Skip to content

Commit 7aec51d

Browse files
authored
Merge pull request #336 from aramase/release-v0.0.15
release: update manifest and helm charts for v0.0.15
2 parents 55bbe4d + 9f5edf4 commit 7aec51d

18 files changed

+104
-33
lines changed

charts/index.yaml

Lines changed: 24 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,26 @@
11
apiVersion: v1
22
entries:
33
secrets-store-csi-driver:
4+
- apiVersion: v1
5+
appVersion: 0.0.15
6+
created: "2020-10-07T11:08:58.823126-07:00"
7+
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes
8+
cluster.
9+
digest: 155ead450f2f8824f99f8508a11d14ae703084a5b95d7dbac391658199cf4a9a
10+
icon: https://github.com/kubernetes/kubernetes/blob/master/logo/logo.png
11+
kubeVersion: '>=1.16.0-0'
12+
maintainers:
13+
- email: ritazh@microsoft.com
14+
name: Rita Zhang
15+
name: secrets-store-csi-driver
16+
sources:
17+
- https://github.com/kubernetes-sigs/secrets-store-csi-driver
18+
urls:
19+
- https://raw.githubusercontent.com/kubernetes-sigs/secrets-store-csi-driver/master/charts/secrets-store-csi-driver-0.0.15.tgz
20+
version: 0.0.15
421
- apiVersion: v1
522
appVersion: 0.0.14
6-
created: "2020-09-17T12:11:25.687333-07:00"
23+
created: "2020-10-07T11:08:58.822085-07:00"
724
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes
825
cluster.
926
digest: 6390ebd13eeb76d1ed22263831d5383f8258bec1731d4f98e6c8dfe8b6256249
@@ -20,7 +37,7 @@ entries:
2037
version: 0.0.14
2138
- apiVersion: v1
2239
appVersion: 0.0.13
23-
created: "2020-09-17T12:11:25.686272-07:00"
40+
created: "2020-10-07T11:08:58.820706-07:00"
2441
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes
2542
cluster.
2643
digest: 426ea403ad1083cae569a13d8ecf686e4797b7816f6254709070afc4f4b858ab
@@ -37,7 +54,7 @@ entries:
3754
version: 0.0.13
3855
- apiVersion: v1
3956
appVersion: 0.0.12
40-
created: "2020-09-17T12:11:25.684686-07:00"
57+
created: "2020-10-07T11:08:58.819399-07:00"
4158
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes
4259
cluster.
4360
digest: 0c132d4be8c4eb48109a4fe8cc0ce29e6fc9f68647bb522c4040d033861a0e78
@@ -54,7 +71,7 @@ entries:
5471
version: 0.0.12
5572
- apiVersion: v1
5673
appVersion: 0.0.11
57-
created: "2020-09-17T12:11:25.683375-07:00"
74+
created: "2020-10-07T11:08:58.818164-07:00"
5875
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes
5976
cluster.
6077
digest: 2751ae7aed8ea2fc7dcdcbbf26240fccb2eefd83d3943cef45bb58bb1d297692
@@ -71,7 +88,7 @@ entries:
7188
version: 0.0.11
7289
- apiVersion: v1
7390
appVersion: 0.0.10
74-
created: "2020-09-17T12:11:25.681638-07:00"
91+
created: "2020-10-07T11:08:58.816565-07:00"
7592
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes
7693
cluster.
7794
digest: 9fae95e4611c9c120ed12505e735680b70ed133ea987fd32db05046cb45eda9e
@@ -88,7 +105,7 @@ entries:
88105
version: 0.0.10
89106
- apiVersion: v1
90107
appVersion: 0.0.9
91-
created: "2020-09-17T12:11:25.689493-07:00"
108+
created: "2020-10-07T11:08:58.823906-07:00"
92109
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes
93110
cluster.
94111
digest: 0f74454ca36c979a352d8a7b6d847521897ebf78195527ed8946201a841887a7
@@ -103,4 +120,4 @@ entries:
103120
urls:
104121
- https://raw.githubusercontent.com/kubernetes-sigs/secrets-store-csi-driver/master/charts/secrets-store-csi-driver-0.0.9.tgz
105122
version: 0.0.9
106-
generated: "2020-09-17T12:11:25.679851-07:00"
123+
generated: "2020-10-07T11:08:58.813708-07:00"
6.45 KB
Binary file not shown.

