Releases: SPHTech-Platform/terraform-aws-secrets-store-csi
Releases · SPHTech-Platform/terraform-aws-secrets-store-csi
v2.2.0
Breaking Changes
- Support for EKS Pod Identity: Introduced the
iam_role_type
variable to select the IAM role type, allowing users to choose betweenirsa
(IAM Roles for Service Accounts) andpod_identity
(EKS Pod Identity). This change may affect existing configurations, as the default behavior has been modified topod_identity
.
Upgrade Instructions
-
Review and Update Configuration: Examine your current Terraform configuration and determine which IAM role type (
irsa
orpod_identity
) aligns with your deployment. -
Set the
iam_role_type
Variable: Explicitly define theiam_role_type
variable in your Terraform configuration to match your chosen IAM role type. For example:
module "secrets_store_csi" {
source = "SPHTech-Platform/secrets-store-csi/aws"
version = "~> 2.2.0"
iam_role_type = "irsa" # or "pod_identity"
# ... other configurations ...
}
Notes
- Impact Assessment: Due to the introduction of the
iam_role_type
variable, existing deployments without this variable set may experience changes in behavior. It's crucial to review and adjust your configuration accordingly to prevent unexpected issues.
Full Changelog: v2.1.1...v2.2.0
v2.1.1
What's Changed
refactor:
Update the chart versionsfix:
ascp image path by @uchinda-sph in #16
Full Changelog: v2.1.0...v2.1.1
v2.1.0
What's Changed
- refactor: update helm repo of ascp and csi driver version by @uchinda-sph in #15
Full Changelog: v2.0.1...v2.1.0
v2.0.1
What's Changed
- update the repo url from gcr.io to k8s.io by @uchinda-sph in #12
Full Changelog: v2.0.0...v2.0.1
v2.0.0
⚠ BREAKING CHANGES
- set default namespace to secrets-store-csi-system
What's Changed
- Add namespace for secrets csi driver by @thepoppingone in #11
- set ascp_priority_class_name default value by @uchinda-sph in #10
New Contributors
- @thepoppingone made their first contribution in #11
Full Changelog: v1.0.2...v2.0.0
v1.0.3
Full Changelog: v1.0.2...v1.0.3
v1.0.2
What's Changed
- Updated resource "requests" for secrets-store-csi-driver pods by @franklinpashok in #8
- set priorityClassName to system-node-critical by @uchinda-sph in #9
Full Changelog: v1.0.1...v1.0.2
v1.0.1
v1.0.0
⚠ BREAKING CHANGES
- kubernetes_manifest resources switched to helm_release for ASCP
What's Changed
- added variable for syncsecrets by @franklinpashok in #4
- Updated readme by @franklinpashok in #5
- Additional configs and use official ASCP chart by @chrissng in #6
New Contributors
- @franklinpashok made their first contribution in #4
- @chrissng made their first contribution in #6
Full Changelog: v0.2.0...v1.0.0
v0.2.0
What's Changed
- Set default irsa creation as an optional feature by @uchinda-sph in #2
- Fix output and by default create role to make the module non breaking by @niroz89 in #3
New Contributors
Full Changelog: v0.1.0...v0.2.0