Rowan Ruselerandkfox1111
e849a1fbd6
* Add configurable hostNetwork parameter for spire-agent Adds `hostNetwork` as a configurable parameter in the spire-agent chart. We can now explicitly control whether the spire-agent daemonset uses host networking. Changes: * Updated daemonset template * Changed `dnsPolicy` logic to follow the computed `hostNetwork` instead of kubelet mode directly * Updated documentation Behaviour: If you leave `hostNetwork` empty (the default), it behaves like PR #705: * automatically disables when using hostname or hostip kubelet modes * automatically enables for localhost If you set it explicitly to `true` or `false`, that overrides the automatic behaviour. When `hostNetwork` is enabled and you haven't set a custom `dnsPolicy`, it defaults to `ClusterFirstWithHostNet`. Fixes #704 Signed-off-by: Rowan Ruseler <[email protected]> * Fix merge conflict, different default value for fsGroupFix.image.tag Signed-off-by: Rowan Ruseler <[email protected]> --------- Signed-off-by: Rowan Ruseler <[email protected]> Co-authored-by: kfox1111 <[email protected]>
Note
Things to consider:
- We do not support running out of the git main branch. This is where development happens. Please use released versions via the published repo or git tags.
- All the helm charts in this repo are beta. We encourage you to try them out and contribute. The API may change as we move towards a production ready release.
SPIFFE Helm Charts
A suite of Helm Charts for standardized installations of SPIRE components in Kubernetes environments.
How to install or upgrade
You most likely want to do an integrated setup based on the spire chart. See the Instructions.
Contributing
Before contributing ensure to check our CONTRIBUTING guidelines.
LICENSE
This project is licensed under Apache License, Version 2.0.
Reporting a Vulnerability
Vulnerabilities can be reported by sending an email to [email protected]. A confirmation email will be sent to acknowledge the report within 72 hours. A second acknowledgement will be sent within 7 days when the vulnerability has been positively or negatively confirmed.