From 80f026878839b8aa4affd172d54498429f4db547 Mon Sep 17 00:00:00 2001 From: umagnus Date: Thu, 20 Jun 2024 07:36:35 +0000 Subject: [PATCH] fix shield guard on csi controller and node --- .../latest/azurefile-csi-driver-v1.30.2.tgz | Bin 13469 -> 13519 bytes .../templates/csi-azurefile-controller.yaml | 16 ++++++++++++++ ...si-azurefile-node-windows-hostprocess.yaml | 12 +++++++++++ .../templates/csi-azurefile-node-windows.yaml | 12 +++++++++++ .../templates/csi-azurefile-node.yaml | 11 ++++++++++ .../templates/csi-snapshot-controller.yaml | 4 ++++ deploy/csi-azurefile-controller.yaml | 20 ++++++++++++++++++ ...si-azurefile-node-windows-hostprocess.yaml | 12 +++++++++++ deploy/csi-azurefile-node-windows.yaml | 12 +++++++++++ deploy/csi-azurefile-node.yaml | 11 ++++++++++ deploy/csi-snapshot-controller.yaml | 4 ++++ 11 files changed, 114 insertions(+) diff --git a/charts/latest/azurefile-csi-driver-v1.30.2.tgz b/charts/latest/azurefile-csi-driver-v1.30.2.tgz index 1e27696a142fee838e9934e70eda3d8e855c30ca..5c363d772232eaa86f019e84ef88d0b9029480d0 100644 GIT binary patch delta 11576 zcmV-8EyvQGY0qhpJb(Ri8#$6^|E;G$&@*9sM@3PxY|rw-F`<#vZe6=2g(UafT&vFu zRV7J`ia-s3qQrJPVjg7o<>pB)@KN8WV(~*CmRWZ@ZLv^^1dzx~Bz{QX-(n5}5`yOo z;su;cfN$-OFqhpa9*5tp;_3Bzy*InN`oFziul(QM&a2*c+kd-nUhTep{rc_O?eBWq zuXlELzC*p0)IQ^hg~a^3-qLlI8~2qwI3hm-7lhG1nrv_2D9ZiWebwvkYy=>DP9mv) z+*9&`z9%7|eMTiF6gWDUjN>7oBPxLpun*|P{`t|%^!L*+9um4i@fiBZC2<>*a-|R5 zFW<`Joc|LX#(yAIrU07f|Mu>y*W2a!|9X3SJ^%0HA!9s*{suxWs_DFMTkSh1d)tS`)G>^v2`6^0jD5AC^_0HNR|FV;$b$q)elh|hNmnf z{~Hcxfjd{AiK zc8j_~G64!goN{*6vOkkgBK1kG!kzB+PPaF!LdpU-&@=lChD1n?=V+z+*y;t3C!ZHt znAzryXV1_X41fdm0ZE1!1;jWSGY&|A&p`_H^A(_2K!9#WKs7Z&he%7PP$W1E`e-C& zB>G!9R)4#MZ3WC1TM~I?er*Rmb z8*cjOmtQxYArBdwHJ;j@oBjw>Q{)(rVM7)1(0(i=8>0|kL8#k-g8&gK85)Dc0hV~f z*F`?)5`Faf%LYQv(Dk2%hoh**ByI@c6XL_3?|-wHN;P6W2P~nFB#!|-Lw{4p9E;YIGVD!i_SqR76&*KfXG1oh;A^|KgI&o-yE?U+Ew*2Dme>7 z;C(eiyd0nD8&6>L45{8gY=F)!AC_r5s0kB{>+!WBS*EEaZ6Ruc;z*2`+%NH){Jtc+ z8-M%?`{n*ujVSsv8ymU)N?+IYn<5voIM~gU#WaFGI%9gyeT)JuRoM{}@)+a|7 z`)KDs-)!%?HRK3zC`VZ_#XFDb3H=ERsm5Cibn>GWgwqgH$X;P7u|GP4f5wDEko_LA z;Rl#N*hjC`U-?OjDPKwCke*{4sLZ=mdt2rVyZ|}SoZ;5I)v;mu` zKgam?BgGR;LZuwdm_Llx*Kdz#NGSZw!gvfn!gSB~L5RN*IXVh}N-ZjhPORwV*X{K3 ztCBw5NNlhw4piHStd?~3QKv21c&H-#%zkA&)3@DZtUM->NHU@xY%pnt~_aKc-pG&M^<8cN!_!}n@PN)xRPJDl^dT?XIxZ{~arxbhF7o@9atX&@) z|Nf%@zBdFatp<*hzt7{rfPdWfQRn3R+#5kS?j&pK_w4-O#}Da*>2%ODlqw8l0x|06 z7nG@aC0=f#gTudme7}i~j=w+IM1R{mJ3cyozljdd&Q8vh%cj;xr<~nREfea8?C*_` z(D=468Et=3nqa;alB+HIi_6XhYGKCuD1a-1sgn)!Y7-40U>qy;rsUxi z_?QS`B)a$Z?c20hl6A6@cBAZ)Ub+MCu$8N_D&M3w7I1e}&UA;8FLsxz$l=U5ZMwq` za(GI6$xj;zH)_pr5Px$*ht>@sba*tREdBZL7W`O8$t{cdnl6BkbB*!P7)yV2cpGuB z5}3Y2nF}M82111=Ytu24N3`_T3Vi8TMQ=j5jB)5C6KUgy(16_tmnw(_s2O?6nQ{=) zIKRjYcfGRkZU}WLjC4vr-|t^eFux4R)usLMxocWK`kDB8A%AJzU1lcEuJTn=m91yu zf-8~T+L@R+H#XSCJuCznQV7r(Q#^zK5la^l6UiY|e=qPDkOYdUL|Evbd}Gyhg>nQG zsp)Tu937w=B7aA^*nG9xDvl16U|CwmlhM+=&q0^O;rAp2v*`H=N9lTsL*VJ)+(U1) zJkrOx|0iJ_g;;{vIzG8LJnza|xlA3i_WxhKDewQidHZ_3|93CXg;E8%J^k||WQ>xU z?n4{p4Im2H6aplf*&nboy}Pk-!H_=!|GI`q!~%hY#D6jtn6&!4yc15L=duZ^`51m&x|8>?>dN6<(A zvGwK4#(#z`c6b|M8fY6%?FO1Q`x-5#%YFXrp#TPi0_voa)m4Q%$jjdAa6#9g%=859 z{%jB@s^rN8I41$1-<79Nee~v){wEomC<^L$88M)N{iki7e-xc!D}T(tEr1IBu0wN5e|7%UL7h*XMOwth zW2PJ_qw+)}r%5TZ?lC0YDzcA0e@4kHuMSlgIlm-SNKAe6by>sKGjA4Zjhu%$j#UXl z{V)z18&|`l&&Cm>Is}*7ORtuTFqa-1EY=a$N%gL##jZ%Ulap2q5|P+TVRdeTDf~@Q ztABj*JNjqLWTBJ4eAyU5IPQwkmX^=jc3A1{=6SM{EssesuaRVb$K$Y}L|S`cw2gX* z;xJ6n90SHtioFo1VeF#}b&(T*jLkAML)Bh^Yv_+SrbB4_4yA|=)zLLgDz)yRHT2y+ zGwi?5124b%un;D&(f%vL|LSeg{_kw>_J3Zj?f-o|rOB3#vkeLA8Q^)|Mjj`OBLcS) zsE&7Zum5aR*!IRXp+VoGq0Ve%?ErNAg)q92fT8-Oc%9jU%Mdz4pjtg%#Uu=X7xd$# z*Zs2vyy1v=IEpx%Ku}btebh-%VnZTF@m1Gn%x@oRjM&zjH?KPh*nfvG zdO^k@Bpye7MB^|__kkvQV=4JM*LA|6o^8i$hzK-zXlQny>WUe%wl_>q+D$F{fsIfK z`J?0I2O>;?D2zD{E8Ll#!4czT|2PTDP3#LohjEB``Lhj#gwG=AqjW76Y@o!U(o{Tz zgMgUW(y4NdfbT0BS?I3-A3vf2@qd+OQ9`G~NVY1q+~k0RX&whC8RDS&2@tldb!