1.0 possible breakage list

[kfox1111]

We've tried hard to ensure backwards compatibility, a bit to the detriment of usability out of the box. Before 1.0.0 we may want to have one release where we change the defaults to be easier to use. This issue will track possible things to change.

[kfox1111]

autoPopulateDNSNames maybe should be true rather then false.

[kfox1111]

spire-server.upstreamAuthority.certManager.ca.create could be set to true

[kfox1111]

Should jwt issuer default to include https:// ? (implemented in #120)

[kfox1111]

consider switching default identifiers to include nested names so taking non nested clusters and scale it out to multiple containers doesn't break things.

[kfox1111]

base hostpath socket name on release.namespace-release.name by default so they don't conflict.

[kfox1111]

In spire-agent, the value

socketAlternate:
  image:

could be collapsed into a general tools container along with the permissions fix init container.

[faisal-memon]

Fix up naming so there is consistency between socket and sockets for socket path configs. Only use plural if there are multiple sockets. Reference comment: #234 (comment)

[kfox1111]

ca_subject section here:
https://github.com/spiffe/helm-charts-hardened/blob/main/charts/spire/charts/spire-server/values.yaml#L279-L285

should be updated to follow naming convention.

moved to #454

[kfox1111]

We should go through all the values and ensure they follow the convention. There are a few like spire-server.k8sbundle

moved to #454

[kfox1111]

#269

[kfox1111]

List of vars that dont match convention:

spire-server.dataStore.plugin_data
spire-server.federation.refresh_hint
spire-server.ca_subject.common_name
spire-server.upstreamAuthority.certManager.issuer_name
spire-server.upstreamAuthority.certManager.issuer_group
spire-server.upstreamAuthority.certManager.kube_config_file
spire-server.notifier.k8sbundle
spire-server.nodeAttestor.k8sPsat

spire-agent.nodeAttestor.k8sPsat
spire-agent.sds.defaultSvidName
spire-agent.sds.disableSpiffeCertValidation

moved to #454