Update Helm chart secrets-store-csi-driver to v1.6.0#889
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
fce8044 to
da74bad
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
da74bad to
6d64e45
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
6d64e45 to
9577092
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
9577092 to
b6b1a17
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
b6b1a17 to
6ba51d1
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
6ba51d1 to
96b4cd5
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
96b4cd5 to
2b29284
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
2b29284 to
42e715b
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
42e715b to
8d9224e
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
8d9224e to
21156bd
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
21156bd to
b83a933
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
b83a933 to
99808ea
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
99808ea to
9322eab
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
9322eab to
d897dfc
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
d897dfc to
9c6f89c
Compare
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
9c6f89c to
cd4c4b5
Compare
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
cd4c4b5 to
311a5a2
Compare
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
311a5a2 to
049906b
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
049906b to
950e602
Compare
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
950e602 to
7e1fb4b
Compare
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
7e1fb4b to
f5d1190
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
f5d1190 to
d5f5cda
Compare
| datasource | package | from | to | | ---------- | ------------------------ | ----- | ----- | | helm | secrets-store-csi-driver | 1.3.0 | 1.6.0 | Signed-off-by: Nicholas St. Germain <dirtycajunrice@users.noreply.github.com>
renovate
Bot
force-pushed
the
renovate/secrets-store-csi-driver-1.x
branch
from
d5f5cda to
da06a9d
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.3.0→1.6.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
kubernetes-sigs/secrets-store-csi-driver (secrets-store-csi-driver)
v1.6.0Compare Source
v1.6.0 - 2026-04-29
Secret Rotation via RequiresRepublish
The dedicated secret rotation controller has been replaced with the CSI RequiresRepublish mechanism. The CSIDriver now sets
requiresRepublish: true, causing kubelet to periodically callNodePublishVolume, which re-fetches secrets from the provider when--enable-secret-rotation=true. The--rotation-poll-intervalnow acts as a minimum cache duration between rotations. This change removes the need for privileged RBAC permissions (listing pods, secrets, and creating service account tokens) that were previously required by the rotation controller. Rotation-specific RBAC resources (rbac-secretproviderrotation.yaml,rbac-secretprovidertokenrequest.yaml) have been removed and can be cleaned up from manual deployments.Changelog
Bug Fixes 🐞
Build 🏭
Continuous Integration 💜
sts.amazonaws.comaudience toe2e-helm-deploytokenRequests by @aramase in #2020Documentation 📘
manifest_staging/charts/secrets-store-csi-driver/README.mdby @ThirdEyeSqueegee in #2005Features 🌈
Maintenance 🔧
livenessprobeandcsi-node-driver-registrarby @ThirdEyeSqueegee in #2004Security Fix 🛡️
Testing 💚
New Contributors
Full Changelog: kubernetes-sigs/secrets-store-csi-driver@v1.5.6...v1.6.0
v1.5.6Compare Source
v1.5.6 - 2026-02-26
Changelog
Maintenance 🔧
605661fchore: bump version to v1.5.6 in release-1.50dedb0echore: update to kubectl 1.34.2 in helm-crds image965c958chore: update to go 1.24.12Security Fix 🛡️
ccc4c20security: bump to go 1.24.13 to resolve CVE-2025-68121v1.5.5Compare Source
v1.5.5 - 2025-12-15
Changelog
Maintenance 🔧
