helm-charts-hardened

Author	SHA1	Message	Date
kfox1111	4a6c705e6a	Update the CRs to enable multiple instance nesting without naming conflicts (#189 )	2024-01-24 09:20:18 +01:00
kfox1111andFaisal Memon	4c307c1be1	Add missing bundlePublisher section and extraEnv so settings can be set (#201 ) Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-01-23 13:18:49 -08:00
kfox1111andFaisal Memon	d724d1e690	Update the documentation (#172 ) * SPIFFE OIDC Discovery Provider Rework Fixes: https://github.com/spiffe/helm-charts-hardened/issues/151 Signed-off-by: Kevin Fox <[email protected]> * Enhance clusterspiffeid's so the discovery provider is independently configurable Signed-off-by: Kevin Fox <[email protected]> * Fix tests Signed-off-by: Kevin Fox <[email protected]> * More fix tests Signed-off-by: Kevin Fox <[email protected]> * More fix tests Signed-off-by: Kevin Fox <[email protected]> * Undo Signed-off-by: Kevin Fox <[email protected]> * Fix logging Signed-off-by: Kevin Fox <[email protected]> * Try to get output Signed-off-by: Kevin Fox <[email protected]> * Try and get error code Signed-off-by: Kevin Fox <[email protected]> * Fix more logging. Switch port used. Signed-off-by: Kevin Fox <[email protected]> * Fix logging Signed-off-by: Kevin Fox <[email protected]> * Fix port Signed-off-by: Kevin Fox <[email protected]> * Fix up logs for nested test and fix values Signed-off-by: Kevin Fox <[email protected]> * Make consistent Signed-off-by: Kevin Fox <[email protected]> * Fix nested test Signed-off-by: Kevin Fox <[email protected]> * Fix insecure mode and test. Signed-off-by: Kevin Fox <[email protected]> * Fix test. Signed-off-by: Kevin Fox <[email protected]> * Fix var scoping issue Signed-off-by: Kevin Fox <[email protected]> * Set the right flags for ingress Signed-off-by: Kevin Fox <[email protected]> * Update dns template Signed-off-by: Kevin Fox <[email protected]> * Use more standard port Signed-off-by: Kevin Fox <[email protected]> * Fix test logging Signed-off-by: Kevin Fox <[email protected]> * Allow reencrypt. Signed-off-by: Kevin Fox <[email protected]> * Remove testing changes Signed-off-by: Kevin Fox <[email protected]> * Fix formatting Signed-off-by: Kevin Fox <[email protected]> * Add LetsEncrypt/ACME/cert-manager support. Remove broken ACME support. Signed-off-by: Kevin Fox <[email protected]> * Use spiffe-helper as a sidecar. Significant space savings and read only cert dir Signed-off-by: Kevin Fox <[email protected]> * Fix the nested test Signed-off-by: Kevin Fox <[email protected]> * Fix merge issue Signed-off-by: Kevin Fox <[email protected]> * Remove 1.29.0 until deps catch up. Related issue: https://github.com/rancher/kubectl/pull/94 Signed-off-by: Kevin Fox <[email protected]> * Add more error checking Signed-off-by: Kevin Fox <[email protected]> * Remove testing code Signed-off-by: Kevin Fox <[email protected]> * Simplify the ids. Fix docs Signed-off-by: Kevin Fox <[email protected]> * Fix logic Signed-off-by: Kevin Fox <[email protected]> * Fix var Signed-off-by: Kevin Fox <[email protected]> * Make cert-manager bits more readable Signed-off-by: Kevin Fox <[email protected]> * Fix template Signed-off-by: Kevin Fox <[email protected]> * Fix openshift ingress Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> * Add resource spec Signed-off-by: Kevin Fox <[email protected]> * Remove parts that cant merge yet Signed-off-by: Kevin Fox <[email protected]> * Add support for running spiffe secured discovery provider (default) Signed-off-by: Kevin Fox <[email protected]> * Fix tests Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix merge conflict Signed-off-by: Kevin Fox <[email protected]> * Fix merge conflict Signed-off-by: Kevin Fox <[email protected]> * Remove defaults Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Add missing configurable for the discovery providers csi driver Signed-off-by: Kevin Fox <[email protected]> * Update the documentation Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> * Add missing file Signed-off-by: Kevin Fox <[email protected]> * Update for changes in spiffe-helper Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-01-23 08:05:49 -08:00
