Skip to content

Commit 72f1bf8

Browse files
aramasearamase
committed
release: update manifest and helm charts for v1.1.0-rc.0
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
1 parent 79e0a88 commit 72f1bf8

24 files changed

+272
-113
lines changed

‎charts/secrets-store-csi-driver/Chart.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
apiVersion: v2
22
name: secrets-store-csi-driver
3-
version: 1.0.1
4-
appVersion: 1.0.1
3+
version: 1.1.0-rc.0
4+
appVersion: 1.1.0-rc.0
55
kubeVersion: ">=1.16.0-0"
66
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes cluster.
77
icon: https://github.com/kubernetes/kubernetes/blob/master/logo/logo.png

‎charts/secrets-store-csi-driver/README.md

Lines changed: 78 additions & 92 deletions
Large diffs are not rendered by default.

‎charts/secrets-store-csi-driver/crds/secrets-store.csi.x-k8s.io_secretproviderclasses.yaml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -102,7 +102,10 @@ spec:
102102
type: object
103103
served: true
104104
storage: true
105-
- name: v1alpha1
105+
- deprecated: true
106+
deprecationWarning: secrets-store.csi.x-k8s.io/v1alpha1 is deprecated. Use secrets-store.csi.x-k8s.io/v1
107+
instead.
108+
name: v1alpha1
106109
schema:
107110
openAPIV3Schema:
108111
description: SecretProviderClass is the Schema for the secretproviderclasses

‎charts/secrets-store-csi-driver/crds/secrets-store.csi.x-k8s.io_secretproviderclasspodstatuses.yaml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,8 @@ spec:
6161
type: object
6262
served: true
6363
storage: true
64-
- name: v1alpha1
64+
- deprecated: true
65+
name: v1alpha1
6566
schema:
6667
openAPIV3Schema:
6768
description: SecretProviderClassPodStatus is the Schema for the secretproviderclassespodstatus

‎charts/secrets-store-csi-driver/templates/csidriver.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,3 +8,7 @@ spec:
88
# Added in Kubernetes 1.16 with default mode of Persistent. Secrets store csi driver needs Ephermeral to be set.
99
volumeLifecycleModes:
1010
- Ephemeral
11+
{{- if .Values.tokenRequests }}
12+
tokenRequests:
13+
{{- toYaml .Values.tokenRequests | nindent 2}}
14+
{{- end }}

‎charts/secrets-store-csi-driver/templates/role-secretproviderclasses-admin.yaml

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{{ if .Values.rbac.install }}
2+
3+
---
4+
apiVersion: rbac.authorization.k8s.io/v1
5+
kind: ClusterRole
6+
metadata:
7+
creationTimestamp: null
8+
labels:
9+
rbac.authorization.k8s.io/aggregate-to-admin: "true"
10+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
11+
name: secretproviderclasses-admin-role
12+
rules:
13+
- apiGroups:
14+
- secrets-store.csi.x-k8s.io
15+
resources:
16+
- secretproviderclasses
17+
verbs:
18+
- get
19+
- list
20+
- watch
21+
- create
22+
- update
23+
- patch
24+
- delete
25+
{{ end }}

‎charts/secrets-store-csi-driver/templates/role-secretproviderclasses-viewer.yaml

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
{{ if .Values.rbac.install }}
2+
3+
---
4+
apiVersion: rbac.authorization.k8s.io/v1
5+
kind: ClusterRole
6+
metadata:
7+
creationTimestamp: null
8+
labels:
9+
rbac.authorization.k8s.io/aggregate-to-view: "true"
10+
name: secretproviderclasses-viewer-role
11+
rules:
12+
- apiGroups:
13+
- secrets-store.csi.x-k8s.io
14+
resources:
15+
- secretproviderclasses
16+
verbs:
17+
- get
18+
- list
19+
- watch
20+
{{ end }}

