Merge pull request #318 from aramase/release-v0.0.14

release: update manifest and helm charts for v0.0.14
kubernetes-sigs · Sep 17, 2020 · 594aad8 · 594aad8
2 parents 62b2112 + 576d3a9
commit 594aad8
Show file tree

Hide file tree

Showing 19 changed files with 436 additions and 263 deletions.
diff --git a/charts/index.yaml b/charts/index.yaml
@@ -1,9 +1,26 @@
 apiVersion: v1
 entries:
   secrets-store-csi-driver:
+  - apiVersion: v1
+    appVersion: 0.0.14
+    created: "2020-09-17T12:11:25.687333-07:00"
+    description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes
+      cluster.
+    digest: 6390ebd13eeb76d1ed22263831d5383f8258bec1731d4f98e6c8dfe8b6256249
+    icon: https://github.com/kubernetes/kubernetes/blob/master/logo/logo.png
+    kubeVersion: '>=1.16.0-0'
+    maintainers:
+    - email: ritazh@microsoft.com
+      name: Rita Zhang
+    name: secrets-store-csi-driver
+    sources:
+    - https://github.com/kubernetes-sigs/secrets-store-csi-driver
+    urls:
+    - https://raw.githubusercontent.com/kubernetes-sigs/secrets-store-csi-driver/master/charts/secrets-store-csi-driver-0.0.14.tgz
+    version: 0.0.14
   - apiVersion: v1
     appVersion: 0.0.13
-    created: "2020-08-17T18:08:01.599946-07:00"
+    created: "2020-09-17T12:11:25.686272-07:00"
     description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes
       cluster.
     digest: 426ea403ad1083cae569a13d8ecf686e4797b7816f6254709070afc4f4b858ab
@@ -20,7 +37,7 @@ entries:
     version: 0.0.13
   - apiVersion: v1
     appVersion: 0.0.12
-    created: "2020-08-17T18:08:01.599247-07:00"
+    created: "2020-09-17T12:11:25.684686-07:00"
     description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes
       cluster.
     digest: 0c132d4be8c4eb48109a4fe8cc0ce29e6fc9f68647bb522c4040d033861a0e78
@@ -37,7 +54,7 @@ entries:
     version: 0.0.12
   - apiVersion: v1
     appVersion: 0.0.11
-    created: "2020-08-17T18:08:01.597723-07:00"
+    created: "2020-09-17T12:11:25.683375-07:00"
     description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes
       cluster.
     digest: 2751ae7aed8ea2fc7dcdcbbf26240fccb2eefd83d3943cef45bb58bb1d297692
@@ -54,7 +71,7 @@ entries:
     version: 0.0.11
   - apiVersion: v1
     appVersion: 0.0.10
-    created: "2020-08-17T18:08:01.595105-07:00"
+    created: "2020-09-17T12:11:25.681638-07:00"
     description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes
       cluster.
     digest: 9fae95e4611c9c120ed12505e735680b70ed133ea987fd32db05046cb45eda9e
@@ -71,7 +88,7 @@ entries:
     version: 0.0.10
   - apiVersion: v1
     appVersion: 0.0.9
-    created: "2020-08-17T18:08:01.601014-07:00"
+    created: "2020-09-17T12:11:25.689493-07:00"
     description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes
       cluster.
     digest: 0f74454ca36c979a352d8a7b6d847521897ebf78195527ed8946201a841887a7
@@ -86,4 +103,4 @@ entries:
     urls:
     - https://raw.githubusercontent.com/kubernetes-sigs/secrets-store-csi-driver/master/charts/secrets-store-csi-driver-0.0.9.tgz
     version: 0.0.9
-generated: "2020-08-17T18:08:01.591471-07:00"
+generated: "2020-09-17T12:11:25.679851-07:00"
diff --git a/charts/secrets-store-csi-driver-0.0.14.tgz b/charts/secrets-store-csi-driver-0.0.14.tgz
diff --git a/charts/secrets-store-csi-driver/Chart.yaml b/charts/secrets-store-csi-driver/Chart.yaml
@@ -1,8 +1,8 @@
 apiVersion: v1
 name: secrets-store-csi-driver
-version: 0.0.13
-appVersion: 0.0.13
-kubeVersion: ">=1.15.0-0"
+version: 0.0.14
+appVersion: 0.0.14
+kubeVersion: ">=1.16.0-0"
 description: A Helm chart to install the SecretsStore CSI Driver inside a Kubernetes cluster.
 icon: https://github.com/kubernetes/kubernetes/blob/master/logo/logo.png
 sources:

