From 10662811141ce5afa4db45f825823daab4e5c997 Mon Sep 17 00:00:00 2001 From: Valentin Maillot Date: Fri, 26 May 2023 15:02:33 +0200 Subject: [PATCH 1/4] feat(security-apps): bump secrets-store-csi-driver to 1.3.3 Signed-off-by: Valentin Maillot --- charts/security-apps/Chart.yaml | 44 ++++++++++---------------------- charts/security-apps/README.md | 4 +-- charts/security-apps/values.yaml | 2 +- 3 files changed, 17 insertions(+), 33 deletions(-) diff --git a/charts/security-apps/Chart.yaml b/charts/security-apps/Chart.yaml index f9972bd2e..47acfc03e 100644 --- a/charts/security-apps/Chart.yaml +++ b/charts/security-apps/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: security-apps description: Argo CD app-of-apps config for security applications type: application -version: 0.74.0 +version: 0.75.0 home: https://github.com/adfinis/helm-charts/tree/main/charts/security-apps sources: - https://github.com/adfinis/helm-charts @@ -18,35 +18,19 @@ annotations: artifacthub.io/changes: | - kind: changed description: | - vault: update upstream components - - * csi: Add RBAC required by v1.3.0 to create secret for HMAC key used to generate secret versions [GH-872](https://github.com/hashicorp/vault-helm/pull/872) - * Earliest Kubernetes version tested is now 1.22 - * `vault` updated to 1.13.1 [GH-863](https://github.com/hashicorp/vault-helm/pull/863) - * `vault-k8s` updated to 1.2.1 [GH-868](https://github.com/hashicorp/vault-helm/pull/868) - * `vault-csi-provider` updated to 1.3.0 [GH-749](https://github.com/hashicorp/vault-helm/pull/749) - * server: New `extraPorts` option for adding ports to the Vault server statefulset [GH-841](https://github.com/hashicorp/vault-helm/pull/841) - * server: Add configurable Port Number in readinessProbe and livenessProbe for the server-statefulset [GH-831](https://github.com/hashicorp/vault-helm/pull/831) - * injector: Make livenessProbe and readinessProbe configurable and add configurable startupProbe [GH-852](https://github.com/hashicorp/vault-helm/pull/852) - * csi: Add an Agent sidecar to Vault CSI Provider pods to provide lease caching and renewals [GH-749](https://github.com/hashicorp/vault-helm/pull/749) - * server: Add `extraLabels` for Vault server serviceAccount [GH-806](https://github.com/hashicorp/vault-helm/pull/806) - * server: Add `server.service.active.enabled` and `server.service.standby.enabled` options to selectively disable additional services [GH-811](https://github.com/hashicorp/vault-helm/pull/811) - * server: Add `server.serviceAccount.serviceDiscovery.enabled` option to selectively disable a Vault service discovery role and role binding [GH-811](https://github.com/hashicorp/vault-helm/pull/811) - * server: Add `server.service.instanceSelector.enabled` option to allow selecting pods outside the helm chart deployment [GH-813](https://github.com/hashicorp/vault-helm/pull/813) - * server: Quote `.server.ha.clusterAddr` value [GH-810](https://github.com/hashicorp/vault-helm/pull/810) + secrets-store-csi-driver: update upstream components + * fix: update nodeserver publish logs + * chore: bump version to v1.3.3 in release-1.3 + * chore: allow retries on pre-upgrade hook jobs + * chore: bump version to v1.3.2 in release-1.3 + * chore: bump golang.org/x/net from 0.4.0 to 0.7.0 + * chore: bump golang.org/x/net from 0.4.0 to 0.7.0 in /test/e2eprovider + * chore: use base and test image from registry.k8s.io links: - - name: Changelog for 0.24.1 - url: https://github.com/hashicorp/vault-helm/blob/main/CHANGELOG.md#0241-april-17-2023 - - name: Changelog for 0.24.0 - url: https://github.com/hashicorp/vault-helm/blob/main/CHANGELOG.md#0240-april-6-2023 - - name: Changelog for 0.23.0 - url: https://github.com/hashicorp/vault-helm/blob/main/CHANGELOG.md#0230-november-28th-2022 + - name: Changelog for 1.3.3 + url: https://github.com/kubernetes-sigs/secrets-store-csi-driver/releases/tag/v1.3.3 - kind: changed - description: "vault: update charts from 0.22.