Skip to content

Commit 1c7fda4

Browse files
aramasearamase
committed
release: update manifest and helm charts for v1.3.0
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
1 parent 9ababf4 commit 1c7fda4

13 files changed

+84
-51
lines changed

‎charts/secrets-store-csi-driver/Chart.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
apiVersion: v2
22
name: secrets-store-csi-driver
3-
version: 1.2.4
4-
appVersion: 1.2.4
3+
version: 1.3.0
4+
appVersion: 1.3.0
55
kubeVersion: ">=1.16.0-0"
66
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes cluster.
77
icon: https://github.com/kubernetes/kubernetes/blob/master/logo/logo.png

‎charts/secrets-store-csi-driver/README.md

Lines changed: 18 additions & 16 deletions
Large diffs are not rendered by default.

‎charts/secrets-store-csi-driver/templates/crds-upgrade-hook.yaml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
1+
{{- if .Values.linux.crds.enabled -}}
12
apiVersion: rbac.authorization.k8s.io/v1
23
kind: ClusterRole
34
metadata:
@@ -114,6 +115,10 @@ spec:
114115
- -f
115116
- crds/
116117
imagePullPolicy: {{ .Values.linux.crds.image.pullPolicy }}
118+
{{- with .Values.linux.crds.resources }}
119+
resources:
120+
{{- toYaml . | nindent 10 }}
121+
{{- end }}
117122
nodeSelector:
118123
kubernetes.io/os: linux
119124
{{- if .Values.linux.nodeSelector }}
@@ -123,3 +128,4 @@ spec:
123128
tolerations:
124129
{{ toYaml . | indent 8 }}
125130
{{- end }}
131+
{{- end }}

‎charts/secrets-store-csi-driver/templates/keep-crds-upgrade-hook.yaml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
1+
{{- if .Values.linux.crds.enabled -}}
12
apiVersion: rbac.authorization.k8s.io/v1
23
kind: ClusterRole
34
metadata:
@@ -117,6 +118,10 @@ spec:
117118
- -p
118119
- '{"metadata":{"annotations": {"helm.sh/resource-policy": "keep"}}}'
119120
imagePullPolicy: {{ .Values.linux.crds.image.pullPolicy }}
121+
{{- with .Values.linux.crds.resources }}
122+
resources:
123+
{{- toYaml . | nindent 10 }}
124+
{{- end }}
120125
nodeSelector:
121126
kubernetes.io/os: linux
122127
{{- if .Values.linux.nodeSelector }}
@@ -126,3 +131,4 @@ spec:
126131
tolerations:
127132
{{ toYaml . | indent 8 }}
128133
{{- end }}
134+
{{- end }}

‎charts/secrets-store-csi-driver/templates/secrets-store-csi-driver.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,12 @@ spec:
1818
{{ toYaml .Values.linux.updateStrategy | indent 4 }}
1919
template:
2020
metadata:
21-
annotations:
2221
labels:
2322
{{ include "sscd.labels" . | indent 8 }}
2423
{{- if .Values.linux.podLabels }}
2524
{{- toYaml .Values.linux.podLabels | nindent 8 }}
2625
{{- end }}
26+
annotations:
2727
kubectl.kubernetes.io/default-container: secrets-store
2828
{{- if .Values.linux.podAnnotations }}
2929
{{ toYaml .Values.linux.podAnnotations | indent 8 }}

‎charts/secrets-store-csi-driver/values.yaml

Lines changed: 31 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,24 @@
11
linux:
22
enabled: true
33
image:
4-
repository: k8s.gcr.io/csi-secrets-store/driver
5-
tag: v1.2.4
4+
repository: registry.k8s.io/csi-secrets-store/driver
5+
tag: v1.3.0
66
pullPolicy: IfNotPresent
77