github-actions[bot]andmarcofranssen	e59a29b2d4	Bump test chart dependencies (#200 ) Co-authored-by: marcofranssen <[email protected]>	2024-01-22 10:16:50 +00:00
kfox1111	4668151ff7	Add missing extraVolumeMounts to the controllerManager (#196 )	2024-01-22 11:09:10 +01:00
kfox1111	b9ac3c4aec	Update to spire-controller-manager 0.4.1 (#193 ) Signed-off-by: Kevin Fox <[email protected]>	2024-01-19 17:10:41 -08:00
kfox1111	6fec1e598a	Update SPIRE to 1.8.7 (#194 ) Signed-off-by: Kevin Fox <[email protected]>	2024-01-18 21:07:53 -08:00
kfox1111andFaisal Memon	af155c2edc	Add support for running spiffe secured discovery provider (default) (#163 ) * SPIFFE OIDC Discovery Provider Rework Fixes: https://github.com/spiffe/helm-charts-hardened/issues/151 Signed-off-by: Kevin Fox <[email protected]> * Enhance clusterspiffeid's so the discovery provider is independently configurable Signed-off-by: Kevin Fox <[email protected]> * Fix tests Signed-off-by: Kevin Fox <[email protected]> * More fix tests Signed-off-by: Kevin Fox <[email protected]> * More fix tests Signed-off-by: Kevin Fox <[email protected]> * Undo Signed-off-by: Kevin Fox <[email protected]> * Fix logging Signed-off-by: Kevin Fox <[email protected]> * Try to get output Signed-off-by: Kevin Fox <[email protected]> * Try and get error code Signed-off-by: Kevin Fox <[email protected]> * Fix more logging. Switch port used. Signed-off-by: Kevin Fox <[email protected]> * Fix logging Signed-off-by: Kevin Fox <[email protected]> * Fix port Signed-off-by: Kevin Fox <[email protected]> * Fix up logs for nested test and fix values Signed-off-by: Kevin Fox <[email protected]> * Make consistent Signed-off-by: Kevin Fox <[email protected]> * Fix nested test Signed-off-by: Kevin Fox <[email protected]> * Fix insecure mode and test. Signed-off-by: Kevin Fox <[email protected]> * Fix test. Signed-off-by: Kevin Fox <[email protected]> * Fix var scoping issue Signed-off-by: Kevin Fox <[email protected]> * Set the right flags for ingress Signed-off-by: Kevin Fox <[email protected]> * Update dns template Signed-off-by: Kevin Fox <[email protected]> * Use more standard port Signed-off-by: Kevin Fox <[email protected]> * Fix test logging Signed-off-by: Kevin Fox <[email protected]> * Allow reencrypt. Signed-off-by: Kevin Fox <[email protected]> * Remove testing changes Signed-off-by: Kevin Fox <[email protected]> * Fix formatting Signed-off-by: Kevin Fox <[email protected]> * Add LetsEncrypt/ACME/cert-manager support. Remove broken ACME support. Signed-off-by: Kevin Fox <[email protected]> * Use spiffe-helper as a sidecar. Significant space savings and read only cert dir Signed-off-by: Kevin Fox <[email protected]> * Fix the nested test Signed-off-by: Kevin Fox <[email protected]> * Fix merge issue Signed-off-by: Kevin Fox <[email protected]> * Remove 1.29.0 until deps catch up. Related issue: https://github.com/rancher/kubectl/pull/94 Signed-off-by: Kevin Fox <[email protected]> * Add more error checking Signed-off-by: Kevin Fox <[email protected]> * Remove testing code Signed-off-by: Kevin Fox <[email protected]> * Simplify the ids. Fix docs Signed-off-by: Kevin Fox <[email protected]> * Fix logic Signed-off-by: Kevin Fox <[email protected]> * Fix var Signed-off-by: Kevin Fox <[email protected]> * Make cert-manager bits more readable Signed-off-by: Kevin Fox <[email protected]> * Fix template Signed-off-by: Kevin Fox <[email protected]> * Fix openshift ingress Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> * Add resource spec Signed-off-by: Kevin Fox <[email protected]> * Remove parts that cant merge yet Signed-off-by: Kevin Fox <[email protected]> * Add support for running spiffe secured discovery provider (default) Signed-off-by: Kevin Fox <[email protected]> * Fix tests Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix merge conflict Signed-off-by: Kevin Fox <[email protected]> * Fix merge conflict Signed-off-by: Kevin Fox <[email protected]> * Remove defaults Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Add missing configurable for the discovery providers csi driver Signed-off-by: Kevin Fox <[email protected]> * Update for changes in spiffe-helper Signed-off-by: Kevin Fox <[email protected]> * Point at upstream Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2024-01-18 16:08:22 -08:00
