From 6dd57426200f2626a87f471ca1ac741965eceb7b Mon Sep 17 00:00:00 2001 From: hanenMizouni Date: Fri, 18 Oct 2024 05:31:16 +0000 Subject: [PATCH] Release v0.4.0 Signed-off-by: hanenMizouni --- CHANGELOG-0.x.md | 14 ++++++++++++ docs/README.md | 2 ++ docs/helm.md | 40 +++++++++++++++++++++++++++------- osc-bsu-csi-driver/Chart.yaml | 2 +- osc-bsu-csi-driver/values.yaml | 2 +- 5 files changed, 50 insertions(+), 10 deletions(-) diff --git a/CHANGELOG-0.x.md b/CHANGELOG-0.x.md index 0bee14cd..be7cea02 100644 --- a/CHANGELOG-0.x.md +++ b/CHANGELOG-0.x.md @@ -1,5 +1,19 @@ # Changelog +## [v0.4.0] +### Features +* Add support for multiple feature-gates arguments for the csi-provisioner +* Upgrade plugin to support 1.30 Kubernetes version cluster and sideCars versions +* Clean way to set imagePullSecrets and respect list +* Increase default provisioner, resizer, snapshotter retry-interval-max +* Reduce verbosity level +* Support Volume Group Snapshots introduced in k8s 1.27 +* Add default kube-api-qps, burst, and worker-threads values in CSI driver +* Set RuntimeDefault as default seccompProfile in securityContext + +### Bugfixes +* Fix extra arg + ## [v0.3.0] ### Features * Upgrade plugin to support 1.26 Kubernetes version cluster ([#801](https://github.com/outscale/osc-bsu-csi-driver/pull/801)) diff --git a/docs/README.md b/docs/README.md index 7ee839b2..0ab1a5ab 100644 --- a/docs/README.md +++ b/docs/README.md @@ -12,6 +12,8 @@ The Outscale Block Storage Unit Container Storage Interface (CSI) Driver provide | <= v0.0.14beta | [v1.3.0](https://github.com/container-storage-interface/spec/releases/tag/v1.3.0) | 1.16 | 1.22 | | v0.0.15 | [v1.5.0](https://github.com/container-storage-interface/spec/releases/tag/v1.5.0) | 1.20 | 1.23 | | v0.1.0 - v0.3.0 | [v1.5.0](https://github.com/container-storage-interface/spec/releases/tag/v1.5.0) | 1.20 | 1.23 | +| v0.1.0 - v0.4.0 | [v1.8.0](https://github.com/container-storage-interface/spec/releases/tag/v1.8.0) | 1.20 | 1.30 | + ## Features The following CSI gRPC calls are implemented: diff --git a/docs/helm.md b/docs/helm.md index b009bc18..840c6e73 100644 --- a/docs/helm.md +++ b/docs/helm.md @@ -1,6 +1,6 @@ # osc-bsu-csi-driver -![Version: 0.14.0](https://img.shields.io/badge/Version-0.14.0-informational?style=flat-square) +![Version: 0.15.0](https://img.shields.io/badge/Version-0.15.0-informational?style=flat-square) A Helm chart for Outscale BSU CSI Driver @@ -45,11 +45,13 @@ Kubernetes: `>=1.20.0` | httpsProxy | string | `""` | Value used to create environment variable HTTPS_PROXY | | image.pullPolicy | string | `"IfNotPresent"` | Container pull policy | | image.repository | string | `"outscale/osc-ebs-csi-driver"` | Container image to use | -| image.tag | string | `"v0.3.0"` | Container image tag to deploy | +| image.tag | string | `"v0.4.0"` | Container image tag to deploy | | imagePullSecrets | list | `[]` | Specify image pull secrets | | maxBsuVolumes | string | `"39"` | Maximum volume to attach to a node (see [Docs](https://docs.outscale.com/en/userguide/About-Volumes.html)) | | nameOverride | string | `""` | Override name of the app (instead of `osc-bsu-csi-driver`) | | noProxy | string | `""` | Value used to create environment variable NO_PROXY | +| node.containerSecurityContext.privileged | bool | `true` | | +| node.containerSecurityContext.readOnlyRootFilesystem | bool | `true` | | | node.podAnnotations | object | `{}` | Annotations for controller pod | | node.podLabels | object | `{}` | Labels for controller pod | | node.tolerations | list | `[]` | Pod tolerations | @@ -60,6 +62,9 @@ Kubernetes: `>=1.20.0` | replicaCount | int | `2` | Number of replicas to deploy | | resources | object | `{}` | Specify limits of resources used by the pod | | serviceAccount.controller.annotations | object | `{}` | Annotations to add to the Controller ServiceAccount | +| serviceAccount.controller.containerSecurityContext.allowPrivilegeEscalation | bool | `false` | | +| serviceAccount.controller.containerSecurityContext.readOnlyRootFilesystem | bool | `true` | | +| serviceAccount.controller.containerSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` | | | serviceAccount.snapshot.annotations | object | `{}` | Annotations to add to the Snapshot ServiceAccount | | sidecars.attacherImage.additionalArgs | list | `[]` | | | sidecars.attacherImage.additionalClusterRoleRules | string | `nil` | | @@ -68,14 +73,24 @@ Kubernetes: `>=1.20.0` | sidecars.attacherImage.httpEndpointPort | string | `"8090"` | Port of the http endpoint | | sidecars.attacherImage.leaderElection | object | `{}` | Customize leaderElection, you can specify `leaseDuration`, `renewDeadline` and/or `retryPeriod`. Each value must be in an acceptable time.ParseDuration format.(Ref: https://pkg.go.dev/flag#Duration) | | sidecars.attacherImage.repository | string | `"registry.k8s.io/sig-storage/csi-attacher"` | | -| sidecars.attacherImage.tag | string | `"v3.3.0"` | | +| sidecars.attacherImage.securityContext.allowPrivilegeEscalation | bool | `false` | | +| sidecars.attacherImage.securityContext.readOnlyRootFilesystem | bool | `true` | | +| sidecars.attacherImage.securityContext.seccompProfile.type | string | `"RuntimeDefault"` | | +| sidecars.attacherImage.tag | string | `"v4.6.1"` | | +| sidecars.livenessProbeImage.port | string | `"9808"` | Port of the liveness of the main container | | sidecars.livenessProbeImage.repository | string | `"registry.k8s.io/sig-storage/livenessprobe"` | | -| sidecars.livenessProbeImage.tag | string | `"v2.14.0"` | | +| sidecars.livenessProbeImage.securityContext.allowPrivilegeEscalation | bool | `false` | | +| sidecars.livenessProbeImage.securityContext.readOnlyRootFilesystem | bool | `true` | | +| sidecars.livenessProbeImage.securityContext.seccompProfile.type | string | `"RuntimeDefault"` | | +| sidecars.livenessProbeImage.tag | string | `"v2.13.1"` | | | sidecars.nodeDriverRegistrarImage.enableHttpEndpoint | bool | `false` | Enable http endpoint to get metrics of the container | | sidecars.nodeDriverRegistrarImage.enableLivenessProbe | bool | `false` | Enable liveness probe for the container | | sidecars.nodeDriverRegistrarImage.httpEndpointPort | string | `"8093"` | Port of the http endpoint | | sidecars.nodeDriverRegistrarImage.repository | string | `"registry.k8s.io/sig-storage/csi-node-driver-registrar"` | | -| sidecars.nodeDriverRegistrarImage.tag | string | `"v2.12.0"` | | +| sidecars.nodeDriverRegistrarImage.securityContext.allowPrivilegeEscalation | bool | `false` | | +| sidecars.nodeDriverRegistrarImage.securityContext.readOnlyRootFilesystem | bool | `true` | | +| sidecars.nodeDriverRegistrarImage.securityContext.seccompProfile.type | string | `"RuntimeDefault"` | | +| sidecars.nodeDriverRegistrarImage.tag | string | `"v2.11.1"` | | | sidecars.provisionerImage.additionalArgs | list | `[]` | | | sidecars.provisionerImage.additionalClusterRoleRules | string | `nil` | | | sidecars.provisionerImage.enableHttpEndpoint | bool | `false` | Enable http endpoint to get metrics of the container | @@ -83,7 +98,10 @@ Kubernetes: `>=1.20.0` | sidecars.provisionerImage.httpEndpointPort | string | `"8089"` | Port of the http endpoint | | sidecars.provisionerImage.leaderElection | object | `{}` | Customize leaderElection, you can specify `leaseDuration`, `renewDeadline` and/or `retryPeriod`. Each value must be in an acceptable time.ParseDuration format.