88
crds:
9+
enabled: true
910
image:
10-
repository: k8s.gcr.io/csi-secrets-store/driver-crds
11-
tag: v1.2.4
11+
repository: registry.k8s.io/csi-secrets-store/driver-crds
12+
tag: v1.3.0
1213
pullPolicy: IfNotPresent
14+
## Optionally override resource limits for crd hooks(jobs)
15+
resources: {}
16+
# requests:
17+
# cpu: "100m"
18+
# memory: "128Mi"
19+
# limits:
20+
# cpu: "500m"
21+
# memory: "512Mi"
1322
annotations: {}
1423
podLabels: {}
1524

@@ -34,8 +43,8 @@ linux:
3443
memory: 100Mi
3544

3645
registrarImage:
37-
repository: k8s.gcr.io/sig-storage/csi-node-driver-registrar
38-
tag: v2.5.1
46+
repository: registry.k8s.io/sig-storage/csi-node-driver-registrar
47+
tag: v2.6.2
3948
pullPolicy: IfNotPresent
4049

4150
registrar:
@@ -49,8 +58,8 @@ linux:
4958
logVerbosity: 5
5059

5160
livenessProbeImage:
52-
repository: k8s.gcr.io/sig-storage/livenessprobe
53-
tag: v2.7.0
61+
repository: registry.k8s.io/sig-storage/livenessprobe
62+
tag: v2.8.0
5463
pullPolicy: IfNotPresent
5564

5665
livenessProbe:
@@ -72,7 +81,10 @@ linux:
7281
additionalProvidersDirs:
7382
- /etc/kubernetes/secrets-store-csi-providers
7483
nodeSelector: {}
75-
tolerations: []
84+
# ref: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
85+
# An empty key with operator Exists matches all keys, values and effects which means this will tolerate everything.
86+
tolerations:
87+
- operator: "Exists"
7688
metricsAddr: ":8095"
7789
env: []
7890
priorityClassName: ""
@@ -94,8 +106,8 @@ linux:
94106
windows:
95107
enabled: false
96108
image:
97-
repository: k8s.gcr.io/csi-secrets-store/driver
98-
tag: v1.2.4
109+
repository: registry.k8s.io/csi-secrets-store/driver
110+
tag: v1.3.0
99111
pullPolicy: IfNotPresent
100112

101113
## Prevent the CSI driver from being scheduled on virtual-kubelet nodes
@@ -119,8 +131,8 @@ windows:
119131
memory: 100Mi
120132

121133
registrarImage:
122-
repository: k8s.gcr.io/sig-storage/csi-node-driver-registrar
123-
tag: v2.5.1
134+
repository: registry.k8s.io/sig-storage/csi-node-driver-registrar
135+
tag: v2.6.2
124136
pullPolicy: IfNotPresent
125137

126138
registrar:
@@ -134,8 +146,8 @@ windows:
134146
logVerbosity: 5
135147

136148
livenessProbeImage:
137-
repository: k8s.gcr.io/sig-storage/livenessprobe
138-
tag: v2.7.0
149+
repository: registry.k8s.io/sig-storage/livenessprobe
150+
tag: v2.8.0
139151
pullPolicy: IfNotPresent
140152

141153
livenessProbe:
@@ -156,7 +168,10 @@ windows:
156168
providersDir: C:\\k\\secrets-store-csi-providers
157169
additionalProvidersDirs:
158170
nodeSelector: {}
159-
tolerations: []
171+
# ref: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
172+
# An empty key with operator Exists matches all keys, values and effects which means this will tolerate everything.
173+
tolerations:
174+
- operator: "Exists"
160175
metricsAddr: ":8095"
161176
env: []
162177
priorityClassName: ""