|xO zAA-?SEJuCRHOtGc{`!J_6iKAb4AWWpXQ}r^uNVsfQzwrDgb{_Cj5i7ph$1*_)8L@2 zi4%FJI1SqA_UT!GPJiA<1J1_iW<>mv#ZV>WZ?Hfw7*8;JFOxc4ZH>V18h@HywJsw< z0=2uJ`ynRdV-s!9+JCMKpZ>gGXugo#;IG`RPg%pE85GbF*@i~zf9p~SUG)@&be~bh zEn-*y0ADKa*ld3jIxKvi&5`B~n7F9dbU>+8%g#7USTt=N6H3PM7zy&5ZnI$^jVc>? z9ZdtSoG>-qIZ?>LZWu=618?^U36-~P*l0pa)hPQXJn8@qzAgB5<~3E z7>D6BC29v+n2?t$a>eAR#DZRPy7`w30TnUN_5$?xm;;I!F%tnx1b^5cAtpz_yXdc$ zm!CeKUnuosc!fZ%Lm4-qT|6wQ9U^S|>m}`q#WZkoSwEI@O`X(i8Z@^WD&0npP*0LE z6xE-^*FY07jA;NooaPmYHI~Sro$8yFH`;|p>{nly7NocsFHbJ~)WBcOapBUI*7(~7D| zK07?WNO#HgV1JZ*zhuirHUz4}2ps@7gQ(pfZRTm9h1BjDl1!(hvKn8FiA*J3Xtlks z*9_V>)L^!ti;gJT$72Zhv4A@t0M*mNQytrG2ok@)ZV1%-g7^m@v=`xzFvq?GuI8RE z%!Ey+Z)&tleRegq8p7ETj?*$eqdr7ZY+2p9WfVcW9)A+gTx*EzNpSStVsE(hg6OF#o9Lzn3B+~^q&YKUHe-nb~QCew2#$-+fxaK|#vB{-;F zc-+Nn6hQLSE>l_vO6|8bf`V(>Q!wW3S7n%1*L1GNW&S~R;Od6RE-h>5nsL*^#%MUT zV~0zwfD*VLGu4)>yoT(OgK1uxo~pcL6ix;%$bSw`PaOTysh#ZPUsV?*#MID_vYklb=qia;2!<9>ogfNhZl2A=zVna!04QC9f*;y>Eax*E6 zg?qy9p&^+7O;8QG`VpQ08poj|QJ7IS3>PbKTL(t7uOi?%Ohng&SW0>?RajG{*x> zLQQ!H6m+0RDM{rhc9A}P(~8D2 z%jE|5)D+11^~PI|IajtqIhTB#228MHeQ2J2MwNe{Rs*rHk(Oz?&b$J7qXwgG0L8iX z5UO8Atj{tH;t;*KnyS?d39xm0u$(VUQ>w+RRSIF5m*@%xO0Z&Ks;C59?5DL3WPfw` zWtOIH{!k4+8FOkEz1q}uiZ-g_pgBA{-A6tS z!!G(>8%k$nub~yo@~O&cUOx~a6HY}VtI2A?01}Xhqlj@eC!}^2sw%|HrS$txNiUwlQ7+Zr8*A^@I>ZnmeF;RsKhRvm)6QA9M-Su)PEDQ;ZRLwWvoaV zb)t66Fri2Q6-1H=+Djg=9&5s$@8!YnO<_;>%)*UmsZU{YO$cGsk zCM%e8!CC+@TwUmZX1I)Jy{T-N3T=#M&ID<8KS}l}7T~ffZEa_>rEG98nmm9SHVsow z&DFwm&NP%Riy$|RLw|QeYJ3)9QbTnvcnlqfoplmLW55;)q8dmji1L<2lU1#vaq?Y} zq8_S(-8flFQlFA3uV-ffI^1$^3{oog$w1`+9*r}>PZ zA2K%&9Ap>sA=7!_pg5DsnX|y{0M$8=I&Yeh3bSWkJCH7s*9)Uye|ze}0sc`xsIJ9G8<%8IS}0^P`jE8E*jx zvr-x)0RhL8cN?@8PLIkkH#?Nh)#6Octy`+2ptI|Kel(Lo94mk1cofrR z$Q_J<%1y05OhzM}Iq+P)>5efa0}!%n>i{l(+4;539Z3zH?VqY8Bl zb7^=qZ%8sGP4It!li?8DcRwJzOw#$CUMiJNlts>wpf*`gYN9Jl|FZLIEyu3yhO4`!)XX}~%&%$ld z2CQv^3fAr}Tczp|TMIQR*;;6C$DW@jFs0JBCC@0;u{D#42sFk4WT|uRSd>+V>a=kF z)U%i!57U1@{oAA}^`{H4qkP9h>>eBvsRkz%+ zwevt%0@pi#-}wEY`{zgbK)#FJN@#z5N9bI+)6&35P58T*MXeYk0h@&>-M-JlAm}3{ zw@%wenE;>ZB#Vk7P@e@RsVJt1Q2A!Ji%zKielveTjE$A!^k0Gd8q+`hQT*}vziihP z=bz!37HSnlx#Qda`L^fvw!PlAgJQ4O*Z&`Vyx6bL4ySpoQEz$JS@t~Gg{S!(Xm**Z zQ>uM!`Os=C{QBn2CzU%5Kkj=sOGe3Ig4TC$euH;!woT902!M9A$U>qQ%*f^p=*=zB zl{9~8GX>=Vv0r`R@2T(kFNa~JkeZ!X7b)_#7| zUOuVc#LwvrS5MAFmn_ze^>cirjJw$vRpVrK(CnB?;=b{fDu->zL5Mjvz1A0ou200w zeIjOsCt<$!6EN$OFZX)#Wqso1F`sx@XJ&u7qs%N;WR}X!VrZ-^JIkD>lD?v|Nb8I! z=2@qW_`1&&ea)wc9?0cfr_X75vS;aYJS#Z0vywA9bDYR&^y8lJ0i30e+bn;$=8+$z zS>3^zr+Z9hsRJ>~9DVsZ54kLPoaHg!T)XHwhE<wC1n+IxSrzfy$s(s<})(a(-B_U{g^9~Udz#);&Irvj$W_Vd$YT%|J&>JO8?z? zwf%bMyY1aKuXf+Qe*O0C_IK*1S3BRK-rY9cJh70Nf7e^Ou5#nPlE+N71Bib@HXQ?% zrK?>cu{GH)+|^>BuAe`n?#~9ZmlFydT>tWABOi^_Mb97vETEgk9d)S?UqNW+JdUE- zWD!!6n@~TD13;ZrGP{OS2X)c!h!Ps8_2;hoMwQp5+d8TCHp%bhv;`yrl8cx z3}U%EYz(i3OKnyY8# zND(D++BN9Qqk{r@#YtMUOKjP#SU?|jq*?$J=(iB5hy@?=B5I|lo5_FApXU(Jhy{CP z8P$xJ3JHyG8+#{DsdabP$V+~r#`J{#goOm2E3Yc^I18b8Q`Od37fd~$oT#*~Y~TES z8e$49s!VnuB2~Vz=7@h2#)+I}C>QJOdcL{e$@4kUpvT6JmMjEbmciVQEoHD#6%X_+ zW7C|B+h67o@JdIMF&@Hc9ERuMbC5ai%Wn#`)O}s7yrLJ(581AC-a9uYSh;2y)Q)dh zc1Kv8DwTMPI$ND$^<7_()9ednMVKIx@o8R|ZF~Btlbeg?`zwDe;0z*$zI>^?Yogts zRa)X9`tqe?#vl~XlAqPpS)9)ZVLlY)ji!z_dAHN4{HPsg90Y1D_U;ca_6`ot4$seD zItqq>1K^(4GKA6DC9;ch-_?0h4kD6_fyMIO_D-)S9Pi;)a_kwLmzP-EcSQ@87FOEA z!x8cR8HsnVdrf~Ou3|3ayX~H<&;YQEIe0_0s(AMUql};ado$l#GeZ0Uc9Wk&v&LQX6wr z(r^9Q+=}GxxoD?a+A5Lz(IF*8x7w-LG=m!EhGs?+*Ij>mW@31R#sWOOL-|g}Q=eBp$eDOieOolPXW+95aD(SPyp6EFsrP$K!kB}$ zy3Zfh>Lz2mh{e5UePLOBSX~j42~ZG1dH+|?MqMOdoT?92t1%i#S0{3@@Pc|{RW-KJ z9!2NAPRdP5JsRoEd?k{Bfq%{lh^RSOs!7Z;$ zB*%p=zOPH0NZ9e*lr!(DCHaO}iAlZU#R9m8hd`yH?WW8}0enxDa1+WXcp@GQ$gP7= zoRB!zCESE?7_u7=#*v&BdZ4Dky7-|gy`O(Iy+m1~OUfdih8C4b)rIYgQs<0k*dnEO z5oeP5EbOC;{nJD(QCQ3pwqmu(NV)hnC4QU9cST8)Uh9~&CWgty#a{B?@0*z37Kl|splG|eJuozcPujJJ#(3w%5BUW8u#)nrsTH2 zwN>xGRwt-cS^6}{DQCA+)ag`breS~Jhl`8T^G~N|C;#W~?)s~$Fh{pUv_^m$Ic&q= z{QS+sUQyoOpL{w$`0>++llPxK9R7Uxp>3^Nbl$V`gC9R+UdCKLbmsHiYy7(WF=tF} zb@6XLi>6L0=G6=;ApP7iq^%l4F$d2tU)WUDp?V9r8xSEmL!AKxjN@8?5u$&bV6@Da z5aE^&)%>^|aBxDyX~TRKBJ`r`a_^Qah_1<&k3Gp_A-D9FjbFVcy`eUzpf0e^NhRtb z);LC39h;v{Db!BW0pT{CYVixF#Lf7^AzI3$R*!y1vjx^bVh;2Pe#WOK+(48!