Skip to content
This repository has been archived by the owner on Oct 12, 2023. It is now read-only.

Commit

Permalink
release: update manifest and helm charts for v1.8.9 (#1281)
Browse files Browse the repository at this point in the history
  • Loading branch information
Ernest Wong authored May 19, 2022
1 parent e67cc33 commit 1113779
Show file tree
Hide file tree
Showing 26 changed files with 75 additions and 60 deletions.
3 changes: 2 additions & 1 deletion Dockerfile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,8 @@ RUN export GOOS=$TARGETOS && \
FROM k8s.gcr.io/build-image/debian-iptables:bullseye-v1.3.0 AS nmi
# upgrading zlib1g due to CVE-2018-25032
# upgrading gzip and liblzma5 due to CVE-2022-1271
RUN clean-install ca-certificates zlib1g gzip liblzma5
# upgrading libssl1.1 due to CVE-2022-1292
RUN clean-install ca-certificates zlib1g gzip liblzma5 libssl1.1
COPY --from=builder /go/src/github.com/Azure/aad-pod-identity/bin/aad-pod-identity/nmi /bin/
RUN useradd -u 10001 nonroot
USER nonroot
Expand Down
Binary file added charts/aad-pod-identity-4.1.10.tgz
View file
Binary file not shown.
4 changes: 2 additions & 2 deletions charts/aad-pod-identity/Chart.yaml
View file
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
apiVersion: v2
description: Deploy components for aad-pod-identity
name: aad-pod-identity
version: 4.1.9
appVersion: 1.8.8
version: 4.1.10
appVersion: 1.8.9
home: https://github.com/Azure/aad-pod-identity
sources:
- https://github.com/Azure/aad-pod-identity
Expand Down
15 changes: 4 additions & 11 deletions charts/aad-pod-identity/README.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -15,15 +15,6 @@ helm install aad-pod-identity aad-pod-identity/aad-pod-identity

| Helm Chart Version | AAD Pod Identity Version | Compatible with Helm 2 |
| ------------------ | ------------------------ | ---------------------- |
| `1.5.2` | `1.5.2` | ✔️ |
| `1.5.3` | `1.5.3` | ✔️ |
| `1.5.4` | `1.5.4` | ✔️ |
| `1.5.5` | `1.5.5` | ✔️ |
| `1.5.6` | `1.5.5` | ✔️ |
| `1.6.0` | `1.6.0` | ✔️ |
| `2.0.0` | `1.6.1` | ✔️ |
| `2.0.1` | `1.6.2` | ✔️ |
| `2.0.2` | `1.6.3` | ✔️ |
| `2.1.0` | `1.7.0` | ✔️ |
| `3.0.0` | `1.7.1` | ✔️ |
| `3.0.1` | `1.7.2` | ✔️ |
Expand All @@ -39,6 +30,8 @@ helm install aad-pod-identity aad-pod-identity/aad-pod-identity
| `4.1.6` | `1.8.5` | ✕ |
| `4.1.7` | `1.8.6` | ✕ |
| `4.1.8` | `1.8.7` | ✕ |
| `4.1.9` | `1.8.8` | ✕ |
| `4.1.10` | `1.8.9` | ✕ |

## Introduction

Expand Down Expand Up @@ -259,7 +252,7 @@ The following tables list the configurable parameters of the aad-pod-identity ch
| `adminsecret.useMSI` | Set to `true` when using a user managed identity | ` ` |
| `adminsecret.userAssignedMSIClientID` | Azure user managed identity client ID | ` ` |
| `mic.image` | MIC image name | `mic` |
| `mic.tag` | MIC image tag | `v1.8.8` |
| `mic.tag` | MIC image tag | `v1.8.9` |
| `mic.priorityClassName` | MIC priority class (can only be set when deploying to kube-system namespace) | |
| `mic.logVerbosity` | Log level. Uses V logs (klog) | `0` |
| `mic.loggingFormat` | Log format. One of (text \| json) | `text` |
Expand All @@ -285,7 +278,7 @@ The following tables list the configurable parameters of the aad-pod-identity ch
| `mic.updateUserMSIRetryInterval` | The duration to wait before retrying UpdateUserMSI (batch assigning/un-assigning identity from VM/VMSS) in case of errors | If not provided, default value is `1s` |
| `mic.identityAssignmentReconcileInterval` | The interval between reconciling identity assignment on Azure based on an existing list of AzureAssignedIdentities | If not provided, default value is `3m` |
| `nmi.image` | NMI image name | `nmi` |
| `nmi.tag` | NMI image tag | `v1.8.8` |
| `nmi.tag` | NMI image tag | `v1.8.9` |
| `nmi.priorityClassName` | NMI priority class (can only be set when deploying to kube-system namespace) | |
| `nmi.logVerbosity` | Log level. Uses V logs (klog) | `0` |
| `nmi.loggingFormat` | Log format. One of (text \| json) | `text` |
Expand Down
4 changes: 2 additions & 2 deletions charts/aad-pod-identity/values.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@ operationMode: "standard"

