search

Azure / AKS

Azure Kubernetes Service
https://azure.github.io/AKS/
1.95k stars 305 forks source link

[Feature] Upgrade azurefile-csi-driver to v1.30.4 for Kubernetes versions 1.28.9+ #4448

Closed MikeKlebolt closed 7 hours ago

MikeKlebolt commented 1 month ago

Is your feature request related to a problem? Please describe.

Yes. We have an upcoming deadline that requires us to enable FIPS as well as set allowSharedKeyAccess to false on our storage accounts. The allowSharedKeyAccess parameter was introduced to the azurefile-csi-driver in v1.30.4. We need this version added to AKS K8S version 1.28.9+.

To comply with FIPS, which requires NFS instead of SMB, setting the allowSharedKeyAccess parameter to false in the CSI file driver parameters (default is true) will greatly improve the security of the storage account.

Describe the solution you'd like

Please upgrade azurefile-csi-driver to v1.30.4 for Kubernetes versions 1.28.9+, OR add an option to specify the version of the CSI driver you'd like to deploy.

Describe alternatives you've considered

Disabling the csi file driver deployed with AKS and deploy it from a helm chart instead. This would very likely break all workloads that are already using the driver.

Additional context

andyzhangx commented 1 month ago

we will publish azure file csi driver v1.29.7 on aks 1.28 to support allowSharedKeyAccess parameter

andyzhangx commented 7 hours ago

the version upgrade has been done in aks rp 0827 release