Skip to content

Commit 7865a05

Browse files
authored
Merge pull request #773 from tam7t/automated-cherry-pick-of-#772-upstream-release-1.0
Automated cherry pick of #772: release: update manifests and helm chart for 1.0.0-rc.1
2 parents b3910c6 + 4c4ed0d commit 7865a05

14 files changed

+288
-26
lines changed

charts/secrets-store-csi-driver/Chart.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
apiVersion: v2
22
name: secrets-store-csi-driver
3-
version: 1.0.0-rc.0
4-
appVersion: 1.0.0-rc.0
3+
version: 1.0.0-rc.1
4+
appVersion: 1.0.0-rc.1
55
kubeVersion: ">=1.16.0-0"
66
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes cluster.
77
icon: https://github.com/kubernetes/kubernetes/blob/master/logo/logo.png

charts/secrets-store-csi-driver/README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ The following table lists the configurable parameters of the csi-secrets-store-p
4747
| `fullnameOverride` | String to fully override secrets-store-csi-driver.fullname template with a string | `""` |
4848
| `linux.image.repository` | Linux image repository | `k8s.gcr.io/csi-secrets-store/driver` |
4949
| `linux.image.pullPolicy` | Linux image pull policy | `IfNotPresent` |
50-
| `linux.image.tag` | Linux image tag | `v1.0.0-rc.0` |
50+
| `linux.image.tag` | Linux image tag | `v1.0.0-rc.1` |
5151
| `linux.affinity` | Linux affinity | `key: type; operator: NotIn; values: [virtual-kubelet]` |
5252
| `linux.driver.resources` | The resource request/limits for the linux secrets-store container image | `limits: 200m CPU, 200Mi; requests: 50m CPU, 100Mi` |
5353
| `linux.enabled` | Install secrets store csi driver on linux nodes | true |
@@ -76,7 +76,7 @@ The following table lists the configurable parameters of the csi-secrets-store-p
7676
| `linux.updateStrategy` | Configure a custom update strategy for the daemonset on linux nodes | `RollingUpdate with 1 maxUnavailable` |
7777
| `windows.image.repository` | Windows image repository | `k8s.gcr.io/csi-secrets-store/driver` |
7878
| `windows.image.pullPolicy` | Windows image pull policy | `IfNotPresent` |
79-
| `windows.image.tag` | Windows image tag | `v1.0.0-rc.0` |
79+
| `windows.image.tag` | Windows image tag | `v1.0.0-rc.1` |
8080
| `windows.affinity` | Windows affinity | `key: type; operator: NotIn; values: [virtual-kubelet]` |
8181
| `windows.driver.resources` | The resource request/limits for the windows secrets-store container image | `limits: 400m CPU, 400Mi; requests: 50m CPU, 100Mi` |
8282
| `windows.enabled` | Install secrets store csi driver on windows nodes | false |

charts/secrets-store-csi-driver/crds/secrets-store.csi.x-k8s.io_secretproviderclasses.yaml

Lines changed: 88 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ apiVersion: apiextensions.k8s.io/v1
44
kind: CustomResourceDefinition
55
metadata:
66
annotations:
7-
controller-gen.kubebuilder.io/version: v0.4.0
7+
controller-gen.kubebuilder.io/version: v0.7.0
88
creationTimestamp: null
99
name: secretproviderclasses.secrets-store.csi.x-k8s.io
1010
spec:
@@ -16,7 +16,7 @@ spec:
1616
singular: secretproviderclass
1717
scope: Namespaced
1818
versions:
19-
- name: v1alpha1
19+
- name: v1
2020
schema:
2121
openAPIV3Schema:
2222
description: SecretProviderClass is the Schema for the secretproviderclasses
@@ -102,6 +102,92 @@ spec:
102102
type: object
103103
served: true
104104
storage: true
105+
- name: v1alpha1
106+
schema:
107+
openAPIV3Schema:
108+
description: SecretProviderClass is the Schema for the secretproviderclasses
109+
API
110+
properties:
111+
apiVersion:
112+
description: 'APIVersion defines the versioned schema of this representation
113+
of an object. Servers should convert recognized schemas to the latest
114+
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
115+
type: string
116+
kind:
117+
description: 'Kind is a string value representing the REST resource this
118+
object represents. Servers may infer this from the endpoint the client
119+
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
120+
type: string
121+
metadata:
122+
type: object
123+
spec:
124+
description: SecretProviderClassSpec defines the desired state of SecretProviderClass
125+
properties:
126+
parameters:
127+
additionalProperties:
128+
type: string
129+
description: Configuration for specific provider
130+
type: object
131+
provider:
132+
description: Configuration for provider name
133+
type: string
134+
secretObjects:
135+
items:
136+
description: SecretObject defines the desired state of synced K8s
137+
secret objects
138+
properties:
139+
annotations:
140+
additionalProperties:
141+
type: string
142+
description: annotations of k8s secret object
143+
type: object
144+
data:
145+
items:
146+
description: SecretObjectData defines the desired state of
147+
synced K8s secret object data
148+
properties:
149+
key:
150+
description: data field to populate
151+
type: string
152+
objectName:
153+
description: name of the object to sync
154+
type: string
155+
type: object
156+
type: array
157+
labels:
158+
additionalProperties:
159+
type: string
160+
description: labels of K8s secret object
161+
type: object
162+
secretName:
163+
description: name of the K8s secret object
164+
type: string
165+
type:
166+
description: type of K8s secret object
167+
type: string
168+
type: object
169+
type: array
170+
type: object
171+
status:
172+
description: SecretProviderClassStatus defines the observed state of SecretProviderClass
173+
properties:
174+
byPod:
175+
items:
176+
description: ByPodStatus defines the state of SecretProviderClass
177+
as seen by an individual controller
178+
properties:
179+
id:
180+
description: id of the pod that wrote the status
181+
type: string
182+
namespace:
183+
description: namespace of the pod that wrote the status
184+
type: string
185+
type: object
186+
type: array
187+
type: object
188+
type: object
189+
served: true
190+
storage: false
105191
status:
106192
acceptedNames:
107193
kind: ""

