Description

Update vault from 0.19.* to 0.20.1

Issues

• Fixes Version 0.20.1 of vault is available! #717

Changes

Update:

• vault-k8s updated to 0.16.1 https://github.com/hashicorp/vault-k8s/releases GH-739
• Vault default image to 1.10.3 https://github.com/hashicorp/vault/blob/main/CHANGELOG.md
• CSI provider default image to 1.1.0 https://github.com/hashicorp/vault-csi-provider/releases/tag/v1.1.0
• Earliest Kubernetes version tested is now 1.16
• Helm 3.6+ now required
• global.enabled now works as documented, that is, setting global.enabled to false will disable everything, with individual components able to be turned on individually GH-703
• Default value of - used for injector and server to indicate that they follow global.enabled. GH-703

Features:

• Mutating webhook will no longer target the agent injector pod GH-736

Improvements:

• Mutating webhook will no longer target the agent injector pod GH-736
• CSI: Set extraLabels for daemonset, pods, and service account GH-690
• Add namespace to injector-leader-elector role, rolebinding and secret GH-683
• Support policy/v1 PodDisruptionBudget in Kubernetes 1.21+ for server and injector GH-710
• Make the Cluster Address (CLUSTER_ADDR) configurable GH-629
• server: Make publishNotReadyAddresses configurable for services GH-694
• server: Allow config to be defined as a YAML object in the values file GH-684
• Maintain default MutatingWebhookConfiguration values from v1beta1 GH-692

Bugs:

• vault service account is now created even if the server is set to disabled, as per before 0.20.0 GH-737

Checklist

• This PR contains a description of the changes I'm making
• I updated the version in Chart.yaml
• I updated applicable README.md files using pre-commit run
• I documented any high-level concepts I'm introducing in docs/
• CI is currently green and this is ready for review
• I am ready to test changes after they are applied and released