Skip to content

Commit

Permalink
chore: helm chart release for driver v1.3.3 (#1188)
Browse files Browse the repository at this point in the history 
Signed-off-by: Anish Ramasekar <[email protected]>
  • Loading branch information
@aramase
aramase authored May 31, 2023
1 parent 9cc6476 commit 4ded330
Show file tree
Hide file tree
Showing 19 changed files with 82 additions and 62 deletions.
6 changes: 3 additions & 3 deletions charts/csi-secrets-store-provider-azure/Chart.lock
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
dependencies:
- name: secrets-store-csi-driver
repository: https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts
version: 1.3.2
digest: sha256:d20fd2ef9479d8f482a8e696827721a16d550df535f6c7b6e103bb9f0aa928b2
generated: "2023-03-28T20:36:24.165468936Z"
version: 1.3.3
digest: sha256:448bd214c20f278f41d43688c8c5ef582fb6fea421bd36475d1298814fe8acce
generated: "2023-05-30T14:05:24.641018729Z"
4 changes: 2 additions & 2 deletions charts/csi-secrets-store-provider-azure/Chart.yaml
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
apiVersion: v2
name: csi-secrets-store-provider-azure
version: 1.4.2
version: 1.4.3
appVersion: 1.4.1
kubeVersion: ">=1.16.0-0"
description: A Helm chart to install the Secrets Store CSI Driver and the Azure Keyvault Provider inside a Kubernetes cluster.
Expand All @@ -13,5 +13,5 @@ maintainers:
dependencies:
- name: secrets-store-csi-driver
repository: https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts
version: 1.3.2
version: 1.3.3
condition: secrets-store-csi-driver.install
16 changes: 9 additions & 7 deletions charts/csi-secrets-store-provider-azure/README.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@ Azure Key Vault provider for Secrets Store CSI driver allows you to get secret c
| `1.4.0` | `1.3.0` | `1.4.0` |
| `1.4.1` | `1.3.2` | `1.4.0` |
| `1.4.2` | `1.3.2` | `1.4.1` |
| `1.4.3` | `1.3.3` | `1.4.1` |

