Merge pull request #386 from tam7t/default-namespace

deploy: set namespace as kube-system

Author: k8s-ci-robot

README.md

@@ -109,7 +109,7 @@ kubectl apply -f deploy/rbac-secretproviderclass.yaml # update the namespace of
 kubectl apply -f deploy/csidriver.yaml
 kubectl apply -f deploy/secrets-store.csi.x-k8s.io_secretproviderclasses.yaml
 kubectl apply -f deploy/secrets-store.csi.x-k8s.io_secretproviderclasspodstatuses.yaml
-kubectl apply -f deploy/secrets-store-csi-driver.yaml --namespace $NAMESPACE
+kubectl apply -f deploy/secrets-store-csi-driver.yaml
 
 # If using the driver to sync secrets-store content as Kubernetes Secrets, deploy the additional RBAC permissions
 # required to enable this feature
@@ -119,13 +119,13 @@ kubectl apply -f deploy/rbac-secretprovidersyncing.yaml
 kubectl apply -f deploy/csidriver-1.15.yaml
 
 # [OPTIONAL] To deploy driver on windows nodes
-kubectl apply -f deploy/secrets-store-csi-driver-windows.yaml --namespace $NAMESPACE
+kubectl apply -f deploy/secrets-store-csi-driver-windows.yaml
 ```
 
 To validate the installer is running as expected, run the following commands:
 
 ```bash
-kubectl get po --namespace $NAMESPACE
+kubectl get po --namespace=kube-system
 ```
 
 You should see the Secrets Store CSI driver pods running on each agent node:
@@ -143,6 +143,17 @@ NAME
 secretproviderclasses.secrets-store.csi.x-k8s.io    
 ```
 
+**Note**: v0.0.17 and earlier installed the driver to the `default` namespace.
+Newer versions of the driver will install the driver to the `kube-system`
+namespace. After applying the new YAML files to your cluster run the following
+to clean up old resources:
+
+```bash
+kubectl delete daemonset csi-secrets-store --namespace=default
+kubectl delete daemonset csi-secrets-store-windows --namespace=default
+kubectl delete serviceaccount secrets-store-csi-driver --namespace=default
+```
+
 </details>
 
 ### Use the Secrets Store CSI Driver with a Provider

config/rbac-syncsecret/role_binding.yaml

@@ -9,4 +9,4 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: secrets-store-csi-driver
-  namespace: default
+  namespace: kube-system

config/rbac/role_binding.yaml

@@ -9,4 +9,4 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: secrets-store-csi-driver
-  namespace: default
+  namespace: kube-system

config/rbac/serviceaccount.yaml

@@ -2,4 +2,4 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: secrets-store-csi-driver
-  namespace: default
+  namespace: kube-system

manifest_staging/deploy/rbac-secretproviderclass.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: secrets-store-csi-driver
-  namespace: default
+  namespace: kube-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -65,4 +65,4 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: secrets-store-csi-driver
-  namespace: default
+  namespace: kube-system

manifest_staging/deploy/rbac-secretprovidersyncing.yaml

@@ -28,4 +28,4 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: secrets-store-csi-driver
-  namespace: default
+  namespace: kube-system

manifest_staging/deploy/secrets-store-csi-driver-windows.yaml

@@ -2,6 +2,7 @@ kind: DaemonSet
 apiVersion: apps/v1
 metadata:
   name: csi-secrets-store-windows
+  namespace: kube-system
 spec:
   selector:
     matchLabels:

manifest_staging/deploy/secrets-store-csi-driver.yaml

@@ -2,6 +2,7 @@ kind: DaemonSet
 apiVersion: apps/v1
 metadata:
   name: csi-secrets-store
+  namespace: kube-system
 spec:
   selector:
     matchLabels: