* Implement easy Bottom Turtle HA support in the charts Signed-off-by: Kevin Fox <[email protected]> * Add diagram Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> * Some fixes and tightened defaults Signed-off-by: Kevin Fox <[email protected]> * More diagrams Signed-off-by: Kevin Fox <[email protected]> * More instructions Signed-off-by: Kevin Fox <[email protected]> * More instructions Signed-off-by: Kevin Fox <[email protected]> * More instructions Signed-off-by: Kevin Fox <[email protected]> * More instructions Signed-off-by: Kevin Fox <[email protected]> * More instructions Signed-off-by: Kevin Fox <[email protected]> * Install some bottom turtle spire bits Signed-off-by: Kevin Fox <[email protected]> * Trigger in github Signed-off-by: Kevin Fox <[email protected]> * Fix path Signed-off-by: Kevin Fox <[email protected]> * Fix path Signed-off-by: Kevin Fox <[email protected]> * Fix path Signed-off-by: Kevin Fox <[email protected]> * Fix path Signed-off-by: Kevin Fox <[email protected]> * Fix path Signed-off-by: Kevin Fox <[email protected]> * Fix path Signed-off-by: Kevin Fox <[email protected]> * Fix shell code Signed-off-by: Kevin Fox <[email protected]> * Add some more testing Signed-off-by: Kevin Fox <[email protected]> * Add some more testing Signed-off-by: Kevin Fox <[email protected]> * Add some more testing Signed-off-by: Kevin Fox <[email protected]> * Add some more debug logging Signed-off-by: Kevin Fox <[email protected]> * More logging Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * Some fixes Signed-off-by: Kevin Fox <[email protected]> * More updates Signed-off-by: Kevin Fox <[email protected]> * More updates Signed-off-by: Kevin Fox <[email protected]> * More updates Signed-off-by: Kevin Fox <[email protected]> * More updates Signed-off-by: Kevin Fox <[email protected]> * More updates Signed-off-by: Kevin Fox <[email protected]> * More updates Signed-off-by: Kevin Fox <[email protected]> * More updates Signed-off-by: Kevin Fox <[email protected]> * More updates Signed-off-by: Kevin Fox <[email protected]> * More updates Signed-off-by: Kevin Fox <[email protected]> * More updates Signed-off-by: Kevin Fox <[email protected]> * More updates Signed-off-by: Kevin Fox <[email protected]> * Add x509POP support and more testing Signed-off-by: Kevin Fox <[email protected]> * x509pop attestor support and more tests Signed-off-by: Kevin Fox <[email protected]> * More updates Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Fix pages artifact upload Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Test some more bits Signed-off-by: Kevin Fox <[email protected]> * Initial stab at dynamic registration Signed-off-by: Kevin Fox <[email protected]> * Dynamic registration working but not integrated with test Signed-off-by: Kevin Fox <[email protected]> * Wire in dynamic registration into the test Signed-off-by: Kevin Fox <[email protected]> * Fix missing props Signed-off-by: Kevin Fox <[email protected]> * Update the svids to align Signed-off-by: Kevin Fox <[email protected]> * Update the svids to align Signed-off-by: Kevin Fox <[email protected]> * Fix service name Signed-off-by: Kevin Fox <[email protected]> * Look at data Signed-off-by: Kevin Fox <[email protected]> * Look at data Signed-off-by: Kevin Fox <[email protected]> * Look at data Signed-off-by: Kevin Fox <[email protected]> * Fix ca type Signed-off-by: Kevin Fox <[email protected]> * Test out new packages Signed-off-by: Kevin Fox <[email protected]> * Test out new packages Signed-off-by: Kevin Fox <[email protected]> * Test out new packages Signed-off-by: Kevin Fox <[email protected]> * Test out new packages Signed-off-by: Kevin Fox <[email protected]> * Test out new packages Signed-off-by: Kevin Fox <[email protected]> * Test out new packages Signed-off-by: Kevin Fox <[email protected]> * Test out new packages Signed-off-by: Kevin Fox <[email protected]> * Test