mic:
image: mic
tag: v1.8.8
tag: v1.8.9

# ref: https://kubernetes.io/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical
priorityClassName: ""
Expand Down Expand Up @@ -163,7 +163,7 @@ mic:

nmi:
image: nmi
tag: v1.8.8
tag: v1.8.9

# ref: https://kubernetes.io/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical
priorityClassName: ""
Expand Down
17 changes: 16 additions & 1 deletion charts/index.yaml
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,21 @@
apiVersion: v1
entries:
aad-pod-identity:
- apiVersion: v2
appVersion: 1.8.9
created: "2022-05-17T09:22:37.183811-07:00"
description: Deploy components for aad-pod-identity
digest: f1b7c28c8f39bc63efe97549cfaa0a99b18cb52a7e6ae5a9cde91ba602f15ccc
home: https://github.com/Azure/aad-pod-identity
maintainers:
- email: anish.ramasekar@gmail.com
name: aramase
name: aad-pod-identity
sources:
- https://github.com/Azure/aad-pod-identity
urls:
- https://raw.githubusercontent.com/Azure/aad-pod-identity/master/charts/aad-pod-identity-4.1.10.tgz
version: 4.1.10
- apiVersion: v2
appVersion: 1.8.8
created: "2022-03-31T18:37:48.296961013Z"
Expand Down Expand Up @@ -376,4 +391,4 @@ entries:
urls:
- https://raw.githubusercontent.com/Azure/aad-pod-identity/master/charts/aad-pod-identity-1.5.2.tgz
version: 1.5.2
generated: "2022-03-31T18:37:48.295446527Z"
generated: "2022-05-17T09:22:37.181097-07:00"
2 changes: 1 addition & 1 deletion deploy/demo/deployment.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ spec:
spec:
containers:
- name: demo
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/demo:v1.8.8"
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/demo:v1.8.9"
args:
- "--subscription-id=SUBSCRIPTION_ID"
- "--identity-client-id=CLIENT_ID"
Expand Down
4 changes: 2 additions & 2 deletions deploy/infra/deployment-rbac.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -475,7 +475,7 @@ spec:
type: FileOrCreate
containers:
- name: nmi
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.8"
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.9"
args:
- "--node=$(NODE_NAME)"
- "--http-probe-port=8085"
Expand Down Expand Up @@ -595,7 +595,7 @@ spec:
serviceAccountName: aad-pod-id-mic-service-account
containers:
- name: mic
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.8"
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.9"
args:
- "--cloudconfig=/etc/kubernetes/azure.json"
- "--logtostderr"
Expand Down
4 changes: 2 additions & 2 deletions deploy/infra/deployment.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -431,7 +431,7 @@ spec:
type: FileOrCreate
containers:
- name: nmi
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.8"
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.9"
args:
- "--node=$(NODE_NAME)"
- "--http-probe-port=8085"
Expand Down Expand Up @@ -496,7 +496,7 @@ spec:
spec:
containers:
- name: mic
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.8"
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.9"
args:
- "--kubeconfig=/var/lib/kubelet/kubeconfig"
- "--cloudconfig=/etc/kubernetes/azure.json"
Expand Down
2 changes: 1 addition & 1 deletion deploy/infra/managed-mode-deployment.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -306,7 +306,7 @@ spec:
type: FileOrCreate
containers:
- name: nmi
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.8"
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.9"
args:
- "--node=$(NODE_NAME)"
- "--operation-mode=managed"
Expand Down
4 changes: 2 additions & 2 deletions deploy/infra/noazurejson/deployment-rbac.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -473,7 +473,7 @@ spec:
type: FileOrCreate
containers:
- name: nmi
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.8"
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.9"
args:
- "--node=$(NODE_NAME)"
- "--http-probe-port=8085"
Expand Down Expand Up @@ -605,7 +605,7 @@ spec:
serviceAccountName: aad-pod-id-mic-service-account
containers:
- name: mic
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.8"
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.9"
args:
- "--logtostderr"
securityContext:
Expand Down
4 changes: 2 additions & 2 deletions deploy/infra/noazurejson/deployment.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -429,7 +429,7 @@ spec:
type: FileOrCreate
containers:
- name: nmi
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.8"
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.9"
args:
- "--node=$(NODE_NAME)"
- "--http-probe-port=8085"
Expand Down Expand Up @@ -508,7 +508,7 @@ spec:
spec:
containers:
- name: mic
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.8"
image: "mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.9"
args:
- "--kubeconfig=/var/lib/kubelet/kubeconfig"
- "--logtostderr"
Expand Down
4 changes: 2 additions & 2 deletions manifest_staging/charts/aad-pod-identity/Chart.yaml
View file
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
apiVersion: v2
description: Deploy components for aad-pod-identity
name: aad-pod-identity
version: 4.1.9
appVersion: 1.8.8
version: 4.1.10
appVersion: 1.8.9
home: https://github.com/Azure/aad-pod-identity
sources:
- https://github.com/Azure/aad-pod-identity
Expand Down
Loading

0 comments on commit 1113779

Please sign in to comment.