feat(operator): fetch JWT-SVID via go-spiffe SDK, remove spiffe-helper sidecar#478

Draft

Alan-Cha wants to merge 12 commits into

mainfrom

feat/spiffe-sdk-jwt

Commits on Jul 12, 2026

docs(values): clarify spiffe.enabled vs spiffe.operatorAuth.enabled and jwtAudience
Alan-Cha
committed
docs(values): document jwtAudience audience mismatch pitfall
Alan-Cha
committed
fix(charts): remove jwtAudience value, always derive from keycloak.publicUrl
Alan-Cha
committed
fix(charts): use v0.5.0-rc.3 as spiffe-helper default tag
Alan-Cha
committed
fix(controller): skip credential secret creation in federated-jwt mode
Alan-Cha
committed
fix(charts): remove noisy comment from spiffe-helper tag
Alan-Cha
committed
revert(charts): remove spiffeHelper.image values, hardcode :latest in template
Alan-Cha
committed
fix(controller): also skip patchTemplate annotation in federated-jwt mode
Alan-Cha
committed