hashicorp / vault-helm

Helm chart to install Vault and other associated components.

Mozilla Public License 2.0

1.08k stars 873 forks source link

Prepare for 0.25.0 release #916

Closed tomhjp closed 1 year ago

tomhjp commented 1 year ago

0.25.0 (June 26, 2023)

Changes

Latest Kubernetes version tested is now 1.27
server: Headless service ignores server.service.publishNotReadyAddresses setting and always sets it as true GH-902
vault updated to 1.14.0 GH-916
vault-csi-provider updated to 1.4.0 GH-916

Improvements

CSI: Make nodeSelector and affinity configurable for CSI daemonset's pods GH-862
injector: Add ephemeralLimit and ephemeralRequest as options for configuring Agent's ephemeral storage resources GH-798
Minimum kubernetes version for chart reverted to 1.20.0 to allow installation on clusters older than the oldest tested version GH-916

Bugs

server: Set the default for prometheusRules.rules to an empty list GH-886

Closes #913 #915

tomhjp commented 1 year ago

Upgrading CSI to 1.4.0 required a small test assertion update. From the commit message:

Starting in 1.4.0, the CSI provider caches Vault tokens locally. The main thing we want to check is that the Agent cache is being used so that it's doing the renewal legwork for any leased secrets, so check for the renewal log message instead because CSI won't auth over and over anymore.

tomhjp commented 1 year ago

The chart-verifier failures are because 1.14.0-ubi hasn't appeared on the RedHat registry yet: https://catalog.redhat.com/software/containers/hashicorp/vault/5fda55bd2937386820429e0c