From 830a57a03d7021062a6f6e48ad9a03bab8ddac2a Mon Sep 17 00:00:00 2001 From: Kevin Fox Date: Mon, 13 Jul 2026 11:12:11 -0700 Subject: [PATCH 1/2] Update spire-identity-exchange to 0.3.0 Signed-off-by: Kevin Fox --- examples/rpms/Dockerfile | 2 + ...8s-image-cred-spire-identity-exchange.spec | 54 +++++++++++++++++++ ...-credentialcomposer-identity-exchange.spec | 2 +- ...e-server-attestor-spiffe-workload-api.spec | 2 +- 4 files changed, 58 insertions(+), 2 deletions(-) create mode 100644 examples/rpms/k8s-image-cred-spire-identity-exchange.spec diff --git a/examples/rpms/Dockerfile b/examples/rpms/Dockerfile index 3992dc1..a85c417 100644 --- a/examples/rpms/Dockerfile +++ b/examples/rpms/Dockerfile @@ -47,6 +47,8 @@ RUN --mount=type=secret,id=gpg \ rpmbuild -ba spire-server-attestor-tpm.spec && \ spectool -g -R spire-credentialcomposer-cel.spec && \ rpmbuild -ba spire-credentialcomposer-cel.spec && \ + spectool -g -R examples/k8s-image-cred-spire-identity-exchange.spec && \ + rpmbuild -ba k8s-image-cred-spire-identity-exchange.spec && \ spectool -g -R aws-spiffe-workload-helper.spec && \ rpmbuild -ba aws-spiffe-workload-helper.spec && \ if [ "$(uname -m)" == "x86_64" ]; then \ diff --git a/examples/rpms/k8s-image-cred-spire-identity-exchange.spec b/examples/rpms/k8s-image-cred-spire-identity-exchange.spec new file mode 100644 index 0000000..dd07bc8 --- /dev/null +++ b/examples/rpms/k8s-image-cred-spire-identity-exchange.spec @@ -0,0 +1,54 @@ +############################################################################## +# +# To you, dear reader: +# +# If you are a normal user, we recommend not reading further. Its probably not +# the file your looking for. +# +# If you are looking at using this file as a base for your own work, please +# don't. It is a horrible example. Please look elsewhere. +# +# If you are a package maintainer, please read on. We recognize this spec file +# is blasphemous, a terrible abomination, a crime against nature, and more. We +# regret needing to produce it, but had to in order to attract enough users to +# find you. We beseech thee, kind and generous package maintainer, please help +# us mend our wicked ways by joining us and help us produce proper packaging. +# You are our only hope. +# +############################################################################## + +%define ARCH %(echo %{_arch} | sed s/aarch64/arm64/) + +Summary: Kubernetes Image Credential Plugin SPIRE Identity Exchange +Name: k8s-image-cred-spire-identity-exchange +Version: 0.3.0 +Release: 1 +Group: Applications/Internet +License: Apache-2.0 +URL: https://spiffe.io +Source0: https://github.com/spiffe/spire-identity-exchange/releases/download/v%{version}/k8s-image-cred-spire-identity-exchange_Linux_%{ARCH}.tar.gz + +%global __strip /bin/true + +%description +Kubernetes Image Credential Plugin SPIRE Identity Exchange + +%global _missing_build_ids_terminate_build 0 +%global debug_package %{nil} + +%prep + +%setup -c + +%build + +%install +mkdir -p "%{buildroot}/usr/libexec/kubelet-credential-providers" +cp -a k8s-image-cred-spire-identity-exchange %{buildroot}/usr/libexec/kubelet-credential-providers + +%clean +rm -rf %{buildroot} + +%files +/usr/libexec/kubelet-credential-providers/k8s-image-cred-spire-identity-exchange + diff --git a/examples/rpms/spire-credentialcomposer-identity-exchange.spec b/examples/rpms/spire-credentialcomposer-identity-exchange.spec index 9f13cbf..f001d3e 100644 --- a/examples/rpms/spire-credentialcomposer-identity-exchange.spec +++ b/examples/rpms/spire-credentialcomposer-identity-exchange.spec @@ -21,7 +21,7 @@ Summary: SPIRE Credential Composer Identity Exchange Name: spire-credentialcomposer-identity-exchange -Version: 0.1.0 +Version: 0.3.0 Release: 1 Group: Applications/Internet License: Apache-2.0 diff --git a/examples/rpms/spire-server-attestor-spiffe-workload-api.spec b/examples/rpms/spire-server-attestor-spiffe-workload-api.spec index 0db9f1d..0b6dfa2 100644 --- a/examples/rpms/spire-server-attestor-spiffe-workload-api.spec +++ b/examples/rpms/spire-server-attestor-spiffe-workload-api.spec @@ -21,7 +21,7 @@ Summary: SPIRE Server Attestor SPIFFE Workload API Name: spire-server-attestor-spiffe-workload-api -Version: 0.1.0 +Version: 0.3.0 Release: 1 Group: Applications/Internet License: Apache-2.0 From f6812c6462bb6a161167414ef3e36f8f9ab10b51 Mon Sep 17 00:00:00 2001 From: Kevin Fox Date: Mon, 13 Jul 2026 11:25:04 -0700 Subject: [PATCH 2/2] Update spire-identity-exchange to 0.3.0 Signed-off-by: Kevin Fox --- examples/rpms/Dockerfile | 2 +- examples/rpms/spire-identity-exchange-server.spec | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/examples/rpms/Dockerfile b/examples/rpms/Dockerfile index a85c417..8b45928 100644 --- a/examples/rpms/Dockerfile +++ b/examples/rpms/Dockerfile @@ -47,7 +47,7 @@ RUN --mount=type=secret,id=gpg \ rpmbuild -ba spire-server-attestor-tpm.spec && \ spectool -g -R spire-credentialcomposer-cel.spec && \ rpmbuild -ba spire-credentialcomposer-cel.spec && \ - spectool -g -R examples/k8s-image-cred-spire-identity-exchange.spec && \ + spectool -g -R k8s-image-cred-spire-identity-exchange.spec && \ rpmbuild -ba k8s-image-cred-spire-identity-exchange.spec && \ spectool -g -R aws-spiffe-workload-helper.spec && \ rpmbuild -ba aws-spiffe-workload-helper.spec && \ diff --git a/examples/rpms/spire-identity-exchange-server.spec b/examples/rpms/spire-identity-exchange-server.spec index a983caf..5c6c98a 100644 --- a/examples/rpms/spire-identity-exchange-server.spec +++ b/examples/rpms/spire-identity-exchange-server.spec @@ -21,7 +21,7 @@ Summary: SPIRE Identity Exchange Server Name: spire-identity-exchange-server -Version: 0.2.0 +Version: 0.3.0 Release: 1 Group: Applications/Internet License: Apache-2.0