## Installation

Expand Down Expand Up @@ -115,15 +116,15 @@ The following table lists the configurable parameters of the csi-secrets-store-p
| `secrets-store-csi-driver.linux.priorityClassName` | Indicates the importance of a Pod relative to other Pods | `""` |
| `secrets-store-csi-driver.linux.image.repository` | Driver Linux image repository | `mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver` |
| `secrets-store-csi-driver.linux.image.pullPolicy` | Driver Linux image pull policy | `IfNotPresent` |
| `secrets-store-csi-driver.linux.image.tag` | Driver Linux image tag | `v1.3.0` |
| `secrets-store-csi-driver.linux.image.tag` | Driver Linux image tag | `v1.3.3` |
| `secrets-store-csi-driver.linux.registrarImage.repository` | Driver Linux node-driver-registrar image repository | `mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar` |
| `secrets-store-csi-driver.linux.registrarImage.pullPolicy` | Driver Linux node-driver-registrar image pull policy | `IfNotPresent` |
| `secrets-store-csi-driver.linux.registrarImage.tag` | Driver Linux node-driver-registrar image tag | `v2.6.2` |
| `secrets-store-csi-driver.linux.registrarImage.tag` | Driver Linux node-driver-registrar image tag | `v2.8.0` |
| `secrets-store-csi-driver.linux.livenessProbeImage.repository` | Driver Linux liveness-probe image repository | `mcr.microsoft.com/oss/kubernetes-csi/livenessprobe` |
| `secrets-store-csi-driver.linux.livenessProbeImage.pullPolicy` | Driver Linux liveness-probe image pull policy | `IfNotPresent` |
| `secrets-store-csi-driver.linux.livenessProbeImage.tag` | Driver Linux liveness-probe image tag | `v2.8.0` |
| `secrets-store-csi-driver.linux.livenessProbeImage.tag` | Driver Linux liveness-probe image tag | `v2.10.0` |
| `secrets-store-csi-driver.linux.crds.image.repository` | Driver CRDs Linux image repository | `mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver-crds` |
| `secrets-store-csi-driver.linux.crds.image.tag` | Driver CRDs Linux image tag | `v1.3.0` |
| `secrets-store-csi-driver.linux.crds.image.tag` | Driver CRDs Linux image tag | `v1.3.3` |
| `secrets-store-csi-driver.linux.crds.image.pullPolicy` | Driver CRDs Linux image pull policy | `IfNotPresent` |
| `secrets-store-csi-driver.windows.enabled` | Install secrets-store-csi-driver on windows nodes | false |
| `secrets-store-csi-driver.windows.kubeletRootDir` | Configure the kubelet root dir | `C:\var\lib\kubelet` |
Expand All @@ -132,13 +133,13 @@ The following table lists the configurable parameters of the csi-secrets-store-p
| `secrets-store-csi-driver.windows.priorityClassName` | Indicates the importance of a Pod relative to other Pods | `""` |
| `secrets-store-csi-driver.windows.image.repository` | Driver Windows image repository | `mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver` |
| `secrets-store-csi-driver.windows.image.pullPolicy` | Driver Windows image pull policy | `IfNotPresent` |
| `secrets-store-csi-driver.windows.image.tag` | Driver Windows image tag | `v1.3.0` |
| `secrets-store-csi-driver.windows.image.tag` | Driver Windows image tag | `v1.3.3` |
| `secrets-store-csi-driver.windows.registrarImage.repository` | Driver Windows node-driver-registrar image repository | `mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar` |
| `secrets-store-csi-driver.windows.registrarImage.pullPolicy` | Driver Windows node-driver-registrar image pull policy | `IfNotPresent` |
| `secrets-store-csi-driver.windows.registrarImage.tag` | Driver Windows node-driver-registrar image tag | `v2.6.2` |
| `secrets-store-csi-driver.windows.registrarImage.tag` | Driver Windows node-driver-registrar image tag | `v2.8.0` |
| `secrets-store-csi-driver.windows.livenessProbeImage.repository` | Driver Windows liveness-probe image repository | `mcr.microsoft.com/oss/kubernetes-csi/livenessprobe` |
| `secrets-store-csi-driver.windows.livenessProbeImage.pullPolicy` | Driver Windows liveness-probe image pull policy | `IfNotPresent` |
| `secrets-store-csi-driver.windows.livenessProbeImage.tag` | Driver Windows liveness-probe image tag | `v2.8.0` |
| `secrets-store-csi-driver.windows.livenessProbeImage.tag` | Driver Windows liveness-probe image tag | `v2.10.0` |
| `secrets-store-csi-driver.enableSecretRotation` | Enable secret rotation feature [alpha] | `false` |
| `secrets-store-csi-driver.rotationPollInterval` | Secret rotation poll interval duration | `2m` |
| `secrets-store-csi-driver.filteredWatchSecret` | Enable filtered watch for NodePublishSecretRef secrets with label `secrets-store.csi.k8s.io/used=true`. Refer to [doc](https://secrets-store-csi-driver.sigs.k8s.io/load-tests.html) for more details | `true` |
Expand All @@ -148,3 +149,4 @@ The following table lists the configurable parameters of the csi-secrets-store-p
| `rbac.pspEnabled` | If `true`, create and use a restricted pod security policy for Secrets Store CSI Driver AKV provider pod(s) | false |
| `constructPEMChain` | Explicitly reconstruct the pem chain in the order: SERVER, INTERMEDIATE, ROOT | `true` |
| `writeCertAndKeyInSeparateFiles` | Write cert and key in separate files. The individual files will be named as <secret-name>.crt and <secret-name>.key. These files will be created in addition to the single file. | `false` |
| `metricsAddr` | Port that serves metrics | `8898` |
17 changes: 10 additions & 7 deletions charts/csi-secrets-store-provider-azure/arc-values.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -112,20 +112,20 @@ secrets-store-csi-driver:
metricsAddr: ":8080"
image:
repository: mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver
tag: v1.3.2
tag: v1.3.3
pullPolicy: IfNotPresent
registrarImage:
repository: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar
tag: v2.6.2
tag: v2.8.0
pullPolicy: IfNotPresent
livenessProbeImage:
repository: mcr.microsoft.com/oss/kubernetes-csi/livenessprobe
tag: v2.8.0
tag: v2.10.0
pullPolicy: IfNotPresent
crds:
image:
repository: mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver-crds
tag: v1.3.2
tag: v1.3.3
pullPolicy: IfNotPresent
podAnnotations:
prometheus.io/scrape: "true"
Expand All @@ -137,15 +137,15 @@ secrets-store-csi-driver:
metricsAddr: ":8080"
image:
repository: mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver
tag: v1.3.2
tag: v1.3.3
pullPolicy: IfNotPresent
registrarImage:
repository: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar
tag: v2.6.2
tag: v2.8.0
pullPolicy: IfNotPresent
livenessProbeImage:
repository: mcr.microsoft.com/oss/kubernetes-csi/livenessprobe
tag: v2.8.0
tag: v2.10.0
pullPolicy: IfNotPresent

enableSecretRotation: false
Expand Down Expand Up @@ -193,3 +193,6 @@ Azure:
# Arc monitoring
arc:
enableMonitoring: true

# Port that serves metrics
metricsAddr: "8898"
6 changes: 5 additions & 1 deletion charts/csi-secrets-store-provider-azure/templates/provider-azure-installer-windows.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ spec:
{{- if .Values.enableArcExtension }}
{{- if .Values.arc.enableMonitoring }}
prometheus.io/scrape: "true"
prometheus.io/port: "8898"
prometheus.io/port: "{{ .Values.metricsAddr }}"
{{- end }}
{{- end }}
{{- end }}
Expand Down Expand Up @@ -76,6 +76,10 @@ spec:
name: arc-proxy-config
{{- end }}
{{- end }}
ports:
- containerPort: {{ .Values.metricsAddr }}
name: metrics
protocol: TCP
volumeMounts:
- name: provider-vol
mountPath: "C:\\provider"
Expand Down
6 changes: 5 additions & 1 deletion charts/csi-secrets-store-provider-azure/templates/provider-azure-installer.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ spec:
{{- if .Values.enableArcExtension }}
{{- if .Values.arc.enableMonitoring }}
prometheus.io/scrape: "true"
prometheus.io/port: "8898"
prometheus.io/port: "{{ .Values.metricsAddr }}"
{{- end }}
{{- end }}
# this will ensure pods are rolled in next helm upgrade if cert files are updated.
Expand Down Expand Up @@ -76,6 +76,10 @@ spec:
periodSeconds: 30
resources:
{{ toYaml .Values.linux.resources | indent 12 }}
ports:
- containerPort: {{ .Values.metricsAddr }}
name: metrics
protocol: TCP
securityContext:
{{- if not .Values.linux.privileged }}
allowPrivilegeEscalation: false
Expand Down
Loading

0 comments on commit 4ded330

Please sign in to comment.