charts/secrets-store-csi-driver/crds/secrets-store.csi.x-k8s.io_secretproviderclasspodstatuses.yaml

Lines changed: 47 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ apiVersion: apiextensions.k8s.io/v1
44
kind: CustomResourceDefinition
55
metadata:
66
annotations:
7-
controller-gen.kubebuilder.io/version: v0.4.0
7+
controller-gen.kubebuilder.io/version: v0.7.0
88
creationTimestamp: null
99
name: secretproviderclasspodstatuses.secrets-store.csi.x-k8s.io
1010
spec:
@@ -16,7 +16,7 @@ spec:
1616
singular: secretproviderclasspodstatus
1717
scope: Namespaced
1818
versions:
19-
- name: v1alpha1
19+
- name: v1
2020
schema:
2121
openAPIV3Schema:
2222
description: SecretProviderClassPodStatus is the Schema for the secretproviderclassespodstatus
@@ -61,6 +61,51 @@ spec:
6161
type: object
6262
served: true
6363
storage: true
64+
- name: v1alpha1
65+
schema:
66+
openAPIV3Schema:
67+
description: SecretProviderClassPodStatus is the Schema for the secretproviderclassespodstatus
68+
API
69+
properties:
70+
apiVersion:
71+
description: 'APIVersion defines the versioned schema of this representation
72+
of an object. Servers should convert recognized schemas to the latest
73+
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
74+
type: string
75+
kind:
76+
description: 'Kind is a string value representing the REST resource this
77+
object represents. Servers may infer this from the endpoint the client
78+
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
79+
type: string
80+
metadata:
81+
type: object
82+
status:
83+
description: SecretProviderClassPodStatusStatus defines the observed state
84+
of SecretProviderClassPodStatus
85+
properties:
86+
mounted:
87+
type: boolean
88+
objects:
89+
items:
90+
description: SecretProviderClassObject defines the object fetched
91+
from external secrets store
92+
properties:
93+
id:
94+
type: string
95+
version:
96+
type: string
97+
type: object
98+
type: array
99+
podName:
100+
type: string
101+
secretProviderClassName:
102+
type: string
103+
targetPath:
104+
type: string
105+
type: object
106+
type: object
107+
served: true
108+
storage: false
64109
status:
65110
acceptedNames:
66111
kind: ""

charts/secrets-store-csi-driver/values.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,13 +2,13 @@ linux:
22
enabled: true
33
image:
44
repository: k8s.gcr.io/csi-secrets-store/driver
5-
tag: v1.0.0-rc.0
5+
tag: v1.0.0-rc.1
66
pullPolicy: IfNotPresent
77

88
crds:
99
image:
1010
repository: k8s.gcr.io/csi-secrets-store/driver-crds
11-
tag: v1.0.0-rc.0
11+
tag: v1.0.0-rc.1
1212
pullPolicy: IfNotPresent
1313
annotations: {}
1414

