From 46120da3b6127662724827e986b6734c3e70e516 Mon Sep 17 00:00:00 2001 From: day0hero Date: Thu, 19 Mar 2026 17:20:53 +0000 Subject: [PATCH 1/3] updated chart name and version --- Chart.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Chart.yaml b/Chart.yaml index 01c3f61..072b0a2 100644 --- a/Chart.yaml +++ b/Chart.yaml @@ -1,8 +1,8 @@ apiVersion: v2 -name: zero-trust-workload-identity-manager +name: ztwim description: Zero Trust Workload Identity Manager Helm Chart type: application -version: 0.1.0 +version: 0.1.1 home: https://github.com/validatedpatterns/ztwim-chart maintainers: - name: Validated Patterns Team From 2e936cae1a9ea85af57866adb82a4cc302a0e5fd Mon Sep 17 00:00:00 2001 From: day0hero Date: Thu, 19 Mar 2026 18:52:46 +0000 Subject: [PATCH 2/3] helm-doc update --- README.md | 93 +++++++++++++++++++++++++------------------------------ 1 file changed, 43 insertions(+), 50 deletions(-) diff --git a/README.md b/README.md index 145bf0f..8ea95e7 100644 --- a/README.md +++ b/README.md @@ -1,15 +1,11 @@ -# zero-trust-workload-identity-manager +# ztwim - -![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) - +![Version: 0.1.1](https://img.shields.io/badge/Version-0.1.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) - Zero Trust Workload Identity Manager Helm Chart - This chart is used to serve as the template for Validated Patterns Charts @@ -20,54 +16,51 @@ This chart is used to serve as the template for Validated Patterns Charts ## Maintainers -| Name | Email | Url | -| ----------------------- | ------------------------------------ | --- | -| Validated Patterns Team | | | +| Name | Email | Url | +| ---- | ------ | --- | +| Validated Patterns Team | | | - ## Values -| Key | Type | Default | Description | -| -------------------------------------------------------------------------------- | ------ | -------------------------------------------------------------------------------- | ----------- | -| global.hubClusterDomain | string | `"hub.example.com"` | | -| global.localClusterDomain | string | `"local.example.com"` | | -| spiffe.csi.agentSocketPath | string | `"/run/spire/agent-sockets"` | | -| spire.agent.nodeAttestor.k8sPSATEnabled | string | `"true"` | | -| spire.agent.workloadAttestors.k8sEnabled | string | `"true"` | | -| spire.agent.workloadAttestors.workloadAttestorsVerification.hostCertBasePath | string | `"/var/lib/kubelet/pki"` | | -| spire.agent.workloadAttestors.workloadAttestorsVerification.hostCertFileName | string | `""` | | -| spire.agent.workloadAttestors.workloadAttestorsVerification.type | string | `"auto"` | | -| spire.bundleConfigMap | string | `"spire-bundle"` | | -| spire.clusterName | string | `"cluster"` | | -| spire.oidcDiscoveryProvider.ingress.annotations."route.openshift.io/termination" | string | `"reencrypt"` | | -| spire.oidcDiscoveryProvider.ingress.host | string | `"spire-spiffe-oidc-discovery-provider.{{ .Values.global.localClusterDomain }}"` | | -| spire.oidcDiscoveryProvider.ingress.operatorManaged | string | `"true"` | | -| spire.oidcDiscoveryProvider.service.name | string | `"spire-spiffe-oidc-discovery-provider"` | | -| spire.oidcDiscoveryProvider.service.port | int | `443` | | -| spire.server.ca.commonName | string | `"redhat.com"` | | -| spire.server.ca.country | string | `"US"` | | -| spire.server.ca.organization | string | `"Red Hat"` | | -| spire.server.datastore.connMaxLifetime | int | `0` | | -| spire.server.datastore.connectionString | string | `"/run/spire/data/datastore.sqlite3"` | | -| spire.server.datastore.databaseType | string | `"sqlite3"` | | -| spire.server.datastore.maxIdleConns | int | `10` | | -| spire.server.datastore.maxOpenConns | int | `100` | | -| spire.server.federation.bundleEndpoint.profile | string | `"https_spiffe"` | | -| spire.server.federation.enabled | string | `"false"` | | -| spire.server.federation.federatesWith | list | `[]` | | -| spire.server.federation.ingress.annotations."route.openshift.io/termination" | string | `"passthrough"` | | -| spire.server.federation.ingress.host | string | `"spire-server.