Feat/spire infrastructure deployment#251

Open

mahil-2040 wants to merge 9 commits intovolcano-sh:mainfrom

mahil-2040:feat/spire-infrastructure-deployment

Commits on Apr 5, 2026

feat: added optional SPIRE config and RBAC(ServiceAccounts, ClusterRoles, ClusterRoleBindings) for SPIRE components gated by spire.enabled
mahil-2040
committed
feat: added SPIRE Server StatefulSet and ConfigMap config for SPIRE components gated by spire.enabled
mahil-2040
committed
feat: added SPIRE Agent DaemonSet and ConfigMap config for SPIRE components gated by spire.enabled
mahil-2040
committed
feat: added SPIRE Controller Manager Deployment and ClusterSPIFFEID CRDs for SPIRE components gated by spire.enabled
mahil-2040
committed
fix:fixed SPIRE Controller Manager to be deplyoed as a sidecar with spire-server instead of separate deployment
mahil-2040
committed
fix: update SPIRE trust domain and router RBAC defaults
mahil-2040
committed
fix: deploy spiffe-helper sidecars for mTLS certificates and fix attestation RBAC
mahil-2040
committed
fix: hardened SPIRE deployment with PVCs, headless services, and release-unique global resources
mahil-2040
committed

Commits on Apr 8, 2026

fix: removed redundant permissions from router RBAC, set secure SPIRE defaults and added comments for better understanding
mahil-2040
committed