^5Zq9 z#JZ(*CWlqgt(VN1#Ab+TP6~e?8tJxvT+dwiPiv;;!G3->6aU%U?!9_j!hi1U?Dp39 z&--{h&nrMaD_Jx*3_^7O{KzKgZ3KfB!v!UX=e*d>5;jed@C7k!G)IP#fDg(Y2bgEy zH~Bt6xnU`>KRQb19n2S$CcV?W7s~B0r*ot)K`B>r%Ap~)mVu1 z3Rn*vMk5#l$4bi&#Cy)-$l(CmU7v2Dgauf#YoKQ~M`ThBjspVJSB5Sk{jIG%)q8sf z7pm;xt;ry0lN{Nat$KRd=O%WMQGOl+q=7OwoCf|_1oR;wf?`4 z$GV-E1{vJh3~(1Hz6yV#`g<(k2jv!;vENT2ib~hm;{+JSjGn^+rwNiu0&%>;!vrp> zD>zG#kX`;DK|*PzrwB~?-}3@8UzsXGhadH;#H%0U+m94aFbUO&7kW-j`EK!j(tQ<> zzb;#a_s=|@&~CJrImR&G34^x$%zqZ4cHCD0_0N&IBb@(yczu5*4ULSh2nlY!YkLyF zR$kB55(feDDD%4cor9*&b;LliwdX>yJJ?UkWmLC&s0EH+oA(sNUkFP)BnZAXx+K8& z**H4oOwGD{h{C9*vzSUUh68hnLHgQu)k&0FSLC7{#;jE$YCNWU;-dg=x~y}2f%ZOL z{BUx1bn*Ag%kzJ~pI;pQlx(^c4#ec>s8QK(fb^^PU*jHr<`YKux1C?Dv>ff69WJj6 zlG_|N6<9#TZh(ssgkcwM9dLQS^3yTgct;Y(NdK=kifIfGd8b&8(0>2&a)SBgWk{|r zFO|v)L0(=)IuEqCysTYbUtS{bd&d0&BX<^yZ90phHHUv;&f_p7$_Z!%WK|!U1^rp_ z*=l8aW(8G2bA7TPR^={gFH3oytg5A(b6m=zTLXY8;$~-|S*+NmwP-ACgyrbnA6^`s z9sPWG_UY{K{ipMj{U1M_?p^%gqG2T7N#gXw$M;9an#94;nd{@WkoDHPr49$sHd0N! zWOmk1&KiH9puOzM(Iswfme3B3929$Wk-9(Gftp@kI&1jx<6jRy9iJQ=emdU!X^u^I zoqnZew>?X}t36XaTXI))p;lVoHO1;ILGzATA{g0rnS=Hk9Qf26i#nB?QZh57rJ^k$ z4fPs&Wf((6jRf!h@S->u>lAnuX_nV~4+I|6J#v2+u)%u5PYy7so7x5{n2H#_3c(wK zOb(?8iKTew*lsXI--EOX<5jsvqWSo-X9LJ}r%zj8WKDpo79IOUkYP!$Im)aOA$BJ| z&l+5|B5>JVI8^xn{bc*DJg!xFR}Tb6dcqmS7T*7x0|hc8|JTlTuaf`k)$2Fw{lEKo zTI_%Sy`W6C-UNKP-UVFm0*^2A-N#PFeqYD>odN$<9lM`*rS^!9 z$FDahA8vE<(d;eiNmtJ6T3G0u<)|B}ZF_(07jDZJ*w<_k7;d&2cV-rx`=T-kV+T%|6k+S;HuyA)#p=!fTj%<|=7(zh{!t-p%}x{?>m~ z^dn67^oM^Va+GAvcUQdp4)2`VZDuXloa^>B$zrnK?>s|H>181SOa9F|>&heATW|JZ z*PG-|e3Sg~0g=TuSn|Wk@#i0xkzg+(O;;;-SstuS(<-pX$30G z4igl;(_+@73QKN_v^Y0&RqnK2OZP-W@Ue-zN|ip4DV#1jU@ePhqu_`kWc zKh4DdZEtV)O8CF+H*a>=_`myjN?T$k=bT0Utpdqslh~~k$5*Af0u-Mix;%!@&{-q+ zYR2i|@Oy4<7QaulyqSETmxO$Z&iRvF&Q~e69R4kt2@PwVM*#kF6n-?ozgc_6ujd5*Ep&gG;37c3igTI8 z+qP`HZL2okw%Cn^tA*MvaGBX6xVWu_P;q5dzsAI^F>%%M_lb$iCixl>_pKq~ENo3{ zHE+mS9Mxmue$EuH&X#_UP&>n41bj?{P%GN1{2Ilam3VTPz11V+X54x<8$Y+`GHZ>o zTiD#qF3}aBG3I~Q5FjkHC!3xDm~5l{vjcOeAkIK?nkJ#>+3VhJfwq^YO~MetEs+Qh zByfZ|i)nz~c3-O{AESX#wGgR^`B*VBAT%h{D;Sa^BFq96i4lv#K(Ra29t}rwgsJ); zMPy9qnc_Xa0f&%i1rR)s`4IZ3m;F+J44PGV1rpdabX9+(;Br8{)?%`P%zI6BtpHv( zgZ!h&&{t(`QS6*`C2P@Sei#c0JOh+f`YY#QtOy6zR7D6>TgFDT> zg#EGsA<%ymb8Xd|3k71osT|=m)_?p8`(E)7(EO{wS@-|$^j?+Lf4jX`>+?VN@|291 z8t<;JUC!LnZ{Ha1GZsQ&?WarQSdJJcziG3ayEndZL8!m9VO9@rC2)#EFXC)M6lvfd zXWIE*=Kgpdhh_$Q2uDQk^NT+ErPKL!qolij=|q3&rRz4rYzs|*U+DrvkeyA`35n4E zy-~{@^$*io>R$nbAVGh(K!tvY$+&f`=17pMuHps$u9|HLU-@S(+u5>BFaatT=sDY( zP1K3%s+-*`Ul8T4uCzf*5zMULOx~@`*$*0PTxCT{mCqV6M}0nHJRmeb;azoU&!LWX zDg}Q@H`>`#kcLb`61ng^Z=|SUs~m4+H+o5 zmT9t82fny;^D9fXHZe4%S?z{=RlP5xs}mt<==_bE5xi5gf~Ca%=qs`*_1b;qN=k!f z+Uiz92W)Y5*it!}(HhTVNmgP%Dz$G3iDiGhN+!NF#hFgLwbrarMUPcwCLV&kf34|u zBA4?Xoo=uRu(_t$N`0*5-0YS6c3Hp8R%DrKsn@H^@>io}*V?qAP4jbdtx)R~RcoDk zzbci3AisTmPUyU9b&0sfQZ+2DNAAlAJ+QvIZ*{dod4B?Ws?-|~qodTY)DBtNImv%9 zw0l-m4gOdr)4$gA$_iw8zRvkp4DdoC(?+^Ke@^x{A9@Sqn||is|C>Jv;0*ld_N(39 z(*EDhn_h3d|92nHjQziRH9} z0%wN*Z~FTyoB<}-i5%`xlw zPya4*jCY=d{q2(V7mn*SeP+meBq-hk)WpRsjwMjshGSE1X4QFejx-PJj1N!nSw{c2 z-3gef|KF73|2ibJ*8lhLJedB^!pLjQzt;Tg=YgL2_5b`k0W|Ne|a-Fp0fOvPHyt)CS2vwpsX=l=%)0RR7CI2(`v<^cfOO2g6s delta 11525 zcmV+gE&9^WX`N}1Jb!z08#$6^|E*7fpl8DNj*6llwr6?an9xXSx31l?LXvxKuGQy- zs*)r|MW6;iQDVCtF&||2%grabz@y%%V)3DeW!BwJTP#!}0VFaLi60X9x0u6#gy8vt zcmXF9;9CbH%w>0q$KiLYczV5F@AclE{%^0>EC08*v)lV_dw=is&d%O;?~N+A{c2}t z_dC>EN$oS9SV+vj>n&YZxp7~~gCp`Ya6uUDqsjILj-uS3-Q8YyXCnaNa}r7Y9x9a9N>fPFwO4$hBXroW$t@sQ9BipS7LE{WTilq-Gce)(1& z=lq}GFb1(Q1%J>y|F`#cUu~D?|K6LO_58n&hm7$M`WpycVF70lu|696ygMd7XMzo6 z*JtAmlucSy6d?`~6GSpT?V~Lw#MX6u1)PEeq2y?*AXWMciHF(bRzE~>7@o3__|rZ* z9-J_F%0U2?8wmM=oN_iHN+SSoSEG{NDElZ^=U%th-G6RT^=PmI)-qUUL1Uc|`+OGw%?