kfox1111
f8db5a313b
Fix Tornjak persistence issue ( #294 )
2023-05-18 01:54:26 +02:00
Marco Franssen
b30b412edb
Tornjak reuse spire-lib.cluster-domain macro ( #292 )
...
Resolves #291
Signed-off-by: Marco Franssen <[email protected]
2023-05-17 12:42:17 -07:00
Faisal Memon
31ce704fa8
Cleanup maintainer handbook ( #287 )
2023-05-17 08:49:02 -07:00
Marco Franssen
a2da94374c
Remove manual dispatch from dummy workflow ( #288 )
2023-05-17 09:25:15 -05:00
dependabot[bot]
807558bb9c
Bump helm/kind-action from 1.5.0 to 1.6.0 ( #285 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-17 10:39:35 +02:00
dependabot[bot]
3df67dbbc0
Bump sigstore/cosign-installer from 3.0.3 to 3.0.4 ( #286 )
...
Bumps
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer )
from 3.0.3 to 3.0.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign-installer/releases ">sigstore/cosign-installer's
releases</a>.</em></p>
<blockquote>
<h2>v3.0.4</h2>
<ul>
<li>Include fix for <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/124 ">sigstore/cosign-installer#124</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sigstore/cosign-installer/commit/03d0fecf172873164a163bbc64bed0f3bf114ed7 "><code>03d0fec</code></a>
Fix unsafe evaluation of inputs.use-sudo (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/124 ">#124</a>)</li>
<li><a
href="https://github.com/sigstore/cosign-installer/commit/46b5db744906311fb5af96dec633d262d16dfb5b "><code>46b5db7</code></a>
use intermediate environment variables to avoid risks of script
injection (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/122 ">#122</a>)</li>
<li><a
href="https://github.com/sigstore/cosign-installer/commit/84448ba515b2a5ac9853582a471184394c67631b "><code>84448ba</code></a>
we should rely upon the digests not the tags, typos (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/121 ">#121</a>)</li>
<li>See full diff in <a
href="https://github.com/sigstore/cosign-installer/compare/v3.0.3...v3.0.4 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <[email protected]
2023-05-17 01:04:16 -07:00
Marco Franssen
5505d41d8f
Merge pull request #283 from spiffe/additional-k8s-native-feature-tornjak-frontend
2023-05-16 23:43:24 +02:00
Marco Franssen
391f093ae9
Allow to configure topologySpreadConstraints for tornjak-frontend
...
Signed-off-by: Marco Franssen <[email protected]
2023-05-16 20:29:41 +02:00
Marco Franssen
5cc26d3142
Allow to configure tolerations for tornjak-frontend
...
Signed-off-by: Marco Franssen <[email protected]
2023-05-16 20:29:41 +02:00
Marco Franssen
3537161cdf
Allow to configure affinity for tornjak-frontend
...
Signed-off-by: Marco Franssen <[email protected]
2023-05-16 20:29:41 +02:00
kfox1111
aed6fdfe4e
Use the correct kubectl for the cluster ( #248 )
2023-05-16 20:28:53 +02:00
Marco Franssen
ee43c5e36f
Add nodeSelector for tornjak
...
Tornjak only supports amd64 builds at the moment
To prevent deployment failures on clusters with arm64 nodes I have added a nodeSelector for tornjak frontend, and documentation for spire-server
Signed-off-by: Marco Franssen <[email protected]
2023-05-16 20:20:32 +02:00
Marco Franssen
fc13cbd911
Merge pull request #234 from spiffe/tornjak
2023-05-16 19:53:42 +02:00
Mariusz Sabath
ed472aa98b
Update documentation
...
Signed-off-by: Mariusz Sabath <[email protected]
2023-05-16 19:31:38 +02:00
Marco Franssen
a11cfc99ac
Allow to define the resources for tornjak backend
...
Signed-off-by: Marco Franssen <[email protected]
2023-05-16 19:31:38 +02:00
Mariusz Sabath and Marco Franssen
382e0d4a47
Upgrade Tornjak image to version v1.2.0 ( #259 )
...
Signed-off-by: Mariusz Sabath <[email protected] [email protected]
2023-05-16 19:31:38 +02:00
Mariusz Sabath and Marco Franssen
657c460e67
Update charts/spire/charts/tornjak-frontend/templates/service.yaml
...
