spire-0.11.5

A Helm chart for deploying spire-server and spire-agent.

Warning: Please note this chart requires Projected Service Account Tokens which has to be enabled on your k8s api server.

Note: Minimum Spire version is v1.5.3.

To enable Projected Service Account Tokens on Docker for Mac/Windows run the following command to SSH into the Docker Desktop K8s VM.

docker run -it --privileged --pid=host debian nsenter -t 1 -m -u -n -i sh

Then add the following to /etc/kubernetes/manifests/kube-apiserver.yaml

spec:
  containers:
    - command:
      - kube-apiserver
      - --api-audiences=api,spire-server
      - --service-account-issuer=api,spire-agent
      - --service-account-key-file=/run/config/pki/sa.pub
      - --service-account-signing-key-file=/run/config/pki/sa.key

What's Changed

• Bump actions/checkout from 3.2.0 to 3.3.0 by Dependabot (@dependabot) in #118
• Add option to specify priorityClassName to the helm charts (#117)Co-authored-by: Marco Franssen marco.franssen@philips.com by ancsatis in #117

New Contributors

• ancsatis made their first contribution in #117

Full Changelog: spire-0.11.4...spire-0.11.5