helm-charts
helm-charts copied to clipboard
spiffe
Helm charts for SPIRE and other SPIFFE components.
There does not appear to be a nice way to configure the oidc discovery provider in such a way as the ACME support built in is usable. We need to...
See here, Release.Name is used to name the service https://github.com/spiffe/helm-charts/blob/main/charts/spire/charts/spire-server/templates/service.yaml#L4 However, service agent is suffixing -server, so it tries to connect to `{{ .Release.Name }}-server` which doesn't exist https://github.com/spiffe/helm-charts/blob/main/charts/spire/charts/spire-agent/templates/_helpers.tpl#L97
We have config to editors to try and ensure formatting issues don't come into the tree. But it seems like it can happen anyway. We need a blocking test to...
It would be very useful to demonstrate how we can start a workload that can obtain its own identity from SPIRE Agent using CSI driver
When creating automated PRs from the cron jobs that checks versions, the tests arent being run automatically. We have to push a commit to the branch to force the tests...
To prepare for #209 we should change the socket mount paths to default to the paths images are configured for. See https://github.com/spiffe/spire/blob/main/Dockerfile#L33-L54 for the various paths in the images that...
See https://github.com/spiffe/spire/blob/main/doc/spire_server.md#server-configuration-file Would be great if we somehow can configure the admin_ids. E.g. via spire-controller-manager CRDs? Maybe as a separate Helm chart to provision admin_ids CRDs so we can configure...
We need to evaluate what barriers and solutions might be possible to convert the Server deployments from K8s StatefulSets to K8s Deployments. If we can find a way to prefer...
The post-upgrade, pre-delete, etc hooks have a lot of duplication in them. Switch to using templates to reduce duplication.
The PR #319 overrides the Tornjak frontend command to address an immediate problem. This is not necessary if it's fixed directly inside the image. Once the Tornjak frontend image is...