Co-authored-by: Marco Franssen <[email protected] [email protected]
2023-05-16 19:31:38 +02:00
Mariusz Sabath and Marco Franssen
7521cafcc6
Update charts/spire/charts/spire-server/templates/tornjak-config.yaml
...
Co-authored-by: Marco Franssen <[email protected] [email protected]
2023-05-16 19:31:38 +02:00
Mariusz Sabath and Marco Franssen
b64c352b15
Update charts/spire/charts/spire-server/templates/tests/test-tornjak-connection.yaml
...
Co-authored-by: Marco Franssen <[email protected] [email protected]
2023-05-16 19:31:38 +02:00
Marco Franssen
6ddf6ab9fa
Improve tornjak docs ( #276 )
...
- Align tornjak backend naming with same convention as frontend
- Align Tornjak backend and frontend notes style
- Add disclaimer for Tornjak usage to example
---------
Signed-off-by: Marco Franssen <[email protected]
2023-05-16 19:31:38 +02:00
Mariusz Sabath
80d34f0485
Use common post-install scripts for testing
...
Signed-off-by: Mariusz Sabath <[email protected]
2023-05-16 19:31:38 +02:00
Mariusz Sabath
f5efa0cefd
Remove dead macros
...
Signed-off-by: Mariusz Sabath <[email protected]
2023-05-16 19:31:38 +02:00
Mariusz Sabath
bd86518abc
Fixing shellcheck
...
Signed-off-by: Mariusz Sabath <[email protected]
2023-05-16 19:31:38 +02:00
Mariusz Sabath
91bdea2a1d
Provide minimal resources to prevent accidental crashes due to resource exhaustion
...
Signed-off-by: Mariusz Sabath <[email protected]
2023-05-16 19:31:38 +02:00
kfox1111
1675997748
Tornjak global image fix ( #228 )
...
This pr updates the Tornjak branch to work with the merged global
registry configuration support.
Signed-off-by: Mariusz Sabath <[email protected] [email protected]
2023-05-16 19:31:38 +02:00
5e827ee45e
Add Tornjak Tests ( #220 )
...
Signed-off-by: Mariusz Sabath <[email protected] [email protected] [email protected] [email protected] [email protected]
2023-05-16 19:31:38 +02:00
Mariusz Sabath
bdba97b629
Add empty directory to Tornjak to support npm cache ( #224 )
...
Resolves issue #223
Signed-off-by: Mariusz Sabath <[email protected]
2023-05-16 19:31:38 +02:00
Mariusz Sabath and Marco Franssen
da186c5f53
Split Tornjak Frontend into separate subchart ( #179 )
...
Signed-off-by: Mariusz Sabath <[email protected] [email protected] [email protected]
2023-05-16 19:31:38 +02:00
Marco Franssen
6d221263fb
Add Tornjak
...
This reverts commit 3210dfe49dfabc96437d1fe60a1b9a5eedb2312b.
Signed-off-by: Marco Franssen <[email protected]
2023-05-16 19:31:38 +02:00
2669d8b5e2
Add maintainer's handbook. ( #265 )
...
The maintainer's handbook is a guide to remind the maintainers of the
values and approaches that most maintainers already hold.
Specifics of code quality will come later, but putting them into this
document would make it too long, and thus unread.
Closes #263
---------
Signed-off-by: Edwin Buck <[email protected] [email protected] [email protected] [email protected]
2023-05-16 10:22:54 -07:00
Faisal Memon and Marco Franssen
72596aea8d
Skip tests for docs folders ( #281 )
...
Our mandatory checks will fail if there are docs only changes. The
helm-chart-ci.yaml skips these files, so the workflows never run, and
the mandatory checks are stuck waiting for results.
This adds a parallel workflow that runs fake tests for docs changes. So
that docs only changes can pass the required status checks. It uses
`paths-ignore` instead of `paths`. This is documented
[here](https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/troubleshooting-required-status-checks#handling-skipped-but-required-checks ).
---------
Signed-off-by: Faisal Memon <[email protected] [email protected]
2023-05-16 10:21:44 -07:00
7c71738d57
Bump test chart dependencies ( #279 )
...
Bump the Helm charts used in test scenarios to latest available
versions.
