Refresh CSI drivers - FUSE 1.2.12 and NFS 1.0.12

* CSI-297 : Update helm-operator to 1.34 image (CVEs addressed) * CSI-299: Do not create mountPrefix directory if it doesn't exist on MapR-FS * CVE-2024-24790: Update golang to 1.23.1 & update sidecar containers to latest versions * EZAF-6755: Add check to verify if the mount is accessible to the existing check of mount availability * CSI-302: Handle failure to expand volume on controller/provisioner pod restart by quering kube-apiserver & more
mapr · Oct 7, 2024 · 02f8eda · 02f8eda
1 parent bcb0501
commit 02f8eda
Show file tree

Hide file tree

Showing 18 changed files with 1,063 additions and 27 deletions.
diff --git a/deploy/kubernetes/fuse/csi-maprkdf-v1.2.12.yaml b/deploy/kubernetes/fuse/csi-maprkdf-v1.2.12.yaml
diff --git a/deploy/kubernetes/nfs/csi-maprnfskdf-v1.0.12.yaml b/deploy/kubernetes/nfs/csi-maprnfskdf-v1.0.12.yaml
diff --git a/docs/hpe-ezmeral-csi-driver-1.2.12.tgz b/docs/hpe-ezmeral-csi-driver-1.2.12.tgz
diff --git a/docs/hpe-ezmeral-nfs-csi-driver-1.0.12.tgz b/docs/hpe-ezmeral-nfs-csi-driver-1.0.12.tgz
diff --git a/docs/index.yaml b/docs/index.yaml
@@ -1,6 +1,29 @@
 apiVersion: v1
 entries:
   hpe-ezmeral-csi-driver:
+  - apiVersion: v1
+    appVersion: 1.2.12
+    created: "2024-10-07T03:48:21.230073495-07:00"
+    description: A Helm chart for installing the HPE Ezmeral Data Fabric CSI Driver
+      (FUSE) for Kubernetes
+    digest: 32ca4d564426675e2a4df6501e91e93c7debc32bb8b8165ff64b3c5867c4708a
+    home: https://www.hpe.com/us/en/software/data-fabric.html
+    icon: https://raw.githubusercontent.com/mapr/mapr-csi/master/docs/assets/hpe_ezmeral.png
+    keywords:
+    - HPE
+    - EzmeralDataFabric
+    - FileSystemVolume
+    - BlockVolume
+    - Fuse
+    maintainers:
+    - email: [email protected]
+      name: HPE Ezmeral Data Fabric
+    name: hpe-ezmeral-csi-driver
+    sources:
+    - https://docs.datafabric.hpe.com/home/CSIdriver/csi_overview.html
+    urls:
+    - hpe-ezmeral-csi-driver-1.2.12.tgz
+    version: 1.2.12
   - apiVersion: v1
     appVersion: 1.2.11
     created: "2024-07-30T00:26:52.201764016-07:00"
@@ -278,6 +301,29 @@ entries:
     - hpe-ezmeral-csi-driver-1.2.0.tgz
     version: 1.2.0
   hpe-ezmeral-nfs-csi-driver:
+  - apiVersion: v1
+    appVersion: 1.0.12
+    created: "2024-10-07T03:48:23.630084651-07:00"
+    description: A Helm chart for installing the HPE Ezmeral Data Fabric CSI Driver
+      (NFS) for Kubernetes
+    digest: 44c3432956a7ef9b033f2fa959dd6b522b3ff3e126dd66c88e810ff7922de05b
+    home: https://www.hpe.com/us/en/software/data-fabric.html
+    icon: https://raw.githubusercontent.com/mapr/mapr-csi/master/docs/assets/hpe_ezmeral.png
+    keywords:
+    - HPE
+    - EzmeralDataFabric
+    - FileSystemVolume
+    - BlockVolume
+    - LoopbackNFS
+    maintainers:
+    - email: [email protected]
+      name: HPE Ezmeral Data Fabric
+    name: hpe-ezmeral-nfs-csi-driver
+    sources:
+    - https://docs.datafabric.hpe.com/home/CSIdriver/csi_overview.html
+    urls:
+    - hpe-ezmeral-nfs-csi-driver-1.0.12.tgz
+    version: 1.0.12
   - apiVersion: v1
     appVersion: 1.0.11
     created: "2024-07-30T00:26:53.962660303-07:00"
@@ -554,4 +600,4 @@ entries:
     urls:
     - hpe-ezmeral-nfs-csi-driver-1.0.0.tgz
     version: 1.0.0
-generated: "2024-07-30T00:26:53.961163144-07:00"
+generated: "2024-10-07T03:48:23.629266344-07:00"
