Marco Franssen
8e9d42acf7
Please review the below changelog to ensure this matches up with the semantic version being applied. > **Note**: **Maintainers** ensure to run following after merging this PR to trigger the release workflow: > > ```shell > git checkout main > git pull > git checkout release > git pull > git merge main > git push > ``` **Changes in this release** *5e2e8a91Adds AWS KMS KeyManager support (#435) *77fe43f3Cron job to check for and update images (#249) *b7e15255Allow job hooks to be disabled (#434) *5e4cf6f5Clarify project issues identified with nesting document (#450) *72893515Update spire bits to 1.7.2 (#452) *dc8a4545Array spacing in values is incorrect in a file. (#451) *94326d9cFixup Helm docs *ae8941c4Support Nested Spire with External Agent (#117) *f40743d4Improve Tornjak documentation (#439) *0124f633Bypass example-test for docs only changes (#449) *48a28980Fix chainguard image references as per issue 442 (#443) *bd393e95Bump test chart dependencies (#445) *a52818a7Add a FAQ and switch rare issue from README to it (#437) *e60f5287option to set KeyManager memory in spire server (#444) *a167ce68Bump actions/setup-go from 4.0.1 to 4.1.0 *e774584cBump test chart dependencies (#426) *bfec27efFix jwtIssuer to allow for Uris including scheme (#425) *7a6e4f8dChange Tornjak backend default port (#436) *1e3039ccBump spire Helm Chart version from 0.11.0 to 0.11.1 (#419) *d2e16062issuer naming should respect issuer_name override (#378) *a2e5c36cBump test chart dependencies (#416) *a09e054dsupport annotations so oidc can be annotated (#391) *7d94b105Update spire to 1.7.1 (#412) *9f4d4aceAdd aws_pca to the spire-server (#404) *af13f1fcBump test chart dependencies (#401) *9a6768bcAdd support for disabling container selectors (#399) *4687e20dMerge pull request #315 from spiffe/persistence-type *e16210c6Merge branch 'main' into persistence-type *624ca9ccRemove misadded lockfile (#400) *7ce67c62Bump actions/checkout from 3.5.2 to 3.5.3 (#395) *b85ba64dBump helm/kind-action from 1.7.0 to 1.8.0 (#396) *a6bdb4d1Add persistence type flag Signed-off-by: Marco Franssen <[email protected]>
Note
: All the helm charts in this repo are beta. We encourage you to try them out and contribute. The API may change as we move towards a production ready release.
SPIFFE Helm Charts
A suite of Helm Charts for standardized installations of SPIRE components in Kubernetes environments.
Add Helm repository
helm repo add spiffe https://spiffe.github.io/helm-charts/
helm repo update
Dependencies and Version Compatibility
Unless otherwise noted in an application chart README, the following dependencies will follow these prescribed version compatibility rules.
| Dependency | Supported Versions |
|---|---|
| SPIRE | 1.6.x, 1.7.x |
| Helm | 3.x |
| Kubernetes | 1.22+ |
Note
: For Kubernetes, we will officially support the last 3 versions as described in k8s versioning. Any version before the last 3 we will try to support as long it doesn't bring security issues or any big maintenance burden. The first version we tested this chart with is
1.22.
Contributing
Before contributing ensure to check our CONTRIBUTING guidelines.
LICENSE
This project is licensed under Apache License, Version 2.0.
Reporting a Vulnerability
Vulnerabilities can be reported by sending an email to [email protected]. A confirmation email will be sent to acknowledge the report within 72 hours. A second acknowledgement will be sent within 7 days when the vulnerability has been positively or negatively confirmed.