Features

Secrets Injector Helm chart adds nodeSelector, labels, annotations, podLabels, podAnnotations, and tolerations to the deployment. (#175)
Secrets Injector Helm chart supports configurable securityContext with Restricted PSS defaults for use in restricted namespaces. (#210)
README values tables are now auto-generated from values.yaml for consistency. (#268)

Fixes

Removes hook annotations from Secrets Injector deployment and service. (#150, #184)
Numeric values can now be passed as custom env variables in Secrets Injector chart. (#255)

Full Changelog: secrets-injector-1.1.0...secrets-injector-1.2.0

Assets 3

09 Feb 21:55

github-actions

connect-2.3.0

3566452

connect-2.3.0

A Helm chart for deploying 1Password Connect and the 1Password Connect Kubernetes Operator

⚠️ Credentials (2.3.0):

If you were using the double base64–encoding workaround for the credentials secret (1password-credentials.json), that no longer works as this issue has been resolved. Credentials are now mounted as a file and work with the standard single base64 encoding that Kubernetes applies to Secret data. If you were double encoding the credentials you will need to update the secret.

Change for reference:

Fix credential secret when set from values with correct encoding and mount credentials as a file with OP_SESSION pointing to the path. (#196)

Features

Connect Helm chart supports operator.allowEmptyValues value to configure the Operator's --allow-empty-values flag. Empty secret field values are skipped by default. (#264)
Connect Helm chart supports configurable securityContext and is Pod Security Standards (Restricted) compliant, so it can run in restricted namespaces without Pod Security Admission warnings. (#192, #210, #223)
README values tables are now auto-generated from values.yaml for consistency. (#268)
Connect Helm chart supports operator trust for self-signed or internal CA certificates via operator.tls.trust.secret. (#171, #200)

Fixes

Connect Helm chart now uses operator.serviceAccountToken.key for the operator’s service account token instead of operator.token.key. (#266)
Connect Helm chart supports a custom ServiceAccount for the Connect deployment, allowing a dedicated or pre-existing service account to be specified. (#249)
Fix expired dev Slack link in README. {#265}
Hide the credentials warning when connect.credentials_base64 is set, since credentials are already provided. (#84)
Fix credential secret when set from values with correct encoding and mount credentials as a file with OP_SESSION pointing to the path. (#196)
1Password Operator image is updated to v1.11.0 to brings fixes for the operator.