Skip to content

Commit

Permalink
Prepare for 0.21.0 release (hashicorp#771)
Browse files Browse the repository at this point in the history
Prepare for 0.21.0 release

CHANGES:
* `vault-k8s` updated to 0.17.0. (this)
* `vault-csi-provider` updated to 1.2.0 (this)
* `vault` updated to 1.11.2 (this)
* Start testing against Kubernetes 1.24. [hashicorpGH-744](hashicorp#744)
* Deprecated `injector.externalVaultAddr`. Added `global.externalVaultAddr`, which applies to both the Injector and the CSI Provider. [hashicorpGH-745](hashicorp#745)
* CSI Provider pods now set the `VAULT_ADDR` environment variable to either the internal Vault service or the configured external address. [hashicorpGH-745](hashicorp#745)

Features:
* server: Add `server.statefulSet.securityContext` to override pod and container `securityContext`. [hashicorpGH-767](hashicorp#767)
* csi: Add `csi.daemonSet.securityContext` to override pod and container `securityContext`. [hashicorpGH-767](hashicorp#767)
* injector: Add `injector.securityContext` to override pod and container `securityContext`. [hashicorpGH-750](hashicorp#750) and [hashicorpGH-767](hashicorp#767)
* Add `server.service.activeNodePort` and `server.service.standbyNodePort` to specify the `nodePort` for active and standby services. [hashicorpGH-610](hashicorp#610)
* Support for setting annotations on the injector's serviceAccount [hashicorpGH-753](hashicorp#753)
  • Loading branch information
swenson authored Aug 10, 2022
1 parent 9efd98a commit eca526b
Show file tree
Hide file tree
Showing 6 changed files with 18 additions and 13 deletions.
5 changes: 5 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,11 @@
## Unreleased

## 0.21.0 (August 10th, 2022)

CHANGES:
* `vault-k8s` updated to 0.17.0. [GH-771](https://github.com/hashicorp/vault-helm/pull/771)
* `vault-csi-provider` updated to 1.2.0 [GH-771](https://github.com/hashicorp/vault-helm/pull/771)
* `vault` updated to 1.11.2 [GH-771](https://github.com/hashicorp/vault-helm/pull/771)
* Start testing against Kubernetes 1.24. [GH-744](https://github.com/hashicorp/vault-helm/pull/744)
* Deprecated `injector.externalVaultAddr`. Added `global.externalVaultAddr`, which applies to both the Injector and the CSI Provider. [GH-745](https://github.com/hashicorp/vault-helm/pull/745)
* CSI Provider pods now set the `VAULT_ADDR` environment variable to either the internal Vault service or the configured external address. [GH-745](https://github.com/hashicorp/vault-helm/pull/745)
Expand Down
4 changes: 2 additions & 2 deletions Chart.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
apiVersion: v2
name: vault
version: 0.20.1
appVersion: 1.10.3
version: 0.21.0
appVersion: 1.11.2
kubeVersion: ">= 1.16.0-0"
description: Official HashiCorp Vault Chart
home: https://www.vaultproject.io
Expand Down
4 changes: 2 additions & 2 deletions test/acceptance/server-ha-enterprise-dr.bats
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ load _helpers

helm install "$(name_prefix)-east" \
--set='server.image.repository=hashicorp/vault-enterprise' \
--set='server.image.tag=1.10.3-ent' \
--set='server.image.tag=1.11.2-ent' \
--set='injector.enabled=false' \
--set='server.ha.enabled=true' \
--set='server.ha.raft.enabled=true' \
Expand Down Expand Up @@ -75,7 +75,7 @@ load _helpers
helm install "$(name_prefix)-west" \
--set='injector.enabled=false' \
--set='server.image.repository=hashicorp/vault-enterprise' \
--set='server.image.tag=1.10.3-ent' \
--set='server.image.tag=1.11.2-ent' \
--set='server.ha.enabled=true' \
--set='server.ha.raft.enabled=true' \
--set='server.enterpriseLicense.secretName=vault-license' .
Expand Down
4 changes: 2 additions & 2 deletions test/acceptance/server-ha-enterprise-perf.bats
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ load _helpers
helm install "$(name_prefix)-east" \
--set='injector.enabled=false' \
--set='server.image.repository=hashicorp/vault-enterprise' \
--set='server.image.tag=1.10.3-ent' \
--set='server.image.tag=1.11.2-ent' \
--set='server.ha.enabled=true' \
--set='server.ha.raft.enabled=true' \
--set='server.enterpriseLicense.secretName=vault-license' .
Expand Down Expand Up @@ -75,7 +75,7 @@ load _helpers
helm install "$(name_prefix)-west" \
--set='injector.enabled=false' \
--set='server.image.repository=hashicorp/vault-enterprise' \
--set='server.image.tag=1.10.3-ent' \
--set='server.image.tag=1.11.2-ent' \
--set='server.ha.enabled=true' \
--set='server.ha.raft.enabled=true' \
--set='server.enterpriseLicense.secretName=vault-license' .
Expand Down
6 changes: 3 additions & 3 deletions values.openshift.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -6,13 +6,13 @@ global:
injector:
image:
repository: "registry.connect.redhat.com/hashicorp/vault-k8s"
tag: "0.16.1-ubi"
tag: "0.17.0-ubi"

agentImage:
repository: "registry.connect.redhat.com/hashicorp/vault"
tag: "1.10.3-ubi"
tag: "1.11.2-ubi"

server:
image:
repository: "registry.connect.redhat.com/hashicorp/vault"
tag: "1.10.3-ubi"
tag: "1.11.2-ubi"
8 changes: 4 additions & 4 deletions values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -57,15 +57,15 @@ injector:
# image sets the repo and tag of the vault-k8s image to use for the injector.
image:
repository: "hashicorp/vault-k8s"
tag: "0.16.1"
tag: "0.17.0"
pullPolicy: IfNotPresent

# agentImage sets the repo and tag of the Vault image to use for the Vault Agent
# containers. This should be set to the official Vault image. Vault 1.3.1+ is
# required.
agentImage:
repository: "hashicorp/vault"
tag: "1.10.3"
tag: "1.11.2"

# The default values for the injected Vault Agent containers.
agentDefaults:
Expand Down Expand Up @@ -327,7 +327,7 @@ server:

image:
repository: "hashicorp/vault"
tag: "1.10.3"
tag: "1.11.2"
# Overrides the default Image Pull Policy
pullPolicy: IfNotPresent

Expand Down Expand Up @@ -897,7 +897,7 @@ csi:

image:
repository: "hashicorp/vault-csi-provider"
tag: "1.1.0"
tag: "1.2.0"
pullPolicy: IfNotPresent

# volumes is a list of volumes made available to all containers. These are rendered
Expand Down

0 comments on commit eca526b

Please sign in to comment.