diff --git a/helm/charts/hpe-ezmeral-csi-driver/Chart.yaml b/helm/charts/hpe-ezmeral-csi-driver/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v1
-appVersion: 1.2.11
+appVersion: 1.2.12
 description: A Helm chart for installing the HPE Ezmeral Data Fabric CSI Driver (FUSE) for Kubernetes
 home: https://www.hpe.com/us/en/software/data-fabric.html
 icon: https://raw.githubusercontent.com/mapr/mapr-csi/master/docs/assets/hpe_ezmeral.png
@@ -15,4 +15,4 @@ maintainers:
 name: hpe-ezmeral-csi-driver
 sources:
 - https://docs.datafabric.hpe.com/home/CSIdriver/csi_overview.html
-version: 1.2.11
+version: 1.2.12
diff --git a/helm/charts/hpe-ezmeral-csi-driver/templates/csi-controller.yaml b/helm/charts/hpe-ezmeral-csi-driver/templates/csi-controller.yaml
@@ -22,7 +22,7 @@ spec:
         - name: csi-attacher
           securityContext:
             privileged: true
-          image: registry.k8s.io/sig-storage/csi-attacher:v4.5.1
+          image: registry.k8s.io/sig-storage/csi-attacher:v4.7.0
           args:
             - "--v=5"
             - "--csi-address=$(ADDRESS)"
@@ -35,7 +35,7 @@ spec:
               mountPath: /var/lib/csi/sockets/pluginproxy/
         - name: csi-provisioner
           {{- if and (eq .Capabilities.KubeVersion.Major "1") ( ge  ( trimSuffix "+" .Capabilities.KubeVersion.Minor ) "20") }}
-          image: registry.k8s.io/sig-storage/csi-provisioner:v4.0.1
+          image: registry.k8s.io/sig-storage/csi-provisioner:v5.1.0
           args:
           {{- else }}
           image: registry.k8s.io/sig-storage/csi-provisioner:v1.6.0
@@ -57,7 +57,7 @@ spec:
         {{- if and (eq .Capabilities.KubeVersion.Major "1") ( ge  ( trimSuffix "+" .Capabilities.KubeVersion.Minor ) "17") }}
         - name: csi-snapshotter
           {{- if and (eq .Capabilities.KubeVersion.Major "1") ( ge  ( trimSuffix "+" .Capabilities.KubeVersion.Minor ) "20") }}
-          image: registry.k8s.io/sig-storage/csi-snapshotter:v7.0.2
+          image: registry.k8s.io/sig-storage/csi-snapshotter:v8.1.0
           {{- else }}
           image: registry.k8s.io/sig-storage/csi-snapshotter:v3.0.2
           {{- end }}
@@ -75,7 +75,7 @@ spec:
               mountPath: /var/lib/csi/sockets/pluginproxy/
         - name: csi-snapshot-controller
           {{- if and (eq .Capabilities.KubeVersion.Major "1") ( ge  ( trimSuffix "+" .Capabilities.KubeVersion.Minor ) "20") }} 
-          image: registry.k8s.io/sig-storage/snapshot-controller:v7.0.2
+          image: registry.k8s.io/sig-storage/snapshot-controller:v8.1.0
           {{- else }}
           image: registry.k8s.io/sig-storage/snapshot-controller:v3.0.2
           {{- end }}
@@ -106,7 +106,7 @@ spec:
               mountPath: /var/lib/csi/sockets/pluginproxy/
         {{- end }}
         - name: liveness-probe
-          image: registry.k8s.io/sig-storage/livenessprobe:v2.12.0
+          image: registry.k8s.io/sig-storage/livenessprobe:v2.14.0
           imagePullPolicy: "Always"
           args:
             - "--v=4"
@@ -121,7 +121,7 @@ spec:
               mountPath: /var/lib/csi/sockets/pluginproxy/
         {{- if and (eq .Capabilities.KubeVersion.Major "1") ( ge  ( trimSuffix "+" .Capabilities.KubeVersion.Minor ) "16") }}
         - name: csi-resizer
-          image: registry.k8s.io/sig-storage/csi-resizer:v1.10.1
+          image: registry.k8s.io/sig-storage/csi-resizer:v1.12.0
           imagePullPolicy: "Always"
           args:
             - "--v=5"

