Skip to content

Commit 71a81ca

Browse files
authored
Merge pull request #1608 from aramase/aramase/c/release_driver_v1.4.5
release: update manifest and helm charts for v1.4.5
2 parents d3b857e + 093828b commit 71a81ca

14 files changed

+45
-52
lines changed

Makefile

+4-3
Original file line numberDiff line numberDiff line change
@@ -29,8 +29,8 @@ E2E_PROVIDER_IMAGE_NAME ?= e2e-provider
2929

3030
# Release version is the current supported release for the driver
3131
# Update this version when the helm chart is being updated for release
32-
RELEASE_VERSION := v1.4.4
33-
IMAGE_VERSION ?= v1.4.4
32+
RELEASE_VERSION := v1.4.5
33+
IMAGE_VERSION ?= v1.4.5
3434

3535
# Use a custom version for E2E tests if we are testing in CI
3636
ifdef CI
@@ -459,7 +459,8 @@ e2e-helm-deploy-release:
459459
--set linux.enabled=true \
460460
--set syncSecret.enabled=true \
461461
--set enableSecretRotation=true \
462-
--set rotationPollInterval=30s
462+
--set rotationPollInterval=30s \
463+
--set tokenRequests[0].audience="api://AzureADTokenExchange"
463464

464465
.PHONY: e2e-kind-cleanup
465466
e2e-kind-cleanup:

charts/secrets-store-csi-driver/Chart.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
apiVersion: v2
22
name: secrets-store-csi-driver
3-
version: 1.4.4
4-
appVersion: 1.4.4
3+
version: 1.4.5
4+
appVersion: 1.4.5
55
kubeVersion: ">=1.16.0-0"
66
description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes cluster.
77
icon: https://github.com/kubernetes/kubernetes/blob/master/logo/logo.png

