bundle format for the fetchca bits

Signed-off-by: Kevin Fox <[email protected]>

* Update key

Signed-off-by: Kevin Fox <[email protected]>

* Fix test rather then reconfigure

Signed-off-by: Kevin Fox <[email protected]>

* Add namespace

Signed-off-by: Kevin Fox <[email protected]>

* Update to follow the new patch

Signed-off-by: Kevin Fox <[email protected]>

* Fix formatting

Signed-off-by: Kevin Fox <[email protected]>

* Fix formatting

Signed-off-by: Kevin Fox <[email protected]>

* Update filename based on format

Signed-off-by: Kevin Fox <[email protected]>

* Add upgrade notes

Signed-off-by: Kevin Fox <[email protected]>

* Switch to testing nightly. Dont manage bundle configmap.

Signed-off-by: Kevin Fox <[email protected]>

* Update permissions

Signed-off-by: Kevin Fox <[email protected]>

* Update permissions

Signed-off-by: Kevin Fox <[email protected]>

* Update permissions

Signed-off-by: Kevin Fox <[email protected]>

* Update for final release

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
 2025-07-01 16:28:57 -07:00
spire-helm-version-checker[bot]andmarcofranssen b74b10a0f6 Bump test chart dependencies (#615) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-06-30 06:08:14 -07:00
kfox1111Faisal MemonVolkan Özçelik
 		e78400ebcd Initial spike support (#591) 
* Initial spike support

Signed-off-by: Kevin Fox <[email protected]>

* Fix lint and docs

Signed-off-by: Kevin Fox <[email protected]>

* Update spike to 0.4.1

Signed-off-by: Kevin Fox <[email protected]>

* Update for multiarch

Signed-off-by: Kevin Fox <[email protected]>

* Update

Signed-off-by: Kevin Fox <[email protected]>

* Fix values and docs

Signed-off-by: Kevin Fox <[email protected]>

* Pull in changes from Volkan

Signed-off-by: Kevin Fox <[email protected]>

* Fix service

Signed-off-by: Kevin Fox <[email protected]>

* Typo fix

Signed-off-by: Volkan Özçelik <[email protected]>

* Apply suggestions from code review

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: Volkan Özçelik <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Volkan Özçelik <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2025-06-23 23:07:40 -07:00
spire-helm-version-checker[bot]andmarcofranssen 38314ed6de Bump test chart dependencies (#611) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-06-23 05:51:32 -07:00
spire-helm-version-checker[bot]andmarcofranssen bfd08bcfd1 Bump test chart dependencies (#608) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-06-16 12:15:39 -07:00
spire-helm-version-checker[bot]andmarcofranssen 971e4be7d3 Bump test chart dependencies (#606) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: marcofranssen <[email protected]>
 2025-06-09 06:30:15 -07:00
Pratik LotiaandFaisal Memon ffe4390136 Nit: Fix typo in param guide (#595) 
* nit: fix typo in param guide

Signed-off-by: pratik-lotia <[email protected]>

* Update charts/spire/charts/spire-server/values.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: Pratik Lotia <[email protected]>

* Update docs

Signed-off-by: Faisal Memon <[email protected]>

---------

Signed-off-by: pratik-lotia <[email protected]>
Signed-off-by: Pratik Lotia <[email protected]>
Signed-off-by: Faisal Memon <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
 2025-05-23 17:50:07 +00:00
Faisal Memon 18ec1ef9dd Bump spire Helm Chart version from 0.24.5 to 0.25.0 
* bd2e8e3 Update spire to 1.12.2 (#592)
* d6684bc Add spire-credentialcomposer-cel support (#587)
* ccfb490 Dynamically build the connection_string with options for the spire server when spire-server.dataStore.sql.databaseType == sqlite3 (#576)
* 87bef26 Bump test chart dependencies (#588)
* b72505b Bump test chart dependencies (#580)
* e4bd1df Bump spire to 1.12.1 (#578)
* 9062710 Bump test chart dependencies (#575)
* 94e1d78 Bump test chart dependencies (#573)

Signed-off-by: Faisal Memon <[email protected]>
 2025-05-22 12:08:48 -07:00
kfox1111 bd2e8e3ced Update spire to 1.12.2 (#592) 
Signed-off-by: Kevin Fox <[email protected]>
 2025-05-22 08:54:36 -07:00