charts/secrets-store-csi-driver/Chart.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
apiVersion: v1
22
name: secrets-store-csi-driver
3-
version: 0.0.14
4-
appVersion: 0.0.14
3+
version: 0.0.15
4+
appVersion: 0.0.15
55
kubeVersion: ">=1.16.0-0"
66
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes cluster.
77
icon: https://github.com/kubernetes/kubernetes/blob/master/logo/logo.png

charts/secrets-store-csi-driver/README.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -25,13 +25,13 @@ The following table lists the configurable parameters of the csi-secrets-store-p
2525
| `fullnameOverride` | String to fully override secrets-store-csi-driver.fullname template with a string | `""` |
2626
| `linux.image.repository` | Linux image repository | `us.gcr.io/k8s-artifacts-prod/csi-secrets-store/driver` |
2727
| `linux.image.pullPolicy` | Linux image pull policy | `Always` |
28-
| `linux.image.tag` | Linux image tag | `v0.0.14` |
28+
| `linux.image.tag` | Linux image tag | `v0.0.15` |
2929
| `linux.driver.resources` | The resource request/limits for the linux secrets-store container image | `limits: 200m CPU, 200Mi; requests: 50m CPU, 100Mi` |
3030
| `linux.enabled` | Install secrets store csi driver on linux nodes | true |
3131
| `linux.kubeletRootDir` | Configure the kubelet root dir | `/var/lib/kubelet` |
3232
| `linux.nodeSelector` | Node Selector for the daemonset on linux nodes | `{}` |
3333
| `linux.tolerations` | Tolerations for the daemonset on linux nodes | `[]` |
34-
| `linux.metricsAddr` | The address the metric endpoint binds to | `:8080` |
34+
| `linux.metricsAddr` | The address the metric endpoint binds to | `:8095` |
3535
| `linux.registrarImage.repository` | Linux node-driver-registrar image repository | `quay.io/k8scsi/csi-node-driver-registrar` |
3636
| `linux.registrarImage.pullPolicy` | Linux node-driver-registrar image pull policy | `Always` |
3737
| `linux.registrarImage.tag` | Linux node-driver-registrar image tag | `v1.2.0` |
@@ -43,13 +43,13 @@ The following table lists the configurable parameters of the csi-secrets-store-p
4343
| `linux.env` | Environment variables to be passed for the daemonset on linux nodes | `[]` |
4444
| `windows.image.repository` | Windows image repository | `us.gcr.io/k8s-artifacts-prod/csi-secrets-store/driver` |
4545
| `windows.image.pullPolicy` | Windows image pull policy | `IfNotPresent` |
46-
| `windows.image.tag` | Windows image tag | `v0.0.14` |
46+
| `windows.image.tag` | Windows image tag | `v0.0.15` |
4747
| `windows.driver.resources` | The resource request/limits for the windows secrets-store container image | `limits: 400m CPU, 400Mi; requests: 50m CPU, 100Mi` |
4848
| `windows.enabled` | Install secrets store csi driver on windows nodes | false |
4949
| `windows.kubeletRootDir` | Configure the kubelet root dir | `C:\var\lib\kubelet` |
5050
| `windows.nodeSelector` | Node Selector for the daemonset on windows nodes | `{}` |
5151
| `windows.tolerations` | Tolerations for the daemonset on windows nodes | `[]` |
52-
| `windows.metricsAddr` | The address the metric endpoint binds to | `:8080` |
52+
| `windows.metricsAddr` | The address the metric endpoint binds to | `:8095` |
5353
| `windows.registrarImage.repository` | Windows node-driver-registrar image repository | `mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar` |
5454
| `windows.registrarImage.pullPolicy` | Windows node-driver-registrar image pull policy | `Always` |
5555
| `windows.registrarImage.tag` | Windows node-driver-registrar image tag | `v1.2.1-alpha.1-windows-1809-amd64` |
@@ -66,3 +66,5 @@ The following table lists the configurable parameters of the csi-secrets-store-p
6666
| `syncSecret.enabled` | Enable rbac roles and bindings required for syncing to Kubernetes native secrets (the default will change to false after v0.0.14) | true |
6767
| `minimumProviderVersions` | A comma delimited list of key-value pairs of minimum provider versions with driver | `""` |
6868
| `grpcSupportedProviders` | A `;` delimited list of providers that support grpc for driver-provider [alpha] | `""` |
69+
| `enableSecretRotation` | Enable secret rotation feature [alpha] | `false` |
70+
| `rotationPollInterval` | Secret rotation poll interval duration | `"120s"` |