charts/secrets-store-csi-driver/README.md

+7-7
Original file line numberDiff line numberDiff line change
@@ -33,12 +33,12 @@ The following table lists the configurable parameters of the csi-secrets-store-p
3333
| `fullnameOverride` | String to fully override secrets-store-csi-driver.fullname template with a string | `""` |
3434
| `linux.image.repository` | Linux image repository | `registry.k8s.io/csi-secrets-store/driver` |
3535
| `linux.image.pullPolicy` | Linux image pull policy | `IfNotPresent` |
36-
| `linux.image.tag` | Linux image tag | `v1.4.4` |
36+
| `linux.image.tag` | Linux image tag | `v1.4.5` |
3737
| `linux.image.digest` | Linux image digest, image pull from digest instead of tag if specified | `""` |
3838
| `linux.crds.enabled` | If the CRDs should be managed by the chart | `true` |
3939
| `linux.crds.image.repository` | Linux crds image repository | `registry.k8s.io/csi-secrets-store/driver-crds` |
4040
| `linux.crds.image.pullPolicy` | Linux crds image pull policy | `IfNotPresent` |
41-
| `linux.crds.image.tag` | Linux crds image tag | `v1.4.4` |
41+
| `linux.crds.image.tag` | Linux crds image tag | `v1.4.5` |
4242
| `linux.crds.resources` | The resource request/limits for the linux crds container image | `{}` |
4343
| `linux.crds.podLabels` | Linux *Pod* labels appended to CRD helm hook job pods | `{}` |
4444
| `linux.affinity` | Linux affinity | `key: type; operator: NotIn; values: [virtual-kubelet]` |
@@ -52,13 +52,13 @@ The following table lists the configurable parameters of the csi-secrets-store-p
5252
| `linux.metricsAddr` | The address the metric endpoint binds to | `:8095` |
5353
| `linux.registrarImage.repository` | Linux node-driver-registrar image repository | `registry.k8s.io/sig-storage/csi-node-driver-registrar` |
5454
| `linux.registrarImage.pullPolicy` | Linux node-driver-registrar image pull policy | `IfNotPresent` |
55-
| `linux.registrarImage.tag` | Linux node-driver-registrar image tag | `v2.10.0` |
55+
| `linux.registrarImage.tag` | Linux node-driver-registrar image tag | `v2.11.1` |
5656
| `linux.registrarImage.digest` | Linux node-driver-registrar image digest, image pull from digest instead of tag if specified | `""` |
5757
| `linux.registrar.resources` | The resource request/limits for the linux node-driver-registrar container image | `limits: 100m CPU, 100Mi; requests: 10m CPU, 20Mi` |
5858
| `linux.registrar.logVerbosity` | Log level for node-driver-registrar. Uses V logs (klog) | `5` |
5959
| `linux.livenessProbeImage.repository` | Linux liveness-probe image repository | `registry.k8s.io/sig-storage/livenessprobe` |
6060
| `linux.livenessProbeImage.pullPolicy` | Linux liveness-probe image pull policy | `IfNotPresent` |
61-
| `linux.livenessProbeImage.tag` | Linux liveness-probe image tag | `v2.12.0` |
61+
| `linux.livenessProbeImage.tag` | Linux liveness-probe image tag | `v2.13.1` |
6262
| `linux.livenessProbeImage.digest` | Linux liveness-probe image digest, image pull from digest instead of tag if specified | `""` |
6363
| `linux.livenessProbe.resources` | The resource request/limits for the linux liveness-probe container image | `limits: 100m CPU, 100Mi; requests: 10m CPU, 20Mi` |
6464
| `linux.env` | Environment variables to be passed for the daemonset on linux nodes | `[]` |
@@ -72,7 +72,7 @@ The following table lists the configurable parameters of the csi-secrets-store-p
7272
| `linux.updateStrategy` | Configure a custom update strategy for the daemonset on linux nodes | `RollingUpdate with 1 maxUnavailable` |
7373
| `windows.image.repository` | Windows image repository | `registry.k8s.io/csi-secrets-store/driver` |
7474
| `windows.image.pullPolicy` | Windows image pull policy | `IfNotPresent` |
75-
| `windows.image.tag` | Windows image tag | `v1.4.4` |
75+
| `windows.image.tag` | Windows image tag | `v1.4.5` |
7676
| `windows.image.digest` | Windows image digest, image pull from digest instead of tag if specified | `""` |
7777
| `windows.affinity` | Windows affinity | `key: type; operator: NotIn; values: [virtual-kubelet]` |
7878
| `windows.driver.resources` | The resource request/limits for the windows secrets-store container image | `limits: 400m CPU, 400Mi; requests: 50m CPU, 100Mi` |
@@ -85,13 +85,13 @@ The following table lists the configurable parameters of the csi-secrets-store-p
8585
| `windows.metricsAddr` | The address the metric endpoint binds to | `:8095` |
8686
| `windows.registrarImage.repository` | Windows node-driver-registrar image repository | `registry.k8s.io/sig-storage/csi-node-driver-registrar` |
8787
| `windows.registrarImage.pullPolicy` | Windows node-driver-registrar image pull policy | `IfNotPresent` |
88-
| `windows.registrarImage.tag` | Windows node-driver-registrar image tag | `v2.10.0` |
88+
| `windows.registrarImage.tag` | Windows node-driver-registrar image tag | `v2.11.1` |
8989
| `windows.registrarImage.digest` | Windows node-driver-registrar image digest, image pull from digest instead of tag if specified | `""` |
9090
| `windows.registrar.resources` | The resource request/limits for the windows node-driver-registrar container image | `limits: 200m CPU, 200Mi; requests: 10m CPU, 20Mi` |
9191
| `windows.registrar.logVerbosity` | Log level for node-driver-registrar. Uses V logs (klog) | `5` |
9292
| `windows.livenessProbeImage.repository` | Windows liveness-probe image repository | `registry.k8s.io/sig-storage/livenessprobe` |
9393
| `windows.livenessProbeImage.pullPolicy` | Windows liveness-probe image pull policy | `IfNotPresent` |
94-
| `windows.livenessProbeImage.tag` | Windows liveness-probe image tag | `v2.12.0` |
94+
| `windows.livenessProbeImage.tag` | Windows liveness-probe image tag | `v2.13.1` |
9595
| `windows.livenessProbeImage.digest` | Windows liveness-probe image digest, image pull from digest instead of tag if specified | `""` |
9696
| `windows.livenessProbe.resources` | The resource request/limits for the windows liveness-probe container image | `limits: 200m CPU, 200Mi; requests: 10m CPU, 20Mi` |
9797
| `windows.env` | Environment variables to be passed for the daemonset on windows nodes | `[]` |

