Commit graph

461 commits

Author SHA1 Message Date
Eric Miller
b67a874090 Merge branch 'main' into topology 2021-11-22 15:29:50 -06:00
Eric Miller
102c29955b Implement injector HA statefulset topology UTs 2021-11-22 15:24:38 -06:00
Eric Miller
567a4386a5 Implement injector statefulset topology spread UTs 2021-11-22 15:21:15 -06:00
Eric Miller
f49ecb6802 Implement injector deployment topology spread UTs
* also remove string from the relevant schema types
2021-11-22 15:12:17 -06:00
Eric Miller
8840187301 Add topologySpreadConstraints to values schema 2021-11-22 14:36:11 -06:00
Theron Voran
9fa25e97c8
vault-helm 0.18.0 release (#650) 2021-11-17 15:46:28 -08:00
Theron Voran
0375b184b3
remove support for the leader-elector container (#649) 2021-11-17 13:06:03 -08:00
Tom Proctor
21cc21f9cd
Update jira action (#644)
* No longer check for Vault team membership
* Tweak jira states and search parameters
2021-11-16 14:50:16 -08:00
Kaito Ii
c47ff33551
add staticSecretRenderInterval to injector (#621)
* make staticSecretRenderInterval default to empty string

* update values schema to add staticSecretRenderInterval

* add test for default value

* adding changelog entry

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2021-11-05 19:07:25 -07:00
Gary Frederick
4db9e831ad
v0.17.1 (#637) 2021-10-25 15:31:07 -07:00
Gary Frederick
a186036e7d
changelog++ (#636) 2021-10-25 13:58:15 -07:00
Tim Collins
c09c50f9d6
Add option for Ingress pathType (#634) 2021-10-25 11:30:06 -04:00
Theron Voran
dc08ab6324
note a regression in 0.17.0 (#635) 2021-10-22 18:00:29 -07:00
Theron Voran
91ac2eedbc
vault-helm 0.17.0 release (#632) 2021-10-21 12:12:45 -07:00
Theron Voran
3b1bb783be
Add server.ingress.ingressClassName (#630)
Co-authored-by: Joel Cressy <joel@jtcressy.net>
2021-10-21 09:23:45 -07:00
Ben Ash
4aa01e8986
Update changelog for #626 and #628 (#631) 2021-10-21 12:14:31 -04:00
Toni Tauro
6914c4d877
fix(csi-ds): mountpoint-dir same mountpath in pod (#628)
* fix(csi-ds): mountpoint-dir same mountpath in pod

Signed-off-by: Toni Tauro <toni.tauro@adfinis.com>

* Update Chart.yaml

Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
2021-10-19 15:06:07 -04:00
Ben Ash
d96a4287fa
Feat: add externalTrafficPolicy support (#626)
- externalTrafficPolicy can be set for both the ui and server services.
  It is only supported for NodePort or LoadBalancer service types.
2021-10-18 09:45:52 -04:00
Theron Voran
96b8c98b3b
Updating acceptance tests (#624)
GKE's stable K8s version is now 1.19. Also adding VAULT_LICENSE_CI to
the `make test-acceptance` target to make it easier to run the
acceptance tests manually, and mentioned it in the test README.
2021-10-11 14:12:55 -07:00
Theron Voran
ffd5086157
changelog++ (#623) 2021-10-11 10:28:37 +01:00
Vladislav Rumjantsev
72c485dd2c
ingress stable networking api (#590)
* Moved ingress to stable networking api

