release: update manifest and helm charts for 0.0.13 (#409)

Signed-off-by: Anish Ramasekar <[email protected]>
Azure · Feb 19, 2021 · a7fbc6f · a7fbc6f
1 parent 955dcb5
commit a7fbc6f
Show file tree

Hide file tree

Showing 19 changed files with 109 additions and 42 deletions.
diff --git a/charts/csi-secrets-store-provider-azure-0.0.17.tgz b/charts/csi-secrets-store-provider-azure-0.0.17.tgz
diff --git a/charts/csi-secrets-store-provider-azure/Chart.yaml b/charts/csi-secrets-store-provider-azure/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: csi-secrets-store-provider-azure
-version: 0.0.16
-appVersion: 0.0.12
+version: 0.0.17
+appVersion: 0.0.13
 kubeVersion: ">=1.16.0-0"
 description: A Helm chart to install the Secrets Store CSI Driver and the Azure Keyvault Provider inside a Kubernetes cluster.
 sources:

diff --git a/charts/csi-secrets-store-provider-azure/README.md b/charts/csi-secrets-store-provider-azure/README.md
diff --git a/charts/csi-secrets-store-provider-azure/requirements.lock b/charts/csi-secrets-store-provider-azure/requirements.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: secrets-store-csi-driver
   repository: https://raw.githubusercontent.com/kubernetes-sigs/secrets-store-csi-driver/master/charts
-  version: 0.0.19
-digest: sha256:80e87a19cd0d02a8aee662e6f38fefa9b7a1d8c499000e6b170da7b7d78eba2e
-generated: "2021-01-19T17:52:12.701524-08:00"
+  version: 0.0.20
+digest: sha256:1674fe949dfbf57958620bef8e4053dc9666a4f70b7c2ef26e5753924f16d09b
+generated: "2021-02-18T18:35:20.745844-08:00"
diff --git a/charts/csi-secrets-store-provider-azure/requirements.yaml b/charts/csi-secrets-store-provider-azure/requirements.yaml
@@ -1,5 +1,5 @@
 dependencies:
 - name: secrets-store-csi-driver
   repository: https://raw.githubusercontent.com/kubernetes-sigs/secrets-store-csi-driver/master/charts
-  version: 0.0.19
+  version: 0.0.20
   condition: secrets-store-csi-driver.install
diff --git a/charts/csi-secrets-store-provider-azure/templates/provider-azure-installer-windows.yaml b/charts/csi-secrets-store-provider-azure/templates/provider-azure-installer-windows.yaml
@@ -14,6 +14,9 @@ spec:
   template:
     metadata:
 {{ include "sscdpa.labels" . | indent 6 }}
+{{- if .Values.windows.podLabels }}
+{{- toYaml .Values.windows.podLabels | nindent 8 }}
+{{- end }}
     spec:
       {{- if .Values.imagePullSecrets }}
       imagePullSecrets:
@@ -22,8 +25,8 @@ spec:
       serviceAccountName: csi-secrets-store-provider-azure
       containers:
         - name: provider-azure-installer
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          image: "{{ .Values.image.repository | default .Values.windows.image.repository }}:{{ .Values.image.tag | default .Values.windows.image.tag }}"
+          imagePullPolicy: {{ .Values.image.pullPolicy | default .Values.windows.image.pullPolicy }}
           args:
             - --endpoint=unix://C:\\provider\\azure.sock
             {{- if .Values.logFormatJSON }}
@@ -35,6 +38,9 @@ spec:
             {{- if .Values.constructPEMChain }}
             - --construct-pem-chain={{ .Values.constructPEMChain }}
             {{- end }}
+            {{- if .Values.windows.customUserAgent }}
+            - --custom-user-agent={{ .Values.windows.customUserAgent }}
+            {{- end }}
           lifecycle:
             preStop:
               exec:

diff --git a/charts/csi-secrets-store-provider-azure/templates/provider-azure-installer.yaml b/charts/csi-secrets-store-provider-azure/templates/provider-azure-installer.yaml
@@ -14,6 +14,9 @@ spec:
   template:
     metadata:
 {{ include "sscdpa.labels" . | indent 6 }}
+{{- if .Values.linux.podLabels }}
+{{- toYaml .Values.linux.podLabels | nindent 8 }}
+{{- end }}
     spec:
       {{- if .Values.imagePullSecrets }}
       imagePullSecrets:
@@ -23,8 +26,8 @@ spec:
       hostNetwork: true
       containers:
         - name: provider-azure-installer
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          image: "{{ .Values.image.repository | default .Values.linux.image.repository }}:{{ .Values.image.tag | default .Values.linux.image.tag }}"
+          imagePullPolicy: {{ .Values.image.pullPolicy | default .Values.linux.image.pullPolicy }}
           args:
             - --endpoint=unix:///provider/azure.sock
             {{- if .Values.logFormatJSON }}
@@ -36,6 +39,9 @@ spec:
             {{- if .Values.constructPEMChain }}
             - --construct-pem-chain={{ .Values.constructPEMChain }}
             {{- end }}
+            {{- if .Values.linux.customUserAgent }}
+            - --custom-user-agent={{ .Values.linux.customUserAgent }}
+            {{- end }}
           lifecycle:
             preStop:
               exec:
@@ -51,6 +57,10 @@ spec:
             initialDelaySeconds: 5
           resources:
 {{ toYaml .Values.linux.resources | indent 12 }}
+          {{- if .Values.linux.privileged }}
+          securityContext:
+            privileged: true
+          {{- end }}
           volumeMounts:
             - name: provider-vol
               mountPath: /provider