Signed-off-by: GitHub <[email protected] [email protected] [email protected]
2023-05-15 16:24:00 -07:00
Faisal Memon
05addae906
Add json to test path ( #280 )
...
Adds *.json to the workflow trigger so that changes to json files, such as updating versions, will trigger a pipeline run.
Signed-off-by: Faisal Memon <[email protected]
2023-05-15 16:16:03 -07:00
kfox1111
8d9b73496d
Switch the spire tests to always run ( #250 )
...
This patch sets the spire chart tests to always run. This enables
changes in tests to be tested and sets a base for split out charts.
---------
Signed-off-by: Kevin Fox <[email protected]
2023-05-14 17:39:08 -07:00
Marco Franssen
8c5643b5f7
Bump spire Helm Chart version from 0.6.3 to 0.7.0 ( #278 )
...
Please review the below changelog to ensure this matches up with the
semantic version being applied.
> **Note**: **Maintainers** ensure to run following after merging this
PR to trigger the release workflow:
>
> ```shell
> git checkout main
> git pull
> git checkout release
> git pull
> git merge main
> git push
> ```
**Changes in this release**
* 65312f85#275 )
* 5489212b#274 )
* b3153242#272 )
* 013eb617#273 )
* 73435be9#262 )
* c4656a74#269 )
* d3da3eed#225 )
* ce78bea1#267 )
* 1f09d7b3#264 )
* aa6b40c0#258 )
* 8e7e6ebc#256 )
* 1e09ea54#253 )
* 6760cd22#252 )
* 61e338df#244 )
* 3d81928f#243 )
* 46f10e1d#237 from spiffe/fix-check-versions
* 3889d22e6a894e8c91083a6b#88 )
* 9afb6f80#242 from spiffe/shellcheck
* 99af475fd0a1e1288abd75ef#241 from
spiffe/dependabot/github_actions/sigstore/cosign-installer-3.0.3
* 252f1f5a247e3e5d17d62f12#184 )
* 2c360a50#201 )
* 3cc89554#218 )
* 3fc81780#219 )
* 6b617440#113 from
spiffe/spire-config-as-yaml-converted-json
* 9e03f297210ed02c#217 )
* e3b0d00bd7dcfeb6861108c01d72b572[email protected]
2023-05-12 11:19:28 -07:00
Marco Franssen and Faisal Memon
65312f8525
Include dependency values in documentation ( #275 )
...
I have added a flag to the helm-docs script to include the documentation
for dependencies.
This will add more complete documentation to
https://artifacthub.io/packages/helm/spiffe/spire#values so it is easier
for our users to get started and having a complete overview.
---------
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-05-12 18:12:23 +00:00
Faisal Memon
5489212bb5
Remove persistence.enabled flag ( #274 )
2023-05-12 16:19:50 +02:00
Faisal Memon and kfox1111
b315324244
Allow for ConfigMaps to be annotated ( #272 )
...
Without an annotation, spinnaker will rename the configmap.
---------
Signed-off-by: Faisal Memon <[email protected] [email protected]
2023-05-11 10:49:06 -07:00
Faisal Memon
013eb617a9
Fix spacing for spire server service annotation ( #273 )
...
Spacing off by 4.
Signed-off-by: Faisal Memon <[email protected]
2023-05-10 18:22:07 -07:00
73435be9a1
Add project glossary. ( #262 )
...
This glossary is not meant to be complete, as
no glossary can be. It does mean to cover the
basic different deployments.
To keep things clear, federation was also added
to clarify that federation is not a deployment
but a different "thing".
Closes #261
---------
Signed-off-by: Edwin Buck <[email protected] [email protected] [email protected]
2023-05-10 12:53:17 -07:00
c4656a74b2
Replicas > 1 is not allowed with sqlite driver ( #269 )
...
Co-authored-by: Faisal Memon <[email protected] [email protected]
2023-05-10 16:30:05 +02:00
d3da3eed55
External database configuration ( #225 )
...
This patch makes all the database settings configurable.
fixes: https://github.com/spiffe/helm-charts/issues/37
---------
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected]
2023-05-10 14:04:34 +02:00
Edwin Buck
ce78bea121
Add Edwin Buck as a maintainer. ( #267 )
2023-05-09 17:00:02 +02:00
1f09d7b386
Bump test chart dependencies ( #264 )
...
