adrien/ansible-role-k8s-storage
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Update secrets-store form upstream
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse source
This commit is contained in:
Adrien Reslinger 2020-11-16 21:56:56 +01:00
parent 058d9bd8e1
commit af615dbef3
3 changed files with 6 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

17
files/secrets-store/csi-secrets-store-DaemonSet.yaml
View file

@ -16,20 +16,11 @@ spec:
hostNetwork: true hostNetwork: true
containers: containers:
- name: node-driver-registrar - name: node-driver-registrar
image: quay.io/k8scsi/csi-node-driver-registrar:v1.2.0 image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.0.1
args: args:
- --v=5 - --v=5
- --csi-address=/csi/csi.sock - --csi-address=/csi/csi.sock
- --kubelet-registration-path=/var/lib/kubelet/plugins/csi-secrets-store/csi.sock - --kubelet-registration-path=/var/lib/kubelet/plugins/csi-secrets-store/csi.sock
lifecycle:
preStop:
exec:
command:
[
"/bin/sh",
"-c",
"rm -rf /registration/secrets-store.csi.k8s.io-reg.sock",
]
env: env:
- name: KUBE_NODE_NAME - name: KUBE_NODE_NAME
valueFrom: valueFrom:
@ -50,13 +41,13 @@ spec:
cpu: 10m cpu: 10m
memory: 20Mi memory: 20Mi
- name: secrets-store - name: secrets-store
image: us.gcr.io/k8s-artifacts-prod/csi-secrets-store/driver:v0.0.16 image: k8s.gcr.io/csi-secrets-store/driver:v0.0.17
args: args:
- "--debug=true"
- "--endpoint=$(CSI_ENDPOINT)" - "--endpoint=$(CSI_ENDPOINT)"
- "--nodeid=$(KUBE_NODE_NAME)" - "--nodeid=$(KUBE_NODE_NAME)"
- "--provider-volume=/etc/kubernetes/secrets-store-csi-providers" - "--provider-volume=/etc/kubernetes/secrets-store-csi-providers"
- "--metrics-addr=:8095" - "--metrics-addr=:8095"
- "--grpc-supported-providers=gcp;"
- "--enable-secret-rotation=false" - "--enable-secret-rotation=false"
- "--rotation-poll-interval=2m" - "--rotation-poll-interval=2m"
env: env:
@ -98,7 +89,7 @@ spec:
cpu: 50m cpu: 50m
memory: 100Mi memory: 100Mi
- name: liveness-probe - name: liveness-probe
image: quay.io/k8scsi/livenessprobe:v2.0.0 image: k8s.gcr.io/sig-storage/livenessprobe:v2.1.0
imagePullPolicy: Always imagePullPolicy: Always
args: args:
- --csi-address=/csi/csi.sock - --csi-address=/csi/csi.sock

2
files/secrets-store/provider-vault-installer.yaml
View file

@ -19,7 +19,7 @@ spec:
tolerations: tolerations:
containers: containers:
- name: provider-vault-installer - name: provider-vault-installer
image: hashicorp/secrets-store-csi-driver-provider-vault:0.0.4 image: hashicorp/secrets-store-csi-driver-provider-vault:0.0.6
imagePullPolicy: Always imagePullPolicy: Always
resources: resources:
requests: requests:

2
vars/secrets_store_files_list.yml
View file

@ -1,8 +1,8 @@
--- ---
secrets_store_files: secrets_store_files:
- "secrets-store/secretproviderclasses-rolebinding-ClusterRoleBinding.yaml"
- "secrets-store/secrets-store-csi-driver-ServiceAccount.yaml" - "secrets-store/secrets-store-csi-driver-ServiceAccount.yaml"
- "secrets-store/secretproviderclasses-role-ClusterRole.yaml" - "secrets-store/secretproviderclasses-role-ClusterRole.yaml"
- "secrets-store/secretproviderclasses-rolebinding-ClusterRoleBinding.yaml"
- "secrets-store/secrets-store.csi.k8s.io-CSIDriver.yaml" - "secrets-store/secrets-store.csi.k8s.io-CSIDriver.yaml"
- "secrets-store/secretproviderclasses.secrets-store.csi.x-k8s.io-CustomResourceDefinition.yaml" - "secrets-store/secretproviderclasses.secrets-store.csi.x-k8s.io-CustomResourceDefinition.yaml"
- "secrets-store/csi-secrets-store-DaemonSet.yaml" - "secrets-store/csi-secrets-store-DaemonSet.yaml"