charts/secrets-store-csi-driver/templates/role.yaml

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,21 @@ metadata:
77
creationTimestamp: null
88
name: secretproviderclasses-role
99
rules:
10+
- apiGroups:
11+
- ""
12+
resources:
13+
- events
14+
verbs:
15+
- create
16+
- patch
17+
- apiGroups:
18+
- ""
19+
resources:
20+
- pods
21+
verbs:
22+
- get
23+
- list
24+
- watch
1025
- apiGroups:
1126
- secrets-store.csi.x-k8s.io
1227
resources:

charts/secrets-store-csi-driver/templates/secrets-store-csi-driver-windows.yaml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,12 @@ spec:
5959
{{- if and (semverCompare ">= v0.0.14-0" .Values.windows.image.tag) .Values.grpcSupportedProviders }}
6060
- "--grpc-supported-providers={{ .Values.grpcSupportedProviders }}"
6161
{{- end }}
62+
{{- if and (semverCompare ">= v0.0.15-0" .Values.windows.image.tag) .Values.enableSecretRotation }}
63+
- "--enable-secret-rotation={{ .Values.enableSecretRotation }}"
64+
{{- end }}
65+
{{- if and (semverCompare ">= v0.0.15-0" .Values.windows.image.tag) .Values.rotationPollInterval }}
66+
- "--rotation-poll-interval={{ .Values.rotationPollInterval }}"
67+
{{- end }}
6268
- "--metrics-addr={{ .Values.windows.metricsAddr }}"
6369
env:
6470
{{- with .Values.windows.env }}

charts/secrets-store-csi-driver/templates/secrets-store-csi-driver.yaml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,12 @@ spec:
6161
{{- if and (semverCompare ">= v0.0.14-0" .Values.linux.image.tag) .Values.grpcSupportedProviders }}
6262
- "--grpc-supported-providers={{ .Values.grpcSupportedProviders }}"
6363
{{- end }}
64+
{{- if and (semverCompare ">= v0.0.15-0" .Values.linux.image.tag) .Values.enableSecretRotation }}
65+
- "--enable-secret-rotation={{ .Values.enableSecretRotation }}"
66+
{{- end }}
67+
{{- if and (semverCompare ">= v0.0.15-0" .Values.linux.image.tag) .Values.rotationPollInterval }}
68+
- "--rotation-poll-interval={{ .Values.rotationPollInterval }}"
69+
{{- end }}
6470
- "--metrics-addr={{ .Values.linux.metricsAddr }}"
6571
env:
6672
{{- with .Values.linux.env }}

charts/secrets-store-csi-driver/templates/secrets-store.csi.x-k8s.io_secretproviderclasspodstatuses.yaml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -53,8 +53,6 @@ spec:
5353
type: array
5454
podName:
5555
type: string
56-
podUID:
57-
type: string
5856
secretProviderClassName:
5957
type: string
6058
targetPath:

charts/secrets-store-csi-driver/values.yaml

Lines changed: 10 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ linux:
22
enabled: true
33
image:
44
repository: us.gcr.io/k8s-artifacts-prod/csi-secrets-store/driver
5-
tag: v0.0.14
5+
tag: v0.0.15
66
pullPolicy: Always
77

88
driver:
@@ -45,14 +45,14 @@ linux:
4545
kubeletRootDir: /var/lib/kubelet
4646
nodeSelector: {}
4747
tolerations: []
48-
metricsAddr: ":8080"
48+
metricsAddr: ":8095"
4949
env: []
5050

