35 Commits
Author SHA1 Message Date
Matt Farina a6611b9439 [stable/sealed-secrets] deprecating chart (#24388)
Signed-off-by: Matt Farina <matt@mattfarina.com>
2020-11-13 15:35:45 -05:00
Scott Rigby 39a49fde32 [stable/sealed-secrets] add repo archive notice (#24186)
Signed-off-by: Scott Rigby <scott@r6by.com>
2020-11-09 14:33:16 -08:00
Tomasz Skręt 1985f27e8e Upgrade version of sealed-secrets to v0.13.1 (#23975)
Signed-off-by: Tomasz Skręt <tomasz@appmarket.pl>
2020-10-30 12:36:49 -07:00
Kaden Nelson 0c09313357 Update sealed-secrets (#23936)
- Added more comments in values.yaml
- Add labels + namespaces fields for dashboards value
- Added newline to the end of dashboard json
- configmap for dashboards now dynamically loads from `./dashboards`

inspiration: https://github.com/fluxcd/flux/blob/master/chart/flux/templates/configmap-dashboards.yaml

Signed-off-by: Kaden L. Nelson <kadenlnelson@gmail.com>
2020-10-27 09:40:00 -07:00
Christian Groschupp fbbd60f4d6 [stable/sealed-secrets] update version to 0.12.4 (#23076)
Signed-off-by: Christian Groschupp <christian@groschupp.org>
2020-07-06 01:46:51 -07:00
Jorge Tudela 9cea8c15f1 stable/sealed-secrets: Fallback to Helm .Release.Namespace when .Values.namespace not defined. (#22722)
Signed-off-by: Jorge Tudela <jtudelag@redhat.com>
2020-06-15 22:52:04 -07:00
Erik Lund Jensen 08f8e76680 [Sealed secrets/optional] runAs and fsGroup have to be optional (#22369)
* #22367 stable/sealed-secrets RunAs in securityContext must be optional (OpenShift related)

Only set runAsUser and fsGroup if set.
Thereby it is possible to clear those values and deploy at OpenShift without any extra SCC changes.

Signed-off-by: Erik Lund Jensen <info@erikjensen.it>

* #22367 stable/sealed-secrets RunAs in securityContext must be optional

fixes #22367

Signed-off-by: Erik Lund Jensen <info@erikjensen.it>

* Bump chart version

fixes #22369

Signed-off-by: Erik Lund Jensen <info@erikjensen.it>

* Using fsGroup value from supplied values

fixes #22369

Signed-off-by: Erik Lund Jensen <info@erikjensen.it>
2020-05-13 01:50:26 -07:00
Bruno M. Custódio db1874e230 [stable/sealed-secrets] Do not set port names. (#22097)
Signed-off-by: Bruno Miguel Custódio <brunomcustodio@gmail.com>
2020-05-03 03:14:26 -07:00
LucasBoisserie efd0f2cfa4 [stable/sealed-secrets]feat: Update to 0.12.2 (#21966)
* feat: Update to 0.12.2

Signed-off-by: LucasBoisserie <lucas.boisserie@gmail.com>

* missing readme

Signed-off-by: LucasBoisserie <lucas.boisserie@gmail.com>
2020-04-16 09:04:46 -07:00
David J. M. Karlsen 472bd92930 [stable/sealed-secrets] Upgrade to v0.10.0 (#21238)
Signed-off-by: David Karlsen <david@davidkarlsen.com>
2020-03-04 00:55:47 -08:00
Joffrey Janiec 6e2d30f294 [stable/sealed-secrets] Add podLabels support (#21083)
Signed-off-by: Joffrey Janiec <jjaniec@student.42.fr>
2020-03-02 09:24:43 -08:00
Christian Tortorich 4f4fc0213a update PSP.yaml to reflect API changes in 1.16 (#20854)
update psp.yaml and update chart version

Signed-off-by: bit-herder <chris.tortorich@gmail.com>
2020-02-18 08:45:29 -08:00
Benedict Hartley b126482a39 [stable/sealed-secrets] Add priorityClassName to sealed-secrets (#20690)
* Add priorityClassName to sealed-secrets

