Announcement 📢
--filtered-watch-secret
has been enabled by default inv0.1.0
release. Refer to #550 for more info.- Note to Providers: Return files in gRPC responses to the driver is now the recommended approach. See #551
- CustomResourceDefinitions in helm charts have been moved from
templates
tocrds
directory inv0.1.0
.pre-upgrade
hooks have been added to manage the lifecycle of CRDs during install/upgrade. - ❗ Rollback to previous helm chart versions after installing
v0.1.0+
will result in an error.
Breaking Changes ⚠️
syncSecret.enabled
has been set to false by default inv0.0.23
. This means the RBAC clusterrole and clusterrolebinding required for sync mounted content as Kubernetes secret will no longer be created by default as part ofhelm install/upgrade
. If you're using the driver to sync mounted content as Kubernetes secret, you'll need to setsyncSecret.enabled=true
as part ofhelm install/upgrade
.--filtered-watch-secret
has been enabled by default inv0.1.0
release. Refer to #550 for more info. If you're usingnodePublishSecretRef
in the volume, refer to https://secrets-store-csi-driver.sigs.k8s.io/load-tests.html on actions to take before upgrade.- Refer to https://secrets-store-csi-driver.sigs.k8s.io/getting-started/upgrades.html#pre-v010 before upgrade from versions < v0.1.0
Documentation 📘
- add details on v0.1.0 upgrades (#650, @tam7t)
- Update Membership.md with more roles/details (#607, @karenhchu)
- update load test doc for filtered watch secret (#667, @aramase)
Testing 💚
- use kubectl exec instead of cp (#664, @aramase)
- gcp tests: explicit specify namespace (#664, @tam7t)
- adds make target for deploy manifest (#669, @nilekhc)
Helm 📈
- add option to configure fullnameOverride (#671, @aramase)
- Add pre-install to upgrade hook so existing CRDs on helm install can be upgraded (#679, @ritazh)
- use same toleration and nodeselector for crd-hook jobs (#683, @uncycler)
Maintenance 🔧
- update golangci-lint (#635, @tam7t)
- Add metrics port definition to DS (#614, @NissesSenap)
- Migrate from deprecated io/ioutil package to using os package (#673, @katyamag)
- update debian base to buster-v1.9.0 (#681, @aramase)
Driver images are hosted in GCR at k8s.gcr.io/csi-secrets-store/driver