* to 0.24.1" + description: "secrets-store-csi-driver: update charts from 1.3.1 to 1.3.3" links: - - name: "fix: chart version for 0.24.1 release" - url: https://github.com/hashicorp/vault-helm/pull/880 - - name: "chore: Prepare for 0.24.0 release" - url: https://github.com/hashicorp/vault-helm/pull/868 - - name: "chore: Prepare for 0.23.0 release" - url: https://github.com/hashicorp/vault-helm/pull/814 + - name: "fix: update nodeserver publish logs" + url: https://github.com/kubernetes-sigs/secrets-store-csi-driver/commit/dcb2c294be3bc8b792e02b9f03e5078664db0581 diff --git a/charts/security-apps/README.md b/charts/security-apps/README.md index 1a56c0328..1bd198299 100644 --- a/charts/security-apps/README.md +++ b/charts/security-apps/README.md @@ -1,6 +1,6 @@ # security-apps -![Version: 0.74.0](https://img.shields.io/badge/Version-0.74.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) +![Version: 0.75.0](https://img.shields.io/badge/Version-0.75.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) Argo CD app-of-apps config for security applications @@ -93,7 +93,7 @@ This chart is maintained by [Adfinis](https://adfinis.com/?pk_campaign=github&pk | secretsStoreCsiDriver.destination.namespace | string | `"infra-secrets-store-csi"` | Namespace | | secretsStoreCsiDriver.enabled | bool | `false` | Enable secrets-store-csi-driver | | secretsStoreCsiDriver.repoURL | string | [repo](https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts) | Repo URL | -| secretsStoreCsiDriver.targetRevision | string | `"1.3.1"` | [secrets-store-csi-driver Helm chart](https://github.com/kubernetes-sigs/secrets-store-csi-driver/blob/main/charts/secrets-store-csi-driver) version | +| secretsStoreCsiDriver.targetRevision | string | `"1.3.3"` | [secrets-store-csi-driver Helm chart](https://github.com/kubernetes-sigs/secrets-store-csi-driver/blob/main/charts/secrets-store-csi-driver) version | | secretsStoreCsiDriver.values | object | [upstream values](https://github.com/kubernetes-sigs/secrets-store-csi-driver/blob/main/charts/secrets-store-csi-driver/values.yaml) | Helm values | | stackroxCentralServices | object | - | [StackRox central-services](https://www.stackrox.io/) ([example/stackrox.yaml)) | | stackroxCentralServices.chart | string | `"stackrox-central-services"` | Chart | diff --git a/charts/security-apps/values.yaml b/charts/security-apps/values.yaml index d5e28bbb1..fffe530d0 100644 --- a/charts/security-apps/values.yaml +++ b/charts/security-apps/values.yaml @@ -181,7 +181,7 @@ secretsStoreCsiDriver: # -- Chart chart: "secrets-store-csi-driver" # -- [secrets-store-csi-driver Helm chart](https://github.com/kubernetes-sigs/secrets-store-csi-driver/blob/main/charts/secrets-store-csi-driver) version - targetRevision: "1.3.1" + targetRevision: "1.3.3" # -- Helm values # @default -- [upstream values](https://github.com/kubernetes-sigs/secrets-store-csi-driver/blob/main/charts/secrets-store-csi-driver/values.yaml) values: {} From 31954d466b7838f2595e75ae3f48a3c4c946b9d7 Mon Sep 17 00:00:00 2001 From: Toni Tauro Date: Wed, 12 Jul 2023 18:39:47 +0200 Subject: [PATCH 2/4] Update Chart.yaml --- charts/security-apps/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/security-apps/Chart.yaml b/charts/security-apps/Chart.yaml index 47acfc03e..74dc5756a 100644 --- a/charts/security-apps/Chart.yaml +++ b/charts/security-apps/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: security-apps description: Argo CD app-of-apps config for security applications type: application -version: 0.75.0 +version: 0.76.0 home: https://github.com/adfinis/helm-charts/tree/main/charts/security-apps sources: - https://github.com/adfinis/helm-charts From 3d2374c0a7a82dde66b15c92f92722c0ebd1cc98 Mon Sep 17 00:00:00 2001 From: Toni Tauro Date: Wed, 12 Jul 2023 18:40:50 +0200 Subject: [PATCH 3/4] Update README.md --- charts/security-apps/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/security-apps/README.md b/charts/security-apps/README.md index 1bd198299..6a69ad770 100644 --- a/charts/security-apps/README.md +++ b/charts/security-apps/README.md @@ -1,6 +1,6 @@ # security-apps -![Version: 0.75.0](https://img.shields.io/badge/Version-0.75.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) +![Version: 0.76.0](https://img.shields.io/badge/Version-0.76.