Signed-off-by: Benedict Hartley <spam@chaffin.ch>

* Add values.priorityClassName to sealed-secrets README

Signed-off-by: Benedict Hartley <spam@chaffin.ch>

* Bump chart version for sealed-secrets

Signed-off-by: Benedict Hartley <spam@chaffin.ch>
2020-02-11 10:41:53 -08:00
Jeff Thompson a44c2c467a add securityContext.fsGroup to pod spec (#20655)
Signed-off-by: Jeff Thompson <jeff.r.thompson@gmail.com>
2020-02-11 01:52:00 -08:00
Jeff Thompson 98a9b16a47 Updated tags from v0.9.6 to v0.9.7 (#20654)
Signed-off-by: Jeff Thompson <jeff.r.thompson@gmail.com>
2020-02-11 01:06:01 -08:00
Bruno M. Custódio 53abaeae29 [stable/sealed-secrets] Support specifying pod annotations. (#20580)
Signed-off-by: Bruno Miguel Custódio <brunomcustodio@gmail.com>
2020-02-06 13:05:26 -08:00
Marco Kilchhofer f2ff7a3164 [stable/sealed-secrets] Update README (#20253)
* Add missing documentation in README.md

In PR #20251, I forgot to commit the updated README.md

Signed-off-by: Marco Kilchhofer <marco@kilchhofer.info>

* Add missing default value to README

Signed-off-by: Marco Kilchhofer <marco@kilchhofer.info>

* Format table in README.md

Signed-off-by: Marco Kilchhofer <marco@kilchhofer.info>
2020-01-20 13:59:36 -08:00
Marco Kilchhofer 2c6912d283 Add ability to expose cert.pem via ingress (#20251)
Signed-off-by: Marco Kilchhofer <marco@kilchhofer.info>
2020-01-20 09:55:36 -08:00
David J. M. Karlsen 2ce48480a1 [stable/sealed-secrets] Upgrade to latest 0.9.6 release (#19281)
Signed-off-by: David J. M. Karlsen <david@davidkarlsen.com>
2019-12-01 05:21:03 -08:00
Simon Rüegg 3c9e29d613 [sealed-secrets ] Upgrade to v0.9.5 (#18980)
* [stable/sealed-secrets] Add srueg as chart reviewer

Signed-off-by: Simon Rüegg <simon.ruegg@vshn.ch>

* [stable/sealed-secrets] Bump sealed-secrets to v0.9.5

Signed-off-by: Simon Rüegg <simon.ruegg@vshn.ch>
2019-11-22 08:01:28 -08:00
Jiří Pinkava e89b87212e stable/sealed-secrets: allow disable of controller installation (#18763)
The main goal is to allow installation of CRD using separate Helm deployment.
This is an alternative to using separate Helm Chart for CRD deployment.

This is helpfull for example during distaster recovery. When Sealed Secrets installation is broken and need to be reinstalled, the helm tries also to install CRD (if enabled), but when CRD already exists installation fails. This is especially usefull with deployment automation and declarative deployments definitions.

Signed-off-by: Jiri Pinkava <jiri.pinkava@rossum.ai>
2019-11-11 04:53:40 -08:00
Marko Mikulicic 05c8bac4a4 [stable/sealed-secrets] allow POST in proxier (#17609)
See https://github.com/bitnami-labs/sealed-secrets/blob/master/controller.jsonnet#L56

This change was added in #249 and released as part of v0.9.0

(I'm the upstream maintainer, 👋 thanks for maintaining the Helm chart)

Signed-off-by: Marko Mikulicic <mkm@bitnami.com>
2019-10-02 07:29:12 -07:00
Tino Reinhardt 0158b0f020 [stable/sealed-secrets] Have optional command args passed to controller (#17557)
* [stable/sealed-secrets] Have optional command args

This enables us to set command line arguments, like
  commandArgs:
    - "--key-renew-period"
    - "0"
or:
  $ helm ... --set commandArgs={--key-renew-period,0}

Signed-off-by: Tino Reinhardt <t@freeshell.org>

* [stable/sealed-secrets] Bump chart version (1.4.2)

Signed-off-by: Tino Reinhardt <t@freeshell.org>

* [stable/sealed-secrets] Bump app version (0.9.1)

Signed-off-by: Tino Reinhardt <t@freeshell.org>
2019-10-01 04:01:32 -07:00
teerakarna fe0ac7aed5 Upgraded to 0.8.2 and added RBAC rules for self service cert.pem for all authenticated users (#17555)
Signed-off-by: Albert Asawaroengchai <ateerakarna@gmail.com>
2019-09-30 09:49:38 -07:00
Nikolas Philips 8620b39e45 [stable/sealed-secrets] Add securityContext.runAsUser as value (#16522)
* Enables customization of the securityContext.runAsUser field of the operator Pod. This is required to run this Pod in OpenShift without adding PSPs/SCCs.

