Releases: cert-manager/csi-driver
v0.8.1
cert-manager-csi-driver enables issuing secretless X.509 certificates for pods using cert-manager!
This patch release upgrades the Go version used to build from 1.22.2 to 1.22.3, fixing GO-2024-2824 (GHSA-2jwv-jmq4-4j3r).
Additionally, the PR includes version bumps for all Go dependencies.
Version bumps
- Bump sigs.k8s.io/controller-runtime from 0.17.2 to 0.17.3 in the all group by @dependabot in #233
- Bump golang.org/x/net from 0.20.0 to 0.23.0 in the go_modules group by @dependabot in #236
- Bump the all group across 1 directory with 8 updates by @dependabot in #242
- Bump github.com/cert-manager/cert-manager from 1.14.4 to 1.14.5 in the all group by @dependabot in #243
- Bump the all group across 1 directory with 3 updates by @dependabot in #249
- Bump sigs.k8s.io/controller-runtime from 0.18.1 to 0.18.2 in the all group by @dependabot in #250
- Bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3 in the all group by @dependabot in #253
Full Changelog: v0.8.0...v0.8.1
Contributors
Assets 3
v0.8.0
SgtCoDFish
Ashley Davis
cert-manager-csi-driver enables issuing secretless X.509 certificates for pods using cert-manager!
v0.8.0 includes a few improvements and upgrades to the Helm chart, which should make it easier to install and manage CSI driver.
Notably, this release uses the v1 API for CSIDriver in all cases. Previously, logic existed which tried to support very old Kubernetes versions back from before the CSIDriver resource hit GA around Kubernetes v1.18. Since those versions are so old now, we unconditionally use v1 to simply the process of using csi-driver. Notably, this helps if using helm template to render the chart to YAML.
This release also includes a great improvement from a first time contributor, @Cisien! They added the ability to pass volumeAttributes along to the CertificateRequest resource which csi-driver creates. This makes csi-driver act more like "regular" cert-manager, enabling new potential uses!
Finally, the csi-driver DaemonSet now includes the default-container annotation, which means that kubectl logs will show the logs for the csi-driver container by default, which should help with debugging!
What's Changed
- Use CSIDriver v1 unconditionally by @SgtCoDFish in #220
- Pass non-driver volumeAttributes to the created CertificateRequest by @Cisien in #212
- Add 'crds.enabled' and 'crds.keep' options to generated CRDs by @inteon in #204
- Enable helm-tool linter and schema generator by @inteon in #191
- Fix broken link to csi-driver-spiffe in Chart.yaml by @inteon in #201
- Helm: Use same include statement for labels everywhere by @inteon in #207
- Add default container annotation to daemonset by @SgtCoDFish in #223
Misc / Business-as-Usual
- Add initial documentation of release process by @SgtCoDFish in #224
- Several dependency upgrade PRs by @dependabot
- Several makefile modules update PRs by @github-actions
New Contributors
Full Changelog: v0.7.1...v0.8.0
Contributors
Assets 3
v0.7.1
cert-manager-csi-driver enables issuing secretless X.509 certificates for pods using cert-manager!
This release includes a set of small improvements, version bumps and bugfixes.
Additionally, it is the first release after migrating to our new Makefile modules CI/ CD setup.
Breaking changes
See Breaking Changes section in v0.7.0 release notes
What's Changed
- Update Chart.yaml properties by @inteon in #194
- Remove README header since it is already included in the artifacthub sidebar by @inteon in #196
- Bump the all group with 1 update by @dependabot in #198
- [CI] Merge self-upgrade into main by @github-actions in #195
- [CI] Merge self-upgrade into main by @github-actions in #199
- [CI] Merge self-upgrade into main by @github-actions in #200
Full Changelog: v0.7.0...v0.7.1
Contributors
Assets 3
v0.7.0
cert-manager-csi-driver enables issuing secretless X.509 certificates for pods using cert-manager!
This release includes a set of small improvements, version bumps and bugfixes.