out new packages Signed-off-by: Kevin Fox <[email protected]> * Test out new packages Signed-off-by: Kevin Fox <[email protected]> * Test out new packages Signed-off-by: Kevin Fox <[email protected]> * Update ports Signed-off-by: Kevin Fox <[email protected]> * Update ports Signed-off-by: Kevin Fox <[email protected]> * Work on debugging dynamic registration some more Signed-off-by: Kevin Fox <[email protected]> * Fix service account name Signed-off-by: Kevin Fox <[email protected]> * Fix service account name Signed-off-by: Kevin Fox <[email protected]> * Working... Cleanup. Signed-off-by: Kevin Fox <[email protected]> * Working... Cleanup. Signed-off-by: Kevin Fox <[email protected]> * Fix broken ssh test Signed-off-by: Kevin Fox <[email protected]> * Fix broken ssh test Signed-off-by: Kevin Fox <[email protected]> * Simplify a bit Signed-off-by: Kevin Fox <[email protected]> * Update to use the released images Signed-off-by: Kevin Fox <[email protected]> * Allow x509POP cluster name adding Signed-off-by: Kevin Fox <[email protected]> * Restrict cluster registration Signed-off-by: Kevin Fox <[email protected]> * Fix var name Signed-off-by: Kevin Fox <[email protected]> * Fix missing slash Signed-off-by: Kevin Fox <[email protected]> * Make defaults work better Signed-off-by: Kevin Fox <[email protected]> * Make defaults work better Signed-off-by: Kevin Fox <[email protected]> * Fix readme Signed-off-by: Kevin Fox <[email protected]> * updated diagram Signed-off-by: Kevin Fox <[email protected]> * Regenerate image Signed-off-by: Kevin Fox <[email protected]> * Bump spire versions Signed-off-by: Kevin Fox <[email protected]> * Fix issues identified during review Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>
186 lines
5.9 KiB
YAML
186 lines
5.9 KiB
YAML
apiVersion: v2
|
|
name: spire-nested
|
|
description: >
|
|
A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager.
|
|
type: application
|
|
version: 0.28.5
|
|
appVersion: "1.15.1"
|
|
keywords: ["spiffe", "spire", "spire-server", "spire-agent", "oidc", "spire-controller-manager"]
|
|
home: https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire
|
|
sources:
|
|
- https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire
|
|
icon: https://spiffe.io/img/logos/spire/icon/color/spire-icon-color.png
|
|
maintainers:
|
|
- name: marcofranssen
|
|
email: [email protected]
|
|
url: https://marcofranssen.nl
|
|
- name: kfox1111
|
|
email: [email protected]
|
|
- name: faisal-memon
|
|
email: [email protected]
|
|
kubeVersion: ">=1.21.0-0"
|
|
dependencies:
|
|
- name: spire-lib
|
|
repository: file://../spire-lib
|
|
version: 0.1.0
|
|
- name: spire-server
|
|
alias: root-spire-server
|
|
condition: root-spire-server.enabled
|
|
tags:
|
|
- nestedRoot
|
|
repository: file://../spire/charts/spire-server
|
|
version: 0.1.0
|
|
- name: spire-server
|
|
alias: external-root-spire-server-full
|
|
condition: external-root-spire-server-full.enabled
|
|
tags:
|
|
- nestedChildFull
|
|
repository: file://../spire/charts/spire-server
|
|
version: 0.1.0
|
|
- name: spire-server
|
|
alias: external-root-spire-server-security
|
|
condition: external-root-spire-server-security.enabled
|
|
tags:
|
|
- nestedChildSecurity
|
|
repository: file://../spire/charts/spire-server
|
|
version: 0.1.0
|
|
- name: spire-server
|
|
alias: internal-spire-server
|
|
condition: internal-spire-server.enabled
|
|
tags:
|
|
- nestedRoot
|
|
- nestedChildFull
|
|
repository: file://../spire/charts/spire-server
|
|
version: 0.1.0
|
|
- name: spire-server
|
|
alias: external-spire-server
|
|
condition: external-spire-server.enabled
|
|
tags:
|
|
- nestedRoot
|
|
repository: file://../spire/charts/spire-server
|
|
version: 0.1.0
|
|
- name: spire-agent
|
|
alias: downstream-spire-agent-full
|
|
condition: downstream-spire-agent-full.enabled
|
|
tags:
|
|
- nestedRoot
|
|
- nestedChildFull
|
|
