release: update manifest and helm charts for v1.5.0 (#1374)

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Azure · Nov 22, 2023 · 9a8a79f · 9a8a79f
1 parent ff3241a
commit 9a8a79f
Show file tree

Hide file tree

Showing 20 changed files with 72 additions and 58 deletions.
diff --git a/Makefile b/Makefile
@@ -8,7 +8,7 @@ REPO_PATH="$(ORG_PATH)/$(PROJECT_NAME)"
 REGISTRY_NAME ?= upstream
 REPO_PREFIX ?= k8s/csi/secrets-store
 REGISTRY ?= $(REGISTRY_NAME).azurecr.io/$(REPO_PREFIX)
-IMAGE_VERSION ?= v1.4.1
+IMAGE_VERSION ?= v1.5.0
 IMAGE_NAME ?= provider-azure
 CONFORMANCE_IMAGE_NAME ?= provider-azure-arc-conformance
 IMAGE_TAG := $(REGISTRY)/$(IMAGE_NAME):$(IMAGE_VERSION)

diff --git a/charts/csi-secrets-store-provider-azure/Chart.lock b/charts/csi-secrets-store-provider-azure/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: secrets-store-csi-driver
   repository: https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts
-  version: 1.3.4
-digest: sha256:7df272f3ad149af2a2a52e0130778274448cd2418d26504213c37cd38d7eae14
-generated: "2023-07-31T17:32:41.008588145Z"
+  version: 1.4.0
+digest: sha256:a61620ef74155bd74e089b238246453c50120440ec59d58de5006a874fd46dfb
+generated: "2023-11-21T21:59:54.191903133Z"
diff --git a/charts/csi-secrets-store-provider-azure/Chart.yaml b/charts/csi-secrets-store-provider-azure/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 name: csi-secrets-store-provider-azure
-version: 1.4.4
-appVersion: 1.4.1
+version: 1.5.0
+appVersion: 1.5.0
 kubeVersion: ">=1.16.0-0"
 description: A Helm chart to install the Secrets Store CSI Driver and the Azure Keyvault Provider inside a Kubernetes cluster.
 sources:
@@ -13,5 +13,5 @@ maintainers:
 dependencies:
 - name: secrets-store-csi-driver
   repository: https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts
-  version: 1.3.4
+  version: 1.4.0
   condition: secrets-store-csi-driver.install
diff --git a/charts/csi-secrets-store-provider-azure/README.md b/charts/csi-secrets-store-provider-azure/README.md
diff --git a/charts/csi-secrets-store-provider-azure/arc-values.yaml b/charts/csi-secrets-store-provider-azure/arc-values.yaml
@@ -15,7 +15,7 @@ logVerbosity: 0
 linux:
   image:
     repository: mcr.microsoft.com/oss/azure/secrets-store/provider-azure
-    tag: v1.4.1
+    tag: v1.5.0
     pullPolicy: IfNotPresent
   nodeSelector: {}
   tolerations: []
@@ -58,7 +58,7 @@ linux:
 windows:
   image:
     repository: mcr.microsoft.com/oss/azure/secrets-store/provider-azure
-    tag: v1.4.1
+    tag: v1.5.0
     pullPolicy: IfNotPresent
   nodeSelector: {}
   tolerations: []
@@ -112,7 +112,7 @@ secrets-store-csi-driver:
     metricsAddr: ":8080"
     image:
       repository: mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver
-      tag: v1.3.4
+      tag: v1.4.0
       pullPolicy: IfNotPresent
     registrarImage:
       repository: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar
@@ -125,7 +125,7 @@ secrets-store-csi-driver:
     crds:
       image:
         repository: mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver-crds
-        tag: v1.3.4
+        tag: v1.4.0
         pullPolicy: IfNotPresent
     podAnnotations:
       prometheus.io/scrape: "true"
@@ -137,7 +137,7 @@ secrets-store-csi-driver:
     metricsAddr: ":8080"
     image:
       repository: mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver
-      tag: v1.3.4
+      tag: v1.4.0
       pullPolicy: IfNotPresent
     registrarImage:
       repository: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar

