Skip to content

Commit 9ee5b2b

Browse files
author
diverdane
committed
Adds postgres username/pw configuration
This change includes the following: - Adds password authentication for the backend postgres database connection. - Adds TLS support between the Conjur pod and the postgres pod. - Adds default auto-generation of the postgres connection password and TLS certificate. - Adds default auto-rotation of the following for `helm upgrade`: - Conjur TLS CA signing certificate and signed certificate for Conjur - Postgres database TLS certificate and key - Adds mechanism for user to set their own TLS CA and signed certificates for Conjur. - Fixes an issue with the use of persistent volume store so that the postgres database contents are preserved across pod resets and helm upgrades. - Modifies the `run.sh` script to adapt to the local version of helm client that is being used (i.e. Helm v2 vs. Helm v3). - Addes a `helm_upgrade.sh` script to simplify helm upgrade operations.
1 parent 253f0af commit 9ee5b2b

21 files changed

+1200
-119
lines changed

CHANGELOG.md

+23-2
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,27 @@ All notable changes to this project will be documented in this file.
44
The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
55
and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
66

7-
## [Unreleased]
7+
## [v2.0.0] - 2020-06-17
8+
9+
### Added
10+
- Adds password authentication for the backend Postgres database connection.
11+
- Adds TLS support between the Conjur pod and the Postgres pod.
12+
- Adds default auto-generation of the Postgres connection password and
13+
TLS certificate.
14+
- Adds default auto-rotation of the following for `helm upgrade`:
15+
- Conjur TLS CA signing certificate and signed certificate for Conjur
16+
- Postgres database TLS certificate and key
17+
- Adds mechanism for user to set their own TLS CA and signed certificates
18+
for Conjur.
19+
20+
### Changed
21+
- Pins default Conjur version to current stable release 1.5.
22+
- Sets default pullPolicy for Nginx and Postgres to `Always`.
23+
24+
### Fixed
25+
- Fixes an issue with the use of persistent volume store so that the
26+
Postgres database contents are preserved across pod resets
27+
and helm upgrades.
828

929
## [v1.3.8] - 2019-12-20
1030

@@ -64,7 +84,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
6484
### Added
6585
- First version of chart available.
6686

67-
[Unreleased]: https://github.com/cyberark/conjur-oss-helm-chart/compare/v1.3.8...HEAD
87+
[Unreleased]: https://github.com/cyberark/conjur-oss-helm-chart/compare/v2.0.0...HEAD
88+
[2.0.0]: https://github.com/cyberark/conjur-oss-helm-chart/compare/v1.3.8...v2.0.0
6889
[1.3.8]: https://github.com/cyberark/conjur-oss-helm-chart/compare/v1.3.7...v1.3.8
6990
[1.3.7]: https://github.com/cyberark/conjur-oss-helm-chart/compare/v1.3.6...v1.3.7
7091
[1.3.6]: https://github.com/cyberark/conjur-oss-helm-chart/compare/v1.3.5...v1.3.6

conjur-oss/Chart.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
apiVersion: v1
22
name: conjur-oss
33
home: https://www.conjur.org
4-
version: 1.3.8
4+
version: 2.0.0
55
description: A Helm chart for CyberArk Conjur
66
icon: https://www.cyberark.com/wp-content/uploads/2015/12/cybr-aim.jpg
77
keywords:

0 commit comments

Comments
 (0)