‎deploy/secrets-store-csi-driver-windows.yaml

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ spec:
1717
serviceAccountName: secrets-store-csi-driver
1818
containers:
1919
- name: node-driver-registrar
20-
image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.5.1
20+
image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.6.2
2121
args:
2222
- --v=5
2323
- "--csi-address=unix://C:\\csi\\csi.sock"
@@ -44,7 +44,7 @@ spec:
4444
cpu: 100m
4545
memory: 100Mi
4646
- name: secrets-store
47-
image: k8s.gcr.io/csi-secrets-store/driver:v1.2.4
47+
image: registry.k8s.io/csi-secrets-store/driver:v1.3.0
4848
args:
4949
- "--endpoint=$(CSI_ENDPOINT)"
5050
- "--nodeid=$(KUBE_NODE_NAME)"
@@ -93,7 +93,7 @@ spec:
9393
- name: providers-dir
9494
mountPath: C:\k\secrets-store-csi-providers
9595
- name: liveness-probe
96-
image: k8s.gcr.io/sig-storage/livenessprobe:v2.7.0
96+
image: registry.k8s.io/sig-storage/livenessprobe:v2.8.0
9797
imagePullPolicy: IfNotPresent
9898
args:
9999
- "--csi-address=unix://C:\\csi\\csi.sock"
@@ -127,5 +127,7 @@ spec:
127127
hostPath:
128128
path: C:\k\secrets-store-csi-providers\
129129
type: DirectoryOrCreate
130+
tolerations:
131+
- operator: Exists
130132
nodeSelector:
131133
kubernetes.io/os: windows

‎deploy/secrets-store-csi-driver.yaml

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ spec:
1717
serviceAccountName: secrets-store-csi-driver
1818
containers:
1919
- name: node-driver-registrar
20-
image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.5.1
20+
image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.6.2
2121
args:
2222
- --v=5
2323
- --csi-address=/csi/csi.sock
@@ -44,7 +44,7 @@ spec:
4444
cpu: 10m
4545
memory: 20Mi
4646
- name: secrets-store
47-
image: k8s.gcr.io/csi-secrets-store/driver:v1.2.4
47+
image: registry.k8s.io/csi-secrets-store/driver:v1.3.0
4848
args:
4949
- "--endpoint=$(CSI_ENDPOINT)"
5050
- "--nodeid=$(KUBE_NODE_NAME)"
@@ -99,7 +99,7 @@ spec:
9999
cpu: 50m
100100
memory: 100Mi
101101
- name: liveness-probe
102-
image: k8s.gcr.io/sig-storage/livenessprobe:v2.7.0
102+
image: registry.k8s.io/sig-storage/livenessprobe:v2.8.0
103103
imagePullPolicy: IfNotPresent
104104
args:
105105
- --csi-address=/csi/csi.sock
@@ -137,5 +137,7 @@ spec:
137137
hostPath:
138138
path: /var/run/secrets-store-csi-providers
139139
type: DirectoryOrCreate
140+
tolerations:
141+
- operator: Exists
140142
nodeSelector:
141143
kubernetes.io/os: linux

‎manifest_staging/charts/secrets-store-csi-driver/Chart.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
apiVersion: v2
22
name: secrets-store-csi-driver
3-
version: 1.2.4
4-
appVersion: 1.2.4
3+
version: 1.3.0
4+
appVersion: 1.3.0
55
kubeVersion: ">=1.16.0-0"
66
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes cluster.
77
icon: https://github.com/kubernetes/kubernetes/blob/master/logo/logo.png