repository: file://../spire/charts/spire-agent
|
|
version: 0.1.0
|
|
- name: spire-agent
|
|
alias: downstream-spire-agent-security
|
|
condition: downstream-spire-agent-security.enabled
|
|
tags:
|
|
- nestedChildSecurity
|
|
repository: file://../spire/charts/spire-agent
|
|
version: 0.1.0
|
|
- name: spire-agent
|
|
alias: upstream-spire-agent
|
|
condition: upstream-spire-agent.enabled
|
|
tags:
|
|
- nestedRoot
|
|
- nestedChildFull
|
|
repository: file://../spire/charts/spire-agent
|
|
version: 0.1.0
|
|
- name: spiffe-csi-driver
|
|
alias: downstream-spiffe-csi-driver
|
|
condition: downstream-spiffe-csi-driver.enabled
|
|
tags:
|
|
- nestedRoot
|
|
- nestedChildFull
|
|
- nestedChildSecurity
|
|
repository: file://../spire/charts/spiffe-csi-driver
|
|
version: 0.1.0
|
|
- name: spiffe-csi-driver
|
|
alias: upstream-spiffe-csi-driver
|
|
condition: upstream-spiffe-csi-driver.enabled
|
|
tags:
|
|
- nestedRoot
|
|
- nestedChildFull
|
|
repository: file://../spire/charts/spiffe-csi-driver
|
|
version: 0.1.0
|
|
- name: spiffe-oidc-discovery-provider
|
|
condition: spiffe-oidc-discovery-provider.enabled
|
|
tags:
|
|
- nestedRoot
|
|
- nestedChildFull
|
|
- nestedChildSecurity
|
|
- haAgentCommon
|
|
repository: file://../spire/charts/spiffe-oidc-discovery-provider
|
|
version: 0.1.0
|
|
- name: tornjak-frontend
|
|
condition: tornjak-frontend.enabled
|
|
repository: file://../spire/charts/tornjak-frontend
|
|
version: 0.1.0
|
|
- name: spiffe-csi-driver
|
|
repository: file://../spire/charts/spiffe-csi-driver
|
|
version: 0.1.0
|
|
condition: spiffe-csi-driver.enabled
|
|
tags:
|
|
- haAgentCommon
|
|
- name: spire-ha-agent
|
|
repository: file://../spire-ha-agent
|
|
version: 0.1.0
|
|
condition: spire-ha-agent.enabled
|
|
tags:
|
|
- haAgentCommon
|
|
- name: spire-server
|
|
alias: internal-spire-server-bottom-turtle-ha-a
|
|
condition: internal-spire-server-bottom-turtle-ha-a.enabled
|
|
tags:
|
|
- bottomTurtleHAA
|
|
repository: file://../spire/charts/spire-server
|
|
version: 0.1.0
|
|
- name: spire-agent
|
|
alias: downstream-spire-agent-bottom-turtle-ha-a
|
|
condition: downstream-spire-agent-bottom-turtle-ha-a.enabled
|
|
tags:
|
|
- bottomTurtleHAA
|
|
repository: file://../spire/charts/spire-agent
|
|
version: 0.1.0
|
|
- name: spiffe-csi-driver
|
|
alias: downstream-spiffe-csi-driver-bottom-turtle-ha-a
|
|
condition: downstream-spiffe-csi-driver-bottom-turtle-ha-a.enabled
|
|
tags:
|
|
- bottomTurtleHAA
|
|
repository: file://../spire/charts/spiffe-csi-driver
|
|
version: 0.1.0
|
|
- name: spiffe-csi-driver
|
|
alias: upstream-spiffe-csi-driver-bottom-turtle-ha-a
|
|
condition: upstream-spiffe-csi-driver-bottom-turtle-ha-a.enabled
|
|
tags:
|
|
- bottomTurtleHAA
|
|
repository: file://../spire/charts/spiffe-csi-driver
|
|
version: 0.1.0
|
|
- name: spire-server
|
|
alias: internal-spire-server-bottom-turtle-ha-b
|
|
condition: internal-spire-server-bottom-turtle-ha-b.enabled
|
|
tags:
|
|
- bottomTurtleHAB
|
|
repository: file://../spire/charts/spire-server
|
|
version: 0.1.0
|
|
- name: spire-agent
|
|
alias: downstream-spire-agent-bottom-turtle-ha-b
|
|
condition: downstream-spire-agent-bottom-turtle-ha-b.enabled
|
|
tags:
|
|
- bottomTurtleHAB
|
|
repository: file://../spire/charts/spire-agent
|
|
version: 0.1.0
|
|
- name: spiffe-csi-driver
|
|
alias: downstream-spiffe-csi-driver-bottom-turtle-ha-b
|
|
condition: downstream-spiffe-csi-driver-bottom-turtle-ha-b.enabled
|
|
tags:
|
|
- bottomTurtleHAB
|
|
repository: file://../spire/charts/spiffe-csi-driver
|
|
version: 0.1.0
|
|
- name: spiffe-csi-driver
|
|
alias: upstream-spiffe-csi-driver-bottom-turtle-ha-b
|
|
condition: upstream-spiffe-csi-driver-bottom-turtle-ha-b.enabled
|
|
tags:
|
|
- bottomTurtleHAB
|
|
repository: file://../spire/charts/spiffe-csi-driver
|
|
version: 0.1.0
|
|
annotations:
|
|
artifacthub.io/category: security
|
|
artifacthub.io/license: Apache-2.0
|