secrets-store-csi-driver
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
Compare:
1
linux:
2
enabled: true
3
image:
4
repository: chainreg.biz/chainguard-private/secrets-store-csi-driver-fips
5
tag: 1.6.1-r2@sha256:64768f3d33859998bbc5e4de88b5f1c1d58950f0307251db339608028e3486ad
6
#digest: sha256:
7
pullPolicy: IfNotPresent
8
crds:
9
enabled: true
10
image:
11
repository: chainreg.biz/chainguard-private/secrets-store-csi-driver-crds-fips
12
tag: 1.6.1-r1@sha256:92a177e22c15c5c81835878b73b6ed195bb87444f095a3beb7c3b990a44dbdb1
13
pullPolicy: IfNotPresent
14
## Optionally override resource limits for crd hooks(jobs)
15
resources: {}
16
# requests:
17
# cpu: "100m"
18
# memory: "128Mi"
19
# limits:
20
# cpu: "500m"
21
# memory: "512Mi"
22
annotations: {}
23
podLabels: {}
24
## Prevent the CSI driver from being scheduled on virtual-kubelet nodes
25
affinity:
26
nodeAffinity:
27
requiredDuringSchedulingIgnoredDuringExecution:
28
nodeSelectorTerms:
29
- matchExpressions:
30
- key: type
31
operator: NotIn
32
values:
33
- virtual-kubelet
34
driver:
35
resources:
36
limits:
37
cpu: 200m
38
memory: 200Mi
39
requests:
40
cpu: 50m
41
memory: 100Mi
42
registrarImage:
43
repository: chainreg.biz/chainguard-private/kubernetes-csi-node-driver-registrar-fips
44
tag: 2.18.0-r1@sha256:f97eb27765546ba876e7fe7857c9db1fc578a5387d5465f23cdc0ed63c09d6cb
45
#digest: sha256:
46
pullPolicy: IfNotPresent
47
registrar:
48
resources:
49
limits:
50
cpu: 100m
51
memory: 100Mi
52
requests:
53
cpu: 10m
54
memory: 20Mi
55
logVerbosity: 5
56
livenessProbeImage:
57
repository: chainreg.biz/chainguard-private/kubernetes-csi-livenessprobe-fips
58
tag: 2.20.0-r2@sha256:3e733acf12ac87101f24369a93d2c1c01dfc83474b51c8f379ae3a9364ddbfbf
59
#digest: sha256:
60
pullPolicy: IfNotPresent
61
livenessProbe:
62
resources:
63
limits:
64
cpu: 100m
65
memory: 100Mi
66
requests:
67
cpu: 10m
68
memory: 20Mi
69
updateStrategy:
70
type: RollingUpdate
71
rollingUpdate:
72
maxUnavailable: 1
73
kubeletRootDir: /var/lib/kubelet
74
providersDir: /var/run/secrets-store-csi-providers
75
additionalProvidersDirs:
76
- /etc/kubernetes/secrets-store-csi-providers
77
nodeSelector: {}
78
# ref: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
79
# An empty key with operator Exists matches all keys, values and effects which means this will tolerate everything.
80
tolerations:
81
- operator: "Exists"
82
metricsAddr: ":8095"
83
env: []
84
priorityClassName: ""
85
daemonsetAnnotations: {}
86
podAnnotations: {}
87
podLabels: {}
88
# volumes is a list of volumes made available to secrets store csi driver.
89
volumes: null
90
# - name: foo
91
# emptyDir: {}
92
93
# volumeMounts is a list of volumeMounts for secrets store csi driver.
94
volumeMounts: null
95
# - name: foo
96
# mountPath: /bar
97
# readOnly: true
98
windows:
99
enabled: false
100
image:
101
repository: registry.k8s.io/csi-secrets-store/driver
102
tag: v1.6.1
103
#digest: sha256:
104
pullPolicy: IfNotPresent
105
## Prevent the CSI driver from being scheduled on virtual-kubelet nodes
106
affinity:
107
nodeAffinity:
108
requiredDuringSchedulingIgnoredDuringExecution:
109
nodeSelectorTerms:
110
- matchExpressions:
111
- key: type
112
operator: NotIn
113
values:
114
- virtual-kubelet
115
driver:
116
resources:
117
limits:
118
cpu: 400m
119
memory: 400Mi
120
requests:
121
cpu: 100m
122
memory: 100Mi
123
registrarImage:
124
repository: registry.k8s.io/sig-storage/csi-node-driver-registrar
125
tag: v2.16.0
126
#digest: sha256:
127
pullPolicy: IfNotPresent
128
registrar:
129
resources:
130
limits:
131
cpu: 200m
132
memory: 200Mi
133
requests:
134
cpu: 100m
135
memory: 100Mi
136
logVerbosity: 5
137
livenessProbeImage:
138
repository: registry.k8s.io/sig-storage/livenessprobe
139
tag: v2.18.0
140
#digest: sha256:
141
pullPolicy: IfNotPresent
142
livenessProbe:
143
resources:
144
limits:
145
cpu: 200m
146
memory: 200Mi
147
requests:
148
cpu: 100m
149
memory: 100Mi
150
updateStrategy:
151
type: RollingUpdate
152
rollingUpdate:
153
maxUnavailable: 1
154
kubeletRootDir: C:\var\lib\kubelet
155
providersDir: C:\\k\\secrets-store-csi-providers
156
additionalProvidersDirs:
157
nodeSelector: {}
158
# ref: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
159
# An empty key with operator Exists matches all keys, values and effects which means this will tolerate everything.
160
tolerations:
161
- operator: "Exists"
162
metricsAddr: ":8095"
163
env: []
164
priorityClassName: ""
165
daemonsetAnnotations: {}
166
podAnnotations: {}
167
podLabels: {}
168
# volumes is a list of volumes made available to secrets store csi driver.
169
volumes: null
170
# - name: foo
171
# emptyDir: {}
172
173
# volumeMounts is a list of volumeMounts for secrets store csi driver.
174
volumeMounts: null
175
# - name: foo
176
# mountPath: /bar
177
# readOnly: true
178
# log level. Uses V logs (klog)
179
logVerbosity: 0
180
# logging format JSON
181
logFormatJSON: false
182
livenessProbe:
183
port: 9808
184
logLevel: 2
185
## Maximum size in bytes of gRPC response from plugins
186
maxCallRecvMsgSize: 4194304
187
## Install Default RBAC roles and bindings
188
rbac:
189
install: true
190
pspEnabled: false
191
## Install RBAC roles and bindings required for K8S Secrets syncing if true
192
syncSecret:
193
enabled: false
194
## Enable secret rotation feature [alpha]
195
enableSecretRotation: false
196
## Secret rotation poll interval duration
197
rotationPollInterval:
198
## Provider HealthCheck
199
providerHealthCheck: false
200
## Provider HealthCheck interval
201
providerHealthCheckInterval: 2m
202
imagePullSecrets: []
203
tokenRequests: []
204
# - audience: aud1
205
# - audience: aud2
206
207
## automountServiceAccountToken controls whether a service account token
208
## should be automatically mounted on the Pod spec
209
automountServiceAccountToken: true
210
# -- Labels to apply to all resources
211
commonLabels: {}
212
# team_name: dev
213
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.