v0.0.23

Announcement 📢

• --filtered-watch-secret will be enabled by default in v0.1.0 release. Refer to #550 for more info.
• Note to Providers: Prepare to return files in gRPC responses as this will become the recommended approach in the next release. See #551

Breaking Changes ⚠️

• syncSecret.enabled has been set to false by default. This means the RBAC clusterrole and clusterrolebinding required for sync mounted content as Kubernetes secret will no longer be created by default as part of helm install/upgrade. If you're using the driver to sync mounted content as Kubernetes secret, you'll need to set syncSecret.enabled=true as part of helm install/upgrade.

Features 🌈

• add arm64 build (#575, @aramase)
• add rbac role and binding for rotation (#586, @aramase)

Bug Fixes 🐞

• CVE-2021-3520 (#562, @aramase)

Documentation 📘

• set-as-env-var pod indent (#553, @dawncold)
• add membership criteria and getting involved section (#563, @aramase)
• fix the default volume path for providers (#574, @katyamag)
• Add AWS Provider (#517, @nlamirault)
• add aws provider ref in install provider (#584, @aramase)

Testing 💚

• enable shellcheck and fix errors (#557, @aramase)
• Add test coverage report into Makefile for unit test (#537, @hixichen)
• add aws integration tests (#533, @lasred)
• Add uuid to AWS secret and parameter names (#569, @lasred)

Helm 📈

• provide ability to add volume and volumeMounts (#539, @hixichen)
• add image pull secrets (#554, @mehmetsalgar)
• default syncSecret.enable to false (#510, @ritazh)

Maintenance 🔧

• add psp snippet to manifests target (#560, @aramase)
• add tam7t as approver (#564, @aramase)
• update to debian-base v1.7.0 (#565, @aramase)
• remove deprecated --grpc-supported-providers and --debug flag (#566, @aramase)
• Add golang version validate at Makefile (#538, @hixichen)
• Added GOPROXY propagation to container builds (#571, @micahhausler)
• Replace golang.org/x/net/context with context (#577, @hixichen)
• generate log if grpc message size larger than max (#581, @aramase)
• list builder instances in image build (#583, @aramase)
• enable qemu for multi-arch (#586, @aramase)

Driver images are hosted in GCR at k8s.gcr.io/csi-secrets-store/driver