diff --git a/helm/charts/hpe-ezmeral-csi-driver/templates/csi-node.yaml b/helm/charts/hpe-ezmeral-csi-driver/templates/csi-node.yaml
@@ -22,7 +22,7 @@ spec:
         - name: csi-node-driver-registrar
           securityContext:
             privileged: true
-          image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1
+          image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.12.0
           imagePullPolicy: "Always"
           args:
             - "--v=5"
@@ -47,7 +47,7 @@ spec:
         - name: liveness-probe
           securityContext:
             privileged: true
-          image: registry.k8s.io/sig-storage/livenessprobe:v2.12.0
+          image: registry.k8s.io/sig-storage/livenessprobe:v2.14.0
           imagePullPolicy: "Always"
           args:
             - "--v=4"
@@ -73,6 +73,7 @@ spec:
             - "--endpoint=$(CSI_ENDPOINT)"
             - "--maxvolumepernode=100"
             - "--maxlogsizemb=10"
+            - "--createmountprefix=false"
             - "--v=4"
           env:
             - name: NODE_ID

diff --git a/helm/charts/hpe-ezmeral-csi-driver/values.yaml b/helm/charts/hpe-ezmeral-csi-driver/values.yaml
@@ -4,5 +4,5 @@
 
 pullPolicy: IfNotPresent
 
-nodeImage: docker.io/maprtech/csi-kdfplugin:1.2.10
-controllerImage: docker.io/maprtech/csi-kdfprovisioner:1.2.8
+nodeImage: docker.io/maprtech/csi-kdfplugin:1.2.11
+controllerImage: docker.io/maprtech/csi-kdfprovisioner:1.2.9
diff --git a/helm/charts/hpe-ezmeral-nfs-csi-driver/Chart.yaml b/helm/charts/hpe-ezmeral-nfs-csi-driver/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v1
-appVersion: 1.0.11
+appVersion: 1.0.12
 description: A Helm chart for installing the HPE Ezmeral Data Fabric CSI Driver (NFS) for Kubernetes
 home: https://www.hpe.com/us/en/software/data-fabric.html
 icon: https://raw.githubusercontent.com/mapr/mapr-csi/master/docs/assets/hpe_ezmeral.png
@@ -15,4 +15,4 @@ maintainers:
 name: hpe-ezmeral-nfs-csi-driver
 sources:
 - https://docs.datafabric.hpe.com/home/CSIdriver/csi_overview.html
-version: 1.0.11
+version: 1.0.12
diff --git a/helm/charts/hpe-ezmeral-nfs-csi-driver/templates/csi-controller.yaml b/helm/charts/hpe-ezmeral-nfs-csi-driver/templates/csi-controller.yaml
@@ -22,7 +22,7 @@ spec:
         - name: csi-attacher
           securityContext:
             privileged: true
-          image: registry.k8s.io/sig-storage/csi-attacher:v4.5.1
+          image: registry.k8s.io/sig-storage/csi-attacher:v4.7.0
           args:
             - "--v=5"
             - "--csi-address=$(ADDRESS)"
@@ -35,7 +35,7 @@ spec:
               mountPath: /var/lib/csi/sockets/pluginproxy/
         - name: csi-provisioner
           {{- if and (eq .Capabilities.KubeVersion.Major "1") ( ge  ( trimSuffix "+" .Capabilities.KubeVersion.Minor ) "20") }}
-          image: registry.k8s.io/sig-storage/csi-provisioner:v4.0.1
+          image: registry.k8s.io/sig-storage/csi-provisioner:v5.1.0
           args:
           {{- else }}
