v0.2.0
Announcement 📢
--filtered-watch-secret
has been enabled by default inv0.1.0
release. Refer to kubernetes-sigs/secrets-store-csi-driver#550 for more info.- CustomResourceDefinitions in helm charts were moved from
templates
tocrds
directory inv0.1.0
.pre-upgrade
hooks have been added to manage the lifecycle of CRDs during install/upgrade.
Breaking Changes ⚠️
syncSecret.enabled
has been set to false by default in CSI Driverv0.0.23
release. This means the RBAC clusterrole and clusterrolebinding required for sync mounted content as Kubernetes secret will no longer be created by default as part ofhelm install/upgrade
. If you're using the driver to sync mounted content as Kubernetes secret, you'll need to setsecrets-store-csi-driver.syncSecret.enabled=true
as part ofhelm install/upgrade
. Ref: https://azure.github.io/secrets-store-csi-driver-provider-azure/upgrading/#upgrading-to-helm-chart-version-0020--filtered-watch-secret
was enabled by default inv0.1.0
release. Refer to kubernetes-sigs/secrets-store-csi-driver#550 for more info. If you're usingnodePublishSecretRef
in the volume, refer to https://secrets-store-csi-driver.sigs.k8s.io/load-tests.html on actions to take before upgrade.- Refer to https://secrets-store-csi-driver.sigs.k8s.io/getting-started/upgrades.html#pre-v010 before upgrade from driver version < v0.1.0
Features 🌈
Documentation 📘
- Update ingress-tls.md (#591, @DavidMarquezF)
Testing 💚
- adds e2e tests for GPU nodes (#594, @nilekhc)
- adds kind test for deployment manifests (#582, @nilekhc)
- use kubernetes e2e framework to check pods running (#601, @aramase)
Helm 📈
- move helm dependencies to Chart.yaml (#595, @aramase)
- fix security context for linux (#600, @aramase)