diff --git a/charts/secrets-store-csi-driver/README.md b/charts/secrets-store-csi-driver/README.md
@@ -25,7 +25,8 @@ The following table lists the configurable parameters of the csi-secrets-store-p
 | `fullnameOverride`                      | String to fully override secrets-store-csi-driver.fullname template with a string                                                 | `""`                                                             |
 | `linux.image.repository`                | Linux image repository                                                                                                            | `us.gcr.io/k8s-artifacts-prod/csi-secrets-store/driver`          |
 | `linux.image.pullPolicy`                | Linux image pull policy                                                                                                           | `Always`                                                         |
-| `linux.image.tag`                       | Linux image tag                                                                                                                   | `v0.0.13`                                                        |
+| `linux.image.tag`                       | Linux image tag                                                                                                                   | `v0.0.14`                                                        |
+| `linux.driver.resources`                | The resource request/limits for the linux secrets-store container image                                                           | `limits: 200m CPU, 200Mi; requests: 50m CPU, 100Mi`              |
 | `linux.enabled`                         | Install secrets store csi driver on linux nodes                                                                                   | true                                                             |
 | `linux.kubeletRootDir`                  | Configure the kubelet root dir                                                                                                    | `/var/lib/kubelet`                                               |
 | `linux.nodeSelector`                    | Node Selector for the daemonset on linux nodes                                                                                    | `{}`                                                             |
@@ -34,13 +35,16 @@ The following table lists the configurable parameters of the csi-secrets-store-p
 | `linux.registrarImage.repository`       | Linux node-driver-registrar image repository                                                                                      | `quay.io/k8scsi/csi-node-driver-registrar`                       |
 | `linux.registrarImage.pullPolicy`       | Linux node-driver-registrar image pull policy                                                                                     | `Always`                                                         |
 | `linux.registrarImage.tag`              | Linux node-driver-registrar image tag                                                                                             | `v1.2.0`                                                         |
+| `linux.registrar.resources`             | The resource request/limits for the linux node-driver-registrar container image                                                   | `limits: 100m CPU, 100Mi; requests: 10m CPU, 20Mi`               |
 | `linux.livenessProbeImage.repository`   | Linux liveness-probe image repository                                                                                             | `quay.io/k8scsi/livenessprobe`                                   |
 | `linux.livenessProbeImage.pullPolicy`   | Linux liveness-probe image pull policy                                                                                            | `Always`                                                         |
 | `linux.livenessProbeImage.tag`          | Linux liveness-probe image tag                                                                                                    | `v2.0.0`                                                         |
+| `linux.livenessProbe.resources`         | The resource request/limits for the linux liveness-probe container image                                                          | `limits: 100m CPU, 100Mi; requests: 10m CPU, 20Mi`               |
 | `linux.env`                             | Environment variables to be passed for the daemonset on linux nodes                                                               | `[]`                                                             |
 | `windows.image.repository`              | Windows image repository                                                                                                          | `us.gcr.io/k8s-artifacts-prod/csi-secrets-store/driver`          |
 | `windows.image.pullPolicy`              | Windows image pull policy                                                                                                         | `IfNotPresent`                                                   |
-| `windows.image.tag`                     | Windows image tag                                                                                                                 | `v0.0.13`                                                        |
+| `windows.image.tag`                     | Windows image tag                                                                                                                 | `v0.0.14`                                                        |
+| `windows.driver.resources`              | The resource request/limits for the windows secrets-store container image                                                         | `limits: 400m CPU, 400Mi; requests: 50m CPU, 100Mi`              |
 | `windows.enabled`                       | Install secrets store csi driver on windows nodes                                                                                 | false                                                            |
 | `windows.kubeletRootDir`                | Configure the kubelet root dir                                                                                                    | `C:\var\lib\kubelet`                                             |
 | `windows.nodeSelector`                  | Node Selector for the daemonset on windows nodes                                                                                  | `{}`                                                             |
@@ -49,13 +53,16 @@ The following table lists the configurable parameters of the csi-secrets-store-p
 | `windows.registrarImage.repository`     | Windows node-driver-registrar image repository                                                                                    | `mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar` |
 | `windows.registrarImage.pullPolicy`     | Windows node-driver-registrar image pull policy                                                                                   | `Always`                                                         |
 | `windows.registrarImage.tag`            | Windows node-driver-registrar image tag                                                                                           | `v1.2.1-alpha.1-windows-1809-amd64`                              |
+| `windows.registrar.resources`           | The resource request/limits for the windows node-driver-registrar container image                                                 | `limits: 200m CPU, 200Mi; requests: 10m CPU, 20Mi`               |
 | `windows.livenessProbeImage.repository` | Windows liveness-probe image repository                                                                                           | `mcr.microsoft.com/oss/kubernetes-csi/livenessprobe`             |
 | `windows.livenessProbeImage.pullPolicy` | Windows liveness-probe image pull policy                                                                                          | `Always`                                                         |
 | `windows.livenessProbeImage.tag`        | Windows liveness-probe image tag                                                                                                  | `v2.0.1-alpha.1-windows-1809-amd64`                              |
+| `windows.livenessProbe.resources`       | The resource request/limits for the windows liveness-probe container image                                                        | `limits: 200m CPU, 200Mi; requests: 10m CPU, 20Mi`               |
 | `windows.env`                           | Environment variables to be passed for the daemonset on windows nodes                                                             | `[]`                                                             |
 | `logLevel.debug`                        | Enable debug logging                                                                                                              | true                                                             |
 | `livenessProbe.port`                    | Liveness probe port                                                                                                               | `9808`                                                           |
 | `livenessProbe.logLevel`                | Liveness probe container logging verbosity level                                                                                  | `2`                                                              |
 | `rbac.install`                          | Install default rbac roles and bindings                                                                                           | true                                                             |
 | `syncSecret.enabled`                    | Enable rbac roles and bindings required for syncing to Kubernetes native secrets (the default will change to false after v0.0.14) | true                                                             |
 | `minimumProviderVersions`               | A comma delimited list of key-value pairs of minimum provider versions with driver                                                | `""`                                                             |
+| `grpcSupportedProviders`                | A `;` delimited list of providers that support grpc for driver-provider [alpha]                                                   | `""`                                                             |
diff --git a/charts/secrets-store-csi-driver/templates/secrets-store-csi-driver-windows.yaml b/charts/secrets-store-csi-driver/templates/secrets-store-csi-driver-windows.yaml
@@ -42,6 +42,10 @@ spec:
               mountPath: C:\csi
             - name: registration-dir
               mountPath: C:\registration
+{{- with .Values.windows.registrar.resources }}
+          resources:
+{{ toYaml . | indent 12 }}
+{{- end }}
         - name: secrets-store
           image: "{{ .Values.windows.image.repository }}:{{ .Values.windows.image.tag }}"
           args:
@@ -52,6 +56,9 @@ spec:
             {{- if and (semverCompare ">= v0.0.9-0" .Values.windows.image.tag) .Values.minimumProviderVersions }}
             - "--min-provider-version={{ .Values.minimumProviderVersions }}"
             {{- end }}
+            {{- if and (semverCompare ">= v0.0.14-0" .Values.windows.image.tag) .Values.grpcSupportedProviders }}
+            - "--grpc-supported-providers={{ .Values.grpcSupportedProviders }}"
+            {{- end }}
             - "--metrics-addr={{ .Values.windows.metricsAddr }}"
           env:
           {{- with .Values.windows.env }}
@@ -89,6 +96,10 @@ spec:
               mountPropagation: Bidirectional
             - name: providers-dir
               mountPath: C:\k\secrets-store-csi-providers
+{{- with .Values.windows.driver.resources }}
+          resources:
+{{ toYaml . | indent 12 }}
+{{- end }}
         {{- if semverCompare ">= v0.0.9-0" .Values.windows.image.tag }}
         - name: liveness-probe
           image: "{{ .Values.windows.livenessProbeImage.repository }}:{{ .Values.windows.livenessProbeImage.tag }}"
@@ -100,6 +111,10 @@ spec:
           volumeMounts:
             - name: plugin-dir
               mountPath: C:\csi
+{{- with .Values.windows.livenessProbe.resources }}
+          resources:
+{{ toYaml . | indent 12 }}
+{{- end }}
         {{- end }}
       volumes:
         - name: mountpoint-dir

