* Autogen jwtIssuer
Unset a default for jwtIssuer and global.spire.jwtIssuer. When unset,
generate it to the default of oidc-discovery.$trustDomain so in many
cases the user doesn't need to set it at all.
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Mariusz Sabath <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
* Specify ingress controller type
Signed-off-by: Kevin Fox <[email protected]>
* Fix indenting, docs
Signed-off-by: Kevin Fox <[email protected]>
* Fix spacing
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing brackets
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing brackets
Signed-off-by: Kevin Fox <[email protected]>
* Add ingress-nginx support
Signed-off-by: Kevin Fox <[email protected]>
* Use the right example values for test version to upgrade from.
Signed-off-by: Kevin Fox <[email protected]>
* Fix var in wrong location
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing arg
Signed-off-by: Kevin Fox <[email protected]>
* Try this to checkout the right version
Signed-off-by: Kevin Fox <[email protected]>
* Switch to upgrading from 0.14.0
Signed-off-by: Kevin Fox <[email protected]>
* Install crds
Signed-off-by: Kevin Fox <[email protected]>
* Simple ingress support
For a lot of situations, ingress rules can be derived from trustDomain.
Change the code to generate rules by default for the user.
Signed-off-by: Kevin Fox <[email protected]>
* Add upgrade test fix from 43
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Fix test
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Enable unset ingress controller type to use with openshift later
Signed-off-by: Kevin Fox <[email protected]>
* Openshift ingress controller type support
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing end tag
Signed-off-by: Kevin Fox <[email protected]>
* Fix merge conflicts
Signed-off-by: Kevin Fox <[email protected]>
* Fix doc merge conflicts
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Update docs
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Fix merge conflicts
Signed-off-by: Kevin Fox <[email protected]>
* Fix automatically generated rules on openshift
Signed-off-by: Kevin Fox <[email protected]>
* Fix formatting
Signed-off-by: Kevin Fox <[email protected]>
* Fix pathType
Signed-off-by: Kevin Fox <[email protected]>
* Make openshift edge rules work
Signed-off-by: Kevin Fox <[email protected]>
* Fix var scoping
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Fix issue created during merge conflict
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
Co-authored-by: Mariusz Sabath <[email protected]>
* Specify ingress controller type
Signed-off-by: Kevin Fox <[email protected]>
* Fix indenting, docs
Signed-off-by: Kevin Fox <[email protected]>
* Fix spacing
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing brackets
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing brackets
Signed-off-by: Kevin Fox <[email protected]>
* Add ingress-nginx support
Signed-off-by: Kevin Fox <[email protected]>
* Use the right example values for test version to upgrade from.
Signed-off-by: Kevin Fox <[email protected]>
* Fix var in wrong location
Signed-off-by: Kevin Fox <[email protected]>
* Fix missing arg
Signed-off-by: Kevin Fox <[email protected]>
* Try this to checkout the right version
Signed-off-by: Kevin Fox <[email protected]>
* Switch to upgrading from 0.14.0
Signed-off-by: Kevin Fox <[email protected]>
* Install crds
Signed-off-by: Kevin Fox <[email protected]>
* Incorperate feedback
Signed-off-by: Kevin Fox <[email protected]>
* Apply suggestions from code review
Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
* Fix docs
Signed-off-by: Kevin Fox <[email protected]>
* Enable unset ingress controller type to use with openshift later
Signed-off-by: Kevin Fox <[email protected]>
* Fix docs after merge issue
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
* Exit code from diff indicating changes should not block commit.
Signed-off-by: Kevin Fox <[email protected]>
* Push the changes that update-tags creates
Signed-off-by: Kevin Fox <[email protected]>
* Add plugin support to the spire agent
This adapts the existing spire server plugin support to be usable by
the agent as well.
Signed-off-by: Kevin Fox <[email protected]>
* Fix notes
Signed-off-by: Kevin Fox <[email protected]>
* Add plugin support to the spire agent
This adapts the existing spire server plugin support to be usable by
the agent as well.
Signed-off-by: Kevin Fox <[email protected]>
* Fix notes
Signed-off-by: Kevin Fox <[email protected]>
* Update documentation
Signed-off-by: Kevin Fox <[email protected]>
* Update example
Signed-off-by: Kevin Fox <[email protected]>
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Add support for the experimental section of the config. Needed for
developers. This PR doesnt add support for the `auth_opa_policy_engine`
experimental config.
---------
Signed-off-by: Faisal Memon <[email protected]>
Current configmap template renders to a wrong KeyManager and
UpstreamAuthority configurarion when aws_kms and aws_pca are enabled and
container is crashing. The proposed changes will fix the issue.
---------
Signed-off-by: unufree <[email protected]>
Signed-off-by: unufr33 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
This patch enables end users to configure external plugins in the
spire-server config. Unsupported internal plugins are not able to be
set.
---------
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Edwin Buck <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
To allow for inplace upgrades of spire-server statefulset we are not
allowed to
make changes to all fields of the statefulset spec.
When bumping from 0.8.1 to the latest version the `initContainers:`
field is added in the spec and therefore does not allow for updating the
statefulset.
This fix prevents the empty initContainers block when bumping from a
previous chart version.
Signed-off-by: Marco Franssen <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