5151
windows:
5252
enabled: false
5353
image:
5454
repository: us.gcr.io/k8s-artifacts-prod/csi-secrets-store/driver
55-
tag: v0.0.14
55+
tag: v0.0.15
5656
pullPolicy: IfNotPresent
5757

5858
driver:
@@ -95,7 +95,7 @@ windows:
9595
kubeletRootDir: C:\var\lib\kubelet
9696
nodeSelector: {}
9797
tolerations: []
98-
metricsAddr: ":8080"
98+
metricsAddr: ":8095"
9999
env: []
100100

101101
logLevel:
@@ -121,3 +121,9 @@ minimumProviderVersions:
121121

122122
## ; delimited list of providers that support grpc for driver-provider [alpha]
123123
grpcSupportedProviders:
124+
125+
## Enable secret rotation feature [alpha]
126+
enableSecretRotation: false
127+
128+
## Secret rotation poll interval duration
129+
rotationPollInterval:

deploy/rbac-secretproviderclass.yaml

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,21 @@ metadata:
1010
creationTimestamp: null
1111
name: secretproviderclasses-role
1212
rules:
13+
- apiGroups:
14+
- ""
15+
resources:
16+
- events
17+
verbs:
18+
- create
19+
- patch
20+
- apiGroups:
21+
- ""
22+
resources:
23+
- pods
24+
verbs:
25+
- get
26+
- list
27+
- watch
1328
- apiGroups:
1429
- secrets-store.csi.x-k8s.io
1530
resources:

deploy/secrets-store-csi-driver-windows.yaml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -48,13 +48,15 @@ spec:
4848
cpu: 10m
4949
memory: 20Mi
5050
- name: secrets-store
51-
image: us.gcr.io/k8s-artifacts-prod/csi-secrets-store/driver:v0.0.14
51+
image: us.gcr.io/k8s-artifacts-prod/csi-secrets-store/driver:v0.0.15
5252
args:
5353
- "--debug=true"
5454
- "--endpoint=$(CSI_ENDPOINT)"
5555
- "--nodeid=$(KUBE_NODE_NAME)"
5656
- "--provider-volume=C:\\k\\secrets-store-csi-providers"
57-
- "--metrics-addr=:8080"
57+
- "--metrics-addr=:8095"
58+
- "--enable-secret-rotation=false"
59+
- "--rotation-poll-interval=2m"
5860
env:
5961
- name: CSI_ENDPOINT
6062
value: unix://C:\\csi\\csi.sock

deploy/secrets-store-csi-driver.yaml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -49,13 +49,15 @@ spec:
4949
cpu: 10m
5050
memory: 20Mi
5151
- name: secrets-store
52-
image: us.gcr.io/k8s-artifacts-prod/csi-secrets-store/driver:v0.0.14
52+
image: us.gcr.io/k8s-artifacts-prod/csi-secrets-store/driver:v0.0.15
5353
args:
5454
- "--debug=true"
5555
- "--endpoint=$(CSI_ENDPOINT)"
5656
- "--nodeid=$(KUBE_NODE_NAME)"
5757
- "--provider-volume=/etc/kubernetes/secrets-store-csi-providers"
58-
- "--metrics-addr=:8080"
58+
- "--metrics-addr=:8095"
59+
- "--enable-secret-rotation=false"
60+
- "--rotation-poll-interval=2m"
5961
env:
6062
- name: CSI_ENDPOINT
6163
value: unix:///csi/csi.sock

deploy/secrets-store.csi.x-k8s.io_secretproviderclasspodstatuses.yaml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -53,8 +53,6 @@ spec:
5353
type: array
5454
podName:
5555
type: string
56-
podUID:
57-
type: string
5856
secretProviderClassName:
5957
type: string
6058
targetPath:

manifest_staging/charts/secrets-store-csi-driver/Chart.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
apiVersion: v1
22
name: secrets-store-csi-driver
3-
version: 0.0.14
4-
appVersion: 0.0.14
3+
version: 0.0.15
4+
appVersion: 0.0.15
55
kubeVersion: ">=1.16.0-0"
66
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes cluster.
77
icon: https://github.com/kubernetes/kubernetes/blob/master/logo/logo.png

0 commit comments

Comments
 (0)