Fix spire oidc nginx container

Signed-off-by: Marco Franssen <marco.franssen@philips.com>

Author: marcofranssen

charts/spire/Chart.yaml

@@ -27,7 +27,7 @@ description: |
           - --service-account-signing-key-file=/run/config/pki/sa.key
   ```
 type: application
-version: 0.6.2
+version: 0.6.3
 appVersion: "1.5.1"
 keywords: ["spiffe", "spire", "spire-server", "spire-agent", "oidc"]
 home: https://github.com/philips-labs/helm-charts/charts/spire

charts/spire/README.md

@@ -2,7 +2,7 @@
 
 <!-- This README.md is generated. -->
 
-![Version: 0.6.2](https://img.shields.io/badge/Version-0.6.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.5.1](https://img.shields.io/badge/AppVersion-1.5.1-informational?style=flat-square)
+![Version: 0.6.3](https://img.shields.io/badge/Version-0.6.3-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.5.1](https://img.shields.io/badge/AppVersion-1.5.1-informational?style=flat-square)
 
 A Helm chart for deploying spire-server and spire-agent.
 
@@ -85,9 +85,9 @@ Kubernetes: `>=1.21.0-0`
 | oidc.image.version | string | `""` |  |
 | oidc.insecureScheme.enabled | bool | `false` |  |
 | oidc.insecureScheme.nginx.image.pullPolicy | string | `"IfNotPresent"` |  |
-| oidc.insecureScheme.nginx.image.registry | string | `"cgr.dev"` |  |
-| oidc.insecureScheme.nginx.image.repository | string | `"chainguard/nginx"` |  |
-| oidc.insecureScheme.nginx.image.version | string | `"1.23"` |  |
+| oidc.insecureScheme.nginx.image.registry | string | `"docker.io"` |  |
+| oidc.insecureScheme.nginx.image.repository | string | `"nginx"` |  |
+| oidc.insecureScheme.nginx.image.version | string | `"1.23.2-alpine"` |  |
 | oidc.nodeSelector."kubernetes.io/arch" | string | `"amd64"` |  |
 | oidc.podAnnotations | object | `{}` |  |
 | oidc.podSecurityContext | object | `{}` |  |

charts/spire/values.yaml

@@ -202,10 +202,16 @@ oidc:
 
     nginx:
       image:
-        registry: cgr.dev
-        repository: chainguard/nginx
+        registry: docker.io
+        repository: nginx
         pullPolicy: IfNotPresent
-        version: "1.23"
+        version: 1.23.2-alpine
+        # chainguard image does not support the templates feature
+        # https://github.com/chainguard-images/nginx/issues/43
+        # registry: cgr.dev
+        # repository: chainguard/nginx
+        # pullPolicy: IfNotPresent
+        # version: "1.23.2"
 
   config:
     logLevel: info