0.0.14

Note 🗒️

• Before upgrade, refer to doc on the optimizations done in the Secrets Store CSI Driver and actions to take for reducing memory consumption.

Features 🌈

• switch to using httpget for liveness-probe (#453, @aramase)

Bug Fixes 🐞

• CVE-2021-24032 (#426, @aramase)
• use scheme long format for Helm dependencies (#449, @4devnull)

Documentation 📘

• Update _index.md (#422, @norelina)
• fix rotation url (#432, @aramase)
• fix parameter in walkthrough (#441, @aramase)

Helm 📈

• Added podAnnotations to the staging chart (#442, @pierluigilenoci)

Testing 💚

• switch to using multi-os image, update docs (#416, @aramase)
• add cluster upgrade test (#448, @aramase)

Maintenance 🔧

• add troubleshooting guide url in issue template (#417, @aramase)
• update to go 1.16 (#424, @aramase)
• update sdk dependencies (#439, @aramase)
• use nanoserver base image for windows (#454, @aramase)
• update debian base to buster-v1.5.0 (#455, @aramase)
• bump y18n from 4.0.0 to 4.0.1 in /website (#457, @dependabot)
• update to driver v0.0.21 (#458, @aramase)

Azure Key Vault Provider image is now in mcr.microsoft.com/oss/azure/secrets-store/provider-azure:0.0.14 and Secrets Store CSI Driver image is in mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver

0.0.13

Features 🌈

• add configuration for custom user agent (#393)

Documentation 📘

• update readme to reference docs site (#374)
• clarify usage in system-assigned mode (#405)
• move ingress docs to website and delete old readmes (#403)

Helm 📈

• add privileged option for running in ARO (#364)
• add linux and windows image helm config (#380)
• add podLabels parameter (#392)

Testing 💚

• disable trigger master run and enable nightly master run (#385)
• add unit tests for auth and provider pkgs (#379)
• add new test framework (#242)
• add soak tests with aks clusters (#396)
• delete keyvault secret after auto-rotation test (#397)

Maintenance 🔧

• update debian-base image to buster-v1.3.0 (#375)
• remove bats test suite (#391)
• update debian-base image to buster-v1.4.0 (#408)
• update driver to v0.0.20 (#409)

Azure Key Vault Provider image is now in mcr.microsoft.com/oss/azure/secrets-store/provider-azure:0.0.13 and Secrets Store CSI Driver image is in mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver

0.0.12

Features 🌈

• add grpc health probe for linux daemonset (#345)
• support reconstructing chain of certs (#332)
  • Refer to https://azure.github.io/secrets-store-csi-driver-provider-azure/configurations/feature-flags/#construct-pem-chain-feature-flag for more details.

Bug Fixes 🐞

• CVE-2020-27350, CVE-2020-29362 (#355)

Documentation 📘

• Add a note on when secrets are actually synced (#367)
• update docs website (#362)

Testing 💚

• add image scanning and refactor Makefile (#335)
• add code coverage as part of CI (#360)

Maintenance 🔧

• update github pr template (#356)
• Update driver version to v0.0.19 (#373)

Azure Key Vault Provider image is now in mcr.microsoft.com/oss/azure/secrets-store/provider-azure:0.0.12

0.0.11

Warning ⚠️

• The 0.0.11 version of the Azure Key Vault Provider is not compatible with driver versions < v0.0.14. Please read the doc carefully before upgrading.

Features 🌈

• add pprof profiling (#329)

Bug Fixes 🐞

• switch to using flag instead of pflag (#331)
• debug pipeline buildx failure (#334)

Documentation 📘

• ingress docs (#282)
• add plumbing for docs site (#314)

Helm 📈

• update secrets-store-csi-driver to v0.0.18 (#340)

Azure Key Vault Provider image is now in mcr.microsoft.com/oss/azure/secrets-store/provider-azure:0.0.11

0.0.10

Warning ⚠️

• The 0.0.10 version of the Azure Key Vault Provider is not compatible with driver versions < v0.0.14. Please read the doc carefully before upgrading.
• CVE-2020-8567 (Medium): Plugin directory traversals. See kubernetes-sigs/secrets-store-csi-driver#384 for more details.