diff --git a/charts/csi-secrets-store-provider-azure/values.yaml b/charts/csi-secrets-store-provider-azure/values.yaml
@@ -1,7 +1,8 @@
+# [DEPRECATED] use linux.image and windows.image instead.
 image:
-  repository: mcr.microsoft.com/oss/azure/secrets-store/provider-azure
-  tag: 0.0.12
-  pullPolicy: IfNotPresent
+  repository: ""
+  tag: ""
+  pullPolicy: ""
 
 # One or more secrets to be used when pulling images
 imagePullSecrets: []
@@ -15,6 +16,10 @@ logFormatJSON: false
 logVerbosity: 0
 
 linux:
+  image:
+    repository: mcr.microsoft.com/oss/azure/secrets-store/provider-azure
+    tag: 0.0.13
+    pullPolicy: IfNotPresent
   nodeSelector: {}
   tolerations: []
   enabled: true
@@ -25,13 +30,22 @@ linux:
     limits:
       cpu: 50m
       memory: 100Mi
+  podLabels: {}
   priorityClassName: ""
   updateStrategy:
     type: RollingUpdate
     rollingUpdate:
       maxUnavailable: 1
+  privileged: false
+  # If provided, the userAgent string will be appended to the
+  # AKV provider user agents for all adal and keyvault requests.
+  customUserAgent: ""
 
 windows:
+  image:
+    repository: mcr.microsoft.com/oss/azure/secrets-store/provider-azure
+    tag: 0.0.13
+    pullPolicy: IfNotPresent
   nodeSelector: {}
   tolerations: []
   enabled: false
@@ -42,11 +56,15 @@ windows:
     limits:
       cpu: 100m
       memory: 200Mi
+  podLabels: {}
   priorityClassName: ""
   updateStrategy:
     type: RollingUpdate
     rollingUpdate:
       maxUnavailable: 1
+  # If provided, the userAgent string will be appended to the
+  # AKV provider user agents for all adal and keyvault requests.
+  customUserAgent: ""
 
 ## Configuration values for the secrets-store-csi-driver dependency.
 ## ref: https://github.com/kubernetes-sigs/secrets-store-csi-driver/tree/master/charts/secrets-store-csi-driver/README.md
@@ -59,7 +77,7 @@ secrets-store-csi-driver:
     metricsAddr: ":8080"
     image:
       repository: mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver
-      tag: v0.0.19
+      tag: v0.0.20
       pullPolicy: IfNotPresent
     registrarImage:
       repository: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar
@@ -76,7 +94,7 @@ secrets-store-csi-driver:
     metricsAddr: ":8080"
     image:
       repository: mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver
-      tag: v0.0.19
+      tag: v0.0.20
       pullPolicy: IfNotPresent
     registrarImage:
       repository: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar

diff --git a/charts/index.yaml b/charts/index.yaml
@@ -1,6 +1,27 @@
 apiVersion: v1
 entries:
   csi-secrets-store-provider-azure:
+  - apiVersion: v1
+    appVersion: 0.0.13
+    created: "2021-02-18T18:39:56.811398-08:00"
+    dependencies:
+    - condition: secrets-store-csi-driver.install
+      name: secrets-store-csi-driver
+      repository: https://raw.githubusercontent.com/kubernetes-sigs/secrets-store-csi-driver/master/charts
+      version: 0.0.20
+    description: A Helm chart to install the Secrets Store CSI Driver and the Azure Keyvault Provider inside a Kubernetes cluster.
+    digest: 17d7e6e7aa52cae1e26adc5395190a1e142fa47369f788be7380c84d015783ec
+    home: https://github.com/Azure/secrets-store-csi-driver-provider-azure
+    kubeVersion: '>=1.16.0-0'
+    maintainers:
+    - email: [email protected]
+      name: Anish Ramasekar
+    name: csi-secrets-store-provider-azure
+    sources:
+    - https://github.com/Azure/secrets-store-csi-driver-provider-azure
+    urls:
+    - //raw.githubusercontent.com/Azure/secrets-store-csi-driver-provider-azure/master/charts/csi-secrets-store-provider-azure-0.0.17.tgz
+    version: 0.0.17
   - apiVersion: v1
     appVersion: 0.0.12
     created: "2021-01-19T17:56:13.764533-08:00"
@@ -253,4 +274,4 @@ entries:
     urls:
     - https://raw.githubusercontent.com/Azure/secrets-store-csi-driver-provider-azure/master/charts/csi-secrets-store-provider-azure-0.0.5.tgz
     version: 0.0.5
-generated: "2021-01-19T17:56:13.76287-08:00"
+generated: "2021-02-18T18:39:56.808755-08:00"
diff --git a/deployment/provider-azure-installer-windows.yaml b/deployment/provider-azure-installer-windows.yaml
@@ -23,7 +23,7 @@ spec:
       serviceAccountName: csi-secrets-store-provider-azure
       containers:
         - name: provider-azure-installer
-          image: mcr.microsoft.com/oss/azure/secrets-store/provider-azure:0.0.12
+          image: mcr.microsoft.com/oss/azure/secrets-store/provider-azure:0.0.13
           imagePullPolicy: IfNotPresent
           args:
             - --endpoint=unix://C:\\provider\\azure.sock

diff --git a/deployment/provider-azure-installer.yaml b/deployment/provider-azure-installer.yaml
@@ -24,7 +24,7 @@ spec:
       hostNetwork: true
       containers:
         - name: provider-azure-installer
-          image: mcr.microsoft.com/oss/azure/secrets-store/provider-azure:0.0.12
+          image: mcr.microsoft.com/oss/azure/secrets-store/provider-azure:0.0.13
           imagePullPolicy: IfNotPresent
           args:
             - --endpoint=unix:///provider/azure.sock

diff --git a/manifest_staging/charts/csi-secrets-store-provider-azure/Chart.yaml b/manifest_staging/charts/csi-secrets-store-provider-azure/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: csi-secrets-store-provider-azure
-version: 0.0.16
-appVersion: 0.0.12
+version: 0.0.17
+appVersion: 0.0.13
 kubeVersion: ">=1.16.0-0"
 description: A Helm chart to install the Secrets Store CSI Driver and the Azure Keyvault Provider inside a Kubernetes cluster.
 sources:

diff --git a/manifest_staging/charts/csi-secrets-store-provider-azure/README.md b/manifest_staging/charts/csi-secrets-store-provider-azure/README.md
@@ -18,6 +18,7 @@ Azure Key Vault provider for Secrets Store CSI driver allows you to get secret c
 | `0.0.14`           | `0.0.17`                         | `0.0.10`                         |
 | `0.0.15`           | `0.0.18`                         | `0.0.11`                         |
 | `0.0.16`           | `0.0.19`                         | `0.0.12`                         |
+| `0.0.17`           | `0.0.20`                         | `0.0.13`                         |
 