kfox1111	3ccdb5e4c1	Add tls section to federation bundle endpoint and fix up annotations (#173 ) * Add cert-manager support to the federation bundle endpoint and fix up bundle endpoint ingress annotations Signed-off-by: Kevin Fox <[email protected]> * Add external secret too Signed-off-by: Kevin Fox <[email protected]> * Add forgotten files Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>	2024-01-17 00:17:15 -08:00
kfox1111	c7ab1319cc	Add join_token server nodeattestor support (#187 ) Signed-off-by: Kevin Fox <[email protected]>	2024-01-16 14:52:39 -08:00
github-actions[bot]andmarcofranssen	81e9523e03	Bump test chart dependencies (#186 ) Signed-off-by: GitHub <[email protected]> Co-authored-by: marcofranssen <[email protected]>	2024-01-15 06:11:02 -08:00
Mariusz Sabath	6d19a76f01	Fix agent daemonset format (#184 ) Signed-off-by: Mariusz Sabath <[email protected]>	2024-01-12 21:20:10 +00:00
kfox1111	b61d4f5ae1	Add spire-agent to spire-agent pod path (#180 )	2024-01-11 10:39:12 +00:00
kfox1111	befa074763	Fix notes bug (#178 )	2024-01-11 10:31:02 +00:00
kfox1111	912c61e05c	Remove deprecated version values (#179 )	2024-01-11 10:29:56 +00:00
Jerome Meyer	ae4ef6e992	Update HorizontalPodAutoscaler API to autoscaling/v2 (#153 )	2024-01-11 11:19:41 +01:00
marcofranssen	e7a61a9ec5	Bump test chart dependencies Signed-off-by: GitHub <[email protected]>	2024-01-08 14:39:46 +01:00
kfox1111andFaisal Memon	183e9aa534	SPIFFE OIDC Discovery Provider Rework (#152 ) Co-authored-by: Faisal Memon <[email protected]>	2024-01-03 11:40:14 +01:00
github-actions[bot]andmarcofranssen	8f1aba8ad3	Bump test chart dependencies (#171 ) Signed-off-by: GitHub <[email protected]> Co-authored-by: marcofranssen <[email protected]>	2024-01-01 06:05:30 -08:00
kfox1111	2454b8cd2a	Fix links still pointing at older git repo (#167 ) Signed-off-by: Kevin Fox <[email protected]>	2023-12-27 17:10:49 -08:00
github-actions[bot]andmarcofranssen	e5c5527fd7	Bump test chart dependencies (#165 ) Signed-off-by: GitHub <[email protected]> Co-authored-by: marcofranssen <[email protected]>	2023-12-25 14:32:18 -08:00
Drew Wellsandkfox1111	e6300087b7	Update jwt test to work with newer slim images (#139 ) * install newer version of slim debug - switch to step tool for jwt verification against jwk public keys Signed-off-by: Drew Wells <[email protected]> * use step-cli image Signed-off-by: Drew Wells <[email protected]> * Fix image tag and add upgrade logic Signed-off-by: Kevin Fox <[email protected]> * use registry for consistency Signed-off-by: Kevin Fox <[email protected]> * Fix merge conflicts Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Drew Wells <[email protected]> Signed-off-by: kfox1111 <[email protected]> Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2023-12-20 19:14:54 -08:00
kfox1111andMarco Franssen	c39dd44526	Add recommendation for namespacePSS (#131 ) Co-authored-by: Marco Franssen <[email protected]>	2023-12-21 00:15:56 +00:00
kfox1111andMarco Franssen	49beb64584	Add recommendation for namespaceLayout (#127 ) Co-authored-by: Marco Franssen <[email protected]>	2023-12-19 15:02:57 +00:00
kfox1111	33cacd2ee8	Add recommendation for prometheus exporter (#144 )	2023-12-19 11:38:20 +00:00
kfox1111andMarco Franssen	6997d6a904	Add recommendation for securityContext and podSecurityContext (#125 ) Co-authored-by: Marco Franssen <[email protected]>	2023-12-19 11:26:26 +00:00
kfox1111	50c4ac35b0	Add recommendation for strictMode (#143 )	2023-12-19 12:12:53 +01:00
github-actions[bot]marcofranssen kfox1111	4fb9d18f50	Bump test chart dependencies (#155 ) * Bump test chart dependencies Signed-off-by: GitHub <[email protected]> * Revert broken image for now Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: GitHub <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: marcofranssen <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2023-12-18 09:12:59 -08:00
Mariusz Sabath	811123a207	Update the Tornjak image version (#150 )	2023-12-14 23:15:04 +01:00
kfox1111	1524537318	Update default for additionalDomains not to include localhost (#146 ) Its pretty much only useful if you want to port forward the discovery provider and use localhost to access it. An uncommon use case. Its easy to add back for that case. This simplifies production deploymnet. Signed-off-by: Kevin Fox <[email protected]>	2023-12-12 08:14:16 -08:00