charts/secrets-store-csi-driver/templates/secrets-store-csi-driver-windows.yaml

+4-8
Original file line numberDiff line numberDiff line change
@@ -74,17 +74,17 @@ spec:
7474
- "--nodeid=$(KUBE_NODE_NAME)"
7575
- "--provider-volume={{ .Values.windows.providersDir }}"
7676
- "--additional-provider-volume-paths={{ join "," .Values.windows.additionalProvidersDirs }}"
77-
{{- if and (semverCompare ">= v0.0.15-0" .Values.windows.image.tag) .Values.enableSecretRotation }}
77+
{{- if .Values.enableSecretRotation }}
7878
- "--enable-secret-rotation={{ .Values.enableSecretRotation }}"
7979
{{- end }}
80-
{{- if and (semverCompare ">= v0.0.15-0" .Values.windows.image.tag) .Values.rotationPollInterval }}
80+
{{- if .Values.rotationPollInterval }}
8181
- "--rotation-poll-interval={{ .Values.rotationPollInterval }}"
8282
{{- end }}
8383
- "--metrics-addr={{ .Values.windows.metricsAddr }}"
84-
{{- if and (semverCompare ">= v0.0.22-0" .Values.windows.image.tag) .Values.providerHealthCheck }}
84+
{{- if .Values.providerHealthCheck }}
8585
- "--provider-health-check={{ .Values.providerHealthCheck }}"
8686
{{- end }}
87-
{{- if and (semverCompare ">= v0.0.22-0" .Values.windows.image.tag) .Values.providerHealthCheckInterval }}
87+
{{- if .Values.providerHealthCheckInterval }}
8888
- "--provider-health-check-interval={{ .Values.providerHealthCheckInterval }}"
8989
{{- end }}
9090
{{- if .Values.maxCallRecvMsgSize }}
@@ -102,7 +102,6 @@ spec:
102102
apiVersion: v1
103103
fieldPath: spec.nodeName
104104
imagePullPolicy: {{ .Values.windows.image.pullPolicy }}
105-
{{- if semverCompare ">= v0.0.9-0" .Values.windows.image.tag }}
106105
ports:
107106
- containerPort: {{ .Values.livenessProbe.port }}
108107
name: healthz
@@ -118,7 +117,6 @@ spec:
118117
initialDelaySeconds: 30
119118
timeoutSeconds: 10
120119
periodSeconds: 15
121-
{{- end }}
122120
volumeMounts:
123121
- name: plugin-dir
124122
mountPath: C:\csi
@@ -140,7 +138,6 @@ spec:
140138
resources:
141139
{{ toYaml . | indent 12 }}
142140
{{- end }}
143-
{{- if semverCompare ">= v0.0.9-0" .Values.windows.image.tag }}
144141
- name: liveness-probe
145142
{{- if .Values.windows.livenessProbeImage.digest }}
146143
image: "{{ .Values.windows.livenessProbeImage.repository }}@{{ .Values.windows.livenessProbeImage.digest }}"
@@ -160,7 +157,6 @@ spec:
160157
resources:
161158
{{ toYaml . | indent 12 }}
162159
{{- end }}
163-
{{- end }}
164160
{{- if .Values.windows.priorityClassName }}
165161
priorityClassName: {{ .Values.windows.priorityClassName | quote }}
166162
{{- end }}

0 commit comments

Comments
 (0)