v0.0.15

Warning ⚠️

• The SecretProviderClass needs to be in the same namespace as the pod referencing it as of v0.0.12.
• Defining driver configuration and provider-specific parameters to the CSI driver in pod.Spec[].Volumes has been deprecated in v0.0.12. It is now mandatory to use SecretProviderClass custom resource.

Features 🌈

• add rotation reconciler (#303)
• add trimspace to sanitize yaml fields (#327)
• add event recorder (#323)

Documentation 📘

• add doc for new provider gRPC (#317)
• add doc for auto rotation (#331)

Testing 💚

• Add more unit tests for secrets-store pkg (#308)
• update e2e helm install for grpc supported provider (#328)
• add e2e tests for rotation with azure provider (#329)

Maintenance 🔧

• remove unused PodUID field in secretproviderclasspodstatus (#325)
• update default rotation poll interval to 2m (#326)
• change health check port to 8095 (#332)

v0.0.14

Warning ⚠️

• The SecretProviderClass needs to be in the same namespace as the pod referencing it as of v0.0.12.
• Defining driver configuration and provider-specific parameters to the CSI driver in pod.Spec[].Volumes has been deprecated in v0.0.12. It is now mandatory to use SecretProviderClass custom resource.

Features 🌈

• gRPC support for driver-provider communication (#280)
• add managed label to secret created by driver (#314)

Documentation 📘

• update install doc for sync secret rbac (#306)
• add known limitations docs (#311)

Testing 💚

• update test for secret with multiple owner references (#309)

Helm 📈

• set resource limits in deploy and charts (#312)
• add option to set --grpc-supported-providers in helm charts (#312)

Maintenance 🔧

• update crd apiversion to apiextensions.k8s.io/v1 (#313)

v0.0.13

Warning ⚠️

• The SecretProviderClass needs to be in the same namespace as the pod referencing it as of v0.0.12.
• Defining driver configuration and provider-specific parameters to the CSI driver in pod.Spec[].Volumes has been deprecated in v0.0.12. It is now mandatory to use SecretProviderClass custom resource.

Features 🌈

• Add stripping sensitive information while logging the grpc request (#259)
• attributes: pass csi.storage.k8s.io/serviceAccount.name (#267)
• add preserveUnknownFields=false marker (#274)
• Add metadata.label support for sync secret (#273)
• rbac: move secrets sync to own role (secretprovidersyncing-role) (#266)

Bug Fixes 🐞

• use namespace for spc lookup + unit tests (#264)

Documentation 📘

• add release doc and targets (#258)
• add release, go report, go version badge (#278)
• Fixing links where files were moved to a new subdirectory (#283)

Testing 💚

• check pod ready status before getting name (#270)
• move tests to subdir for provider (#276)
• add test for multiple secret provider class (#261)
• remove az cli req (#284)

Helm 📈

• add tolerations to helm charts (#262)
• Move tolerations block inside OS conditional in helm chart (#272)
• regenerate manifests to remove unused rbac permissions (#275)
• make all images configurable (#260)
• Add support for envs in helm chart (#279)
• implement helm best practices, add recommended standard helm labels (#240)

Maintenance 🔧

• update golangci-lint (#282)
• Driver images are now hosted in GCR at us.gcr.io/k8s-artifacts-prod/csi-secrets-store/driver

v0.0.12

Warning ⚠️

This release includes breaking changes:

• The SecretProviderClass needs to be in the same namespace as the pod referencing it.
• Defining driver configuration and provider-specific parameters to the CSI driver in pod.Spec[].Volumes has been deprecated. It is now mandatory to use SecretProviderClass custom resource.

Features 🌈

• Use controller to reconcile k8s secrets (#224)

Bug Fixes 🐞

• set context for provider binary calls (#238)

Documentation 📘

• add docs for ingress tls with vault (#212)
• add note about community call (#244)
• Update community meeting (#250)

Testing 💚

• update azure key tests for latest release 0.0.6 (#213)
• Update and fix e2e-vault (#234)

Helm 📈

• update node selector and make it configurable (#232)

Maintenance 🔧

• Adds image automated build (#189)
• set DOCKER_CLI_EXPERIMENTAL in makefile (#218)
• Switch from manifest-tool to docker manifest (#225)
• update to livenessprobe v2.0.0 (#248)
• Driver images are now hosted in GCR at us.gcr.io/k8s-artifacts-prod/csi-secrets-store/driver

v0.0.11

Features 🌈

• allow kubelet root dir to be configurable (#207)
• update base image with debian base (#205)

Documentation 📘

• add slack channel for csi-secrets-store (#208)

Helm 📈

• allow kubelet root dir to be configurable (#207)

v0.0.10

Features 🌈

• Add support to sync k8s secret (#186)

Documentation 📘

• documentation for windows install (#183)
• Add sample for ingress controller with TLS (#192)

Testing 💚

• E2E tests enabled for windows(#181)

Helm 📈

• Switch to using version instead of gitversion (#184)
• Package helm charts (#191)