‎manifest_staging/charts/secrets-store-csi-driver/README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -33,11 +33,11 @@ The following table lists the configurable parameters of the csi-secrets-store-p
3333
| `fullnameOverride` | String to fully override secrets-store-csi-driver.fullname template with a string | `""` |
3434
| `linux.image.repository` | Linux image repository | `registry.k8s.io/csi-secrets-store/driver` |
3535
| `linux.image.pullPolicy` | Linux image pull policy | `IfNotPresent` |
36-
| `linux.image.tag` | Linux image tag | `v1.2.4` |
36+
| `linux.image.tag` | Linux image tag | `v1.3.0` |
3737
| `linux.crds.enabled` | If the CRDs should be managed by the chart | `true` |
3838
| `linux.crds.image.repository` | Linux crds image repository | `registry.k8s.io/csi-secrets-store/driver-crds` |
3939
| `linux.crds.image.pullPolicy` | Linux crds image pull policy | `IfNotPresent` |
40-
| `linux.crds.image.tag` | Linux crds image tag | `v1.2.4` |
40+
| `linux.crds.image.tag` | Linux crds image tag | `v1.3.0` |
4141
| `linux.crds.resources` | The resource request/limits for the linux crds container image | `{}` |
4242
| `linux.crds.podLabels` | Linux *Pod* labels appended to CRD helm hook job pods | `{}` |
4343
| `linux.affinity` | Linux affinity | `key: type; operator: NotIn; values: [virtual-kubelet]` |
@@ -69,7 +69,7 @@ The following table lists the configurable parameters of the csi-secrets-store-p
6969
| `linux.updateStrategy` | Configure a custom update strategy for the daemonset on linux nodes | `RollingUpdate with 1 maxUnavailable` |
7070
| `windows.image.repository` | Windows image repository | `registry.k8s.io/csi-secrets-store/driver` |
7171
| `windows.image.pullPolicy` | Windows image pull policy | `IfNotPresent` |
72-
| `windows.image.tag` | Windows image tag | `v1.2.4` |
72+
| `windows.image.tag` | Windows image tag | `v1.3.0` |
7373
| `windows.affinity` | Windows affinity | `key: type; operator: NotIn; values: [virtual-kubelet]` |
7474
| `windows.driver.resources` | The resource request/limits for the windows secrets-store container image | `limits: 400m CPU, 400Mi; requests: 50m CPU, 100Mi` |
7575
| `windows.enabled` | Install secrets store csi driver on windows nodes | false |

‎manifest_staging/charts/secrets-store-csi-driver/values.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,14 +2,14 @@ linux:
22
enabled: true
33
image:
44
repository: registry.k8s.io/csi-secrets-store/driver
5-
tag: v1.2.4
5+
tag: v1.3.0
66
pullPolicy: IfNotPresent
77

88
crds:
99
enabled: true
1010
image:
1111
repository: registry.k8s.io/csi-secrets-store/driver-crds
12-
tag: v1.2.4
12+
tag: v1.3.0
1313
pullPolicy: IfNotPresent
1414
## Optionally override resource limits for crd hooks(jobs)
1515
resources: {}
@@ -107,7 +107,7 @@ windows:
107107
enabled: false
108108
image:
109109
repository: registry.k8s.io/csi-secrets-store/driver
110-
tag: v1.2.4
110+
tag: v1.3.0
111111
pullPolicy: IfNotPresent
112112

113113
## Prevent the CSI driver from being scheduled on virtual-kubelet nodes

‎manifest_staging/deploy/secrets-store-csi-driver-windows.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ spec:
4444
cpu: 100m
4545
memory: 100Mi
4646
- name: secrets-store
47-
image: registry.k8s.io/csi-secrets-store/driver:v1.2.4
47+
image: registry.k8s.io/csi-secrets-store/driver:v1.3.0
4848
args:
4949
- "--endpoint=$(CSI_ENDPOINT)"
5050
- "--nodeid=$(KUBE_NODE_NAME)"

‎manifest_staging/deploy/secrets-store-csi-driver.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ spec:
4444
cpu: 10m
4545
memory: 20Mi
4646
- name: secrets-store
47-
image: registry.k8s.io/csi-secrets-store/driver:v1.2.4
47+
image: registry.k8s.io/csi-secrets-store/driver:v1.3.0
4848
args:
4949
- "--endpoint=$(CSI_ENDPOINT)"
5050
- "--nodeid=$(KUBE_NODE_NAME)"

0 commit comments

Comments
 (0)