Signed-off-by: Nikolas Philips <nikolas.philips@gmail.com>
2019-08-22 00:08:32 -07:00
Stefan Prodan bea0592cb7 [stable/sealed-secrets] Add kubeseal section to readme (#16438)
* Add kubeseal section to readme

Signed-off-by: stefanprodan <stefan.prodan@gmail.com>

* Add kubeseal controller name and ns to notes

Signed-off-by: stefanprodan <stefan.prodan@gmail.com>
2019-08-20 04:35:45 -07:00
Kevin Lefevre 9cdb34911c [stable/sealed-secrets] fix RO tmp (#16112)
fix: https://github.com/bitnami-labs/sealed-secrets/pull/202

Signed-off-by: Kevin Lefevre <lefevre.kevin@gmail.com>
2019-08-06 06:33:55 -07:00
David J. M. Karlsen 6185240ae3 Update to 0.8.1 - also add permissions matching https://github.com/bitnami-labs/sealed-secrets/releases/tag/v0.8.1. Related to #15837 (#15907)
Signed-off-by: David J. M. Karlsen <david@davidkarlsen.com>
2019-07-26 02:22:00 -07:00
David J. M. Karlsen 14c82cd4f9 add missing permission. Fixes #15837 (#15905)
Signed-off-by: David J. M. Karlsen <david@davidkarlsen.com>
2019-07-25 15:29:44 -07:00
Hidde Beydals c8efb57442 [stable/sealed-secrets] Upgrade Sealed Secret controller to v0.8 (#15800)
* Upgrade Sealed Secret controller to v0.8

Signed-off-by: Hidde Beydals <hello@hidde.co>

* Rename `--key-name` flag to `--key-prefix`

Signed-off-by: Hidde Beydals <hello@hidde.co>
2019-07-23 06:16:54 -07:00
Kevin Lefevre a431bb9555 [stable/sealed-secrets] Support PSP (#15254)
Support PSP with sensible default.

Signed-off-by: Kevin Lefevre <lefevre.kevin@gmail.com>
2019-07-09 02:58:03 -07:00
Sebastian Pöhn d378b714f0 sealed-secrets: Add networkPolicy (#15274)
Signed-off-by: Sebastian Poehn <sebastian.poehn@gmail.com>
2019-07-05 08:28:35 -07:00
Steven Wade c7edb3f301 Allowing CRD toggling in sealed-secrets chart. (#12822)
* Adding crd toggle to sealed-secrets chart.

Signed-off-by: Steven Wade <steven@stevenwade.co.uk>

* Bumping the sealed-secrets chart.

Signed-off-by: Steven Wade <steven@stevenwade.co.uk>
2019-04-04 06:46:51 -07:00
Jonathan Liuti 341ee42bf3 Fix sealed secrets service selector (#10167)
Signed-off-by: Jonathan Liuti <liuti.john@gmail.com>
2018-12-20 06:06:59 -08:00
Oliver 62a1514098 Add sealed secret chart (#8416)
* Create Initial deployment and service

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Add Custom Resource definition

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Add option to use custom secret

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Add RBAC and service account resources

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Add NOTES documentation on how to use sealed secrets

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Add README documentation

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Add documentation to values file

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Add lables to resources

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Add missing values for resources & image. Add .helmignore

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Use service account and fullname templates

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Fix linting issues

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Fix image name

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Address code review comments

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Use repository value

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Address code review comments

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Update labels to match new convention

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Add helm keep annotation

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Add maintainers and OWNERS

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Use github name

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Remove duplicate namespace

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>

* Make keeping CRD configurable

Signed-off-by: Oliver Boyle <olib963@users.noreply.github.com>
2018-12-20 02:47:24 -08:00