spire-0.7.0

A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager.

What's Changed

• Remove dead code by @kfox1111 in #217
• Change spire configmaps to yaml, rendered as json by @marcofranssen in #113
• Add k8s 1.27 to CI + bump other versions to latest patches by @marcofranssen in #219
• Move reusable macros to root chart by @kfox1111 in #218
• Add global for image registry by @kfox1111 in #201
• Add an action to find new versions of helm charts by @kfox1111 in #184
• Bump sigstore/cosign-installer from 3.0.2 to 3.0.3 by @dependabot in #241
• Add workflow with shellcheck to do some sanity checks on shell scripts by @marcofranssen in #242
• Add post-install scripts to all tests to capture failure details in GitHub workflow summary by @marcofranssen in #88
• Move check versions script + fix a bug by @marcofranssen in #237
• Add skipKubeletVerification configurable by @faisal-memon in #243
• Fix example production typos by @kfox1111 in #244
• Bump test chart dependencies by @github-actions in #252
• Bump peter-evans/create-pull-request from 5.0.0 to 5.0.1 by @dependabot in #253
• Allow trust bundle url to be set along with format by @kfox1111 in #256
• Add project overview. by @edwbuck in #258
• Bump test chart dependencies by @github-actions in #264
• Add Edwin Buck as a maintainer. by @edwbuck in #267
• External database configuration by @kfox1111 in #225
• Replicas > 1 is not allowed with sqlite driver by @kfox1111 in #269
• Add project glossary. by @edwbuck in #262
• Fix spacing for spire server service annotation by @faisal-memon in #273
• Allow for ConfigMaps to be annotated by @faisal-memon in #272
• Remove persistence.enabled flag by @faisal-memon in #274
• Include dependency values in documentation by @marcofranssen in #275
• Bump spire Helm Chart version from 0.6.3 to 0.7.0 by @marcofranssen in #278

New Contributors

• @github-actions made their first contribution in #252
• @edwbuck made their first contribution in #258

Full Changelog: spire-0.6.3...spire-0.7.0

spire-0.6.3

A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager.

What's Changed

• Update to the 1.6.3 spire release by @kfox1111 in #214
• Bump actions/checkout from 3.5.0 to 3.5.2 by @dependabot in #215
• Bump spire Helm Chart version from 0.6.2 to 0.6.3 by @marcofranssen in #216

Full Changelog: spire-0.6.2...spire-0.6.3

spire-0.6.2

A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager.

What's Changed

• Add before-hook-creation delete policy by @faisal-memon in #202
• Bump spire Helm Chart version from 0.6.1 to 0.6.2 by @marcofranssen in #205
• Bump sigstore/cosign-installer from 3.0.1 to 3.0.2 by @dependabot in #204
• Add Faisal Memon as maintainer to spire chart by @faisal-memon in #208

Full Changelog: spire-0.6.1...spire-0.6.2

spire-0.6.1

A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager.

What's Changed

• Fix trustDomain global for oidc discovery provider by @marcofranssen in #193
• Bump spire Helm Chart version from 0.6.0 to 0.6.1 by @marcofranssen in #194

Full Changelog: spire-0.6.0...spire-0.6.1

spire-0.6.0

A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager.

What's Changed

• Add option to enable federation on spire-server by @petercable in #97
• Remove @dennisgove from CODEOWNERS by @dennisgove in #140
• Resolve issue in prod example on volume mount by @marcofranssen in #143
• Fork the lockdown test to two tests as it is doing the work of 2 by @kfox1111 in #134
• Replace lockdown test with production-example test by @marcofranssen in #127
• Extract the namespace override test out of the old lockdown test. by @kfox1111 in #145
• Add maturity tag by @faisal-memon in #138
• Test fixing the tests by @kfox1111 in #148
• Add Artifact Hub badge to README.md by @marcofranssen in #159
• Bump spire version to 1.6.1 by @marcofranssen in #160
• Bump helm/chart-testing-action from 2.3.1 to 2.4.0 by @dependabot in #168
• Bump actions/checkout from 3.4.0 to 3.5.0 by @dependabot in #167
• Improve Spire Chart documentation by @marcofranssen in #161
• Fix formatting issues introduced with #152 by @marcofranssen in #169
• Add a test to ensure the chart versions match by @kfox1111 in #163
• Enhance the production example by @marcofranssen in #130
• Enable global config for clusterName, trustDomain, and bundleConfigMap by @kfox1111 in #156
• Switch test images to cgr.dev/chainguard images by @marcofranssen in #175
• Cleanup old leftover to k8s-workload-registrar by @marcofranssen in #185
• Switch tests to curl by @kfox1111 in #178
• Fix namespace-override github test summary by @kfox1111 in #154
• Test for configurable images by @kfox1111 in #182
• Make service dns domain configurable by @kfox1111 in #164
• Fix production example test by @kfox1111 in #183
• Add hooks to set failurepolicy to ignore on webhook by @faisal-memon in #128
• Add podmonitors by @kfox1111 in #165
• Bump spire Helm Chart version from 0.5.1 to 0.6.0 by @marcofranssen in #190

New Contributors

• @petercable made their first contribution in #97

Full Changelog: spire-0.5.1...spire-0.6.0

spire-0.5.1

A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager.