-P+KtY>YyD1)**S4gy4|WM~W$2Uy|_Ul)0= zOZ3s_FB=FwL)U*69*&|Klei&(PlyluzRzMR)qjZj9I%8wk~{|V4E;@Yllu22vSkrA zg$24HVW|4kd=j7m<7mp_E;BUe{;lcXjj$8sN^gRf%nx6 z@p62oZ#;p~Go*S0u>m@_d|0OKpe9T(uE*DkWSORxw1ub%iX$;%@}R_T^81qPZtyGY zmw)?THKORxY;5HED}7zpZ;D*V;^07wYbH~cpr>CNl@`>O77_NLkJM!F#8gPo$~p|$ z&CxiL(}V1rlxq%ANPH~%NGW19oh1yX7t;v(=#1$(_c02vRAom@$P9aTtRG$Sz;HwYp&Vt!6z@EyALvh5NHyMCppzf1Ae@GnLiP$viT%+T{4*vTg6#K@4d25A z!ajPX{>o2MOevFCxxUFS5eo{_IAXzmr4R?fV(x=5%)1PlYUP+nk^F^_AH{vNoqzs0 zhOt)6uX??oi2aqrKVuNpk9y?Ir6jIZOA{ zW~BpsJJmZKCA)(Gp+rutOe*zy4k7rGar={GA#f|WnyiPeVcJI>t%^Adp<6VwV?EhA zmIW56uNAe<(Jc{DBrjkv0AKb|=YNEq`y&YA5IU{sTg?%vd3)!zcuQ2Xp$*tf{W-?B zA1R(-5-R0r#{6NlzJ7a5Lqg$a7RF=v5vKdT4?_Hn$kA~CRBBO4bYev>ziOwKcT4(o zBeB7%I8bdPvRcyBN1e84V8PpP;P5dP;eW#6!sw4O zC!(&RqCKA_ktO@)vT#)!S7YTWcCNLi+g(D_Z43a*m_sH|??4)vK9^Xz?pEZ@OY`O@ z<=(yHERNFG1EK#;#^Vfd@Hb8*e4sw4Ir06u>cNc-G^0{yvWf19IC(oqrGK=iUgyaVJ?*zhmczKfX^VOs9jMp;TcY6Nphizo1Ob zEAes@9UlGl;Zg;$05u~|Ia3Zo8s`_8 z;jUK}-VLEHg^^C_=Lh}E3Fem}xw^DJK6g#)M?Vu^EhMdb%YV$o*;Vc~RoQwbF1Qle ztDT9NLtgU5nOM}%U(aJZj~TxX84gk(UauMmPXAl36`a0JQ*#`2OM-s9DYwiFpHj_aFnj6I0T*!&OP)-%Oic9 z`+pL~QHUjot&+=5J>o>dW{l9y8E|e>%>IC#>D`Tu3x@m=_}4W=A{GcFB$lz*M1N5TSODTN?QbL&Uxvu@XcE(S z`}s5Ko`EjcO(PxX%NNCpA?A6)s^YgD97QE_q9|2}pf6uK$n$QLre5oT;xl9Ze;Pp; z0T*2vEe-{kG5>e=_I671|IO>2SL^wIAJ6B{TmOM3WZc)rS_y*kRo;$OxA-IIqyO0Y z@?~Q~7k@jtjW7+g4X1VkO`Cm<7SrWEfA&xS1403HQpxJ7!X4yg?{&DKYfxr-f_8s4 zh!a)v!vr`d0ifTNr%!$KdRPCGj7<~;b-aui&_MrNGq`b}_vZ{lhDF7%#TF?qMei<2m2-Gn4QHHw62|&hX8JeMLufR3*M;y~3G=7ItM2G6=nkJQ6_s|;pZl4+U z-{*ms-+WjI6WD0~xA$J}?!GD7|DEmK*MEC!`+px#X|ko`Y(s*226&#gk;e(+h`_A` zs^cBq>pvS6w!LvpXwbK4s52W`I|LnnA&hP$V5oj6UT5~;GK9_$s8)|xF$n|U1^qbb zb^mMuZ#W_zjv~$`5ERvEA9WIx*pSFkeAV^YxV&$tTEHm|^V^3SBewPW^{Y+-_J1La zUXU>eiN{eN(Krm#eV~cnSW3Rmb)7J%XWKCwA_5H_8k*gwx?+Z`?G4kDc2moKU?Y@5 z{^)r5o(NMQ3S*AL3U_8_aKyOTKTg7O6Z?YDVH{#!{%ivw;j;+(C|!#M8z^z8G!+lw zARs2TbgEn<;0KCE7Wyl|$B$`1e1D}`l+fuglC4TDH#y*7n#Tc3hB&Bx0)#DVT^kbn zhhX#+%TXV7&GNFVzrJ7}MG|Qw4)1ME}fU_~W84-VEF;ofp8!XTZ#uLom%cKrhTO;thhJR*Pt;>jz zK<)15L5Rut#6;V(_Mhv*r#~MQnlB_b_$znoQ`T^31_g9PwxQAb-?~&nS3N}`Jz!LE zi`dmaz?aH9HrwBX4hx@WbELTgCNAnV9Z)LOvNO&S7EN2ngpzSQMuPmN+iVy}qsm5J zN7H~SCrk}@P84zj-Xz0X+JDc47e(#1Q*3 z#$h;3iQ0h{Cgi1xTroK+v7pzSZvG`hKt;^6y#W0^=71tb%tXKv0e|*Kh{+M~F8ZtG z<)@G57fSsYULjEHP{s{t7Y|EnhX~vLdP%!tF%6tt){o^}Qztc>2F5Aq^X=N!tOt#HwSENz zw#SSz(2jvs!+I#n8)*ZCX(I0$(XAGoVx*DDKBE)h%GUU7NPo$1DQ&G1RHb^IBTF>3 zA473y_Te`5lpf(96U?6s-G8ltxQAnXa}-k1e6bHgvxwsT2VF0 zXGiB3=`Oh*jDK?Pmu$JnhCp=~p#$J%5ViZG%{&dXklH;%lIfIGR^zKNk*TB$t+o&J znnC-98q5}S(J@5_cnskI7I5bSpn6((s$<&?LE`t<4S{-J5dQ##_9FZd=Gd3O)!g%i znXu{fO^tS`&#tCcLpVFaaazV_)Q3olEvs9%j3P+aLx19#YYmY-368#7>fUep}~$y9$?DS^I6S;U(wVNfe<|7o}Pc+d8b-N~DHruDh)w%{shmdRDDylmZbV z9vj#93V$p%poXYM45V9q322~X=n_4i8$H884bdym8yDr(WP0u-S-2<-?pVgT1P9d% zkGpt{0!W_PWl9S{sr|M_P;gCq3dX$sstnWWn$Fd@%s;3OT-^}arDY9WGj4j=7!9X( z>~P5yPy+X3rrL6q*N|OuFwINTQh;l@PXrn5#j1?FFKGRIdOi8e@K4@u3XcNjo>qqA?pI&G7(} zP*WZP1s&*7N>VwBU8GOnIA~fQ+XCqHQGXnJBv+;itK>$ZCRLQGg%Z}#I8P4ew4$-h za=F1hH3f2hz46v#&XuiD&LtnG0Tb+4ADZWYQRN?~)j%w4q-C0}Gp|72sKIC(Kyj`; zgz8rj>$6OQI7Bb5rfM}q0&LwLEawZ;lxi_+l|oqNCAxxv60BI5Dk=dN`)REM*?$~< znWd?lziy$hoej;pG#_Cj!tJ6tLum>c-3h(T;3ze%K>oX#iYZn1U{ zUbUd3xrKcWl~vqNn<3!&qKP!i8GrFam)gxm&uRjU<-j63rYM+FJSIL8<(P7{Ey%|L zHgj4$wQ2(r>eKLPohdVwbAtIN1xa_3Dn6;kb<+5Zj5)Q7UTx|+MH|&|&>Wtf9v~lw zVHbU`4W%=(*U*Y(`BddJukVSF38$iw)nv6`00~IMQN*~K6H>bhRh43bO@BtMI0&bD zCLK8)gJ#uD$e3PJoBpEs7>j3Oyl#nW5PsmC@flLD%Ov6+VxcsF06u}hz6$j5gq$SV zwrn~YOa=(kX<<2*=4u#07%59B8Hyw2oQ5!gFejMe1?fW9MK+J!&&t14qyq3s0BUyX zkhC1ZG#7=HgvNj>!CNg$n15(VH2zR-G>X|cuCM@|KtgMSX{1L_cZ_rCq2$E`E1YxB zi1;-?q=c1gU7!_<^5$xYGT)E6NQR*}snc-M$B3nd$<8S=dUeav)L{<+FA#he=`8*I@++&2J;Nto`yQk@3{cp`H(%jh~uRAQITOKW8l4(nHS>VFB@aHyuTGFBvw zI#D}jm{25u3L?n_^4_Pz1fkgx8R;}Zl@625=En@{4Ho%sa|ab>>yDXRH-sKC4zi2+km)>dP@Ku+%vs=efa)Aboj1)$h1oN&9Y~kR>kCn^@{-$A(EyE;50f7h zTomr&^ypXe^7mh8Jia!6{r=(?IQo;16o3OiJe{|aDJSV`xsIJoRpJK8IS{m^W&4^8E*jt zvr-x)0RbnIcN?@8PmjwmH#?Nh)#6Octy`+2ptI|Kems*w94mjr$<{koL(+^F)@cCr zkvkXzm77|Bn2bg`bKtpp(;Z_<1|VeD)&X4nvh!=5JD`LYZt*w@VKdo?OI@&J4iRCx zBc-Sno?}5}djLf&Ng95mo2$&D@)NO*;DzKG`lzD=;2E2rmGpmcUHGA%7bZ(!M-}QA z=F;$J-jHNWn&5u{C&MAQ?|wjbnWXbOy;LflD2tpUL2a_0)I?X9{$=OaT8@kTrR+G| zq8+nDCqnhoOFJXQluCT7YVwu0QP;CN(VL#l6Xggf=LEvgOV<83c&d6K891BH6?54r zt!awC4~HN6hBGBlLz?8c8W5%XOv0~b*8-WaXtGD*k1&57ruha3v5Yw^mZG5=DNY_o z#JH?D9xUeCvT?Lsp2Fw(owmltHRb+f6W|j9H(NK1UlTg?lxTW3RnnHWKU>fAe->_w zHehWVRIqk;*(z0!