Update spiffe-helper (#453)

* Update spiffe-helper Signed-off-by: Kevin Fox <[email protected]> * Update .github/tests/images.json Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]>
spiffe · Sep 12, 2024 · 3bc7025 · 3bc7025
1 parent 98b332b
commit 3bc7025
Show file tree

Hide file tree

Showing 6 changed files with 125 additions and 120 deletions.
diff --git a/.github/tests/images.json b/.github/tests/images.json
@@ -63,6 +63,11 @@
       "query": "tests.busybox.image",
       "filter": "^[0-9]\\+\\.[0-9]\\+\\.[0-9]\\+-uclibc$",
       "sort-flags": ["-t", ".", "-k1,1n", "-k2,2n", "-k3,3n"]
+    },
+    {
+      "query": "spiffeHelper.image",
+      "filter": "LATESTSHA",
+      "sort-flags": []
     }
   ],
   "tornjak-frontend/values.yaml": [

diff --git a/charts/spire/charts/spiffe-oidc-discovery-provider/README.md b/charts/spire/charts/spiffe-oidc-discovery-provider/README.md
diff --git a/charts/spire/charts/spiffe-oidc-discovery-provider/templates/deployment.yaml b/charts/spire/charts/spiffe-oidc-discovery-provider/templates/deployment.yaml
@@ -50,7 +50,7 @@ spec:
           args:
             - -config
             - /etc/spiffe-helper.conf
-            - -exitWhenReady
+            - -daemon-mode=false
           volumeMounts:
             - name: spiffe-workload-api
               mountPath: {{ include "spiffe-oidc-discovery-provider.workload-api-socket-path" . | dir }}

diff --git a/charts/spire/charts/spiffe-oidc-discovery-provider/values.yaml b/charts/spire/charts/spiffe-oidc-discovery-provider/values.yaml
@@ -41,7 +41,7 @@ spiffeHelper:
     registry: ghcr.io
     repository: spiffe/spiffe-helper
     pullPolicy: IfNotPresent
-    tag: nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6
+    tag: 0.8.0
   ## @param spiffeHelper.resources [object] Resource requests and limits
   resources: {}
 

diff --git a/examples/mysql-using-spire/mysql-values.yaml b/examples/mysql-using-spire/mysql-values.yaml
@@ -19,7 +19,7 @@ primary:
       - name: spiffe-helper
         mountPath: /helper
     - name: setup-helper-volume-p2
-      image: ghcr.io/spiffe/spiffe-helper:nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6
+      image: ghcr.io/spiffe/spiffe-helper:0.8.0
       imagePullPolicy: IfNotPresent
       command:
       - /helper/busybox
@@ -31,13 +31,13 @@ primary:
       - name: spiffe-helper
         mountPath: /helper
     - name: init-tls
-      image: ghcr.io/spiffe/spiffe-helper:nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6
+      image: ghcr.io/spiffe/spiffe-helper:0.8.0
       imagePullPolicy: Always
       command:
       - /spiffe-helper
       - -config
       - /etc/spiffe-helper.conf
-      - -exitWhenReady
+      - -daemon-mode=false
       securityContext: {{- omit .Values.primary.containerSecurityContext "enabled" | toYaml | nindent 8 }}
       volumeMounts:
       - name: spiffe-workload-api

diff --git a/examples/mysql-using-spire/mysqlclient-statefulset.yaml b/examples/mysql-using-spire/mysqlclient-statefulset.yaml
@@ -16,13 +16,13 @@ spec:
       terminationGracePeriodSeconds: 0
       initContainers:
       - name: init-tls
-        image: ghcr.io/spiffe/spiffe-helper:nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6
+        image: ghcr.io/spiffe/spiffe-helper:0.8.0
         imagePullPolicy: Always
         command:
         - /spiffe-helper
         - -config
         - /etc/spiffe-helper.conf
-        - -exitWhenReady
+        - -daemon-mode=false
         securityContext:
           runAsUser: 1001
           runAsGroup: 1001
@@ -47,7 +47,7 @@ spec:
         - name: certdir
           mountPath: /certs
       - name: refresh-tls
-        image: ghcr.io/spiffe/spiffe-helper:nightly@sha256:8cee346ffdcee5c996d394f1c3bb761c2c06834a0e779a78db6dc6a46fd13ae6
+        image: ghcr.io/spiffe/spiffe-helper:0.8.0
         imagePullPolicy: Always
         command:
         - /spiffe-helper