‎charts/secrets-store-csi-driver/templates/role-tokenrequest.yaml

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
{{ if .Values.tokenRequests }}
2+
3+
---
4+
apiVersion: rbac.authorization.k8s.io/v1
5+
kind: ClusterRole
6+
metadata:
7+
creationTimestamp: null
8+
name: secretprovidertokenrequest-role
9+
rules:
10+
- apiGroups:
11+
- ""
12+
resources:
13+
- serviceaccounts/token
14+
verbs:
15+
- create
16+
{{ end }}

‎charts/secrets-store-csi-driver/templates/role-tokenrequest_binding.yaml

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
{{ if .Values.tokenRequests }}
2+
apiVersion: rbac.authorization.k8s.io/v1
3+
kind: ClusterRoleBinding
4+
metadata:
5+
name: secretprovidertokenrequest-rolebinding
6+
roleRef:
7+
apiGroup: rbac.authorization.k8s.io
8+
kind: ClusterRole
9+
name: secretprovidertokenrequest-role
10+
subjects:
11+
- kind: ServiceAccount
12+
name: secrets-store-csi-driver
13+
namespace: {{ .Release.Namespace }}
14+
{{ end }}

‎charts/secrets-store-csi-driver/templates/role.yaml

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -50,6 +50,16 @@ rules:
5050
- get
5151
- patch
5252
- update
53+
- apiGroups:
54+
- storage.k8s.io
55+
resourceNames:
56+
- secrets-store.csi.k8s.io
57+
resources:
58+
- csidrivers
59+
verbs:
60+
- get
61+
- list
62+
- watch
5363
{{- if .Values.rbac.pspEnabled }}
5464
- apiGroups:
5565
- policy

‎charts/secrets-store-csi-driver/values.yaml

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,13 +2,13 @@ linux:
22
enabled: true
33
image:
44
repository: k8s.gcr.io/csi-secrets-store/driver
5-
tag: v1.0.1
5+
tag: v1.1.0-rc.0
66
pullPolicy: IfNotPresent
77

88
crds:
99
image:
1010
repository: k8s.gcr.io/csi-secrets-store/driver-crds
11-
tag: v1.0.1
11+
tag: v1.1.0-rc.0
1212
pullPolicy: IfNotPresent
1313
annotations: {}
1414

@@ -93,7 +93,7 @@ windows:
9393
enabled: false
9494
image:
9595
repository: k8s.gcr.io/csi-secrets-store/driver
96-
tag: v1.0.1
96+
tag: v1.1.0-rc.0
9797
pullPolicy: IfNotPresent
9898

9999
## Prevent the CSI driver from being scheduled on virtual-kubelet nodes
@@ -207,3 +207,9 @@ providerHealthCheck: false
207207
providerHealthCheckInterval: 2m
208208

209209
imagePullSecrets: []
210+
211+
## This allows CSI drivers to impersonate the pods that they mount the volumes for.
212+
# refer to https://kubernetes-csi.github.io/docs/token-requests.html for more details.
213+
tokenRequests: []
214+
# - audience: aud1
215+
# - audience: aud2

‎deploy/rbac-secretproviderclass.yaml

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -53,6 +53,16 @@ rules:
5353
- get
5454
- patch
5555
- update
56+
- apiGroups:
57+
- storage.k8s.io
58+
resourceNames:
59+
- secrets-store.csi.k8s.io
60+
resources:
61+
- csidrivers
62+
verbs:
63+
- get
64+
- list
65+
- watch
5666
---
5767
apiVersion: rbac.authorization.k8s.io/v1
5868
kind: ClusterRoleBinding

‎deploy/rbac-secretprovidertokenrequest.yaml

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
creationTimestamp: null
5+
name: secretprovidertokenrequest-role
6+
rules:
7+
- apiGroups:
8+
- ""
9+
resources:
10+
- serviceaccounts/token
11+
verbs:
12+
- create
13+
---
14+
apiVersion: rbac.authorization.k8s.io/v1
15+
kind: ClusterRoleBinding
16+
metadata:
17+
name: secretprovidertokenrequest-rolebinding
18+
roleRef:
19+
apiGroup: rbac.authorization.k8s.io
20+
kind: ClusterRole
21+
name: secretprovidertokenrequest-role
22+
subjects:
23+
- kind: ServiceAccount
24+
name: secrets-store-csi-driver
25+
namespace: kube-system