*jlJj$<{)9JNEoMfhm=~EqO+%j;)zYM4&MaAWNNd$D*t{RHudW zr=G>^c$j|%>fa_+sXtw)2V>G|`hGkeENaCV3D_)5>GpjV20B!F#MoFlPX86SuQC18AH^R}{>ye< zasC;eX`xm@lsmrtpKp3zZ`~Nab8ugZkon_C1U3i+$fo7Mf zI;GmzmJhAQ!mn@Md{Vj7@Z-LBvt*PUCTM;4<~MlvX4~{^jR0s@i!3C1!HjIqfZp5^ zT}gkFHd9a@K%VDka;4I|RKB;`9n+;Uz`4TZ%jbl1dWvnc#5H?QHg{nk_2zP{X6@%U z?d6mDP5hkBaP{O&bjf1fSU<-{%D9_-Q8i9x2hEPTB<>qusdCtc9E6x-(`$WU==wy= z+$UmIcoODoKLN8o`Esu(U)CpH9`lKpb!LB-JIc&rMP{koEQZF)va`&2D(Ndai?q&& zVxD!{h_Cxh(bs&6=z(0$b^4r^CwrDY$FqV{J1aS(GslUXMnCQeAHZ4qxXtp1YaaPg zn$;bgdAi4BmO2o#%+Z&x^N`Du$5|fp&9#f3V_5a6g{99ZJe3m(_i+AT`O^lgJX?RT z>`8)Eof}x65-6V%Sn52$N|67{Vf>dx^Dm9tUkO5g87%%XsQYE`^=l;k+>Ki!>DNg5 zHD-Q|nO|e(AK(4ovqNOx>>c36O~qwU>q}$Qmqnz1rTFtFhc;i|zWp>2Hh7NV7Qk>Y_9~Ly}n2LtG$0m`zu9AFO7#@7XADM z->skK2mcmx7?2P=Ul7k|q%8^KNQ1bx)Q`C$>9ri)DISMy>*)1*z1Mqt`oFziuk_!Y zo!!^3zuVq>y|c5o-Fu_T?d)#vY=4J(ciVLH#6n{JU2o~S%8mO<9y8SrAqs!lbPQCM zu6BvU)?~YISBrtVe*TQQKO4+mPAGJ6{mYk)d^A!QJ%bRifNmCd)TKgv1)-huIErSI zMMzC>5fP)J4A|N@$?gpL^;XRbHEJ2VL`#DW$)Z?C*FSqTf-Of>I|l zh~@6EF}xNowP{&F0)^ucg~WfyqOM1h_ogNRA^0*`?vAnaNAGhzTia>LckdmY_d4nD zmLnr1#}bAX5@$??`{iV8qr$7(kcdN$s5M6LxzK6 zMU=>C*Pt(t4-4cKCuz|xv1PYn0e#ewY5`E7-$JA!7QD}ksFj{>CO?0FoV8gggPM+FsYgxguH3%8wvE?E88Jeo|H}#n(A%83oD$I4?-Qb{`6% zYbN?ABs9Kl?43NN*4}lqZueY;27qPE!5gYo#oHekW&HH#Gw?%9#%ANL!T``oc?9e! zEYrhfpqLu!K2j?d^?zN#{Ohs|srhG-`)HPUL}}TgWK3)h=$OiigpAd%=17_1p~Ru# zUhxIe3rId}k-xn0vscy~1;@`8EU}w&dbW4+4Cl2)KD~cbqqa!5A=92Y&put1+L)t~ ze(TTXRwQ@NMLX5fR*Bq?4k;C}O0V3` zI_Wy?T~cy!`?_RZs}+8y{k@MF@!T^vQhP>rJwjsvp58=!t3#g8D<9;nu&BN*+QT#O z*#x+O+#Y}3Mp$2_`#mOM%t0H*=MQTbld)aIDBkmwwye&a&LNoq1tF9VeFbf1bn?Zi z`e3z_x`A|ct`!R}IJH+*W19(Hbdl=>(UjDqkxrgnkqiv{b5>YEO_L%ohT=%d$V(2- zz73g=L-kqT9jGWabp$w+qf^FZxJKjt&W}GG zogAKiI6k>>EqlixIq^lR0D4{h|7s?nEp2B;&3e;kbU=nRjAsSh1k5IvlBhfZd$!Vs zf?a>h{E)>Or8^))Pv|I)S0<9KrA^4^WNyltkJ6HSLr}ov81Z5O+`~hl($RKP z=A!_XwnqH!;VH9N% zPh)6Gr0U|+MX7Tx+-;H4yNEN%d=~c6#le4RqLwHuW~^GV+GIyue47%#&E&hHFA5bE zdv#!3(~A)YF=AoRN3RO+mCbzzvW&fmjMYduTFSJWZHGQe4SKn*1-r1$$R`x@%sWgr zp+piK9zuwx=LYoJN4rG;i}h~O*W1O{5pco+_s8|V|Ns4XcJ%4s?C9|5Uu|{{IOv@&9DYwiI7rA;drv*rFzst0aJ*xY zIoOy>NmOoQ-q5%gIWZ--{jIHf7qdD+t;*8J9!@#CouW>sIx`IeKU`d#o_{($`|yAM z?ykS83UhQzL~8`7k;66&&d=XG>=l3I?cIk@=Z8OjdjH|wr}sxcAH8o|s}`Mi?ELV@ z_nDV5mz$gUJog%?Eq}}zlUrT+A+Z zNX}4a00HB;R$zoEXVNV5B}BO8Lp2dB2ONB$;k04C3K4qIb-8!T6-3u$%g2A7nMrJhB;^F) z;{STvz1=q@{NK*b8vl1ckLQ1R1;}3|i{ges2p*gt+XStRV8G%kx&-l?7rR%&CMgoW zAcl?RfJqVuK{+`1Jo|ph_X)}gONsr_S$er}%@Vax%CsP2!7&}M4^%rMsrfR-rEr?$`BaUCNUs3(&`~skF>tIj>p;BYERGz0k=;`07D`xv9lL)9dS-J3Ce`3L zAV7U(Tq4rn+S*sWw|{t{${yXC3<7IK`P84e^uGp?-4GhE8{sK)9C7A@5Hl=7v;N=S z>+SB8^#7|j+k0#Me;L_GLiP7pzz@n5Gh=^{Le!M5v2bz>V@A(m z0W^71Ngz&E2qt$?T>*cVJR!S0kUXKZQWUvK|9W0PW-C)g=!=Pr9!H^44Xm@a~!L^me1Q42*p~gn3(j=EtJfj{6Fr-Z@ftg!7&cudSq^ zkIxSdajlLg6C1jb@Mw1O`Z#4uGrdlp_m=)C*^-Ks@px(0>`b*dkW$% zgaRHC1TDaiHN%WbxXo=U2=IM2j!rpKvo0SNFskV+rjm@|&?K=>U)!$w5aretxd?+X zYn4C~kLkYnD1e(T>zrJm{f`$vd^kJ4`1|GM`QOhkj($q^q6!Bha&*+F95g_>)%&k; zYdiA^qx;+Cu2z3q4g$`OBG<)^ZH|-5Zh6FRfQu1?VHa*4aB08t(+S*o#}dX!|F1TR zY1|EYr&x~ALI3h{g8AiTNUkm~mC6c1US38z53snrtX*DTULx;%#{HC$rsD#7a+~ix z4nv~sbSogE`p~So&yvqpD|Rz0sLF!tlLb*0cTsy;5bJ-$Nv*D&<5HHc8t6t5H#rN3 zVI?cAMPnf&EJttu@Z#|7_~)auPiIH(KAnF!`0>-}{>2Y28b&CcBu?Lde0O}JNgN)Z zxjt@-DsH{c=kU>NBh~CkCQ$wSsX?LH`-mJ};^tE)%fh95uv z_2|>dhr@rPPbd37&9PmqGi2246KB~`wezTFOYRmW)JieCrdXY_ZrIm)aOesm{p$r`z|BIMFt_&oVA_hkF7oT61ZK=nwMb?T&V?OAyLZw?g5 zjQmgAd#`rO`JZ<8-mLfk?&E2(|M!A2*?JT3<$4!zy$iVB1zhg}u6F^S&@SL=x8NSZ zo??H~PD$xxc-EwrCkhVwmvv_fZ1_ANt#)442hJBfa6b3eNcq&cqe#sGZxd;(KTmca z+aL#hy^-MDO<2`|@p;#n^BwG7Z%#hk=H#QQN(O!xJNe@vfuAK{YZc5 zWg)vq{>?h2$0OQXZ+0`+o8(V?ll<`{AbC2jxy>!1=XoOm_kzmip}(Da1K~v^0$|cjCjBs*Um-^`nBt{c^6}7#u?cn?vY4%$8tD>?* z=T<*&?BV%qGu>SNZguz+L$5Xy%M4L$N+8l&F5AlFoRyUXbY;T1BEg(TD3|HxBCWZk zbD<7**VhoNXsV?Z?k|Jn7ahoAN}dW!Zlkd{H*;0)G%!o|L_-L#iMvX+q8Wd7tclNx zQ7iYvlLy4jjsKcE`_D}LSMSyKUJ3uT{rc59|HHjJrTrF@=gT6$R)OTQiNjWkRsa`E3EjulfVt>TK!syvZHFj% zmrnt(2n<28sOKg4arw?0>2iz zOl%RLSH=I!B1Ky^QnXbYDO&7Cv(-Ya7Pu*C5nR;PLa3;+HeO?