From 91b6c64f1fd8e23bb2fd1af6c897f6dd340a331e Mon Sep 17 00:00:00 2001 From: Theron Voran Date: Wed, 3 Aug 2022 11:25:33 -0700 Subject: [PATCH] changelog++ and json schema update (#762) Changelog updates for #750, and json schema update. --- CHANGELOG.md | 2 ++ values.schema.json | 45 ++++++++++++++++++++++++++++++++++++--------- 2 files changed, 38 insertions(+), 9 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2dbcf4d..3aea880 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,10 +4,12 @@ CHANGES: * Start testing against Kubernetes 1.24. [GH-744](https://github.com/hashicorp/vault-helm/pull/744) * Deprecated `injector.externalVaultAddr`. Added `global.externalVaultAddr`, which applies to both the Injector and the CSI Provider. [GH-745](https://github.com/hashicorp/vault-helm/pull/745) * CSI Provider pods now set the `VAULT_ADDR` environment variable to either the internal Vault service or the configured external address. [GH-745](https://github.com/hashicorp/vault-helm/pull/745) +* Deprecated `injector.uid` and `injector.gid`. Replaced with `injector.securityContext.pod`. [GH-750](https://github.com/hashicorp/vault-helm/pull/750) Features: * Add `server.service.activeNodePort` and `server.service.standbyNodePort` to specify the `nodePort` for active and standby services. [GH-610](https://github.com/hashicorp/vault-helm/pull/610) * Support for setting annotations on the injector's serviceAccount [GH-753](https://github.com/hashicorp/vault-helm/pull/753) +* injector: Support setting both pod and container securityContext [GH-750](https://github.com/hashicorp/vault-helm/pull/750) ## 0.20.1 (May 25th, 2022) CHANGES: diff --git a/values.schema.json b/values.schema.json index 27e3d7b..96deb9a 100644 --- a/values.schema.json +++ b/values.schema.json @@ -36,9 +36,6 @@ } } }, - "priorityClassName": { - "type": "string" - }, "debug": { "type": "boolean" }, @@ -106,6 +103,9 @@ } } }, + "priorityClassName": { + "type": "string" + }, "readinessProbe": { "type": "object", "properties": { @@ -163,6 +163,9 @@ "enabled": { "type": "boolean" }, + "externalVaultAddr": { + "type": "string" + }, "imagePullSecrets": { "type": "array" }, @@ -185,9 +188,6 @@ }, "tlsDisable": { "type": "boolean" - }, - "externalVaultAddr": { - "type": "string" } } }, @@ -362,6 +362,17 @@ "revokeOnShutdown": { "type": "boolean" }, + "securityContext": { + "type": "object", + "properties": { + "container": { + "type": "object" + }, + "pod": { + "type": "object" + } + } + }, "service": { "type": "object", "properties": { @@ -592,6 +603,12 @@ "string" ] }, + "clusterAddr": { + "type": [ + "null", + "string" + ] + }, "config": { "type": [ "string", @@ -802,6 +819,9 @@ }, "labels": { "type": "object" + }, + "tls": { + "type": "object" } } }, @@ -817,15 +837,15 @@ "enabled": { "type": "boolean" }, - "publishNotReadyAddresses": { - "type": "boolean" - }, "externalTrafficPolicy": { "type": "string" }, "port": { "type": "integer" }, + "publishNotReadyAddresses": { + "type": "boolean" + }, "targetPort": { "type": "integer" }, @@ -898,6 +918,13 @@ "string" ] }, + "topologySpreadConstraints": { + "type": [ + "null", + "array", + "string" + ] + }, "updateStrategyType": { "type": "string" },