helm

Documentation

Index

• Constants
• func DiscardLogger(format string, v ...any)
• type HelmSPIREProvider
  • func NewHelmSPIREProvider(ctx context.Context, trustZone *trust_zone_proto.TrustZone, ...) (*HelmSPIREProvider, error)
  • func (h *HelmSPIREProvider) AddRepository() <-chan provider.ProviderStatus
  • func (h *HelmSPIREProvider) CheckIfAlreadyInstalled() (bool, error)
  • func (h *HelmSPIREProvider) Execute() <-chan provider.ProviderStatus
  • func (h *HelmSPIREProvider) ExecuteUninstall() <-chan provider.ProviderStatus
  • func (h *HelmSPIREProvider) ExecuteUpgrade(postInstall bool) <-chan provider.ProviderStatus
• type HelmValuesGenerator
  • func NewHelmValuesGenerator(trustZone *trust_zone_proto.TrustZone, source cofidectl_plugin.DataSource, ...) *HelmValuesGenerator
  • func (g *HelmValuesGenerator) GenerateValues() (map[string]any, error)

Constants

const (
	SPIRERepositoryName = "spire"
	SPIRERepositoryUrl  = "https://spiffe.github.io/helm-charts-hardened/"

	SPIREChartName        = "spire"
	SPIREChartVersion     = "0.21.0"
	SPIRECRDsChartName    = "spire-crds"
	SPIRECRDsChartVersion = "0.4.0"

	SPIRENamespace = "spire"
)

Functions

func DiscardLogger

func DiscardLogger(format string, v ...any)

Types

type HelmSPIREProvider

type HelmSPIREProvider struct {
	SPIREVersion     string
	SPIRECRDsVersion string
	// contains filtered or unexported fields
}

HelmSPIREProvider implements a Helm-based installer for the Cofide stack. It uses the SPIFFE/SPIRE project's own helm-charts-hardened Helm chart to install a SPIRE stack to a given Kubernetes context, making use of the Cofide API concepts and abstractions

func NewHelmSPIREProvider

func NewHelmSPIREProvider(ctx context.Context, trustZone *trust_zone_proto.TrustZone, spireValues, spireCRDsValues map[string]interface{}) (*HelmSPIREProvider, error)

func (*HelmSPIREProvider) AddRepository

func (h *HelmSPIREProvider) AddRepository() <-chan provider.ProviderStatus

AddRepository adds the SPIRE Helm repository to the local repositories.yaml. The action is performed asynchronously and status is streamed through the returned status channel. This function should be called once, not per-trust zone.

func (*HelmSPIREProvider) CheckIfAlreadyInstalled

func (h *HelmSPIREProvider) CheckIfAlreadyInstalled() (bool, error)

CheckIfAlreadyInstalled returns true if the SPIRE chart has previously been installed.

func (*HelmSPIREProvider) Execute

func (h *HelmSPIREProvider) Execute() <-chan provider.ProviderStatus

Execute creates a provider status channel and performs the Helm chart installations.

func (*HelmSPIREProvider) ExecuteUninstall

func (h *HelmSPIREProvider) ExecuteUninstall() <-chan provider.ProviderStatus

func (*HelmSPIREProvider) ExecuteUpgrade

func (h *HelmSPIREProvider) ExecuteUpgrade(postInstall bool) <-chan provider.ProviderStatus

type HelmValuesGenerator

type HelmValuesGenerator struct {
	// contains filtered or unexported fields
}

func NewHelmValuesGenerator

func NewHelmValuesGenerator(trustZone *trust_zone_proto.TrustZone, source cofidectl_plugin.DataSource, values map[string]any) *HelmValuesGenerator

func (*HelmValuesGenerator) GenerateValues

func (g *HelmValuesGenerator) GenerateValues() (map[string]any, error)