diff --git a/charts/secrets-store-csi-driver/templates/secrets-store-csi-driver.yaml b/charts/secrets-store-csi-driver/templates/secrets-store-csi-driver.yaml
@@ -44,6 +44,10 @@ spec:
               mountPath: /csi
             - name: registration-dir
               mountPath: /registration
+{{- with .Values.linux.registrar.resources }}
+          resources:
+{{ toYaml . | indent 12 }}
+{{- end }}
         - name: secrets-store
           image: "{{ .Values.linux.image.repository }}:{{ .Values.linux.image.tag }}"
           args:
@@ -54,6 +58,9 @@ spec:
             {{- if and (semverCompare ">= v0.0.8-0" .Values.linux.image.tag) .Values.minimumProviderVersions }}
             - "--min-provider-version={{ .Values.minimumProviderVersions }}"
             {{- end }}
+            {{- if and (semverCompare ">= v0.0.14-0" .Values.linux.image.tag) .Values.grpcSupportedProviders }}
+            - "--grpc-supported-providers={{ .Values.grpcSupportedProviders }}"
+            {{- end }}
             - "--metrics-addr={{ .Values.linux.metricsAddr }}"
           env:
           {{- with .Values.linux.env }}
@@ -91,6 +98,10 @@ spec:
               mountPropagation: Bidirectional
             - name: providers-dir
               mountPath: /etc/kubernetes/secrets-store-csi-providers
+{{- with .Values.linux.driver.resources }}
+          resources:
+{{ toYaml . | indent 12 }}
+{{- end }}
         {{- if semverCompare ">= v0.0.8-0" .Values.linux.image.tag }}
         - name: liveness-probe
           image: "{{ .Values.linux.livenessProbeImage.repository }}:{{ .Values.linux.livenessProbeImage.tag }}"
@@ -103,6 +114,10 @@ spec:
           volumeMounts:
             - name: plugin-dir
               mountPath: /csi
+{{- with .Values.linux.livenessProbe.resources }}
+          resources:
+{{ toYaml . | indent 12 }}
+{{- end }}
         {{- end }}
       volumes:
         - name: mountpoint-dir