(Ref: https://pkg.go.dev/flag#Duration) | | sidecars.provisionerImage.repository | string | `"registry.k8s.io/sig-storage/csi-provisioner"` | | -| sidecars.provisionerImage.tag | string | `"v4.0.0"` | | +| sidecars.provisionerImage.securityContext.allowPrivilegeEscalation | bool | `false` | | +| sidecars.provisionerImage.securityContext.readOnlyRootFilesystem | bool | `true` | | +| sidecars.provisionerImage.securityContext.seccompProfile.type | string | `"RuntimeDefault"` | | +| sidecars.provisionerImage.tag | string | `"v5.0.2"` | | | sidecars.resizerImage.additionalArgs | list | `[]` | | | sidecars.resizerImage.additionalClusterRoleRules | string | `nil` | | | sidecars.resizerImage.enableHttpEndpoint | bool | `false` | Enable http endpoint to get metrics of the container | @@ -91,7 +109,10 @@ Kubernetes: `>=1.20.0` | sidecars.resizerImage.httpEndpointPort | string | `"8092"` | Port of the http endpoint | | sidecars.resizerImage.leaderElection | object | `{}` | Customize leaderElection, you can specify `leaseDuration`, `renewDeadline` and/or `retryPeriod`. Each value must be in an acceptable time.ParseDuration format.(Ref: https://pkg.go.dev/flag#Duration) | | sidecars.resizerImage.repository | string | `"registry.k8s.io/sig-storage/csi-resizer"` | | -| sidecars.resizerImage.tag | string | `"v1.12.0"` | | +| sidecars.resizerImage.securityContext.allowPrivilegeEscalation | bool | `false` | | +| sidecars.resizerImage.securityContext.readOnlyRootFilesystem | bool | `true` | | +| sidecars.resizerImage.securityContext.seccompProfile.type | string | `"RuntimeDefault"` | | +| sidecars.resizerImage.tag | string | `"v1.11.2"` | | | sidecars.snapshotterImage.additionalArgs | list | `[]` | | | sidecars.snapshotterImage.additionalClusterRoleRules | string | `nil` | | | sidecars.snapshotterImage.enableHttpEndpoint | bool | `false` | Enable http endpoint to get metrics of the container | @@ -99,7 +120,10 @@ Kubernetes: `>=1.20.0` | sidecars.snapshotterImage.httpEndpointPort | string | `"8091"` | Port of the http endpoint | | sidecars.snapshotterImage.leaderElection | object | `{}` | Customize leaderElection, you can specify `leaseDuration`, `renewDeadline` and/or `retryPeriod`. Each value must be in an acceptable time.ParseDuration format.(Ref: https://pkg.go.dev/flag#Duration) | | sidecars.snapshotterImage.repository | string | `"registry.k8s.io/sig-storage/csi-snapshotter"` | | -| sidecars.snapshotterImage.tag | string | `"v4.2.1"` | | +| sidecars.snapshotterImage.securityContext.allowPrivilegeEscalation | bool | `false` | | +| sidecars.snapshotterImage.securityContext.readOnlyRootFilesystem | bool | `true` | | +| sidecars.snapshotterImage.securityContext.seccompProfile.type | string | `"RuntimeDefault"` | | +| sidecars.snapshotterImage.tag | string | `"v8.0.1"` | | | timeout | string | `"60s"` | Timeout for sidecars | | tolerations | list | `[{"key":"CriticalAddonsOnly","operator":"Exists"},{"effect":"NoExecute","operator":"Exists","tolerationSeconds":300}]` | Pod tolerations | | verbosity | int | `3` | Verbosity level of the plugin | diff --git a/osc-bsu-csi-driver/Chart.yaml b/osc-bsu-csi-driver/Chart.yaml index d98756ae..21069b6f 100644 --- a/osc-bsu-csi-driver/Chart.yaml +++ b/osc-bsu-csi-driver/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v1 name: osc-bsu-csi-driver description: A Helm chart for Outscale BSU CSI Driver -version: 0.14.0 +version: 0.15.0 kubeVersion: ">=1.20.0" home: https://github.com/outscale/osc-bsu-csi-driver sources: diff --git a/osc-bsu-csi-driver/values.yaml b/osc-bsu-csi-driver/values.yaml index b3caa33b..40d5a769 100644 --- a/osc-bsu-csi-driver/values.yaml +++ b/osc-bsu-csi-driver/values.yaml @@ -12,7 +12,7 @@ image: # -- Container image to use repository: outscale/osc-ebs-csi-driver # -- Container image tag to deploy - tag: v0.3.0 + tag: v0.4.0 # -- Container pull policy pullPolicy: IfNotPresent