Features 🌈

• switch to using HostToContainer instead of Bidirectional (#276)
• add validation for file name (#298)
• switch to klog v2 and structured logging (#299)

Documentation 📘

• Added a link to a YouTube video on Azure Secret Store Provider for AKV integration with VMSS Managed Identity (#147)
• Update link for rotation doc (#264)
• update README.md to clarify objectAlias for secret sync (#280)
• add demo video (#287)
• Update link to README for pod identity (#304)

Maintenance 🔧

• update registrar and liveness probe images (#295)

Testing 💚

• helm dep update for lint + lint manifest_staging (#288)
• add golangci lint and enable in CI (#277)

Helm 📈

• Add priorityClassName to daemonsets (#263)
• Allow the 'updateStrategy' of the Daemonset to be configured in Helm (#285)
• Update to secrets-store-csi-driver v0.0.17 (#309)

Azure Key Vault Provider image is now in mcr.microsoft.com/oss/azure/secrets-store/provider-azure:0.0.10

0.0.9

Warning ⚠️

• The 0.0.9 version of the Azure Key Vault Provider is not compatible with driver versions < v0.0.14. Please read the doc carefully before upgrading.

Features 🌈

• implement gRPC server (#203)
• Adds support for specifying objectEncoding for secrets (#236)
• add trimspace to sanitize yaml fields (#246)

Bug Fixes 🐞

• custom azure environment not supported (#220)

Documentation 📘

• update example manifest for pvc (#212)
• Fix missing link in README.md (#228)
• Update system-assigned-msi-mode.md (#233)

Maintenance 🔧

• update pr template (#208)
• add manifest staging dir to hold new manifests (#215)
• update debian base image to v2.1.3 (#222)

Testing 💚

• add load test pipeline to nightly job (#219)
• update client secret variable in teardown (#244)

Helm 📈

• Add imagePullSecretes to the Helm chart (#238)

Azure Key Vault Provider image is now in mcr.microsoft.com/oss/azure/secrets-store/provider-azure:0.0.9

0.0.8

Features 🌈

• set context timeout for access to kv (#152)
• allow defining a custom azure environment (#153)
• add object format to support pfx (#175)

Bug Fixes 🐞

• update kv endpoint suffix for custom cloud (#189)

Documentation 📘

• adjusted BYO MI terminology in docs. (#154)
• add helm chart, driver, provider version matrix (#168)
• fix broken image link in readme (#176)
• add example psp and note in readme (#181)
• Fix links to example files that were moved. (#184)
• add examples and build badges (#187)

Maintenance 🔧

• remove periodic log from container (#163)

Testing 💚

• add pipeline for aks cluster (#172)

Helm 📈

• update helm chart to include driver:v0.0.12 (#164)

0.0.7

Features 🌈

• add user agent with version number (#118)
• Allow multiple certificates in pfx pdu for pkcs12 (#123)

Documentation 📘

• add docs for ingress tls with keyvault (#113)
• add note about using object type secret for tls (#126)

Maintenance 🔧

• update node selector to kubernetes.io/os (#128)
• add kubectl node version to issue template (#131)

Testing 💚

• add e2e test for pod-identity mode (#137)

Helm 📈

• add log debug configuration in helm chart (#125)

0.0.6

Features 🌈

• update logic for cert and key (#98)
  • Review doc for changes.
• update container base image to debian base (#100)

Documentation 📘

• demo video by @HoussemDellai added to readme 🎉 (#78)
• adding more commands to clarify steps / stages (#85)
• fix doc format, add link for pod-identity role assignment (#87)
• update doc for pod-identity mode (#95)
• Add features to README (#96)

Bug Fixes 🐞

• check key type before return (#74)
• fix decoding pkcs12 certificate (#82)

Testing 💚

• add job for windows e2e (#105)

Helm 📈

• update driver version to v0.0.10 in charts (#81)
• adding node selector values to chart (#109)

0.0.5

Features 🌈

• Add support for setting cloud name (#21)
• Add Key Vault Object Alias Support for Filenames (#39)
• Add support for user-assigned and system-assigned MSI (#46)
• Support driver and azure keyvault provider installation with helm charts (#62)

Documentation 📘

• documentation for windows install (#51)
• update documentation for pod-identity mode (#57)

Bug Fixes 🐞

• Fix cert value generation (#52)

Testing 💚

• Enabled e2e tests on aks-engine clusters (#54)