           image: registry.k8s.io/sig-storage/csi-provisioner:v1.6.0
@@ -57,7 +57,7 @@ spec:
         {{- if and (eq .Capabilities.KubeVersion.Major "1") ( ge  ( trimSuffix "+" .Capabilities.KubeVersion.Minor ) "17") }}
         - name: csi-snapshotter
           {{- if and (eq .Capabilities.KubeVersion.Major "1") ( ge  ( trimSuffix "+" .Capabilities.KubeVersion.Minor ) "20") }}
-          image: registry.k8s.io/sig-storage/csi-snapshotter:v7.0.2
+          image: registry.k8s.io/sig-storage/csi-snapshotter:v8.1.0
           {{- else }}
           image: registry.k8s.io/sig-storage/csi-snapshotter:v3.0.2
           {{- end }}
@@ -75,7 +75,7 @@ spec:
               mountPath: /var/lib/csi/sockets/pluginproxy/
         - name: csi-snapshot-controller
           {{- if and (eq .Capabilities.KubeVersion.Major "1") ( ge  ( trimSuffix "+" .Capabilities.KubeVersion.Minor ) "20") }} 
-          image: registry.k8s.io/sig-storage/snapshot-controller:v7.0.2
+          image: registry.k8s.io/sig-storage/snapshot-controller:v8.1.0
           {{- else }}
           image: registry.k8s.io/sig-storage/snapshot-controller:v3.0.2
           {{- end }}
@@ -106,7 +106,7 @@ spec:
               mountPath: /var/lib/csi/sockets/pluginproxy/
         {{- end }}
         - name: liveness-probe
-          image: registry.k8s.io/sig-storage/livenessprobe:v2.12.0
+          image: registry.k8s.io/sig-storage/livenessprobe:v2.14.0
           imagePullPolicy: "Always"
           args:
             - "--v=4"
@@ -121,7 +121,7 @@ spec:
               mountPath: /var/lib/csi/sockets/pluginproxy/
         {{- if and (eq .Capabilities.KubeVersion.Major "1") ( ge  ( trimSuffix "+" .Capabilities.KubeVersion.Minor ) "16") }}
         - name: csi-resizer
-          image: registry.k8s.io/sig-storage/csi-resizer:v1.10.1
+          image: registry.k8s.io/sig-storage/csi-resizer:v1.12.0
           imagePullPolicy: "Always"
           args:
             - "--v=5"

diff --git a/helm/charts/hpe-ezmeral-nfs-csi-driver/templates/csi-node.yaml b/helm/charts/hpe-ezmeral-nfs-csi-driver/templates/csi-node.yaml
@@ -22,7 +22,7 @@ spec:
         - name: csi-node-driver-registrar
           securityContext:
             privileged: true
-          image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1
+          image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.12.0
           imagePullPolicy: "Always"
           args:
             - "--v=5"
@@ -47,7 +47,7 @@ spec:
         - name: liveness-probe
           securityContext:
             privileged: true
-          image: registry.k8s.io/sig-storage/livenessprobe:v2.12.0
+          image: registry.k8s.io/sig-storage/livenessprobe:v2.14.0
           imagePullPolicy: "Always"
           args:
             - "--v=4"
@@ -73,6 +73,7 @@ spec:
             - "--endpoint=$(CSI_ENDPOINT)"
             - "--maxvolumepernode=100"
             - "--maxlogsizemb=10"
+            - "--createmountprefix=false"
             - "--v=4"
           env:
             - name: NODE_ID

