Enable CA settings via global #268
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Adds a global.spire.caSubject section where you can set the CA subject information for all spire-server instances. Signed-off-by: Kevin Fox <Kevin.Fox@pnnl.gov>
kfox1111
requested review from
marcofranssen,
dfeldman,
faisal-memon and
mrsabath
as code owners
faisal-memon
approved these changes
Feb 28, 2024
faisal-memon
added a commit
that referenced
this pull request
Mar 4, 2024
* 5849ea2 add pod labels to spire server values (#271) * f512b06 Configurable daemonsets updateStrategy (#212) * a539065 Add direct tpm support for spire-agent (#216) * fcd0c11 Add direct tpm support for spire-server (#211) * c570174 Enable CA settings via global (#268) * ac83694 Initial SPIRE 1.9.0 support (#262) * ddb4eff Bump test chart dependencies (#263) * bfbafbc Fix OpenShift Federation Ingress bug (#260) * a0baace Upgrade to spire-controller-manager 0.4.3 (#258) * 1446f7e Add support for specifying agent authorized_delegates (#255) * 0b6cd88 Add support for specifying server admin_ids (#254) * 07a1c39 Add global override for kubectl tag (#251) * b82a84d Bump test chart dependencies (#252) * 7a1e731 Bump test chart dependencies (#246) * a706063 make audit_log_enabled configurable (#241) * 34a39cb Added emptyDir volume to spire-agent SCC (#243) * a2e5a4e Add support for enabling the spire-agent admin socket (#234) * febdcbf Fix whitespace in spire-agent daemonset Signed-off-by: Faisal Memon <fymemon@yahoo.com>
faisal-memon
added a commit
that referenced
this pull request
Mar 4, 2024
* beda725 Add pod labels to the SPIRE agent (#273) * 077f152 Bump test chart dependencies (#272) * 5849ea2 add pod labels to spire server values (#271) * f512b06 Configurable daemonsets updateStrategy (#212) * a539065 Add direct tpm support for spire-agent (#216) * fcd0c11 Add direct tpm support for spire-server (#211) * c570174 Enable CA settings via global (#268) * ac83694 Initial SPIRE 1.9.0 support (#262) * ddb4eff Bump test chart dependencies (#263) * bfbafbc Fix OpenShift Federation Ingress bug (#260) * a0baace Upgrade to spire-controller-manager 0.4.3 (#258) * 1446f7e Add support for specifying agent authorized_delegates (#255) * 0b6cd88 Add support for specifying server admin_ids (#254) * 07a1c39 Add global override for kubectl tag (#251) * b82a84d Bump test chart dependencies (#252) * 7a1e731 Bump test chart dependencies (#246) * a706063 make audit_log_enabled configurable (#241) * 34a39cb Added emptyDir volume to spire-agent SCC (#243) * a2e5a4e Add support for enabling the spire-agent admin socket (#234) * febdcbf Fix whitespace in spire-agent daemonset Signed-off-by: Faisal Memon <fymemon@yahoo.com>
faisal-memon
added a commit
that referenced
this pull request
Mar 4, 2024
* beda725 Add pod labels to the SPIRE agent (#273) * 077f152 Bump test chart dependencies (#272) * 5849ea2 add pod labels to spire server values (#271) * f512b06 Configurable daemonsets updateStrategy (#212) * a539065 Add direct tpm support for spire-agent (#216) * fcd0c11 Add direct tpm support for spire-server (#211) * c570174 Enable CA settings via global (#268) * ac83694 Initial SPIRE 1.9.0 support (#262) * ddb4eff Bump test chart dependencies (#263) * bfbafbc Fix OpenShift Federation Ingress bug (#260) * a0baace Upgrade to spire-controller-manager 0.4.3 (#258) * 1446f7e Add support for specifying agent authorized_delegates (#255) * 0b6cd88 Add support for specifying server admin_ids (#254) * 07a1c39 Add global override for kubectl tag (#251) * b82a84d Bump test chart dependencies (#252) * 7a1e731 Bump test chart dependencies (#246) * a706063 make audit_log_enabled configurable (#241) * 34a39cb Added emptyDir volume to spire-agent SCC (#243) * a2e5a4e Add support for enabling the spire-agent admin socket (#234) * febdcbf Fix whitespace in spire-agent daemonset Signed-off-by: Faisal Memon <fymemon@yahoo.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Adds a global.spire.caSubject section where you can set the CA subject information for all spire-server instances.