Warning ⚠️
- The
SecretProviderClass
needs to be in the same namespace as the pod referencing it as ofv0.0.12
. - Defining driver configuration and provider-specific parameters to the CSI driver in
pod.Spec[].Volumes
has been deprecated inv0.0.12
. It is now mandatory to useSecretProviderClass
custom resource.
Features 🌈
- Add stripping sensitive information while logging the grpc request (#259)
- attributes: pass csi.storage.k8s.io/serviceAccount.name (#267)
- add preserveUnknownFields=false marker (#274)
- Add metadata.label support for sync secret (#273)
- rbac: move secrets sync to own role (secretprovidersyncing-role) (#266)
Bug Fixes 🐞
- use namespace for spc lookup + unit tests (#264)
Documentation 📘
- add release doc and targets (#258)
- add release, go report, go version badge (#278)
- Fixing links where files were moved to a new subdirectory (#283)
Testing 💚
- check pod ready status before getting name (#270)
- move tests to subdir for provider (#276)
- add test for multiple secret provider class (#261)
- remove az cli req (#284)
Helm 📈
- add tolerations to helm charts (#262)
- Move tolerations block inside OS conditional in helm chart (#272)
- regenerate manifests to remove unused rbac permissions (#275)
- make all images configurable (#260)
- Add support for envs in helm chart (#279)
- implement helm best practices, add recommended standard helm labels (#240)
Maintenance 🔧
- update golangci-lint (#282)
- Driver images are now hosted in GCR at
us.gcr.io/k8s-artifacts-prod/csi-secrets-store/driver