What's Changed

• Bump Spire to 1.6.1 @marcofranssen in #160
• Improve Chart documentation @marcofranssen in #161
• Bump spire Helm Chart version from 0.5.0 to 0.5.1 @marcofranssen in #173

Full Changelog: spire-0.5.0...spire-0.5.1

spire-0.5.0

A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager.

What's Changed

• Ensure CI also runs when test scripts are changed by @marcofranssen in #102
• Add kfox as a maintainer by @kfox1111 in #107
• Remove dead role code by @kfox1111 in #104
• Add tmp mount so that server can run locked down by @kfox1111 in #105
• Remove some duplication on chart-testing CI by @marcofranssen in #101
• Make the namespace the bundle is dropped into configurable by @kfox1111 in #93
• Enhance the test workflow scripts by @kfox1111 in #108
• Fix cluster role name uniqueness by @kfox1111 in #110
• Test that it is possible to lock down security of pods by @kfox1111 in #84
• Fix the gate by @kfox1111 in #112
• Fix the tests so they can run locked down. by @kfox1111 in #111
• Make csi driver configurable to be able to run multiple instances by @kfox1111 in #115
• Make the agent socket configurable by @kfox1111 in #114
• Namespace override by @kfox1111 in #99
• Improve Chart API by @marcofranssen in #119
• Fix the driver not coming up on overloaded nodes by @kfox1111 in #122
• Add documentation how to use Spire in own workloads by @marcofranssen in #120
• Remove dead file from failed rebase. by @kfox1111 in #121
• Make kubelet path configurable by @kfox1111 in #123
• Make webhook fail policy configurable by @kfox1111 in #124
• Bump actions/checkout from 3.3.0 to 3.4.0 by @dependabot in #129
• Add support for oidc-discovery-provider ingress by @kfox1111 in #60
• Bump spire Helm Chart version from 0.4.0 to 0.5.0 by @marcofranssen in #131

Full Changelog: spire-0.4.0...spire-0.5.0

spire-0.4.0

A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager.

What's Changed

• Better spire-server entry commands by @kfox1111 in #59
• Add beta note to readme by @faisal-memon in #62
• Use quote function instead of actual quotes by @faisal-memon in #71
• Fix sigstore/cosign-installer usage in release workflow by @marcofranssen in #73
• Add arm64 support to Helm chart by @marcofranssen in #74
• Bump sigstore/cosign-installer from 2.8.1 to 3.0.1 by @dependabot in #76
• Add k8s 1.26.0 (Kind) to the test matrix by @marcofranssen in #77
• Add extra initContainers, containers, volumes to agent and server by @kfox1111 in #67
• Make sure all configmap changes rollout by @kfox1111 in #81
• UpstreamAuthority cert-manager support by @kfox1111 in #82
• Fix sources in Chart.yaml by @kfox1111 in #85
• Fix Homepage URL by @marcofranssen in #87
• Switch to non root nginx by @kfox1111 in #89
• Allow all subchart to conditionally disable by @kfox1111 in #90
• Make spire agent server address configurable by @kfox1111 in #91
• Make server service account allow list configurable by @kfox1111 in #92
• Add a flag to configure the Kubernetes NodeAttestor by @kfox1111 in #83
• Add values for server TTL configurables by @marcofranssen in #94
• Allow to configure spire-server CA key type by @marcofranssen in #95
• Add script to automate cutting a release by @marcofranssen in #98

New Contributors

• @faisal-memon made their first contribution in #62

Full Changelog: spire-0.3.0...spire-0.4.0

spire-0.3.0

A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager.

What's Changed

• Only check for version bump if PR targets release branch by @marcofranssen in #33
• Clarify Chart version increments in CONTRIBUTING.md by @marcofranssen in #40
• Align healthz ports and checks across containers by @marcofranssen in #39
• Basic Prometheus support by @kfox1111 in #28
• Bump actions/checkout from 3.2.0 to 3.3.0 by @dependabot in #57
• Fix spire-controller-manager healthz port by @marcofranssen in #43
• Allow to configure a priorityClassName for Daemonsets by @marcofranssen in #58
• Switch hostpath to emptydir in spire-server by @kfox1111 in #65
• Bump spire chart to v0.3.0 by @marcofranssen in #64

Full Changelog: spire-0.2.0...spire-0.3.0

spire-0.2.0

A Helm chart for deploying the complete Spire stack including: spire-server, spire-agent, spiffe-csi-driver, spiffe-oidc-discovery-provider and spire-controller-manager.

What's Changed

• Fix workflow trigger path by @marcofranssen in #34
• Add category and license annotations for artifacthub by @marcofranssen in #32
• Add the option to disable unix workloadattestor by @kfox1111 in #26
• Test charts without defaulted values by @marcofranssen in #23

Full Changelog: spire-0.1.0...spire-0.2.0