helm-charts-hardened

Author	SHA1	Message	Date
kfox1111	fcbd64e011	Support federation bundle endpoint profile http_web certificates (#469 ) * Support federation bundle endpoint profile http_web certificates Signed-off-by: Kevin Fox <[email protected]> * Fix var Signed-off-by: Kevin Fox <[email protected]> * Fix key Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-10-10 12:03:54 -07:00
kfox1111 Faisal Memon Marco Franssen	c29f45fc30	Add AWS DB types (#464 ) * Add remaining data store options Signed-off-by: Kevin Fox <[email protected]> * Fix env var Signed-off-by: Kevin Fox <[email protected]> * Add aws db types Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix mysql vars Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Fix missing ) Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-server/values.yaml Co-authored-by: Marco Franssen <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix readme Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]> Co-authored-by: Marco Franssen <[email protected]>	2024-10-08 10:50:32 -07:00
kfox1111andFaisal Memon	898a349297	Add remaining data store options (#463 ) * Add remaining data store options Signed-off-by: Kevin Fox <[email protected]> * Fix env var Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-10-07 16:18:06 -07:00
spire-helm-version-checker[bot]andmarcofranssen	2443515682	Bump test chart dependencies (#474 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-10-07 14:04:33 -07:00
kfox1111andFaisal Memon	c46179472c	Update the spire-controller-manager to 0.6.0 (#473 ) Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-10-03 16:27:23 -07:00
kfox1111	5d07eaff52	Align more settings to convention (#467 ) * Align more settings to convention Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-10-03 12:06:38 -07:00
spire-helm-version-checker[bot]andmarcofranssen	ea2d673830	Bump test chart dependencies (#470 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-09-30 17:06:39 -07:00
spire-helm-version-checker[bot]andmarcofranssen	352aee2f0d	Bump test chart dependencies (#468 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-09-23 06:50:10 -07:00
Faisal Memonandkfox1111	c3c8514333	Change curl --caPath to --capath (#462 ) Signed-off-by: Faisal Memon <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-09-17 14:02:06 -07:00
kfox1111andFaisal Memon	68d21ccade	Add an initial json schema file for spire-agent (#458 ) * Add an initial json schema file for spire-agent Signed-off-by: Kevin Fox <[email protected]> * Fix tab Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-09-17 13:39:22 -07:00
Erik Godding BoyeandFaisal Memon	b7e9823a65	Add new config.jwtDomain value to oidc-discovery chart (#457 ) Signed-off-by: Erik Godding Boye <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-09-17 12:36:52 -07:00
nweisenauer	8832da39b4	Protects SPIRE Agent's Chart Against YAML Template Injection (#450 ) * protects agent's chart against template injection Signed-off-by: Nico Weisenauer <[email protected]> * removes unnecessary braces and whitespace Signed-off-by: Nico Weisenauer <[email protected]> * Removes int type validation via cast Signed-off-by: Nico Weisenauer <[email protected]> --------- Signed-off-by: Nico Weisenauer <[email protected]>	2024-09-16 06:23:01 -07:00
kfox1111	3bc70255e7	Update spiffe-helper (#453 ) * Update spiffe-helper Signed-off-by: Kevin Fox <[email protected]> * Update .github/tests/images.json Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>	2024-09-12 09:49:14 -07:00
spire-helm-version-checker[bot]andmarcofranssen	86d6fcac25	Bump test chart dependencies (#449 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-09-09 06:36:28 -07:00
Faisal Memon	01b1114e26	Bump spire Helm Chart version from 0.22.0 to 0.23.0 * `7df063f` Upgrade SPIRE to 1.10.3 (#412) * `de5ec47` Bump test chart dependencies (#445) * `e72b94f` Add all built in BundlePublishers (#430) * `532852d` Bump test chart dependencies (#440) * `6e8ad56` Add a spire-agent auto kubelet verification mode (#435) * `50c741e` Remove extra check that sometimes breaks oidc (#437) * `e062b9f` Support ipv4 only clusters (#434) * `b96e07e` Enable more forms of kubelet certificate verification (#426) * `f92d729` Add missing properties required by SecurityContextConstraints CRD (#432) * `8553a78` Bump test chart dependencies (#431) Signed-off-by: Faisal Memon <[email protected]>	2024-09-04 14:00:46 -07:00
Faisal Memon	080d101787	Bump spire-nested Helm Chart version from 0.22.0 to 0.23.0 (#447 ) * `7df063f` Upgrade SPIRE to 1.10.3 (#412) Signed-off-by: Faisal Memon <[email protected]>	2024-09-04 13:39:53 -07:00
