spire-0.10.0

A Helm chart for deploying spire-server and spire-agent.

⚠️ Please note this chart requires Projected Service Account Tokens which has to be enabled on your k8s api server.
⚠️ Minimum Spire version is v1.0.2.

To enable Projected Service Account Tokens on Docker for Mac/Windows run the following command to SSH into the Docker Desktop K8s VM.

docker run -it --privileged --pid=host debian nsenter -t 1 -m -u -n -i sh

Then add the following to /etc/kubernetes/manifests/kube-apiserver.yaml

spec:
   containers:
     - command:
          - kube-apiserver
          - --api-audiences=api,spire-server
          - --service-account-issuer=api,spire-agent
          - --service-account-key-file=/run/config/pki/sa.pub
          - --service-account-signing-key-file=/run/config/pki/sa.key

What's Changed

• Make dynamic tests matrix by finding all test folders by @marcofranssen in #106
• Move the different components into subcharts by @marcofranssen in #91
  • Move oidc-discovery-provider into subchart by @marcofranssen in #90
  • Move spire-agent into subchart by @marcofranssen in #93
  • Move spire-server into subcharts by @marcofranssen in #94
  • Cleanup after moving components to subcharts by @marcofranssen in #95

Full Changelog: spire-0.9.0...spire-0.10.0