{{ .Values.global.localClusterDomain }}"` | | -| spire.server.federation.ingress.operatorManaged | string | `"true"` | | -| spire.server.persistence.accessMode | string | `"ReadWriteOnce"` | | -| spire.server.persistence.size | string | `"5Gi"` | | -| spire.server.persistence.storageClass | string | `""` | | -| spire.server.service.name | string | `"spire-server"` | | -| spire.server.service.port | int | `443` | | -| spire.trustDomain | string | `"{{ .Values.global.localClusterDomain }}"` | | - +| Key | Type | Default | Description | +|-----|------|---------|-------------| +| global.hubClusterDomain | string | `"hub.example.com"` | | +| global.localClusterDomain | string | `"local.example.com"` | | +| spiffe.csi.agentSocketPath | string | `"/run/spire/agent-sockets"` | | +| spire.agent.nodeAttestor.k8sPSATEnabled | string | `"true"` | | +| spire.agent.workloadAttestors.k8sEnabled | string | `"true"` | | +| spire.agent.workloadAttestors.workloadAttestorsVerification.hostCertBasePath | string | `"/var/lib/kubelet/pki"` | | +| spire.agent.workloadAttestors.workloadAttestorsVerification.hostCertFileName | string | `""` | | +| spire.agent.workloadAttestors.workloadAttestorsVerification.type | string | `"auto"` | | +| spire.bundleConfigMap | string | `"spire-bundle"` | | +| spire.clusterName | string | `"cluster"` | | +| spire.oidcDiscoveryProvider.ingress.annotations."route.openshift.io/termination" | string | `"reencrypt"` | | +| spire.oidcDiscoveryProvider.ingress.host | string | `"spire-spiffe-oidc-discovery-provider.{{ .Values.global.localClusterDomain }}"` | | +| spire.oidcDiscoveryProvider.ingress.operatorManaged | string | `"true"` | | +| spire.oidcDiscoveryProvider.service.name | string | `"spire-spiffe-oidc-discovery-provider"` | | +| spire.oidcDiscoveryProvider.service.port | int | `443` | | +| spire.server.ca.commonName | string | `"redhat.com"` | | +| spire.server.ca.country | string | `"US"` | | +| spire.server.ca.organization | string | `"Red Hat"` | | +| spire.server.datastore.connMaxLifetime | int | `0` | | +| spire.server.datastore.connectionString | string | `"/run/spire/data/datastore.sqlite3"` | | +| spire.server.datastore.databaseType | string | `"sqlite3"` | | +| spire.server.datastore.maxIdleConns | int | `10` | | +| spire.server.datastore.maxOpenConns | int | `100` | | +| spire.server.federation.bundleEndpoint.profile | string | `"https_spiffe"` | | +| spire.server.federation.enabled | string | `"false"` | | +| spire.server.federation.federatesWith | list | `[]` | | +| spire.server.federation.ingress.annotations."route.openshift.io/termination" | string | `"passthrough"` | | +| spire.server.federation.ingress.host | string | `"spire-server.{{ .Values.global.localClusterDomain }}"` | | +| spire.server.federation.ingress.operatorManaged | string | `"true"` | | +| spire.server.persistence.accessMode | string | `"ReadWriteOnce"` | | +| spire.server.persistence.size | string | `"5Gi"` | | +| spire.server.persistence.storageClass | string | `""` | | +| spire.server.service.name | string | `"spire-server"` | | +| spire.server.service.port | int | `443` | | +| spire.trustDomain | string | `"{{ .Values.global.localClusterDomain }}"` | | ---- - +---------------------------------------------- Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2) From b19804c1124398901551cd0c8f6a386a24058982 Mon Sep 17 00:00:00 2001 From: day0hero Date: Thu, 19 Mar 2026 18:58:00 +0000 Subject: [PATCH 3/3] format readme --- README.md | 89 ++++++++++++++++++++++++++++++------------------------- 1 file changed, 48 insertions(+), 41 deletions(-) diff --git a/README.md b/README.md index 8ea95e7..f1b097d 100644 --- a/README.md +++ b/README.md @@ -1,11 +1,15 @@ # ztwim + ![Version: 0.1.1](https://img.shields.io/badge/Version-0.1.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) + + Zero Trust Workload Identity Manager Helm Chart + This chart is used to serve as the template for Validated Patterns Charts @@ -16,51 +20,54 @@ This chart is used to serve as the template for Validated Patterns Charts ## Maintainers -| Name | Email | Url | -| ---- | ------ | --- | -| Validated Patterns Team | | | +| Name | Email | Url | +| ----------------------- | ------------------------------------ | --- | +| Validated Patterns Team | | | + ## Values -| Key | Type | Default | Description | -|-----|------|---------|-------------| -| global.hubClusterDomain | string | `"hub.example.com"` | | -| global.localClusterDomain | string | `"local.example.com"` | | -| spiffe.csi.agentSocketPath | string | `"/run/spire/agent-sockets"` | | -| spire.agent.nodeAttestor.k8sPSATEnabled | string | `"true"` | | -| spire.agent.workloadAttestors.k8sEnabled | string | `"true"` | | -| spire.agent.workloadAttestors.workloadAttestorsVerification.hostCertBasePath | string | `"/var/lib/kubelet/pki"` | | -| spire.agent.workloadAttestors.workloadAttestorsVerification.hostCertFileName | string | `""` | | -| spire.agent.workloadAttestors.workloadAttestorsVerification.type | string | `"auto"` | | -| spire.bundleConfigMap | string | `"spire-bundle"` | | -| spire.clusterName | string | `"cluster"` | | -| spire.oidcDiscoveryProvider.ingress.annotations."route.openshift.io/termination" | string | `"reencrypt"` | | -| spire.oidcDiscoveryProvider.ingress.host | string | `"spire-spiffe-oidc-discovery-provider.