kfox1111andFaisal Memon	7df063f8db	Upgrade SPIRE to 1.10.3 (#412 ) * Update SPIRE to 1.10.3 Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-agent/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-09-04 13:16:50 -07:00
spire-helm-version-checker[bot]andmarcofranssen	de5ec47613	Bump test chart dependencies (#445 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-09-02 05:51:02 -07:00
kfox1111andFaisal Memon	e72b94fc13	Add all built in BundlePublishers (#430 ) * Add all built in BundlePublishers Signed-off-by: Kevin Fox <[email protected]> * Add secret management Signed-off-by: Kevin Fox <[email protected]> * Fix typo Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-server/values.yaml Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-08-27 12:35:23 -07:00
spire-helm-version-checker[bot]andmarcofranssen	532852d907	Bump test chart dependencies (#440 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-08-26 09:45:03 -07:00
kfox1111	6e8ad569b3	Add a spire-agent auto kubelet verification mode (#435 ) * Add a spire-agent auto kubelet verification mode Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-08-23 15:09:55 -07:00
kfox1111	50c741e047	Remove extra check that sometimes breaks oidc (#437 ) Signed-off-by: Kevin Fox <[email protected]>	2024-08-22 12:08:18 -07:00
kfox1111	e062b9f196	Support ipv4 only clusters (#434 ) * Support ipv4 only clusters Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spiffe-oidc-discovery-provider/templates/configmap.yaml Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>	2024-08-21 12:00:38 -07:00
kfox1111andFaisal Memon	b96e07e349	Enable more forms of kubelet certificate verification (#426 ) * Enable kubelet certificate verification by default Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/README.md Signed-off-by: kfox1111 <[email protected]> * Update charts/spire/charts/spire-agent/templates/configmap.yaml Signed-off-by: kfox1111 <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Fix image Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-agent/templates/configmap.yaml Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-08-20 22:08:39 -07:00
Erik Godding Boye	f92d729137	Add missing properties required by SecurityContextConstraints CRD (#432 ) Signed-off-by: Erik Godding Boye <[email protected]>	2024-08-20 08:55:35 -07:00
spire-helm-version-checker[bot]andmarcofranssen	8553a78f6c	Bump test chart dependencies (#431 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-08-19 12:39:18 +02:00
Faisal Memonandkfox1111	ba35e81247	Bump spire-nested Helm Chart version from 0.21.1 to 0.22.0 (#429 ) * `827a3ea` Bump spire to 1.10.1 (#424) Signed-off-by: Faisal Memon <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-08-15 10:13:02 -07:00
Faisal Memon	de1e98337a	Bump spire Helm Chart version from 0.21.1 to 0.22.0 (#428 ) * `9b2d72f` Fix permission issue with 1.10 and defaults when upgraded (#423) * `827a3ea` Bump spire to 1.10.1 (#424) * `0289e5f` Revert "Added support for specifying Kubelet CA Path (#415)" (#422) * `bf40797` Bump test chart dependencies (#418) * `abcf019` Added support for specifying Kubelet CA Path (#415) * `6d4d526` Allow configuring persistence in the spire-agent (#414) Signed-off-by: Faisal Memon <[email protected]>	2024-08-15 13:59:31 +00:00
kfox1111	9b2d72f6a2	Fix permission issue with 1.10 and defaults when upgraded (#423 ) * Fix permission issue with 1.10 and defaults when upgraded Signed-off-by: Kevin Fox <[email protected]> * Fix indenting Signed-off-by: Kevin Fox <[email protected]> * incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-08-13 22:21:20 -07:00
kfox1111	827a3ea80c	Bump spire to 1.10.1 (#424 ) Signed-off-by: Kevin Fox <[email protected]>	2024-08-13 11:44:07 -07:00
kfox1111	0289e5fb00	Revert "Added support for specifying Kubelet CA Path (#415 )" (#422 ) This reverts commit `abcf01958a`. Signed-off-by: Kevin Fox <[email protected]>	2024-08-13 11:03:31 -07:00
spire-helm-version-checker[bot]andmarcofranssen	bf40797049	Bump test chart dependencies (#418 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-08-12 07:05:38 -07:00
Andrew BlockandFaisal Memon	abcf01958a	Added support for specifying Kubelet CA Path (#415 ) Signed-off-by: Andrew Block <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-08-09 04:56:11 +00:00
kfox1111	6d4d52604a	Allow configuring persistence in the spire-agent (#414 ) * Allow configuring persistence in the spire-agent Signed-off-by: Kevin Fox <[email protected]> * Better wording. Leave space for other services if needed some day. Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2024-08-08 20:06:06 -07:00