diff --git a/helm/charts/hpe-ezmeral-nfs-csi-driver/values.yaml b/helm/charts/hpe-ezmeral-nfs-csi-driver/values.yaml
@@ -4,5 +4,5 @@
 
 pullPolicy: IfNotPresent
 
-nodeImage: docker.io/maprtech/csi-nfsplugin:1.0.10
-controllerImage: docker.io/maprtech/csi-kdfprovisioner:1.2.8
+nodeImage: docker.io/maprtech/csi-nfsplugin:1.0.11
+controllerImage: docker.io/maprtech/csi-kdfprovisioner:1.2.9
diff --git a/helm/values/hpe-ezmeral-csi-driver/v1.2.11/values.yaml b/helm/values/hpe-ezmeral-csi-driver/v1.2.11/values.yaml
@@ -0,0 +1,8 @@
+# Default values for hpe-ezmeral-csi-driver.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+pullPolicy: IfNotPresent
+
+nodeImage: docker.io/maprtech/csi-kdfplugin:1.2.10
+controllerImage: docker.io/maprtech/csi-kdfprovisioner:1.2.8
diff --git a/helm/values/hpe-ezmeral-csi-driver/v1.2.12/values.yaml b/helm/values/hpe-ezmeral-csi-driver/v1.2.12/values.yaml
@@ -0,0 +1,8 @@
+# Default values for hpe-ezmeral-csi-driver.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+pullPolicy: IfNotPresent
+
+nodeImage: docker.io/maprtech/csi-kdfplugin:1.2.11
+controllerImage: docker.io/maprtech/csi-kdfprovisioner:1.2.9
diff --git a/helm/values/hpe-ezmeral-nfs-csi-driver/v1.0.11/values.yaml b/helm/values/hpe-ezmeral-nfs-csi-driver/v1.0.11/values.yaml
@@ -0,0 +1,8 @@
+# Default values for hpe-ezmeral-nfs-csi-driver.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+pullPolicy: IfNotPresent
+
+nodeImage: docker.io/maprtech/csi-nfsplugin:1.0.10
+controllerImage: docker.io/maprtech/csi-kdfprovisioner:1.2.8
diff --git a/helm/values/hpe-ezmeral-nfs-csi-driver/v1.0.12/values.yaml b/helm/values/hpe-ezmeral-nfs-csi-driver/v1.0.12/values.yaml
@@ -0,0 +1,8 @@
+# Default values for hpe-ezmeral-nfs-csi-driver.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+pullPolicy: IfNotPresent
+
+nodeImage: docker.io/maprtech/csi-nfsplugin:1.0.11
+controllerImage: docker.io/maprtech/csi-kdfprovisioner:1.2.9
diff --git a/operator/hpe-ezmeral-csi-operator/Dockerfile b/operator/hpe-ezmeral-csi-operator/Dockerfile
@@ -1,9 +1,9 @@
-FROM quay.io/operator-framework/helm-operator:v1.26.0
+FROM quay.io/operator-framework/helm-operator:v1.34
 
 LABEL name="HPE Ezmeral CSI Operator" \
       maintainer="HPE Ezmeral Data Fabric" \
       vendor="HPE" \
-      version="1.0.15" \
+      version="1.0.16" \
       release="1.0" \
       summary="HPE Ezmeral CSI Operator" \
       description="HPE Ezmeral Data Fabric CSI Operator for Kubernetes" \