hsm-secrets-operator
A Kubernetes operator that bridges Hardware Security Module (HSM) data storage with Kubernetes Secrets, providing true secret portability th
Star
Fork
Watch

Commits on main

Evan Jarrett
Reap orphaned HSM agents; bump to 0.12.2 v0.12.2
committed
Evan Jarrett
Fix kubectl-hsm interactive input rejecting empty key and eating spaces
committed
Evan Jarrett
Prevent UnexpectedAdmissionError storms during discovery rollouts; bump to 0.12.1
committed
Evan Jarrett
Drop privileged from hsm-agent pods; bump to 0.12.0
committed
Evan Jarrett
Add manager<->agent mTLS, serial-based agent naming, active health probes; bump to 0.11.0
committed
Evan Jarrett
Scope agent pods to their allocated USB device; bump to 0.10.4
committed
Evan Jarrett
Fix mirror convergence, discovery rescan, and mock fallback; bump to 0.10.3
committed
Evan Jarrett
CI: fix golangci-lint Go-version gate, modernize actions, bump to 0.10.2
committed
Evan Jarrett
Revert default images to ghcr.io; bump to 0.10.1
committed
Evan Jarrett
try and release-helm from tangled
committed
Evan Jarrett
Move image registry to atcr.io; add Helm chart packaging targets
committed
Evan Jarrett
Fix release workflow: use DID-encoded namespace for buoy.cr v0.10.0
committed
Evan Jarrett
Add auto-provisioning, CCID allowlist discovery, bump to 0.10.0
committed
Evan Jarrett
bump to version 0.9.0
committed
Evan Jarrett
minor fix to hsm plugin to find the correct namespace
committed
Evan Jarrett
fix linting
committed
Evan Jarrett
fix linter workflow
committed
Evan Jarrett
rename go module to tangled
committed
Evan Jarrett
fix(security): bump Go to 1.26.4 and patch CVE-flagged dependencies
committed
Evan Jarrett
chore(helm): keep example resources across deploys
committed
Evan Jarrett
fix: drop unused /dev mount and remove dead discovery detection-method code
committed
Evan Jarrett
feat: unify multi-device secret conflict resolution
committed
Evan Jarrett
fix?
committed
Evan Jarrett
add tangled workflows
committed
Evan Jarrett
implement key deletion
committed
Evan Jarrett
try and create device resource plugin
committed
Evan Jarrett
chore: bump version to 0.6.44
committed
Evan Jarrett
minor code fixes
committed
Evan Jarrett
chore: bump version to 0.6.42
committed
Evan Jarrett
fix again?
committed
Evan Jarrett
fix
committed
Evan Jarrett
chore: bump version to 0.6.41
committed
Evan Jarrett
fixes
committed
Evan Jarrett
use trixie-slim
committed
Evan Jarrett
chore: bump version to 0.6.40
committed
Evan Jarrett
fix
committed
Evan Jarrett
chore: bump version to 0.6.39
committed
Evan Jarrett
add new test cmd function
committed
Evan Jarrett
try and fix delete
committed
Evan Jarrett
don't run tests nightly
committed
Evan Jarrett
try and fix hsm errors related to creating new secrets
committed
Evan Jarrett
dockerfile size reduction
committed
Evan Jarrett
pass debug logger into agent and pcscd manager
committed
Evan Jarrett
fix socket check on pcscd
committed
Evan Jarrett
fix pcscd rundir
committed
Evan Jarrett
chore: bump version to 0.6.33
committed
Evan Jarrett
fix helm deploy
committed
Evan Jarrett
Merge pull request #1 from evanjarrett/test
committed
Evan Jarrett
remove entrypoint, manage pcscd through go. use scratch as final container to remove shell
committed
Evan Jarrett
chore: bump version to 0.6.31
committed
Evan Jarrett
base build off trixie libs
committed
Evan Jarrett
chore: bump version to 0.6.25
committed
Evan Jarrett
rip out ccid
committed
Evan Jarrett
chore: bump version to 0.6.24
committed
Evan Jarrett
fix
committed
Evan Jarrett
chore: bump version to 0.6.24
committed
Evan Jarrett
chore: bump version to 0.6.23
committed
Evan Jarrett
chore: bump version to 0.6.22
committed
Evan Jarrett
chore: bump version to 0.6.21
committed
Evan Jarrett
chore: bump version to 0.6.20
committed