Faisal Memon	42e702a8da	Bump spire-nested Helm Chart version from 0.21.0 to 0.21.1 (#410 ) * `c3d1d39` Update to SPIRE 1.10.0 (#393) Signed-off-by: Faisal Memon <[email protected]>	2024-08-06 09:31:12 -07:00
Faisal Memon	b4d4d901b9	Bump spire Helm Chart version from 0.21.0 to 0.21.1 (#409 ) * `82a6d5d` Should be `admin_socket_path` not `admin_socket_dir` (#407) * `6240c0b` Bump test chart dependencies (#402) * `c3d1d39` Update to SPIRE 1.10.0 (#393) * `741cd9c` Bump test chart dependencies (#398) * `c507ee0` Bump test chart dependencies (#397) * `199bb6f` Add connect by hostname to agent cofigmap (#392) * `eb6d89b` Update charts/spire/README.md * `c93ad87` Add valid kubectl version to examples * `500fdd9` Bump test chart dependencies (#391) * `08fc5f3` Bump test chart dependencies (#390) * `6904295` Bump test chart dependencies (#389) * `fb7fb80` Fix format for ignoreNamespaces (#388) * `7a0a77b` Fix host path of "spire-agent-admin-socket-dir" volume (#386) * `1d2d755` Add resource limits for upgrade and delete hook batch jobs (#366) * `f7e0d4b` Update _spire-system-namespace.yaml (#381) * `29d4b57` Bump test chart dependencies * `4c9059e` Bump test chart dependencies (#379) * `1dc650f` Apply wildcard for ignoreNamespaces in Controller Manager (#378) * `6c2b5e6` Bump test chart dependencies (#376) Signed-off-by: Faisal Memon <[email protected]>	2024-08-06 08:28:22 -07:00
Ben Leggett	82a6d5d410	Should be `admin_socket_path` not `admin_socket_dir` (#407 ) Signed-off-by: Benjamin Leggett <[email protected]>	2024-08-05 15:49:01 -07:00
spire-helm-version-checker[bot]marcofranssen kfox1111	6240c0b08c	Bump test chart dependencies (#402 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-07-29 12:57:07 +00:00
kfox1111andFaisal Memon	c3d1d39ed7	Update to SPIRE 1.10.0 (#393 ) * Update to SPIRE 1.10.0 Remove the options that were removed in 1.10, and update. Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> * Fix uid mismatch issue on 1.10.0+ Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-07-24 12:19:06 -07:00
spire-helm-version-checker[bot]andmarcofranssen	741cd9c6b4	Bump test chart dependencies (#398 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-07-22 07:41:57 -07:00
spire-helm-version-checker[bot]andmarcofranssen	c507ee0ea3	Bump test chart dependencies (#397 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-07-15 15:14:13 +02:00
tuxotronandkfox1111	199bb6f998	Add connect by hostname to agent cofigmap (#392 ) When setting the kubeletConnectByHostname to "true", the charts update the agent daemonset to define the MY_NODE_NAME environment variable, but it doesn't set the "node_name_env" setting in the WorkloadAttestor:k8s plugin, therefore the agent continues trying to connect to the kubelet using the localhost interface Signed-off-by: tuxotron <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2024-07-11 12:47:57 -07:00
Mariusz Sabathandkfox1111	eb6d89b472	Update charts/spire/README.md Co-authored-by: kfox1111 <[email protected]> Signed-off-by: Mariusz Sabath <[email protected]>	2024-07-09 14:08:55 -04:00
Mariusz Sabath	c93ad87c15	Add valid kubectl version to examples Signed-off-by: Mariusz Sabath <[email protected]>	2024-07-09 11:42:27 -04:00
spire-helm-version-checker[bot]andmarcofranssen	500fdd9ac3	Bump test chart dependencies (#391 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-07-08 12:03:03 +02:00
spire-helm-version-checker[bot]andmarcofranssen	08fc5f3d46	Bump test chart dependencies (#390 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-07-01 08:20:53 +00:00
spire-helm-version-checker[bot]andmarcofranssen	690429525c	Bump test chart dependencies (#389 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: marcofranssen <[email protected]>	2024-06-24 08:20:59 +00:00
Mariusz Sabath	fb7fb809fa	Fix format for ignoreNamespaces (#388 ) Signed-off-by: Mariusz Sabath <[email protected]>	2024-06-23 16:29:39 -07:00
knp-sap	7a0a77b6b8	Fix host path of "spire-agent-admin-socket-dir" volume (#386 ) Signed-off-by: knp-sap <[email protected]>	2024-06-23 09:54:39 -07:00
kfox1111andaniket patel	1d2d7550c5	Add resource limits for upgrade and delete hook batch jobs (#366 ) * Add resource limits for upgrade and delete hook batch jobs Signed-off-by: aniket patel <[email protected]> * Fix value of resource Signed-off-by: aniket patel <[email protected]> * Fix resource limit in server template Signed-off-by: aniket patel <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Fix up doc comment Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: aniket patel <[email protected]> Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: aniket patel <[email protected]>	2024-06-19 12:50:21 -07:00

... 3 4 5 6 7 ...