4b3d15fchore: bump version to v1.5.5 in release-1.53d55662chore: update to go 1.24.11 and bump golang.org/x/crypto to v0.46.04a374c5chore: update to go 1.24.9v1.5.4Compare Source
v1.5.4 - 2025-10-01
Changelog
Continuous Integration 💜
96dbbdcci: resolve azure e2e test flakes with rbac, windows vm size0071011ci: update azure scripts to use rbac for keyvault permissionsMaintenance 🔧
8d33239chore: bump version to v1.5.4 in release-1.56665902chore: bump kubectl to v1.34.1 in driver-crds321f0f4chore: update debian-base to bookworm-v1.0.6893cf34chore: update to go 1.24.7v1.5.3Compare Source
v1.5.3 - 2025-07-24
Changelog
Continuous Integration 💜
7cbb6ebci: use ubuntu-latest for gh workflowsMaintenance 🔧
f61041cchore: bump version to v1.5.3 in release-1.5a884676chore: bump golang.org/x/oauth2 from 0.7.0 to 0.27.0v1.5.2Compare Source
v1.5.2 - 2025-06-26
Changelog
Maintenance 🔧
Testing 💚
Security Fix 🛡️
Full Changelog: kubernetes-sigs/secrets-store-csi-driver@v1.5.1...v1.5.2
v1.5.1Compare Source
v1.5.1 - 2025-05-19
Changelog
Maintenance 🔧
Security Fix 🛡️
Full Changelog: kubernetes-sigs/secrets-store-csi-driver@v1.5.0...v1.5.1
v1.5.0Compare Source
v1.5.0 - 2025-04-09
Changelog
Bug Fixes 🐞
b0fdeb5fix: update sha generation logicf0e9dccfix: add unit test to show failures in current sha logicCode Refactoring 💎
9548c23refactor: cleanup unused err checkFeatures 🌈
bf7e77efeat: add build for windows ltsc2025Maintenance 🔧
a488327chore: bump kind to v0.27.0515358echore: disable trivy package testing for driver-crds924b3b8chore: bump docker golang base images to 1.23572e439chore: move tam7t to emeritus_approvers0b00da8chore: bump github/codeql-action from 3.28.0 to 3.28.8b8a1e5bchore: bump actions/setup-go from 5.2.0 to 5.3.04aad87bchore: bump golang.org/x/net from 0.28.0 to 0.33.0 in /hack/tools25d7756chore: bump gaurav-nelson/github-action-markdown-link-checkc3cb4ffchore: bump step-security/harden-runner from 2.10.2 to 2.10.3911b494chore: bump codecov/codecov-action from 5.1.1 to 5.1.2aaa4a3cchore: bump github/codeql-action from 3.26.13 to 3.28.05a8d6b5chore: bump actions/upload-artifact from 4.4.1 to 4.5.07c04af1chore: bump actions/setup-go from 5.0.2 to 5.2.0a24d2fdchore: bump golang.org/x/crypto from 0.22.0 to 0.31.05fe63f7chore: bump codecov/codecov-action from 4.5.0 to 5.1.1658a778chore: bump golang/govulncheck-action from 1.0.3 to 1.0.4041d142chore: bump to golang 1.22 builder image in dockerfilec5d2bd3chore: bump trivy to v0.57.1 to mitigate rate limit issuesf6bd4d8chore: bump step-security/harden-runner from 2.9.1 to 2.10.288d1253chore: bump actions/checkout from 4.1.7 to 4.2.144e7653chore: bump github/codeql-action from 3.26.6 to 3.26.13cb6fd1echore: bumps base imagesef8f5ebchore: bump actions/upload-artifact from 4.4.0 to 4.4.12f6e7d0chore: bump actions/upload-artifact from 4.3.6 to 4.4.092c73a0chore: bump github/codeql-action from 3.26.5 to 3.26.67710922chore: bump actions/dependency-review-action from 4.3.2 to 4.3.45e1d34fchore: bump golang/govulncheck-action from 1.0.2 to 1.0.36fe8bd5chore: bump actions/checkout from 4.1.5 to 4.1.7f09e97cchore: bump github/codeql-action from 3.25.8 to 3.26.5dae0961chore: bump actions/upload-artifact from 4.3.1 to 4.3.65e3935bchore: bump step-security/harden-runner from 2.6.1 to 2.9.10a0ed48chore: bump kind version and k8s version in test matrix36c6a8dchore: bump livenessprobe to v2.13.1c807dcachore: bump node-driver-registrar to v2.11.10c90683chore: bump ossf/scorecard-action from 2.3.1 to 2.4.009e9b3bchore: bump actions/setup-go from 4.0.1 to 5.0.20363edechore: bump codecov/codecov-action from 4.2.0 to 4.5.0549a1dechore: bump github/codeql-action from 3.25.0 to 3.25.85672b8dchore: update debian-base to bookworm-v1.0.3c49351achore: bump actions/checkout from 4.1.4 to 4.1.5c970d0echore: bump actions/dependency-review-action from 4.2.4 to 4.3.2f43e0b6chore: bump actions/checkout from 