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) Argo CD app-of-apps config for security applications From aa4edc0ef39f6af577de9ba2bf9fd56b9c880062 Mon Sep 17 00:00:00 2001 From: Jan Mueller Date: Thu, 13 Jul 2023 09:42:25 +0200 Subject: [PATCH 4/4] feat(security-apps): update secrets-store-csi-driver to 1.3.4 and bump security-apps to 0.77.0 --- charts/security-apps/Chart.yaml | 10 ++++++---- charts/security-apps/README.md | 4 ++-- charts/security-apps/values.yaml | 2 +- 3 files changed, 9 insertions(+), 7 deletions(-) diff --git a/charts/security-apps/Chart.yaml b/charts/security-apps/Chart.yaml index 74dc5756a..1affd7712 100644 --- a/charts/security-apps/Chart.yaml +++ b/charts/security-apps/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: security-apps description: Argo CD app-of-apps config for security applications type: application -version: 0.76.0 +version: 0.77.0 home: https://github.com/adfinis/helm-charts/tree/main/charts/security-apps sources: - https://github.com/adfinis/helm-charts @@ -26,11 +26,13 @@ annotations: * chore: bump golang.org/x/net from 0.4.0 to 0.7.0 * chore: bump golang.org/x/net from 0.4.0 to 0.7.0 in /test/e2eprovider * chore: use base and test image from registry.k8s.io + * chore: update node-driver-registrar:v2.8.0, livenessprobe:v2.10.0 + * chore: bump version to v1.3.4 in release-1.3 links: - - name: Changelog for 1.3.3 - url: https://github.com/kubernetes-sigs/secrets-store-csi-driver/releases/tag/v1.3.3 + - name: Changelog for 1.3.4 + url: https://github.com/kubernetes-sigs/secrets-store-csi-driver/releases/tag/v1.3.4 - kind: changed - description: "secrets-store-csi-driver: update charts from 1.3.1 to 1.3.3" + description: "secrets-store-csi-driver: update charts from 1.3.1 to 1.3.4" links: - name: "fix: update nodeserver publish logs" url: https://github.com/kubernetes-sigs/secrets-store-csi-driver/commit/dcb2c294be3bc8b792e02b9f03e5078664db0581 diff --git a/charts/security-apps/README.md b/charts/security-apps/README.md index 027879a63..8c51becf0 100644 --- a/charts/security-apps/README.md +++ b/charts/security-apps/README.md @@ -1,6 +1,6 @@ # security-apps -![Version: 0.76.0](https://img.shields.io/badge/Version-0.76.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) +![Version: 0.77.0](https://img.shields.io/badge/Version-0.77.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) Argo CD app-of-apps config for security applications @@ -109,7 +109,7 @@ This chart is maintained by [Adfinis](https://adfinis.com/?pk_campaign=github&pk | secretsStoreCsiDriver.destination.namespace | string | `"infra-secrets-store-csi"` | Namespace | | secretsStoreCsiDriver.enabled | bool | `false` | Enable secrets-store-csi-driver | | secretsStoreCsiDriver.repoURL | string | [repo](https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts) | Repo URL | -| secretsStoreCsiDriver.targetRevision | string | `"1.3.3"` | [secrets-store-csi-driver Helm chart](https://github.com/kubernetes-sigs/secrets-store-csi-driver/blob/main/charts/secrets-store-csi-driver) version | +| secretsStoreCsiDriver.targetRevision | string | `"1.3.4"` | [secrets-store-csi-driver Helm chart](https://github.com/kubernetes-sigs/secrets-store-csi-driver/blob/main/charts/secrets-store-csi-driver) version | | secretsStoreCsiDriver.values | object | [upstream values](https://github.com/kubernetes-sigs/secrets-store-csi-driver/blob/main/charts/secrets-store-csi-driver/values.yaml) | Helm values | | stackroxCentralServices | object | - | [StackRox central-services](https://www.stackrox.io/) ([example/stackrox.yaml)) | | stackroxCentralServices.chart | string | `"stackrox-central-services"` | Chart | diff --git a/charts/security-apps/values.yaml b/charts/security-apps/values.yaml index ed6554474..2b501fd8f 100644 --- a/charts/security-apps/values.yaml +++ b/charts/security-apps/values.yaml @@ -181,7 +181,7 @@ secretsStoreCsiDriver: # -- Chart chart: "secrets-store-csi-driver" # -- [secrets-store-csi-driver Helm chart](https://github.com/kubernetes-sigs/secrets-store-csi-driver/blob/main/charts/secrets-store-csi-driver) version - targetRevision: "1.3.3" + targetRevision: "1.3.4" # -- Helm values # @default -- [upstream values](https://github.com/kubernetes-sigs/secrets-store-csi-driver/blob/main/charts/secrets-store-csi-driver/values.yaml) values: {}