Additionally, it is the first release after migrating to our new Makefile modules CI/ CD setup.
Breaking Changes
This release of csi-driver changes how containers are built, which in turn changes the path at which the binary can be found inside the container.
This means that new container images cannot be used with older Helm charts, or with any software which expects the old path.
For the simplest upgrade experience, use the latest helm chart with the latest image.
What's Changed
- Add explicit namespace to namespaced resources + bump versions by @SgtCoDFish in #166
- chore: add thatsmrtalbot as reviewer by @ThatsMrTalbot in #187
- Add version info to binary at compile time by @inteon in #184
- Improve comments in Helm's values.yaml by @ditatechwriter in #193
- Use helm-tool for generating helm docs by @ThatsMrTalbot in #182
- Upgrade 'csi-node-driver-registrar' and 'livenessprobe' by @inteon in #179
Dependabot updates
- Bump the all group with 4 updates by @dependabot in #162
- Bump golang.org/x/crypto from 0.14.0 to 0.17.0 by @dependabot in #168
- Bump golang.org/x/crypto from 0.15.0 to 0.17.0 in /hack/tools by @dependabot in #169
- Bump the all group with 9 updates by @dependabot in #172
- Bump the all group with 1 update by @dependabot in #175
- Bump the all group with 8 updates by @dependabot in #185
Makefile updates
- Migrate makefiles and CI/CD by @inteon in #161
- Upgrade repository-base module by @inteon in #177
- Upgrade oci-image module by @inteon in #183
- Use standardised release process by @inteon in #188
- Fix push command and comment by @SgtCoDFish in #159
- Add Make target for creating Helm chart by @SgtCoDFish in #160
- [CI] Merge self-upgrade into main by @github-actions in #192
New Contributors
- @github-actions made their first contribution in #173
- @ThatsMrTalbot made their first contribution in #182
- @ditatechwriter made their first contribution in #193
Full Changelog: v0.6.0...v0.7.0
Contributors
Assets 3
v0.6.0
SgtCoDFish
Ashley Davis
cert-manager-csi-driver enables issuing secretless X.509 certificates for pods using cert-manager!
This release is the first in a while, and includes a slew of bumps and tweaks to ensure everything is up to date 🧑🔧 The project will continue to evolve as time goes on!
What's Changed
- Add digest to HELM chart by @MattiasGees in #65
- Use latest CSI sidecar container images from registry.k8s.io by @irbekrm in #137
- Add very useful values common with the main Cert-manager chart by @MaesterZ in #126
- Fix incorrect cert-manager e2e test framework imports by @inteon in #143
- Bump deps by @irbekrm in #142
- Update OWNERS file based on cert-manager by @inteon in #148
- Add dependabot GH job by @inteon in #147
- Bump the all group with 8 updates by @dependabot in #149
- Bump golang.org/x/text from 0.3.7 to 0.3.8 in /hack/tools by @dependabot in #139
- Bump google.golang.org/grpc from 1.57.0 to 1.57.1 by @dependabot in #151
- Bump the all group with 6 updates by @dependabot in #155
- Bump go version base image by @inteon in #150
- Bump the all group with 2 updates by @dependabot in #156
- Bump version for release by @SgtCoDFish in #157
- Minor tweaks before release of 0.6.0 by @SgtCoDFish in #158
New Contributors
- @MaesterZ made their first contribution in #126
- @inteon made their first contribution in #143
- @dependabot made their first contribution in #149
Full Changelog: v0.5.0...v0.6.0
Contributors
Assets 2
v0.5.0
What's Changed
- Remove life cycle hook from Daemonset by @JoshVanL in #110
- Add support for imagePullSecrets. Fixes #112 by @sitaramkm in #113
- Remove extra } from the sample uri-san by @sitaramkm in #115