4.1.2 to 4.1.41c2a612chore: bump kubectl to v1.29.4 in driver-crds for CVE-2023-4528822da0ccchore: bump github/codeql-action from 3.24.10 to 3.25.0c1b0d9cchore: update debian-base to bookworm-v1.0.2d3c3968chore: bump codecov/codecov-action from 3.1.5 to 4.2.03fa13adchore: bump github/codeql-action from 3.24.8 to 3.24.10dfd7ff6chore: bump actions/dependency-review-action from 4.0.0 to 4.2.48f1c32echore: bump actions/checkout from 4.1.1 to 4.1.278e1995chore: bump github/codeql-action from 3.24.3 to 3.24.8987599fchore: bump google.golang.org/grpc in /test/e2eproviderab9df20chore: update node-driver-registrar:v2.10.0, livenessprobe:v2.12.010e8b27chore: update debian-base to bookworm-v1.0.1275cf5fchore: bump github/codeql-action from 3.23.1 to 3.24.36cbaa7cchore: bump actions/upload-artifact from 4.2.0 to 4.3.1d8daac9chore: bump actions/dependency-review-action from 3.1.5 to 4.0.091e5453chore: bump codecov/codecov-action from 3.1.4 to 3.1.5b91661fchore: bump github/codeql-action from 3.23.0 to 3.23.107c7f49chore: bump actions/upload-artifact from 4.0.0 to 4.2.00af3027chore: bump k8s.io/klog/v2 from 2.100.1 to 2.120.1 in /test/e2eprovider0a5d00echore: bump actions/checkout4fefeb8chore: bump actions/dependency-review-action from 3.1.3 to 3.1.5cc87fdcchore: bump ossf/scorecard-action from 2.2.0 to 2.3.13be4d17chore: bump actions/upload-artifact from 3.1.2 to 4.0.0903314fchore: update to go 1.21.6 in dockerb5f9ce6chore: bump google.golang.org/grpc in /test/e2eproviderf3c1bb8chore: bump github/codeql-action from 2.21.5 to 3.23.00117e89chore: bump step-security/harden-runner from 2.4.0 to 2.6.1abe4833chore: bump actions/dependency-review-action from 3.0.6 to 3.1.3c4b22ebchore: update to go 1.21.4 in docker7cdb803chore: update to go 1.215a184aechore: bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 in /test/e2eprovidera3fbe36chore: bump google.golang.org/grpc from 1.49.0 to 1.56.32a6ad3cchore: bump google.golang.org/grpc in /test/e2eprovider0de7b33chore: bump golang.org/x/net from 0.10.0 to 0.17.0 in /hack/tools41c8819chore: bump golang.org/x/net from 0.8.0 to 0.17.07cf7be9chore: bump golang.org/x/net from 0.8.0 to 0.17.0 in /test/e2eprovider9743144chore: bump actions/checkout from 3.5.3 to 4.0.0a4aa61dchore: bump github/codeql-action from 2.21.2 to 2.21.5dca6d3fchore: cleanup secretproviderclass statusda9fd72chore: bump github/codeql-action from 2.21.0 to 2.21.21b10489chore: bump k8s.io/code-generator from 0.27.3 to 0.27.4 in /hack/tools663d733chore: bump github/codeql-action from 2.20.4 to 2.21.0a4aea02chore: bump sigs.k8s.io/controller-tools in /hack/toolsdb8c839chore: bump github/codeql-action from 2.20.3 to 2.20.414952e6chore: bump github/codeql-action from 2.20.1 to 2.20.32403169chore: update debian-base to bookworm-v1.0.0ca06ac3chore: bump github/codeql-action from 2.20.0 to 2.20.119f5ce2chore: bump ossf/scorecard-action from 2.1.3 to 2.2.061e53b7chore: bump sigs.k8s.io/controller-tools in /hack/tools3e9a018chore: bump k8s.io/code-generator from 0.27.2 to 0.27.3 in /hack/tools47468b8chore: bump github.com/golangci/golangci-lint in /hack/tools0d6bd57chore: bump github/codeql-action from 2.3.6 to 2.20.0f87cf12chore: bump actions/dependency-review-action from 3.0.4 to 3.0.6fb2ff09chore: bump actions/checkout from 3.5.2 to 3.5.3d2ac05dchore: bump goreleaser/goreleaser-action from 4.2.0 to 4.3.049f966fchore: bump github/codeql-action from 2.3.3 to 2.3.66938b86chore: bump github.com/golangci/golangci-lint in /hack/toolsc8b330cchore: bump k8s.io/code-generator from 0.26.4 to 0.27.2 in /hack/tools6551fe2chore: bump k8s deps tov1.26.4(#1254)7b9e0f9chore: bump codecov/codecov-action from 3.1.3 to 3.1.4ceb7ec6chore: bump actions/setup-go from 4.0.0 to 4.0.17e5b5dcchore: bump golang from79ffe35to31a8f92in /test/e2eprovider73fd4ccchore: bump golang fromeaf1267to31a8f92in /docker26c8cd5chore: