kubernetes-sigs/secrets-store-csi-driver v0.3.0

on GitHub

Announcement 📢

• The helm charts have been moved to https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts. Refer to https://secrets-store-csi-driver.sigs.k8s.io/getting-started/upgrades.html#upgrades for information on upgrading existing clusters.
• Note to Providers: Return files in gRPC responses to the driver is now the recommended approach. See #551
• CustomResourceDefinitions in helm charts have been moved from templates to crds directory in v0.1.0. pre-upgrade hooks have been added to manage the lifecycle of CRDs during install/upgrade.
• ❗ Rollback to previous helm chart versions after installing v0.1.0+ will result in an error.

Breaking Changes ⚠️

• --filtered-watch-secret cannot be disabled starting in v0.3.0. Refer to #550 for more info. If you're using nodePublishSecretRef in the volume, refer to https://secrets-store-csi-driver.sigs.k8s.io/load-tests.html on actions to take before upgrade.
• syncSecret.enabled has been set to false by default in v0.0.23. This means the RBAC clusterrole and clusterrolebinding required for sync mounted content as Kubernetes secret will no longer be created by default as part of helm install/upgrade. If you're using the driver to sync mounted content as Kubernetes secret, you'll need to set syncSecret.enabled=true as part of helm install/upgrade.
• Refer to https://secrets-store-csi-driver.sigs.k8s.io/getting-started/upgrades.html#pre-v010 before upgrade from versions < v0.1.0

Bug Fixes 🐞

• remove constraints on secret type name (#703, @aramase)

Testing 💚

• extended windows first pod timeout to 300s (#698, @aramase)
• cleanup filteredWatchSecret=false from e2e tests (#708, @aramase)
• update kubectl to 1.22.1 (#713, @tam7t)
• add aws release test (#633, @tam7t)

Helm 📈

• allow annotations on upgrade jobs (#692, @thomasmRavn )
• publish helm charts using github workflow (#693, @aramase)
• update chart repo to https://kuberentes-sigs.github.io/secrets-store-csi-driver/charts (#695, @aramase)
• add pod security policy to upgrade hooks (#709, @nilekhc)

Maintenance 🔧

• update release documentation (#649, @tam7t)
• update node-driver-registrar to v2.3.0 (#691, @aramase)
• update opentelemetry to v0.20.0 (#701, @aramase)
• refactor: remove csi-common package and update driver (#702, @aramase)
• update build to go 1.17 (#710, #711, @aramase)
• update livenessprobe to v2.4.0 (#712, @aramase)
• upgrade build runner to N1_HIGHCPU_8 (#714, @aramase)

Driver images are hosted in GCR at k8s.gcr.io/csi-secrets-store/driver