* lower versions support

* ingress disabled by default

* added tests for old k8s
2021-10-08 17:13:21 -07:00
Theron Voran
9758666262
fix chart publish job (#620)
The branch parameter isn't for this repo
2021-09-29 18:01:14 -07:00
Theron Voran
5dfc3515c1
vault-helm 0.16.1 release (#619) 2021-09-29 16:28:37 -07:00
Theron Voran
b69e3d9276
vault-helm default branch is now main (#618)
Updated the circleci config to use the `main` branch, and also changed
a couple mentions in the contributing guide.
2021-09-27 21:40:09 -07:00
Ellis Tarn
87c3e62030
Update values.yaml
Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
2021-09-27 15:19:47 -07:00
Ellis Tarn
c77cb1f6a4
Update values.yaml
Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
2021-09-27 15:19:43 -07:00
Ellis Tarn
18f8db05d9 Implemented support for topology spread constraints 2021-09-17 16:30:49 -07:00
Theron Voran
cd2059147d
vault 0.16.0 release (#612) 2021-09-16 09:39:59 -07:00
Theron Voran
78a355bffc
changelog++ 2021-09-15 18:59:34 -07:00
Theron Voran
5a864f7cbb
Adding support for the old leader-elector (#607)
Adds the leader-elector container support that was removed in
PR #568. The new vault-k8s uses an internal mechanism for leader
determination, so this is just for backwards compatibility, and can
be removed in the near future.

* mark the endpoint as deprecated

* add a new useContainer option for leaderElector

Default to not deploying the old leader-elector container, unless
injector.leaderElector.useContainer is `true`.
2021-09-15 18:43:04 -07:00
Ben Ash
dd3b3f06e0
changelog++ 2021-09-15 14:22:35 -04:00
Ben Ash
c267805dea
changelog++ 2021-09-15 14:22:02 -04:00
Toni Tauro
23e0348842
feat(csi): make provider hostPaths configurable (#603)
*  add configurable values for providersDir and kubeletRootDir

Signed-off-by: Toni Tauro <toni.tauro@adfinis.com>

Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
2021-09-15 14:12:24 -04:00
Theron Voran
8932c372b7
Fix the CSI acceptance test (#608)
The `master` branch was renamed to `main` for
kubernetes-sigs/secrets-store-csi-driver

* use a specific version in the URL

* use csi driver 0.2.0
2021-09-07 18:09:30 -07:00
Theron Voran
87a0a56ad9
changelog++ 2021-08-31 15:21:49 -07:00
Theron Voran
d31f942d3e
Support vault-k8s internal leader election (#568) 2021-08-31 15:16:06 -07:00
Theron Voran
c820454dd5
vault-helm 0.15.0 release (#598) 2021-08-23 08:51:52 -07:00
Theron Voran
22df6c0d9b
changelog++ 2021-08-16 13:50:47 -07:00
Theron Voran
f7ab37fd50
Add injector.webhookAnnotations chart option (#584) 2021-08-16 13:49:26 -07:00
Theron Voran
277317524a
changelog++ 2021-08-11 17:03:26 -07:00
Maxime Bruneau
c9c23b1a9b
Add imagePullSecrets on server test (#572)
Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2021-08-11 17:01:58 -07:00
Theron Voran
bfc01c1e5d
Update chart verifier (#579)
The test names now have "v1.0/" prepended. chart-verifier docker
images are now tagged too.
2021-07-29 14:51:35 -07:00
Theron Voran
a5c85627b3
vault-helm 0.14.0 release (#578) 2021-07-28 14:44:28 -07:00
Ben Ash
86ff773249
++changelog 2021-07-23 13:00:50 -04:00
Ben Ash
64b4d88c72
feature: imagePullSecrets from string array. (#576)
* allow configuring imagePullSecrets from an array of strings in
  addition to the already supported array of maps
2021-07-23 12:05:24 -04:00
Jason O'Donnell
43656864c6
changelog++ 2021-07-15 14:18:08 -04:00
Jason O'Donnell
255cdc7d26
Add ingress/route configurable to specify active/general service (#570)
* Add ingress/route configurable to specify active/general service

* Update test/unit/server-ingress.bats

Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>

* values.schema.json

Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
2021-07-15 14:15:46 -04:00
Ben Ash
a0d7b84ec2
++changelog 2021-07-12 17:33:03 -04:00
Ben Ash
4a4295da81
Update acceptance tests to use the new stable GKE version 1.18.x (#569) 2021-07-12 15:47:07 -04:00
Ben Ash
2d420856a4
Update the default vault agent image to come from the hashicorp docker organization. (#567)
* Default to hashicorp/vault for vault agent image.

* Add support for running acceptance tests against a kind cluster

* make the injector-leader-elector a bit more reliable when run locally
2021-07-12 13:00:12 -04:00