*c1c5b112Merge pull request #306 from spiffe/remove-1.21 *0df45e3cFix up docs *ed038feaUpgrade to spire 1.6.4 (#308) *dc5d9cfeFix root README.md *e4447fd8Upgrade Tornjak to new image v1.2.1 (#299) *69f402ecUpdate docs *38d51d59Apply suggestions from code review *a1ba235cUpdate docs *1922085bFix hooks for K3s (#305) *4fb549e9Remove 1.21.x testing *88efc77bAllow to use spire-server as an upstream authority (#304) *0ba03880Add support for spire-server ingress (#68) *4777a300Bump test chart dependencies (#301) *00c2c1a5Fix the generated pr so that it runs jobs too (#303) *dd1ad495Update images for cve's found by the cronjob (#290) *1c694707Updated Tornjak documenation with Not-for-production labels (#297) *78096374Merge pull request #296 from spiffe/dependabot/github_actions/helm/kind-action-1.7.0 *e61ed17bMerge pull request #295 from spiffe/dependabot/github_actions/sigstore/cosign-installer-3.0.5 *9975e58fMerge pull request #245 from spiffe/tags *7bb7ece1Bump helm/kind-action from 1.6.0 to 1.7.0 *f1623a59Bump sigstore/cosign-installer from 3.0.4 to 3.0.5 *f8db5a31Fix Tornjak persistence issue (#294) *b30b412eTornjak reuse spire-lib.cluster-domain macro (#292) *90c9eb50Fix kubectl-image macro to handle version deprecation *300d1ccfApply deprecation of image.version to Tornjak *d8504864Instead of removing version, first deprecate version *59e422b9Add documentation for all image.tag values *d1f3cdb9Switch image.version to image.tag *31ce704fCleanup maintainer handbook (#287) *a2da9437Remove manual dispatch from dummy workflow (#288) *807558bbBump helm/kind-action from 1.5.0 to 1.6.0 (#285) *3df67dbbBump sigstore/cosign-installer from 3.0.3 to 3.0.4 (#286) *5505d41dMerge pull request #283 from spiffe/additional-k8s-native-feature-tornjak-frontend *391f093aAllow to configure topologySpreadConstraints for tornjak-frontend *5cc26d31Allow to configure tolerations for tornjak-frontend *3537161cAllow to configure affinity for tornjak-frontend *aed6fdfeUse the correct kubectl for the cluster (#248) *ee43c5e3Add nodeSelector for tornjak *fc13cbd9Merge pull request #234 from spiffe/tornjak *ed472aa9Update documentation *a11cfc99Allow to define the resources for tornjak backend *382e0d4aUpgrade Tornjak image to version v1.2.0 (#259) *657c460eUpdate charts/spire/charts/tornjak-frontend/templates/service.yaml *7521cafcUpdate charts/spire/charts/spire-server/templates/tornjak-config.yaml *b64c352bUpdate charts/spire/charts/spire-server/templates/tests/test-tornjak-connection.yaml *6ddf6ab9Improve tornjak docs (#276) *80d34f04Use common post-install scripts for testing *f5efa0ceRemove dead macros *bd86518aFixing shellcheck *91bdea2aProvide minimal resources to prevent accidental crashes due to resource exhaustion *16759977Tornjak global image fix (#228) *5e827ee4Add Tornjak Tests (#220) *bdba97b6Add empty directory to Tornjak to support npm cache (#224) *da186c5fSplit Tornjak Frontend into separate subchart (#179) *6d221263Add Tornjak *2669d8b5Add maintainer's handbook. (#265) *72596aeaSkip tests for docs folders (#281) *7c71738dBump test chart dependencies (#279) *05addae9Add json to test path (#280) *8d9b7349Switch the spire tests to always run (#250) Signed-off-by: Marco Franssen <[email protected]>
Note
: All the helm charts in this repo are beta. We encourage you to try them out and contribute. The API may change as we move towards a production ready release.
SPIFFE Helm Charts
A suite of Helm Charts for standardized installations of SPIRE components in Kubernetes environments.
Add Helm repository
helm repo add spiffe https://spiffe.github.io/helm-charts/
helm repo update
Dependencies and Version Compatibility
Unless otherwise noted in an application chart README, the following dependencies will follow these prescribed version compatibility rules.
| Dependency | Supported Versions |
|---|---|
| SPIRE | 1.5.3+, 1.6.x |
| Helm | 3.x |
| Kubernetes | 1.22+ |
Note
: For Kubernetes, we will officially support the last 3 versions as described in k8s versioning. Any version before the last 3 we will try to support as long it doesn't bring security issues or any big maintenance burden. The first version we tested this chart with is
1.22.
Contributing
Before contributing ensure to check our CONTRIBUTING guidelines.
LICENSE
This project is licensed under Apache License, Version 2.0.
Reporting a Vulnerability
Vulnerabilities can be reported by sending an email to [email protected]. A confirmation email will be sent to acknowledge the report within 72 hours. A second acknowledgement will be sent within 7 days when the vulnerability has been positively or negatively confirmed.