@@ -93,7 +93,7 @@ windows:
9393
enabled: false
9494
image:
9595
repository: k8s.gcr.io/csi-secrets-store/driver
96-
tag: v1.0.0-rc.0
96+
tag: v1.0.0-rc.1
9797
pullPolicy: IfNotPresent
9898

9999
## Prevent the CSI driver from being scheduled on virtual-kubelet nodes

deploy/secrets-store-csi-driver-windows.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ spec:
5050
cpu: 100m
5151
memory: 100Mi
5252
- name: secrets-store
53-
image: k8s.gcr.io/csi-secrets-store/driver:v1.0.0-rc.0
53+
image: k8s.gcr.io/csi-secrets-store/driver:v1.0.0-rc.1
5454
args:
5555
- "--endpoint=$(CSI_ENDPOINT)"
5656
- "--nodeid=$(KUBE_NODE_NAME)"

deploy/secrets-store-csi-driver.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ spec:
5050
cpu: 10m
5151
memory: 20Mi
5252
- name: secrets-store
53-
image: k8s.gcr.io/csi-secrets-store/driver:v1.0.0-rc.0
53+
image: k8s.gcr.io/csi-secrets-store/driver:v1.0.0-rc.1
5454
args:
5555
- "--endpoint=$(CSI_ENDPOINT)"
5656
- "--nodeid=$(KUBE_NODE_NAME)"

deploy/secrets-store.csi.x-k8s.io_secretproviderclasses.yaml

Lines changed: 88 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ apiVersion: apiextensions.k8s.io/v1
44
kind: CustomResourceDefinition
55
metadata:
66
annotations:
7-
controller-gen.kubebuilder.io/version: v0.4.0
7+
controller-gen.kubebuilder.io/version: v0.7.0
88
creationTimestamp: null
99
name: secretproviderclasses.secrets-store.csi.x-k8s.io
1010
spec:
@@ -16,7 +16,7 @@ spec:
1616
singular: secretproviderclass
1717
scope: Namespaced
1818
versions:
19-
- name: v1alpha1
19+
- name: v1
2020
schema:
2121
openAPIV3Schema:
2222
description: SecretProviderClass is the Schema for the secretproviderclasses
@@ -102,6 +102,92 @@ spec:
102102
type: object
103103
served: true
104104
storage: true
105+
- name: v1alpha1
106+
schema:
107+
openAPIV3Schema:
108+
description: SecretProviderClass is the Schema for the secretproviderclasses
109+
API
110+
properties:
111+
apiVersion:
112+
description: 'APIVersion defines the versioned schema of this representation
113+
of an object. Servers should convert recognized schemas to the latest
114+
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
115+
type: string
116+
kind:
117+
description: 'Kind is a string value representing the REST resource this
118+
object represents. Servers may infer this from the endpoint the client
119+
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
120+
type: string
121+
metadata:
122+
type: object
123+
spec:
124+
description: SecretProviderClassSpec defines the desired state of SecretProviderClass
125+
properties:
126+
parameters:
127+
additionalProperties:
128+
type: string
129+
description: Configuration for specific provider
130+
type: object
131+
provider:
132+
description: Configuration for provider name
133+
type: string
134+
secretObjects:
135+
items:
136+
description: SecretObject defines the desired state of synced K8s
137+
secret objects
138+
properties:
139+
annotations:
140+
additionalProperties:
141+
type: string
142+
description: annotations of k8s secret object
143+
type: object
144+
data:
145+
items:
146+
description: SecretObjectData defines the desired state of
147+
synced K8s secret object data
148+
properties:
149+
key:
150+
description: data field to populate
151+
type: string
152+
objectName:
153+
description: name of the object to sync
154+
type: string
155+
type: object
156+
type: array
157+
labels:
158+
additionalProperties:
159+
type: string
160+
description: labels of K8s secret object
161+
type: object
162+
secretName:
163+
description: name of the K8s secret object
164+
type: string
165+
type:
166+
description: type of K8s secret object
167+
type: string
168+
type: object
169+
type: array
170+
type: object
171+
status:
172+
description: SecretProviderClassStatus defines the observed state of SecretProviderClass
173+
properties:
174+
byPod:
175+
items:
176+
description: ByPodStatus defines the state of SecretProviderClass
177+
as seen by an individual controller
178+
properties:
179+
id:
180+
description: id of the pod that wrote the status
181+
type: string
182+
namespace:
183+
description: namespace of the pod that wrote the status
184+
type: string
185+
type: object
186+
type: array
187+
type: object
188+
type: object
189+
served: true
190+
storage: false
105191
status:
106192
acceptedNames:
107193
kind: ""

0 commit comments

Comments
 (0)