diff --git a/charts/csi-secrets-store-provider-azure/config/gcstenant-conf.json b/charts/csi-secrets-store-provider-azure/config/gcstenant-conf.json
@@ -8,7 +8,7 @@
         "GcsEnvironment": "DiagnosticsPROD",
         "GcsGenevaAccount": "akvsecretsprovider",
         "GcsNamespace": "akvsecretsprovider",
-        "GenevaConfigVersion": "1.0",
+        "GenevaConfigVersion": "2.2",
         "GcsRegion": "westus2"
     },
     "EndpointConfigurations": [

diff --git a/charts/csi-secrets-store-provider-azure/templates/arc-monitoring.yaml b/charts/csi-secrets-store-provider-azure/templates/arc-monitoring.yaml
@@ -40,7 +40,7 @@ spec:
               memory: 100Mi
         # MDM
         - name: mdm
-          image: "linuxgeneva-microsoft.azurecr.io/genevamdm:master_20220401.1"
+          image: "linuxgeneva-microsoft.azurecr.io/distroless/genevamdm:2.2023.1027.1417-08a588-20231027t1613"
           imagePullPolicy: IfNotPresent
           env: 
           - name: ROLEINSTANCE
@@ -113,7 +113,7 @@ spec:
               subPath: telegraf.conf
         # Pipeline agent for logging
         - name: amacoreagent
-          image: "pipelineagent.azurecr.io/amacoreagent:3.0"
+          image: "linuxgeneva-microsoft.azurecr.io/amacoreagentaot:1.2.47"
           imagePullPolicy: IfNotPresent
           resources:
             requests:
@@ -123,6 +123,10 @@ spec:
               cpu: 50m
               memory: 100Mi
           env:
+          - name: MONITORING_USE_GENEVA_CONFIG_SERVICE
+            value: "true"
+          - name: SKIP_IMDS_LOOKUP_FOR_LEGACY_AUTH
+            value: "1"
           - name: MONITORING_GCS_AUTH_ID_TYPE
             value: AuthMSIToken
           - name: PA_TENANTS_DIR
@@ -164,7 +168,7 @@ spec:
           - name: MONITORING_GCS_NAMESPACE
             value: "akvsecretsprovider"
           - name: MONITORING_CONFIG_VERSION
-            value: "1.0"
+            value: "2.2"
           - name: MDSD_CONFIG_DIR
             value: /tmp
           - name: DOCKER_LOGGING
@@ -178,7 +182,7 @@ spec:
               mountPath: /var/run/mdsd
         # FluentD
         - name: fluentd
-          image: "linuxgeneva-microsoft.azurecr.io/genevafluentd_td-agent:master_20220403.1"
+          image: "linuxgeneva-microsoft.azurecr.io/distroless/genevafluentd_td-agent:mariner_20230915.3"
           imagePullPolicy: IfNotPresent
           resources:
             requests:

diff --git a/charts/csi-secrets-store-provider-azure/values.yaml b/charts/csi-secrets-store-provider-azure/values.yaml
@@ -17,7 +17,7 @@ enableArcExtension: false
 linux:
   image:
     repository: mcr.microsoft.com/oss/azure/secrets-store/provider-azure
-    tag: v1.4.1
+    tag: v1.5.0
     pullPolicy: IfNotPresent
   nodeSelector: {}
   # ref: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
@@ -63,7 +63,7 @@ linux:
 windows:
   image:
     repository: mcr.microsoft.com/oss/azure/secrets-store/provider-azure
-    tag: v1.4.1
+    tag: v1.5.0
     pullPolicy: IfNotPresent
   nodeSelector: {}
   # ref: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
@@ -120,7 +120,7 @@ secrets-store-csi-driver:
     priorityClassName: ""
     image:
       repository: mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver
-      tag: v1.3.4
+      tag: v1.4.0
       pullPolicy: IfNotPresent
     registrarImage:
       repository: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar
@@ -133,7 +133,7 @@ secrets-store-csi-driver:
     crds:
       image:
         repository: mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver-crds
-        tag: v1.3.4
+        tag: v1.4.0
         pullPolicy: IfNotPresent
     providersDir: /var/run/secrets-store-csi-providers
 