bump github/codeql-action from 2.3.2 to 2.3.3bc0fbbbchore: bump step-security/harden-runner from 2.3.1 to 2.4.0086c6b6chore: update node-driver-registrar:v2.8.0, livenessprobe:v2.10.0ace8c5achore: bump google.golang.org/grpc in /test/e2eprovidercb49b72chore: bump k8s.io/klog/v2 from 2.80.1 to 2.100.1 in /test/e2eproviderbeb650echore: bump golang from403f486to79ffe35in /docker7b4879fchore: bump monis.app/mlog from 0.0.2 to 0.0.4 in /test/e2eproviderca9178echore: bump golang from403f486to79ffe35in /test/e2eproviderb855553chore: bump codecov/codecov-action from 3.1.2 to 3.1.34f2eae2chore: bump github/codeql-action from 2.3.0 to 2.3.25743ab3chore: bump sigs.k8s.io/controller-tools in /hack/tools0b457dfchore: bump github/codeql-action from 2.2.12 to 2.3.00e85ac0chore: enable gocritic linter and fix errors1ef0c67chore: cleanup WritePayloads to be easier to use23b30d1chore: allow retries on pre-upgrade hook jobs7c7b3e5chore: bump actions/checkout from 3.5.0 to 3.5.2b8069f4chore: bump github/codeql-action from 2.2.11 to 2.2.12dc4bf06chore: update to go 1.208048905chore: bump trivy version to v0.39.1379a4a4chore: bump kind version to v0.18.0e582845chore: bump github/codeql-action from 2.2.9 to 2.2.117cce3bbchore: updates error messagecab63b3chore: remove unused node name in rotation reconciler957817echore: remove unused providerVolumePath code paths34afcefchore: bump actions/checkout from 3.4.0 to 3.5.076f266achore: bump github.com/golangci/golangci-lint in /hack/tools8b508b2chore: bump github/codeql-action from 2.2.7 to 2.2.9adba078chore: bump k8s.io/code-generator from 0.26.2 to 0.26.3 in /hack/toolsa556236chore: bump google.golang.org/protobuf in /hack/toolsfa40c79chore: update golangci-lint to v1.52.1ead9b01chore: bump github/codeql-action from 2.2.6 to 2.2.7b4e4c6achore: bump actions/checkout from 3.3.0 to 3.4.0f62667cchore: bump google.golang.org/protobuf in /hack/toolsba9625bchore: bump google.golang.org/protobuf in /hack/tools8d15bd1chore: bump github/codeql-action from 2.2.5 to 2.2.61367ef6chore: bump k8s.io/code-generator from 0.26.1 to 0.26.2 in /hack/tools9d23ab4chore: bump google.golang.org/grpc/cmd/protoc-gen-go-grpc in /hack/tools686b1dcchore: bump gaurav-nelson/github-action-markdown-link-checkc9e9052chore: bump github/codeql-action from 2.2.4 to 2.2.58da23b0chore: bump golang.org/x/net from 0.4.0 to 0.7.0f62048echore: bump golang.org/x/net from 0.4.0 to 0.7.0 in /hack/tools8bf3ceachore: bump golang.org/x/net from 0.4.0 to 0.7.0 in /test/e2eprovider37b523cchore: bump github/codeql-action from 2.2.2 to 2.2.47951913chore: use base and test image fromregistry.k8s.iobd9efb6chore: bump sigs.k8s.io/controller-tools in /hack/tools06130f8chore: bump github/codeql-action from 2.2.1 to 2.2.2bd549eachore: bump sigs.k8s.io/controller-tools in /hack/tools3042513chore: bump github/codeql-action from 2.1.39 to 2.2.1ebce4e4chore: bump goreleaser/goreleaser-action from 4.1.0 to 4.2.00a3fee2chore: bump k8s.io/code-generator from 0.26.0 to 0.26.1 in /hack/tools98ec718chore: bump github/codeql-action from 2.1.38 to 2.1.39143dc71chore: pin buildx tov0.10.6fe84ebcchore: bump github/codeql-action from 2.1.37 to 2.1.388979367chore: bump actions/checkout from 3.2.0 to 3.3.0c4229cbchore: update livenessprobe to v2.9.094fc545chore: update node-driver-registrar to v2.7.042e786echore: bump sigs.k8s.io/controller-tools in /hack/tools1b6d197chore: remove windows version 1903, 1909 and 2004 (EOL)93d0e05chore: bump goreleaser/goreleaser-action from 3.2.0 to 4.1.068c4a7achore: bump github/codeql-action from 2.1.36 to 2.1.37d2398b1chore: bump actions/checkout from 3.1.0 to 3.2.0df7c1a5chore: bump k8s.io/code-generator from 0.25.4 to 0.26.0 in /hack/toolsd772515](https://redirect.githuConfiguration
📅 Schedule: (in timezone America/Chicago)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.