Skip to content

v1.3.0
Compare
Choose a tag to compare
@hc-github-team-es-release-engineering hc-github-team-es-release-engineering released this 05 Apr 18:22
v1.3.0
360a986
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

1.3.0 (April 5th, 2023)

CHANGES:

  • Vault CSI Provider will use service account tokens passed from the Secrets Store CSI Driver instead of generating one if an appropriate token is provided. [GH-163]
    • The Secrets Store CSI driver needs to be configured to generate tokens with the correct audience for this feature. Vault CSI Provider
      will look for a token with the audience specified in the SecretProviderClass, or otherwise "vault". To configure the driver to generate
      a token with the correct audience, use the
      tokenRequests
      option from the driver helm chart via the flag --set tokenRequests[0].audience="vault". See
      CSI TokenRequests documentation for further details.
  • Vault CSI Provider now creates a Kubernetes secret with an HMAC key to produce consistent hashes for secret versions. [GH-198]
    • Requires RBAC permissions to create secrets, and read the same specific secret back. Versions are not generated otherwise and a warning
      is logged on each mount that fails to generate a version.
    • Supports creating the secret with custom name via -hmac-secret-name
  • Updated Docker base image from alpine 3.16.3 -> 3.17.3
  • Build with Go v1.20.3
  • Updated dependencies:
    • github.com/hashicorp/go-hclog v1.3.1 -> v1.5.0
    • github.com/hashicorp/vault/api v1.8.2 -> v1.9.0
    • github.com/stretchr/testify v1.8.1 -> v1.8.2
    • google.golang.org/grpc v1.50.1 -> v1.54.0
    • k8s.io/api v0.25.4 -> v0.26.3
    • k8s.io/apimachinery v0.25.4 -> v0.26.3
    • k8s.io/client-go v0.25.4 -> v0.26.3
    • k8s.io/utils v0.0.0-20220728103510-ee6ede2d64ed -> v0.0.0-20230313181309-38a27ef9d749
    • sigs.k8s.io/secrets-store-csi-driver v1.2.4 -> v1.3.2
  • Tests are now run against Kubernetes versions: 1.22.17, 1.23.17, 1.24.12, 1.25.8, 1.26.3

IMPROVEMENTS:

  • Support utf-8 (default), hex, and base64 encoded secrets [GH-194]
Assets 2
Loading