Azure/secrets-store-csi-driver-provider-azure v0.2.0

on GitHub

Announcement 📢

• --filtered-watch-secret has been enabled by default in v0.1.0 release. Refer to kubernetes-sigs/secrets-store-csi-driver#550 for more info.
• CustomResourceDefinitions in helm charts were moved from templates to crds directory in v0.1.0. pre-upgrade hooks have been added to manage the lifecycle of CRDs during install/upgrade.

Breaking Changes ⚠️

• syncSecret.enabled has been set to false by default in CSI Driver v0.0.23 release. This means the RBAC clusterrole and clusterrolebinding required for sync mounted content as Kubernetes secret will no longer be created by default as part of helm install/upgrade. If you're using the driver to sync mounted content as Kubernetes secret, you'll need to set secrets-store-csi-driver.syncSecret.enabled=true as part of helm install/upgrade. Ref: https://azure.github.io/secrets-store-csi-driver-provider-azure/upgrading/#upgrading-to-helm-chart-version-0020
• --filtered-watch-secret was enabled by default in v0.1.0 release. Refer to kubernetes-sigs/secrets-store-csi-driver#550 for more info. If you're using nodePublishSecretRef in the volume, refer to https://secrets-store-csi-driver.sigs.k8s.io/load-tests.html on actions to take before upgrade.
• Refer to https://secrets-store-csi-driver.sigs.k8s.io/getting-started/upgrades.html#pre-v010 before upgrade from driver version < v0.1.0

Features 🌈

• enable construct PEM chain by default (#605, @aramase)

Documentation 📘

• Update ingress-tls.md (#591, @DavidMarquezF)

Testing 💚

• adds e2e tests for GPU nodes (#594, @nilekhc)
• adds kind test for deployment manifests (#582, @nilekhc)
• use kubernetes e2e framework to check pods running (#601, @aramase)

Helm 📈

• move helm dependencies to Chart.yaml (#595, @aramase)
• fix security context for linux (#600, @aramase)

Maintenance 🔧

• use actions/stale instead of probot/stale (#597, @aramase)
• update to driver release v0.2.0 (#608, @aramase)