Marco Franssen
8c5643b5f7
Please review the below changelog to ensure this matches up with the semantic version being applied. > **Note**: **Maintainers** ensure to run following after merging this PR to trigger the release workflow: > > ```shell > git checkout main > git pull > git checkout release > git pull > git merge main > git push > ``` **Changes in this release** *65312f85Include dependency values in documentation (#275) *5489212bRemove persistence.enabled flag (#274) *b3153242Allow for ConfigMaps to be annotated (#272) *013eb617Fix spacing for spire server service annotation (#273) *73435be9Add project glossary. (#262) *c4656a74Replicas > 1 is not allowed with sqlite driver (#269) *d3da3eedExternal database configuration (#225) *ce78bea1Add Edwin Buck as a maintainer. (#267) *1f09d7b3Bump test chart dependencies (#264) *aa6b40c0Add project overview. (#258) *8e7e6ebcAllow trust bundle url to be set along with format (#256) *1e09ea54Bump peter-evans/create-pull-request from 5.0.0 to 5.0.1 (#253) *6760cd22Bump test chart dependencies (#252) *61e338dfFix example production typos (#244) *3d81928fAdd skipKubeletVerification configurable (#243) *46f10e1dMerge pull request #237 from spiffe/fix-check-versions *3889d22eFix quotation bug in update-version.sh *6a894e8cMove update-versions.sh script *91083a6bAdd post-install scripts to all tests to capture failure details in GitHub workflow summary (#88) *9afb6f80Merge pull request #242 from spiffe/shellcheck *99af475fResolve shellcheck issues *d0a1e128Add workflow with shellcheck *8abd75efMerge pull request #241 from spiffe/dependabot/github_actions/sigstore/cosign-installer-3.0.3 *252f1f5aBump cosign to v2.0.2 *247e3e5dBump sigstore/cosign-installer from 3.0.2 to 3.0.3 *17d62f12Add an action to find new versions of helm charts (#184) *2c360a50Add global for image registry (#201) *3cc89554Move reusable macros to root chart (#218) *3fc81780Add k8s 1.27 to CI + bump other versions to latest patches (#219) *6b617440Merge pull request #113 from spiffe/spire-config-as-yaml-converted-json *9e03f297Merge branch 'main' into spire-config-as-yaml-converted-json *210ed02cRemove dead code (#217) *e3b0d00bBump min required spire 1.6.x version for this chart *d7dcfeb6Change spiffe-oidc-provider-config configmap to yaml format *861108c0Change spire-agent configmap to yaml format *1d72b572Change spire-server configmap to yaml format Signed-off-by: Marco Franssen <[email protected]>
Note
: All the helm charts in this repo are beta. We encourage you to try them out and contribute. The API may change as we move towards a production ready release.
SPIFFE Helm Charts
A suite of Helm Charts for standardized installations of SPIRE components in Kubernetes environments.
Add Helm repository
helm repo add spiffe https://spiffe.github.io/helm-charts/
helm repo update
Dependencies and Version Compatibility
Unless otherwise noted in an application chart README, the following dependencies will follow these prescribed version compatibility rules.
| Dependency | Supported Versions |
|---|---|
| SPIRE | 1.5.3+, 1.6.x |
| Helm | 3.x |
| Kubernetes | 1.21+ |
Note
: For Kubernetes, we will officially support the last 3 versions as described in k8s versioning. Any version before the last 3 we will try to support as long it doesn't bring security issues or any big maintenance burden. The first version we tested this chart with is
1.21.
Contributing
Before contributing ensure to check our CONTRIBUTING guidelines.
LICENSE
This project is licensed under Apache License, Version 2.0.
Reporting a Vulnerability
Vulnerabilities can be reported by sending an email to [email protected]. A confirmation email will be sent to acknowledge the report within 72 hours. A second acknowledgement will be sent within 7 days when the vulnerability has been positively or negatively confirmed.