- Add support for non-standard kubelet root directory by @sdrik in #120
- Updates alpine in Dockerfile to 3.16.2 by @JoshVanL in #122
- Adds priorityClassName option to helm chart by @JoshVanL in #124
- Updates go modules, including csi-lib to v0.4.0 by @JoshVanL in #121
- For attributes that are lists, trim space for each entry to improve UX. by @JoshVanL in #114
- Updates tag to v0.5.0, ready for release by @JoshVanL in #123
New Contributors
- @sitaramkm made their first contribution in #113
- @sdrik made their first contribution in #120
Full Changelog: v0.4.0...v0.5.0
Contributors
Assets 2
v0.4.0
What's Changed
- Update to smaller logo with correct size by @SgtCoDFish in #93
- Update maintainers to point at team email by @SgtCoDFish in #92
- Add optional nodeSelector to helm chart by @kuznero in #95
- helm-docs verify and update scripts by @JoshVanL in #96
- Adds Bidirectional to the csi-driver data directory volume mount by @JoshVanL in #99
- Remove Documentation in favour of linking to the cert-manager.io website by @JoshVanL in #100
- Fix boilerplate 2022 by @JoshVanL in #105
- Add ServiceAccount name as a template value by @micahhausler in #106
- PKCS12 Support by @JoshVanL in #103
- Move kind and helm to hack tools by @JoshVanL in #97
- Introduce a new filename validation function by @JoshVanL in #104
- Upgrade go to v1.19 by @JoshVanL in #107
- Upgrade Kubernetes e2e test version to v1.24.1 by @JoshVanL in #98
- Updates release to v0.4.0, ready for release by @JoshVanL in #108
New Contributors
- @kuznero made their first contribution in #95
- @micahhausler made their first contribution in #106
Full Changelog: v0.3.0...v0.4.0
Contributors
Assets 2
v0.3.0
What's Changed
- Move csi-data-dir configuration into values.yaml. by @basert in #73
- Fix broken HTML in README by @SgtCoDFish in #76
- Fix img location, width, height, link to cm website by @SgtCoDFish in #80
- Fix logo location to use specific SHA by @SgtCoDFish in #81
- Remove disable-auto-renew from example Deployment by @JoshVanL in #91
- Update cert-manager:v1.8.0 in test runner by @JoshVanL in #85
- Update go version to v1.18 by @JoshVanL in #86
- Bumps alpine version
v3.14->v3.15by @JoshVanL in #87 - Bumps versions in test runner: kind:v0.12.0 kubectl:v1.23.6 by @JoshVanL in #88
- Updates reference in SECURITY.md to point to
jetstack/cert-manager->cert-manager/cert-managerby @JoshVanL in #84 - Bumps bump-csi-node-driver-registrar to
v2.5.0, Bumps livenessprobe tov2.6.0by @JoshVanL in #89 - Metadata san templating by @JoshVanL in #82
- Bump cert-manager/csi-lib to v0.2.2 by @JoshVanL in #83
- Sets csi-driver version to v0.3.0 by @JoshVanL in #90
New Contributors
- @SgtCoDFish made their first contribution in #76
Full Changelog: v0.2.0...v0.3.0
Contributors
Assets 2
v0.2.0
Changes
- Selectively deploy CSI driver
v1beta1/v1based on Kubernetes version #59 - Adds clarification about using a self-signed Issuer #62
- Support multi-arch images (
linux/amd64,linux/arm64,linux/arm/v7,linux/ppc64le) #60 - Certificate Requests now no longer request an empty DNS SAN list when DNS was not requested, and are now omitted #67
- Support configuring tolerations in Helm chart #68
- Add support for configuring key encoding (PKCS1 + PKCS8) #69
- Add CSI liveness probe to DaemonSet #71
v0.1.0
Initial Release
csi-driver is a Container Storage Interface (CSI) driver plugin for Kubernetes to work along cert-manager. The goal for this plugin is to facilitate requesting and mounting certificate key pairs to pods seamlessly. This is useful for facilitating mTLS, or otherwise securing connections of pods with guaranteed present certificates whilst having all of the features that cert-manager provides.