Adding support for Certificate items

Author: “barucoh”

.gitignore

@@ -4,6 +4,8 @@
 *.dll
 *.so
 *.dylib
+.idea
+dist
 
 # Test binary, built with `go test -c`
 *.test

deployment/akeyless-csi-provider.yaml

@@ -1,4 +1,9 @@
 apiVersion: v1
+kind: Namespace
+metadata:
+  name: csi
+---
+apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: akeyless-csi-provider
@@ -51,10 +56,10 @@ spec:
       tolerations:
       containers:
         - name: provider-akeyless-installer
-          image: akeyless/akeyless-csi-provider:latest
-          imagePullPolicy: Always
+          image: akeyless/akeyless-csi-drive-provider:latest
+          imagePullPolicy: IfNotPresent
           args:
-            - -endpoint=/provider/akeyless.sock            
+            - -endpoint=/provider/akeyless.sock
           resources:
             requests:
               cpu: 50m
@@ -90,4 +95,4 @@ spec:
           hostPath:
             path: "/etc/kubernetes/secrets-store-csi-providers"
       nodeSelector:
-        beta.kubernetes.io/os: linux
+        kubernetes.io/os: linux

examples/example.yaml

@@ -0,0 +1,63 @@
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: nginx-deployment-csi-provider
+spec:
+  provider: akeyless
+  parameters:
+    akeylessGatewayURL: "https://api.akeyless.io"
+    akeylessAccessID: "<your access id>"
+    akeylessAccessKey: "<your access key - NOT FOR PRODUCTION>"
+    akeylessAccessType: "access_key"
+    objects:  |
+      - secretPath: "/full/path/to/secret/item"
+        fileName: "local-secret-filename"
+      - secretPath: "/full/path/to/certificate/item"
+        fileName: "local-certificate-filename"
+---
+kind: Service
+apiVersion: v1
+metadata:
+  name: nginx-deployment
+  labels:
+    app: nginx
+spec:
+  selector:
+    app: nginx
+  ports:
+    - protocol: TCP
+      port: 80
+      targetPort: 80
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-deployment
+  labels:
+    app: nginx
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx-deployment
+        image: nginx
+        ports:
+        - containerPort: 80
+        volumeMounts:
+        - name: secrets-store-inline
+          mountPath: "/mnt/secrets-store"
+          readOnly: true
+      volumes:
+      - name: secrets-store-inline
+        csi:
+          driver: secrets-store.csi.k8s.io
+          readOnly: true
+          volumeAttributes:
+            secretProviderClass: "nginx-deployment-csi-provider"

go.mod

@@ -1,40 +1,45 @@
 module github.com/akeylesslabs/akeyless-csi-provider
 
-go 1.17
+go 1.21
+
+toolchain go1.21.5
 
 replace akeyless.io/akeyless-main-repo => ../akeyless-main-repo
 
 require (
 	akeyless.io/akeyless-main-repo v0.0.0-00010101000000-000000000000
 	github.com/akeylesslabs/akeyless-go-cloud-id v0.3.4
-	github.com/akeylesslabs/akeyless-go/v3 v3.2.3
-	github.com/stretchr/testify v1.8.0
-	google.golang.org/grpc v1.49.0
+	github.com/akeylesslabs/akeyless-go/v3 v3.3.7
+	github.com/stretchr/testify v1.8.4
+	google.golang.org/grpc v1.58.3
 	gopkg.in/yaml.v3 v3.0.1
-	k8s.io/apimachinery v0.22.3
+	k8s.io/apimachinery v0.28.1
 	sigs.k8s.io/secrets-store-csi-driver v1.0.0
-
 )
 
 require (
-	cloud.google.com/go/compute v1.10.0 // indirect
-	github.com/aws/aws-sdk-go v1.41.13 // indirect
+	cloud.google.com/go/compute v1.21.0 // indirect
+	cloud.google.com/go/compute/metadata v0.2.3 // indirect
+	github.com/aws/aws-sdk-go v1.44.332 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
-	github.com/golang/protobuf v1.5.2 // indirect
-	github.com/googleapis/enterprise-certificate-proxy v0.2.0 // indirect
+	github.com/golang/protobuf v1.5.3 // indirect
+	github.com/google/s2a-go v0.1.4 // indirect
+	github.com/googleapis/enterprise-certificate-proxy v0.2.3 // indirect
 	github.com/jmespath/go-jmespath v0.4.0 // indirect
-	github.com/kr/pretty v0.3.0 // indirect
+	github.com/kr/pretty v0.3.1 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
-	github.com/rogpeppe/go-internal v1.8.0 // indirect
-	go.opencensus.io v0.23.0 // indirect
-	golang.org/x/net v0.2.0 // indirect
-	golang.org/x/oauth2 v0.1.0 // indirect
-	golang.org/x/sys v0.3.0 // indirect
-	golang.org/x/text v0.4.0 // indirect
-	google.golang.org/api v0.98.0 // indirect
+	github.com/rogpeppe/go-internal v1.10.0 // indirect
+	go.opencensus.io v0.24.0 // indirect
+	golang.org/x/crypto v0.15.0 // indirect
+	golang.org/x/net v0.18.0 // indirect
+	golang.org/x/oauth2 v0.10.0 // indirect
+	golang.org/x/sys v0.14.0 // indirect
+	golang.org/x/text v0.14.0 // indirect
+	google.golang.org/api v0.126.0 // indirect
 	google.golang.org/appengine v1.6.7 // indirect
-	google.golang.org/genproto v0.0.0-20220930163606-c98284e70a91 // indirect
-	google.golang.org/protobuf v1.28.1 // indirect
+	google.golang.org/genproto v0.0.0-20230711160842-782d3b101e98 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20230711160842-782d3b101e98 // indirect
+	google.golang.org/protobuf v1.31.0 // indirect
 	gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect
 )