Skip to content

Commit

Permalink
Adds postgres username/pw configuration
Browse files Browse the repository at this point in the history
This change includes the following:

- Adds password authentication for the backend postgres database connection.
- Adds TLS support between the Conjur pod and the postgres pod.
- Adds default auto-generation of the postgres connection password and
  TLS certificate.
- Adds default auto-rotation of the following for `helm upgrade`:
  - Conjur TLS CA signing certificate and signed certificate for Conjur
  - Postgres database TLS certificate and key
- Adds mechanism for user to set their own TLS CA and signed certificates
  for Conjur.
- Fixes an issue with the use of persistent volume store so that the
  postgres database contents are preserved across pod resets
  and helm upgrades.
- Modifies the `run.sh` script to adapt to the local version of helm client
  that is being used (i.e. Helm v2 vs. Helm v3).
- Addes a `helm_upgrade.sh` script to simplify helm upgrade operations.
  • Loading branch information
diverdane committed Jun 17, 2020
1 parent 253f0af commit 9ee5b2b
Show file tree
Hide file tree
Showing 21 changed files with 1,200 additions and 119 deletions.
25 changes: 23 additions & 2 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,27 @@ All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).

## [Unreleased]
## [v2.0.0] - 2020-06-17

### Added
- Adds password authentication for the backend Postgres database connection.
- Adds TLS support between the Conjur pod and the Postgres pod.
- Adds default auto-generation of the Postgres connection password and
TLS certificate.
- Adds default auto-rotation of the following for `helm upgrade`:
- Conjur TLS CA signing certificate and signed certificate for Conjur
- Postgres database TLS certificate and key
- Adds mechanism for user to set their own TLS CA and signed certificates
for Conjur.

### Changed
- Pins default Conjur version to current stable release 1.5.
- Sets default pullPolicy for Nginx and Postgres to `Always`.

### Fixed
- Fixes an issue with the use of persistent volume store so that the
Postgres database contents are preserved across pod resets
and helm upgrades.

## [v1.3.8] - 2019-12-20

Expand Down Expand Up @@ -64,7 +84,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
### Added
- First version of chart available.

[Unreleased]: https://github.com/cyberark/conjur-oss-helm-chart/compare/v1.3.8...HEAD
[Unreleased]: https://github.com/cyberark/conjur-oss-helm-chart/compare/v2.0.0...HEAD
[2.0.0]: https://github.com/cyberark/conjur-oss-helm-chart/compare/v1.3.8...v2.0.0
[1.3.8]: https://github.com/cyberark/conjur-oss-helm-chart/compare/v1.3.7...v1.3.8
[1.3.7]: https://github.com/cyberark/conjur-oss-helm-chart/compare/v1.3.6...v1.3.7
[1.3.6]: https://github.com/cyberark/conjur-oss-helm-chart/compare/v1.3.5...v1.3.6
Expand Down
2 changes: 1 addition & 1 deletion conjur-oss/Chart.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
apiVersion: v1
name: conjur-oss
home: https://www.conjur.org
version: 1.3.8
version: 2.0.0
description: A Helm chart for CyberArk Conjur
icon: https://www.cyberark.com/wp-content/uploads/2015/12/cybr-aim.jpg
keywords:
Expand Down
Loading

0 comments on commit 9ee5b2b

Please sign in to comment.