csi-driver-spiffe is a clean and simple way to get SPIFFE IDs for your Kubernetes pods with minimal dependencies and minimal fuss.
⚠️ starting from this version, we no longer use the registry.k8s.io/sig-storage/livenessprobe and registry.k8s.io/sig-storage/csi-node-driver-registrar images directly in our Helm chart. We now use our own copies quay.io/jetstack/livenessprobe and quay.io/jetstack/csi-node-driver-registrar instead.
This release includes a change which makes it much simpler to mirror container images to self-hosted registries.
There are also several CVE fixes including CVE-2026-27138, CVE-2026-27137, CVE-2026-27142 and CVE-2026-25679.
What's Changed
Features
- Split image section into driverImage and approverImage sections without breaking the Helm chart by @maelvls in #463
- Add imageRegistry/imageNamespace to Helm chart image settings by @FelixPhipps in #460
- Fix typo in crane cp command by @inteon in #472
Bumps / CI
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #458
- fix(deps): update module github.com/cert-manager/cert-manager to v1.19.4 by @renovate[bot] in #459
- chore(deps): update actions/setup-go action to v6.3.0 by @renovate[bot] in #461
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #465
- fix(deps): update kubernetes go patches to v0.35.2 by @renovate[bot] in #464
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #466
- fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.2 by @renovate[bot] in #468
- fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.3 by @renovate[bot] in #469
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #471
- fix(deps): update module k8s.io/klog/v2 to v2.140.0 by @renovate[bot] in #470
- chore(deps): update docker/login-action action to v4 by @renovate[bot] in #467
New Contributors
- @maelvls made their first contribution in #463
- @FelixPhipps made their first contribution in #460
Full Changelog: v0.11.1...v0.12.0