‎deploy/role-secretproviderclasses-admin.yaml

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
labels:
5+
rbac.authorization.k8s.io/aggregate-to-admin: "true"
6+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
7+
name: secretproviderclasses-admin-role
8+
rules:
9+
- apiGroups:
10+
- secrets-store.csi.x-k8s.io
11+
resources:
12+
- secretproviderclasses
13+
verbs:
14+
- get
15+
- list
16+
- watch
17+
- create
18+
- update
19+
- patch
20+
- delete

‎deploy/role-secretproviderclasses-viewer.yaml

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
labels:
5+
rbac.authorization.k8s.io/aggregate-to-view: "true"
6+
name: secretproviderclasses-viewer-role
7+
rules:
8+
- apiGroups:
9+
- secrets-store.csi.x-k8s.io
10+
resources:
11+
- secretproviderclasses
12+
verbs:
13+
- get
14+
- list
15+
- watch

‎deploy/secrets-store-csi-driver-windows.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ spec:
5050
cpu: 100m
5151
memory: 100Mi
5252
- name: secrets-store
53-
image: k8s.gcr.io/csi-secrets-store/driver:v1.0.1
53+
image: k8s.gcr.io/csi-secrets-store/driver:v1.1.0-rc.0
5454
args:
5555
- "--endpoint=$(CSI_ENDPOINT)"
5656
- "--nodeid=$(KUBE_NODE_NAME)"

‎deploy/secrets-store-csi-driver.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ spec:
5050
cpu: 10m
5151
memory: 20Mi
5252
- name: secrets-store
53-
image: k8s.gcr.io/csi-secrets-store/driver:v1.0.1
53+
image: k8s.gcr.io/csi-secrets-store/driver:v1.1.0-rc.0
5454
args:
5555
- "--endpoint=$(CSI_ENDPOINT)"
5656
- "--nodeid=$(KUBE_NODE_NAME)"

‎deploy/secrets-store.csi.x-k8s.io_secretproviderclasses.yaml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -102,7 +102,10 @@ spec:
102102
type: object
103103
served: true
104104
storage: true
105-
- name: v1alpha1
105+
- deprecated: true
106+
deprecationWarning: secrets-store.csi.x-k8s.io/v1alpha1 is deprecated. Use secrets-store.csi.x-k8s.io/v1
107+
instead.
108+
name: v1alpha1
106109
schema:
107110
openAPIV3Schema:
108111
description: SecretProviderClass is the Schema for the secretproviderclasses

‎deploy/secrets-store.csi.x-k8s.io_secretproviderclasspodstatuses.yaml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,8 @@ spec:
6161
type: object
6262
served: true
6363
storage: true
64-
- name: v1alpha1
64+
- deprecated: true
65+
name: v1alpha1
6566
schema:
6667
openAPIV3Schema:
6768
description: SecretProviderClassPodStatus is the Schema for the secretproviderclassespodstatus

‎manifest_staging/charts/secrets-store-csi-driver/Chart.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
apiVersion: v2
22
name: secrets-store-csi-driver
3-
version: 1.0.1
4-
appVersion: 1.0.1
3+
version: 1.1.0-rc.0
4+
appVersion: 1.1.0-rc.0
55
kubeVersion: ">=1.16.0-0"
66
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes cluster.
77
icon: https://github.com/kubernetes/kubernetes/blob/master/logo/logo.png