kfox1111andFaisal Memon	e35838c309	Add recommendation for priorityClass (#124 ) * Add a flag to enable recommendations Signed-off-by: Kevin Fox <[email protected]> * Add recommendation for priorityClass Signed-off-by: Kevin Fox <[email protected]> * Fix vars Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Update docs. Fix typo. Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2023-12-11 11:42:40 -08:00
kfox1111	9f72a8f971	Use good and automatic defaults for tornjak frontend workingDir (#129 ) Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>	2023-12-11 07:52:44 -08:00
kfox1111andMariusz Sabath	7726351955	Tornjak UBI support (#123 ) * Tornjak UBI support The Tornjak containers now have two different flavors. Vanilla and UBI. Automatically select the UBI image when deploying on OpenShift. Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Mariusz Sabath <[email protected]>	2023-12-11 06:56:58 -08:00
kfox1111	89c07e2d04	Revert openssl 3.2 change (#142 ) Signed-off-by: Kevin Fox <[email protected]>	2023-12-11 06:33:24 -08:00
marcofranssen	a3d3702049	Bump test chart dependencies Signed-off-by: GitHub <[email protected]>	2023-12-11 10:44:48 +01:00
github-actions[bot]marcofranssen kfox1111	80c7653a21	Bump test chart dependencies (#134 ) * Bump test chart dependencies Signed-off-by: GitHub <[email protected]> * Update charts/spire/charts/spiffe-oidc-discovery-provider/values.yaml Signed-off-by: kfox1111 <[email protected]> * Fix Docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: GitHub <[email protected]> Signed-off-by: kfox1111 <[email protected]> Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: marcofranssen <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2023-12-07 22:47:38 +00:00
kfox1111	13f6028ccd	SELinux support (#122 ) * SELinux support Add support to the chart to set the SELinux context to enable a working system. Enable it by default on OpenShift clusters. Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>	2023-12-07 11:02:06 -08:00
kfox1111andFaisal Memon	3e8335c0ee	Add a flag to enable recommendations (#121 ) * Add a flag to enable recommendations Signed-off-by: Kevin Fox <[email protected]> * Fix merge issue Signed-off-by: Kevin Fox <[email protected]> * Update after reaching consensus. Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2023-12-02 05:15:32 -08:00
kfox1111andFaisal Memon	692d463718	Remove unneeded lookup function from upgrade hook (#104 ) Those upgrading to 0.17.0 should no longer need the code to check for the old webhook. Signed-off-by: Kevin Fox <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2023-12-01 10:49:29 -08:00
Andrew Block Mariusz Sabath kfox1111	8422b8d141	Added ability to create namespaces (#103 ) * Added ability to create namespaces Signed-off-by: Andrew Block <[email protected]> * Add openshift labels Signed-off-by: Mariusz Sabath <[email protected]> --------- Signed-off-by: Andrew Block <[email protected]> Signed-off-by: Mariusz Sabath <[email protected]> Co-authored-by: Mariusz Sabath <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2023-12-01 15:42:27 +00:00
Marco Franssenandkfox1111	78bb95ba35	Bump spire Helm Chart version from 0.15.1 to 0.16.0 * `b7d8590` Fix missing protocol in JWT Issuer (#120) * `1ef207c` Add note about supported version upgrades (#119) * `4281114` Fix missing release name from install documentation (#118) * `e030fa1` Allow additional CRs to be managed by the chart (#117) * `d936293` Enable agent to kubelet connection to use hostname (#112) * `e68f617` Bump test chart dependencies (#116) * `d616632` Bump spire version to 1.8.5 (#115) * `95e1eb7` Bump test chart dependencies * `966061c` Auto add default CSIDriver labels on OpenShift * `c9885de` Introduce ReadOnlyRootFilesystem for Tornjak frontend (#110) * `8107095` Fix typo ClusterSPIFFEID for workloadTSelectoremplates (#107) * `5c0ce97` Ordering of SecurityContextConstraint array items (#105) * `889d0af` Bump test chart dependencies * `f5d1376` Documentation cleanup (#97) Signed-off-by: Marco Franssen <[email protected]> Co-authored-by: kfox1111 <[email protected]>	2023-12-01 16:03:24 +01:00