@@ -144,7 +144,7 @@ secrets-store-csi-driver:
     priorityClassName: ""
     image:
       repository: mcr.microsoft.com/oss/kubernetes-csi/secrets-store/driver
-      tag: v1.3.4
+      tag: v1.4.0
       pullPolicy: IfNotPresent
     registrarImage:
       repository: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar

diff --git a/deployment/provider-azure-installer-windows.yaml b/deployment/provider-azure-installer-windows.yaml
@@ -23,7 +23,7 @@ spec:
       serviceAccountName: csi-secrets-store-provider-azure
       containers:
         - name: provider-azure-installer
-          image: mcr.microsoft.com/oss/azure/secrets-store/provider-azure:v1.4.1
+          image: mcr.microsoft.com/oss/azure/secrets-store/provider-azure:v1.5.0
           imagePullPolicy: IfNotPresent
           args:
             - --endpoint=unix://C:\\provider\\azure.sock
@@ -46,6 +46,10 @@ spec:
             limits:
               cpu: 100m
               memory: 200Mi
+          ports:
+            - containerPort: 8898
+              name: metrics
+              protocol: TCP
           volumeMounts:
             - mountPath: "C:\\provider"
               name: providervol

diff --git a/deployment/provider-azure-installer.yaml b/deployment/provider-azure-installer.yaml
@@ -24,7 +24,7 @@ spec:
       hostNetwork: true
       containers:
         - name: provider-azure-installer
-          image: mcr.microsoft.com/oss/azure/secrets-store/provider-azure:v1.4.1
+          image: mcr.microsoft.com/oss/azure/secrets-store/provider-azure:v1.5.0
           imagePullPolicy: IfNotPresent
           args:
             - --endpoint=unix:///provider/azure.sock
@@ -47,6 +47,10 @@ spec:
             limits:
               cpu: 50m
               memory: 100Mi
+          ports:
+            - containerPort: 8898
+              name: metrics
+              protocol: TCP
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true

diff --git a/manifest_staging/charts/csi-secrets-store-provider-azure/Chart.lock b/manifest_staging/charts/csi-secrets-store-provider-azure/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: secrets-store-csi-driver
   repository: https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts
-  version: 1.3.4
-digest: sha256:7df272f3ad149af2a2a52e0130778274448cd2418d26504213c37cd38d7eae14
-generated: "2023-07-31T17:32:41.008588145Z"
+  version: 1.4.0
+digest: sha256:a61620ef74155bd74e089b238246453c50120440ec59d58de5006a874fd46dfb
+generated: "2023-11-21T21:59:54.191903133Z"
diff --git a/manifest_staging/charts/csi-secrets-store-provider-azure/Chart.yaml b/manifest_staging/charts/csi-secrets-store-provider-azure/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 name: csi-secrets-store-provider-azure
-version: 1.4.4
-appVersion: 1.4.1
+version: 1.5.0
+appVersion: 1.5.0
 kubeVersion: ">=1.16.0-0"
 description: A Helm chart to install the Secrets Store CSI Driver and the Azure Keyvault Provider inside a Kubernetes cluster.
 sources:
@@ -13,5 +13,5 @@ maintainers:
 dependencies:
 - name: secrets-store-csi-driver
   repository: https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts
-  version: 1.3.4
+  version: 1.4.0
   condition: secrets-store-csi-driver.install