‎manifest_staging/charts/secrets-store-csi-driver/README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -32,10 +32,10 @@ The following table lists the configurable parameters of the csi-secrets-store-p
3232
| `fullnameOverride` | String to fully override secrets-store-csi-driver.fullname template with a string | `""` |
3333
| `linux.image.repository` | Linux image repository | `k8s.gcr.io/csi-secrets-store/driver` |
3434
| `linux.image.pullPolicy` | Linux image pull policy | `IfNotPresent` |
35-
| `linux.image.tag` | Linux image tag | `v1.0.1` |
35+
| `linux.image.tag` | Linux image tag | `v1.1.0-rc.0` |
3636
| `linux.crds.image.repository` | Linux crds image repository | `k8s.gcr.io/csi-secrets-store/driver-crds` |
3737
| `linux.crds.image.pullPolicy` | Linux crds image pull policy | `IfNotPresent` |
38-
| `linux.crds.image.tag` | Linux crds image tag | `v1.0.1` |
38+
| `linux.crds.image.tag` | Linux crds image tag | `v1.1.0-rc.0` |
3939
| `linux.affinity` | Linux affinity | `key: type; operator: NotIn; values: [virtual-kubelet]` |
4040
| `linux.driver.resources` | The resource request/limits for the linux secrets-store container image | `limits: 200m CPU, 200Mi; requests: 50m CPU, 100Mi` |
4141
| `linux.enabled` | Install secrets store csi driver on linux nodes | true |
@@ -64,7 +64,7 @@ The following table lists the configurable parameters of the csi-secrets-store-p
6464
| `linux.updateStrategy` | Configure a custom update strategy for the daemonset on linux nodes | `RollingUpdate with 1 maxUnavailable` |
6565
| `windows.image.repository` | Windows image repository | `k8s.gcr.io/csi-secrets-store/driver` |
6666
| `windows.image.pullPolicy` | Windows image pull policy | `IfNotPresent` |
67-
| `windows.image.tag` | Windows image tag | `v1.0.1` |
67+
| `windows.image.tag` | Windows image tag | `v1.1.0-rc.0` |
6868
| `windows.affinity` | Windows affinity | `key: type; operator: NotIn; values: [virtual-kubelet]` |
6969
| `windows.driver.resources` | The resource request/limits for the windows secrets-store container image | `limits: 400m CPU, 400Mi; requests: 50m CPU, 100Mi` |
7070
| `windows.enabled` | Install secrets store csi driver on windows nodes | false |

‎manifest_staging/charts/secrets-store-csi-driver/values.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,13 +2,13 @@ linux:
22
enabled: true
33
image:
44
repository: k8s.gcr.io/csi-secrets-store/driver
5-
tag: v1.0.1
5+
tag: v1.1.0-rc.0
66
pullPolicy: IfNotPresent
77

88
crds:
99
image:
1010
repository: k8s.gcr.io/csi-secrets-store/driver-crds
11-
tag: v1.0.1
11+
tag: v1.1.0-rc.0
1212
pullPolicy: IfNotPresent
1313
annotations: {}
1414

@@ -93,7 +93,7 @@ windows:
9393
enabled: false
9494
image:
9595
repository: k8s.gcr.io/csi-secrets-store/driver
96-
tag: v1.0.1
96+
tag: v1.1.0-rc.0
9797
pullPolicy: IfNotPresent
9898

9999
## Prevent the CSI driver from being scheduled on virtual-kubelet nodes

‎manifest_staging/deploy/secrets-store-csi-driver-windows.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ spec:
5050
cpu: 100m
5151
memory: 100Mi
5252
- name: secrets-store
53-
image: k8s.gcr.io/csi-secrets-store/driver:v1.0.1
53+
image: k8s.gcr.io/csi-secrets-store/driver:v1.1.0-rc.0
5454
args:
5555
- "--endpoint=$(CSI_ENDPOINT)"
5656
- "--nodeid=$(KUBE_NODE_NAME)"

‎manifest_staging/deploy/secrets-store-csi-driver.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ spec:
5050
cpu: 10m
5151
memory: 20Mi
5252
- name: secrets-store
53-
image: k8s.gcr.io/csi-secrets-store/driver:v1.0.1
53+
image: k8s.gcr.io/csi-secrets-store/driver:v1.1.0-rc.0
5454
args:
5555
- "--endpoint=$(CSI_ENDPOINT)"
5656
- "--nodeid=$(KUBE_NODE_NAME)"

0 commit comments

Comments
 (0)