Mariusz Sabath	b7d8590b77	Fix missing protocol in JWT Issuer (#120 ) * Add missing protocol to jwt_issuer Signed-off-by: Mariusz Sabath <[email protected]> * Removed trailing spaces Signed-off-by: Mariusz Sabath <[email protected]> --------- Signed-off-by: Mariusz Sabath <[email protected]>	2023-11-29 00:13:32 +00:00
Faisal Memon	1ef207c7b2	Add note about supported version upgrades (#119 ) Signed-off-by: Faisal Memon <[email protected]>	2023-11-28 22:01:16 +00:00
kfox1111	4281114b49	Fix missing release name from install documentation (#118 ) Signed-off-by: Kevin Fox <[email protected]>	2023-11-28 12:57:11 -08:00
kfox1111 Faisal Memon Marco Franssen	e030fa171b	Allow additional CRs to be managed by the chart (#117 ) * Add support for the new spire-controller-manager class feature Signed-off-by: Kevin Fox <[email protected]> * Fix docs. Swich nested deployment to use controller manager Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Test with nightly Signed-off-by: Kevin Fox <[email protected]> * Fix global object naming clash Signed-off-by: Kevin Fox <[email protected]> * Fix missing dot Signed-off-by: Kevin Fox <[email protected]> * Fix naming conflict with cluster ids Signed-off-by: Kevin Fox <[email protected]> * Fix scoping issue Signed-off-by: Kevin Fox <[email protected]> * Fix typo Signed-off-by: Kevin Fox <[email protected]> * Fix webhook name collision Signed-off-by: Kevin Fox <[email protected]> * Fix webhook reference and add note to user about className Signed-off-by: Kevin Fox <[email protected]> * Upgrade has to work on the old version of the object before rename Signed-off-by: Kevin Fox <[email protected]> * Fix formatting Signed-off-by: Kevin Fox <[email protected]> * Remove extra junk from job Signed-off-by: Kevin Fox <[email protected]> * Easier local runs and wait for crds Signed-off-by: Kevin Fox <[email protected]> * Add missing crd upgrade Signed-off-by: Kevin Fox <[email protected]> * Update upgrade notes Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/charts/spire-server/templates/controller-manager-cluster-ids.yaml Co-authored-by: Marco Franssen <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Bump version to the released 0.4.0 Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> * Merge in crd changes from upstream Signed-off-by: Kevin Fox <[email protected]> * Add auto populate dns Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Add missing ClusterSPIFFEID fields There are a few options in the CRD not available via the chart. Sync them to the chart. Signed-off-by: Kevin Fox <[email protected]> * Add another missing one Signed-off-by: Kevin Fox <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> * Allow additional CRs to be managed by the chart Sometimes additional ClusterSPIFFEIDs and the other CRs are needed. Add support for the end user to manage those extra CRs via the chart. Signed-off-by: Kevin Fox <[email protected]> * Add validation Signed-off-by: Kevin Fox <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> * Add className to crs Signed-off-by: Kevin Fox <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Fix readme formatting Signed-off-by: Kevin Fox <[email protected]> * Update charts/spire/README.md Signed-off-by: kfox1111 <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> * Remove dead code Signed-off-by: Kevin Fox <[email protected]> * Fix extra newline Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Marco Franssen <[email protected]> Co-authored-by: Faisal Memon <[email protected]>	2023-11-28 09:15:23 -08:00
kfox1111andMarco Franssen	d936293d50	Enable agent to kubelet connection to use hostname (#112 ) Co-authored-by: Marco Franssen <[email protected]>	2023-11-28 08:43:09 +01:00
github-actions[bot]andmarcofranssen	e68f6170a6	Bump test chart dependencies (#116 ) Signed-off-by: GitHub <[email protected]> Co-authored-by: marcofranssen <[email protected]>	2023-11-27 06:20:42 -08:00
kfox1111	d616632810	Bump spire version to 1.8.5 (#115 )	2023-11-24 09:32:27 -08:00
marcofranssen	95e1eb7c57	Bump test chart dependencies Signed-off-by: GitHub <[email protected]> Signed-off-by: Marco Franssen <[email protected]>	2023-11-20 10:34:08 +01:00
Kevin Fox	966061c6c7	Auto add default CSIDriver labels on OpenShift Signed-off-by: Kevin Fox <[email protected]>	2023-11-20 10:24:53 +01:00

... 2 3 4 5 6 ...