 ## Installation
 
@@ -55,7 +56,7 @@ The following table lists the configurable parameters of the csi-secrets-store-p
 | `linux.enabled`                                                  | Install azure keyvault provider on linux nodes                                                                                | true                                                                                             |
 | `linux.image.repository`                                         | Linux image repository                                                                                                        | `mcr.microsoft.com/oss/azure/secrets-store/provider-azure`                                       |
 | `linux.image.pullPolicy`                                         | Linux image pull policy                                                                                                       | `IfNotPresent`                                                                                   |
-| `linux.image.tag`                                                | Azure Keyvault Provider Linux image tag                                                                                       | `0.0.12`                                                                                         |
+| `linux.image.tag`                                                | Azure Keyvault Provider Linux image tag                                                                                       | `0.0.13`                                                                                         |
 | `linux.nodeSelector`                                             | Node Selector for the daemonset on linux nodes                                                                                | `{}`                                                                                             |
 | `linux.tolerations`                                              | Tolerations for the daemonset on linux nodes                                                                                  | `{}`                                                                                             |
 | `linux.resources`                                                | Resource limit for provider pods on linux nodes                                                                               | `requests.cpu: 50m`<br>`requests.memory: 100Mi`<br>`limits.cpu: 50m`<br>`limits.memory: 100Mi`   |
@@ -66,7 +67,7 @@ The following table lists the configurable parameters of the csi-secrets-store-p
 | `windows.enabled`                                                | Install azure keyvault provider on windows nodes                                                                              | false                                                                                            |
 | `windows.image.repository`                                       | Windows image repository                                                                                                      | `mcr.microsoft.com/oss/azure/secrets-store/provider-azure`                                       |
 | `windows.image.pullPolicy`                                       | Windows image pull policy                                                                                                     | `IfNotPresent`                                                                                   |
-| `windows.image.tag`                                              | Azure Keyvault Provider Windows image tag                                                                                     | `0.0.12`                                                                                         |
+| `windows.image.tag`                                              | Azure Keyvault Provider Windows image tag                                                                                     | `0.0.13`                                                                                         |
 | `windows.nodeSelector`                                           | Node Selector for the daemonset on windows nodes                                                                              | `{}`                                                                                             |
 | `windows.tolerations`                                            | Tolerations for the daemonset on windows nodes                                                                                | `{}`                                                                                             |
 | `windows.resources`                                              | Resource limit for provider pods on windows nodes                                                                             | `requests.cpu: 100m`<br>`requests.memory: 200Mi`<br>`limits.cpu: 100m`<br>`limits.memory: 200Mi` |
@@ -79,7 +80,7 @@ The following table lists the configurable parameters of the csi-secrets-store-p
 | `secrets-store-csi-driver.linux.metricsAddr`                     | The address the metric endpoint binds to                                                                                      | `:8080`                                                                                          |
 | `secrets-store-csi-driver.linux.image.repository`                | Driver Linux image repository                                                                                                 | `mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver`                                      |
 | `secrets-store-csi-driver.linux.image.pullPolicy`                | Driver Linux image pull policy                                                                                                | `IfNotPresent`                                                                                   |
-| `secrets-store-csi-driver.linux.image.tag`                       | Driver Linux image tag                                                                                                        | `v0.0.19`                                                                                        |
+| `secrets-store-csi-driver.linux.image.tag`                       | Driver Linux image tag                                                                                                        | `v0.0.20`                                                                                        |
 | `secrets-store-csi-driver.linux.registrarImage.repository`       | Driver Linux node-driver-registrar image repository                                                                           | `mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar`                                 |
 | `secrets-store-csi-driver.linux.registrarImage.pullPolicy`       | Driver Linux node-driver-registrar image pull policy                                                                          | `IfNotPresent`                                                                                   |
 | `secrets-store-csi-driver.linux.registrarImage.tag`              | Driver Linux node-driver-registrar image tag                                                                                  | `v2.1.0`                                                                                         |
@@ -91,7 +92,7 @@ The following table lists the configurable parameters of the csi-secrets-store-p
 | `secrets-store-csi-driver.windows.metricsAddr`                   | The address the metric endpoint binds to                                                                                      | `:8080`                                                                                          |
 | `secrets-store-csi-driver.windows.image.repository`              | Driver Windows image repository                                                                                               | `mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver`                                      |
 | `secrets-store-csi-driver.windows.image.pullPolicy`              | Driver Windows image pull policy                                                                                              | `IfNotPresent`                                                                                   |
-| `secrets-store-csi-driver.windows.image.tag`                     | Driver Windows image tag                                                                                                      | `v0.0.19`                                                                                        |
+| `secrets-store-csi-driver.windows.image.tag`                     | Driver Windows image tag                                                                                                      | `v0.0.20`                                                                                        |
 | `secrets-store-csi-driver.windows.registrarImage.repository`     | Driver Windows node-driver-registrar image repository                                                                         | `mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar`                                 |
 | `secrets-store-csi-driver.windows.registrarImage.pullPolicy`     | Driver Windows node-driver-registrar image pull policy                                                                        | `IfNotPresent`                                                                                   |
 | `secrets-store-csi-driver.windows.registrarImage.tag`            | Driver Windows node-driver-registrar image tag                                                                                | `v2.1.0`                                                                                         |

diff --git a/manifest_staging/charts/csi-secrets-store-provider-azure/requirements.lock b/manifest_staging/charts/csi-secrets-store-provider-azure/requirements.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: secrets-store-csi-driver
   repository: https://raw.githubusercontent.com/kubernetes-sigs/secrets-store-csi-driver/master/charts
-  version: 0.0.19
-digest: sha256:80e87a19cd0d02a8aee662e6f38fefa9b7a1d8c499000e6b170da7b7d78eba2e
-generated: "2021-01-19T17:52:12.701524-08:00"
+  version: 0.0.20
+digest: sha256:1674fe949dfbf57958620bef8e4053dc9666a4f70b7c2ef26e5753924f16d09b
+generated: "2021-02-18T18:35:20.745844-08:00"
diff --git a/manifest_staging/charts/csi-secrets-store-provider-azure/requirements.yaml b/manifest_staging/charts/csi-secrets-store-provider-azure/requirements.yaml
@@ -1,5 +1,5 @@
 dependencies:
 - name: secrets-store-csi-driver
   repository: https://raw.githubusercontent.com/kubernetes-sigs/secrets-store-csi-driver/master/charts
-  version: 0.0.19
+  version: 0.0.20
   condition: secrets-store-csi-driver.install