{{ .Values.global.localClusterDomain }}"` | | -| spire.oidcDiscoveryProvider.ingress.operatorManaged | string | `"true"` | | -| spire.oidcDiscoveryProvider.service.name | string | `"spire-spiffe-oidc-discovery-provider"` | | -| spire.oidcDiscoveryProvider.service.port | int | `443` | | -| spire.server.ca.commonName | string | `"redhat.com"` | | -| spire.server.ca.country | string | `"US"` | | -| spire.server.ca.organization | string | `"Red Hat"` | | -| spire.server.datastore.connMaxLifetime | int | `0` | | -| spire.server.datastore.connectionString | string | `"/run/spire/data/datastore.sqlite3"` | | -| spire.server.datastore.databaseType | string | `"sqlite3"` | | -| spire.server.datastore.maxIdleConns | int | `10` | | -| spire.server.datastore.maxOpenConns | int | `100` | | -| spire.server.federation.bundleEndpoint.profile | string | `"https_spiffe"` | | -| spire.server.federation.enabled | string | `"false"` | | -| spire.server.federation.federatesWith | list | `[]` | | -| spire.server.federation.ingress.annotations."route.openshift.io/termination" | string | `"passthrough"` | | -| spire.server.federation.ingress.host | string | `"spire-server.{{ .Values.global.localClusterDomain }}"` | | -| spire.server.federation.ingress.operatorManaged | string | `"true"` | | -| spire.server.persistence.accessMode | string | `"ReadWriteOnce"` | | -| spire.server.persistence.size | string | `"5Gi"` | | -| spire.server.persistence.storageClass | string | `""` | | -| spire.server.service.name | string | `"spire-server"` | | -| spire.server.service.port | int | `443` | | -| spire.trustDomain | string | `"{{ .Values.global.localClusterDomain }}"` | | +| Key | Type | Default | Description | +| -------------------------------------------------------------------------------- | ------ | -------------------------------------------------------------------------------- | ----------- | +| global.hubClusterDomain | string | `"hub.example.com"` | | +| global.localClusterDomain | string | `"local.example.com"` | | +| spiffe.csi.agentSocketPath | string | `"/run/spire/agent-sockets"` | | +| spire.agent.nodeAttestor.k8sPSATEnabled | string | `"true"` | | +| spire.agent.workloadAttestors.k8sEnabled | string | `"true"` | | +| spire.agent.workloadAttestors.workloadAttestorsVerification.hostCertBasePath | string | `"/var/lib/kubelet/pki"` | | +| spire.agent.workloadAttestors.workloadAttestorsVerification.hostCertFileName | string | `""` | | +| spire.agent.workloadAttestors.workloadAttestorsVerification.type | string | `"auto"` | | +| spire.bundleConfigMap | string | `"spire-bundle"` | | +| spire.clusterName | string | `"cluster"` | | +| spire.oidcDiscoveryProvider.ingress.annotations."route.openshift.io/termination" | string | `"reencrypt"` | | +| spire.oidcDiscoveryProvider.ingress.host | string | `"spire-spiffe-oidc-discovery-provider.{{ .Values.global.localClusterDomain }}"` | | +| spire.oidcDiscoveryProvider.ingress.operatorManaged | string | `"true"` | | +| spire.oidcDiscoveryProvider.service.name | string | `"spire-spiffe-oidc-discovery-provider"` | | +| spire.oidcDiscoveryProvider.service.port | int | `443` | | +| spire.server.ca.commonName | string | `"redhat.com"` | | +| spire.server.ca.country | string | `"US"` | | +| spire.server.ca.organization | string | `"Red Hat"` | | +| spire.server.datastore.connMaxLifetime | int | `0` | | +| spire.server.datastore.connectionString | string | `"/run/spire/data/datastore.sqlite3"` | | +| spire.server.datastore.databaseType | string | `"sqlite3"` | | +| spire.server.datastore.maxIdleConns | int | `10` | | +| spire.server.datastore.maxOpenConns | int | `100` | | +| spire.server.federation.bundleEndpoint.profile | string | `"https_spiffe"` | | +| spire.server.federation.enabled | string | `"false"` | | +| spire.server.federation.federatesWith | list | `[]` | | +| spire.server.federation.ingress.annotations."route.openshift.io/termination" | string | `"passthrough"` | | +| spire.server.federation.ingress.host | string | `"spire-server.{{ .Values.global.localClusterDomain }}"` | | +| spire.server.federation.ingress.operatorManaged | string | `"true"` | | +| spire.server.persistence.accessMode | string | `"ReadWriteOnce"` | | +| spire.server.persistence.size | string | `"5Gi"` | | +| spire.server.persistence.storageClass | string | `""` | | +| spire.server.service.name | string | `"spire-server"` | | +| spire.server.service.port | int | `443` | | +| spire.trustDomain | string | `"{{ .Values.global.localClusterDomain }}"` | | + ----------------------------------------------- +--- + Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)