Bump the Helm charts used in test scenarios to latest available
versions.
---------
Signed-off-by: GitHub <[email protected] [email protected] [email protected] [email protected]
2023-05-08 06:38:29 -07:00
Edwin Buck
aa6b40c0f8
Add project overview. ( #258 )
2023-05-05 20:55:42 +02:00
kfox1111 and Faisal Memon
8e7e6ebc76
Allow trust bundle url to be set along with format ( #256 )
...
This patch enables the spire-agent to retrieve the trust bundle via url.
fixes: https://github.com/spiffe/helm-charts/issues/254
---------
Signed-off-by: Kevin Fox <[email protected] [email protected]
2023-05-04 13:15:17 -07:00
dependabot[bot]
1e09ea54a1
Bump peter-evans/create-pull-request from 5.0.0 to 5.0.1 ( #253 )
...
Bumps
[peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request )
from 5.0.0 to 5.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/peter-evans/create-pull-request/releases ">peter-evans/create-pull-request's
releases</a>.</em></p>
<blockquote>
<h2>Create Pull Request v5.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: truncate body if exceeds max length by <a
href="https://github.com/peter-evans "><code>@peter-evans</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/1915 ">peter-evans/create-pull-request#1915</a></li>
<li>12 dependency updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/peter-evans/create-pull-request/compare/v5.0.0...v5.0.1 ">https://github.com/peter-evans/create-pull-request/compare/v5.0.0...v5.0.1 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/284f54f989303d2699d373481a0cfa13ad5a6666 "><code>284f54f</code></a>
fix: truncate body if exceeds max length (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/1915 ">#1915</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/9e5b2344021c369f621dcb89ffde8fd910dac08c "><code>9e5b234</code></a>
build(deps-dev): bump eslint from 8.38.0 to 8.39.0 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/1888 ">#1888</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/2d8e7db84cac6d2c614124f2f4a8582a45f3b6f6 "><code>2d8e7db</code></a>
build(deps-dev): bump <code>@types/node</code> from 18.15.11 to 18.16.0
(<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/1887 ">#1887</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/041b6ab1635f4e31e86773ec8a91cf42d1403b67 "><code>041b6ab</code></a>
build(deps-dev): bump prettier from 2.8.7 to 2.8.8 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/1886 ">#1886</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/31de0fdf3fbb0da088e82df3d7ae33c4112d4ef6 "><code>31de0fd</code></a>
build(deps-dev): bump <code>@types/jest</code> from 29.5.0 to 29.5.1
(<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/1885 ">#1885</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/28295f66367f85dd76ea1d27825cb5987f67c861 "><code>28295f6</code></a>
build(deps-dev): bump <code>@typescript-eslint/parser</code> from
5.59.0 to 5.59.1 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/1884 ">#1884</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/8dcaf3883b89ee69284b5200207140ee0ff16fd4 "><code>8dcaf38</code></a>
build(deps-dev): bump <code>@typescript-eslint/parser</code> from
5.58.0 to 5.59.0 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/1876 ">#1876</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/2827897dcca3eb94b42cba2228d9abc3ff04185e "><code>2827897</code></a>
docs: add note about push-to-fork with remote repos</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/c4f19d3a23df3f9c18e7893bb435a88a2e045c49 "><code>c4f19d3</code></a>
build(deps-dev): bump eslint-import-resolver-typescript (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/1844 ">#1844</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/46035868a3d3d84411578c2a440de0f822dd7a06 "><code>4603586</code></a>
build(deps-dev): bump eslint from 8.37.0 to 8.38.0 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/1842 ">#1842</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/peter-evans/create-pull-request/compare/v5.0.0...v5.0.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <[email protected]
2023-05-03 09:13:42 -07:00
github-actions[bot] and Kevin Fox
6760cd22cd
Bump test chart dependencies ( #252 )
...
Bump the Helm charts used in test scenarios to latest available
versions.
---------
Signed-off-by: GitHub <[email protected] [email protected]
2023-05-01 09:16:43 -07:00
kfox1111
61e338df55
Fix example production typos ( #244 )
...
Signed-off-by: kfox1111 <[email protected]
2023-04-27 14:02:48 -07:00
Faisal Memon
3d81928ff8
Add skipKubeletVerification configurable ( #243 )
2023-04-26 21:38:14 +02:00
kfox1111