*W^sS9#zf`j;TjS3 zts$Z;Y)LB~Z^&63)nlT5&UB;BIem{%E5ly|d`yH;>%yx18r_+dcygGn)gz>4T&Xl0 zKegy$WsR{~Uz@bXRjqMVZ7z1I4L~9j%bbu9h7eR{#C=={)wGy#y7rt!c&J_aKKd&O z^v1KE&`uWgH`)!nyBmL{ii84~I6n?xLVT!jvA&LKf$ONsYqSOMPc6Y1^DnTA7I+2{ zqhY2j&f-EG)J&A6J1Rx*EXG#tYQLGWr7rVonC>%bEzkWrm{5aGc=9)ieeD3D7Wkj! zsw6LW)zMrapc(gnz1n@#E8qY1=Jo3}{^vfPQoudE7Ar~q3(iB)X-&0kl4-mmB0AiQs$T5l!pIQADpzyWYi&tAf4U2^bJvC_7g%L(hW4s100 z686j5?dRrbVXNLOh7iB@wc1@gGuD6n3j1F15Xk(iz*+Zy?)1v}fA@OZuh#3o`*=#m zOO1Ee*Dil&Zs~Vm4EGrep|JMTrEx4rjFaEAS=0QCG`-Fh~A+Vee_GG^Xo=Qcm2|d(o2_Zbk!D`0Kd`&h9Enes1p*Q z|9hjBJL(^%v(&!=2tk7WZh;E@5R-B1TFsFVS6zR_3%p%5+Y-L=&sw&#Wt(6ER4&kS zwl$lm6V+8WyIH;<%3WP)gO(zgS-+XQTbZ*TG}gGvij*p!HDZqXe8zY{Xnw-G>e8M= z9qm*Kl5VuKryvcPgd}p|dEQ1mhDUq)9aLekLr8#N<%r)I_6%l{SGlzQ#HawVnV z9&L3ip#!$KI&7(&%xI10u_P<8AC=m-gv2slB@^G8;!G#rT5Hy*qQ|N-6AwY&zt(g+ zk;{3HPB+*D*j&?Wr9RejZuZK3yR6@4E3$t~wbbj?W%;YovTJQx(Wd!1xmKw4imJ6v zy0fJlWd*W4U*~))26!QnX(QdAKPUT}54{EQO+WMR|IMESZU+8ydv|}Y zod0d-)$8r`{@;B(Gxq=P)dcCB3y;qDJdnxBcgCYKHu>yY_hM!oVzD+bt9sh%|78vV z%+UXPZ+frF_dmaWv(Eo{FOTE?=gJv?djW^k2-(*WE?HwfRvIZ;2ixyA*uMG-SGsk( zFcYm~f_LiSxwP7&^62VM0Ibx%YtVo04;Kz|F=ZgpDI)p~EzkpogzsJCOTD_D0Zqbo zZws6m{=e-fZ2D1fOPw&l6$^U=7y|cUa|L@}|pZ_fdmNRF+lx4;_)tb)$H^;2! zKmEJNG2VF+wzo^xUO2AT^qC>=k)U`zN)s2eIF>+h8;(u6nN{b>IZ_;~PtajJ!Dku$ z-*zWprv86jj{onyUgv+fpXb5!e-=hwYyP$7Uq27@%&-6F-wBwZ|9gA8W&Qu^&71Z4 r&wF|1iT~f9aj095-;b$S>$&x_e%8;o@cjP(00960Y%5+A0N?=tD=>oP diff --git a/charts/latest/azurefile-csi-driver/templates/csi-azurefile-controller.yaml b/charts/latest/azurefile-csi-driver/templates/csi-azurefile-controller.yaml index 43477641c0..c3d0b23823 100644 --- a/charts/latest/azurefile-csi-driver/templates/csi-azurefile-controller.yaml +++ b/charts/latest/azurefile-csi-driver/templates/csi-azurefile-controller.yaml @@ -106,6 +106,10 @@ spec: - name: socket-dir mountPath: /csi resources: {{- toYaml .Values.controller.resources.csiSnapshotter | nindent 12 }} + securityContext: + capabilities: + drop: + - ALL - name: csi-resizer {{- if hasPrefix "/" .Values.image.csiResizer.repository }} image: "{{ .Values.image.baseRepo }}{{ .Values.image.csiResizer.repository }}:{{ .Values.image.csiResizer.tag }}" @@ -128,6 +132,10 @@ spec: - name: socket-dir mountPath: /csi resources: {{- toYaml .Values.controller.resources.csiResizer | nindent 12 }} + securityContext: + capabilities: + drop: + - ALL - name: liveness-probe {{- if hasPrefix "/" .Values.image.livenessProbe.repository }} image: "{{ .Values.image.baseRepo }}{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}" @@ -148,6 +156,10 @@ spec: - name: socket-dir mountPath: /csi resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }} + securityContext: + capabilities: + drop: + - ALL - name: azurefile {{- if hasPrefix "/" .Values.image.azurefile.repository }} image: "{{ .Values.image.baseRepo }}{{ .Values.image.azurefile.repository }}:{{ .Values.image.azurefile.tag }}" @@ -223,6 +235,10 @@ spec: readOnly: true {{- end }} resources: {{- toYaml .Values.controller.resources.azurefile | nindent 12 }} + securityContext: + capabilities: + drop: + - ALL volumes: - name: socket-dir emptyDir: {} diff --git a/charts/latest/azurefile-csi-driver/templates/csi-azurefile-node-windows-hostprocess.yaml b/charts/latest/azurefile-csi-driver/templates/csi-azurefile-node-windows-hostprocess.yaml index 42d2444373..30acee27fb 100644 --- a/charts/latest/azurefile-csi-driver/templates/csi-azurefile-node-windows-hostprocess.yaml +++ b/charts/latest/azurefile-csi-driver/templates/csi-azurefile-node-windows-hostprocess.yaml @@ -76,6 +76,10 @@ spec: - "powershell.exe" - "-c" - "New-Item -ItemType Directory -Path C:\\var\\lib\\kubelet\\plugins\\{{ .Values.driver.name }}\\ -Force" + securityContext: + capabilities: + drop: + - ALL containers: - name: node-driver-registrar {{- if hasPrefix "/" .Values.image.nodeDriverRegistrar.repository }} @@ -103,6 +107,10 @@ spec: fieldPath: spec.nodeName imagePullPolicy: {{ .Values.image.nodeDriverRegistrar.pullPolicy }} resources: {{- toYaml .Values.windows.resources.nodeDriverRegistrar | nindent 12 }} + securityContext: + capabilities: + drop: + - ALL - name: azurefile {{- if hasPrefix "/" .Values.image.azurefile.repository }} image: "{{ .Values.image.baseRepo }}{{ .Values.image.azurefile.repository }}:{{ .Values.image.azurefile.tag }}-windows-hp" @@ -149,4 +157,8 @@ spec: fieldPath: spec.nodeName imagePullPolicy: {{ .Values.image.pullPolicy }} resources: {{- toYaml .Values.windows.resources.azurefile | nindent 12 }} + securityContext: + capabilities: + drop: + - ALL {{- end -}} diff --git a/charts/latest/azurefile-csi-driver/templates/csi-azurefile-node-windows.yaml b/charts/latest/azurefile-csi-driver/templates/csi-azurefile-node-windows.yaml index 4f3cea474a..7b69012a1f 100644 --- a/charts/latest/azurefile-csi-driver/templates/csi-azurefile-node-windows.yaml +++ b/charts/latest/azurefile-csi-driver/templates/csi-azurefile-node-windows.yaml @@ -80,6 +80,10 @@ spec: value: unix://C:\\csi\\csi.sock imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }} resources: {{- toYaml .Values.windows.resources.livenessProbe | nindent 12 }} + securityContext: + capabilities: + drop: + - ALL - name: node-driver-registrar {{- if hasPrefix "/" .Values.image.nodeDriverRegistrar.repository }} image: "{{ .Values.image.baseRepo }}{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}" @@ -118,6 +122,10 @@ spec: - name: registration-dir mountPath: C:\registration resources: {{- toYaml .Values.windows.resources.nodeDriverRegistrar | nindent 12 }} + securityContext: + capabilities: + drop: + - ALL - name: azurefile {{- if hasPrefix "/" .Values.image.azurefile.repository }} image: "{{ .Values.image.baseRepo }}{{ .Values.image.azurefile.repository }}:{{ .Values.image.azurefile.tag }}" @@ -193,6 +201,10 @@ spec: - name: csi-proxy-smb-pipe-v1beta1 mountPath: \\.\pipe\csi-proxy-smb-v1beta1 resources: {{- toYaml .Values.windows.resources.azurefile | nindent 12 }} + securityContext: + capabilities: + drop: + - ALL volumes: - name: csi-proxy-fs-pipe-v1 hostPath: diff --git a/charts/latest/azurefile-csi-driver/templates/csi-azurefile-node.yaml b/charts/latest/azurefile-csi-driver/templates/csi-azurefile-node.yaml index 0940957d70..c7a2d8b5b0 100644 --- a/charts/latest/azurefile-csi-driver/templates/csi-azurefile-node.yaml +++ b/charts/latest/azurefile-csi-driver/templates/csi-azurefile-node.yaml @@ -82,6 +82,10 @@ spec: - --v=2 imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }} resources: {{- toYaml .Values.linux.resources.livenessProbe | nindent 12 }} + securityContext: + capabilities: + drop: + - ALL - name: node-driver-registrar {{- if hasPrefix "/" .Values.image.nodeDriverRegistrar.repository }} image: "{{ .Values.image.baseRepo }}{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}" @@ -114,6 +118,10 @@ spec: - name: registration-dir mountPath: /registration resources: {{- toYaml .Values.linux.resources.nodeDriverRegistrar | nindent 12 }} + securityContext: + capabilities: + drop: + - ALL - name: azurefile {{- if hasPrefix "/" .Values.image.azurefile.repository }} image: "{{ .Values.image.baseRepo }}{{ .Values.image.azurefile.repository }}:{{ .Values.image.azurefile.tag }}" @@ -172,6 +180,9 @@ spec: imagePullPolicy: {{ .Values.image.azurefile.pullPolicy }} securityContext: privileged: true + capabilities: + drop: + - ALL volumeMounts: - mountPath: /csi name: socket-dir diff --git a/charts/latest/azurefile-csi-driver/templates/csi-snapshot-controller.yaml b/charts/latest/azurefile-csi-driver/templates/csi-snapshot-controller.yaml index 4f6d4d1376..4d83a4b7f3 100644 --- a/charts/latest/azurefile-csi-driver/templates/csi-snapshot-controller.yaml +++ b/charts/latest/azurefile-csi-driver/templates/csi-snapshot-controller.yaml @@ -71,4 +71,8 @@ spec: - "--leader-election-namespace={{ .Release.Namespace }}" resources: {{- toYaml .Values.snapshot.snapshotController.resources | nindent 12 }} imagePullPolicy: {{ .Values.snapshot.image.csiSnapshotController.pullPolicy }} + securityContext: + capabilities: + drop: + - ALL {{- end -}} diff --git a/deploy/csi-azurefile-controller.yaml b/deploy/csi-azurefile-controller.yaml index 73394bf300..f655a2140e 100644 --- a/deploy/csi-azurefile-controller.yaml +++ b/deploy/csi-azurefile-controller.yaml @@ -54,6 +54,10 @@ spec: requests: cpu: 10m memory: 20Mi + securityContext: + capabilities: + drop: + - ALL - name: csi-snapshotter image: mcr.microsoft.com/oss/kubernetes-csi/csi-snapshotter:v7.0.2 args: @@ -73,6 +77,10 @@ spec: requests: cpu: 10m memory: 20Mi + securityContext: + capabilities: + drop: + - ALL - name: csi-resizer image: mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.10.1 args: @@ -95,6 +103,10 @@ spec: requests: cpu: 10m memory: 20Mi + securityContext: + capabilities: + drop: + - ALL - name: liveness-probe image: mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.12.0 args: @@ -111,6 +123,10 @@ spec: requests: cpu: 10m memory: 20Mi + securityContext: + capabilities: + drop: + - ALL - name: azurefile image: mcr.microsoft.com/oss/kubernetes-csi/azurefile-csi:v1.30.2 imagePullPolicy: IfNotPresent @@ -154,6 +170,10 @@ spec: requests: cpu: 10m memory: 20Mi + securityContext: + capabilities: + drop: + - ALL volumes: - name: socket-dir emptyDir: {} diff --git a/deploy/csi-azurefile-node-windows-hostprocess.yaml b/deploy/csi-azurefile-node-windows-hostprocess.yaml index 76d3bb16e2..a169f16771 100644 --- a/deploy/csi-azurefile-node-windows-hostprocess.yaml +++ b/deploy/csi-azurefile-node-windows-hostprocess.yaml @@ -49,6 +49,10 @@ spec: - "powershell.exe" - "-c" - "New-Item -ItemType Directory -Path C:\\var\\lib\\kubelet\\plugins\\file.csi.azure.com\\ -Force" + securityContext: + capabilities: + drop: + - ALL containers: - name: node-driver-registrar image: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.10.1 @@ -77,6 +81,10 @@ spec: requests: cpu: 30m memory: 40Mi + securityContext: + capabilities: + drop: + - ALL - name: azurefile image: mcr.microsoft.com/oss/kubernetes-csi/azurefile-csi:v1.30.2-windows-hp imagePullPolicy: IfNotPresent @@ -108,3 +116,7 @@ spec: requests: cpu: 10m memory: 40Mi + securityContext: + capabilities: + drop: + - ALL diff --git a/deploy/csi-azurefile-node-windows.yaml b/deploy/csi-azurefile-node-windows.yaml index dd9dd5c6a4..f47138bad4 100644 --- a/deploy/csi-azurefile-node-windows.yaml +++ b/deploy/csi-azurefile-node-windows.yaml @@ -57,6 +57,10 @@ spec: requests: cpu: 10m memory: 40Mi + securityContext: + capabilities: + drop: + - ALL - name: node-driver-registrar image: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.10.1 args: @@ -93,6 +97,10 @@ spec: requests: cpu: 30m memory: 40Mi + securityContext: + capabilities: + drop: + - ALL - name: azurefile image: mcr.microsoft.com/oss/kubernetes-csi/azurefile-csi:v1.30.2 imagePullPolicy: IfNotPresent @@ -150,6 +158,10 @@ spec: requests: cpu: 10m memory: 40Mi + securityContext: + capabilities: + drop: + - ALL volumes: - name: csi-proxy-fs-pipe-v1 hostPath: diff --git a/deploy/csi-azurefile-node.yaml b/deploy/csi-azurefile-node.yaml index 4e231352a8..7172e0c8d3 100644 --- a/deploy/csi-azurefile-node.yaml +++ b/deploy/csi-azurefile-node.yaml @@ -54,6 +54,10 @@ spec: requests: cpu: 10m memory: 20Mi + securityContext: + capabilities: + drop: + - ALL - name: node-driver-registrar image: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.10.1 args: @@ -84,6 +88,10 @@ spec: requests: cpu: 10m memory: 20Mi + securityContext: + capabilities: + drop: + - ALL - name: azurefile image: mcr.microsoft.com/oss/kubernetes-csi/azurefile-csi:v1.30.2 imagePullPolicy: IfNotPresent @@ -117,6 +125,9 @@ spec: fieldPath: spec.nodeName securityContext: privileged: true + capabilities: + drop: + - ALL volumeMounts: - mountPath: /csi name: socket-dir diff --git a/deploy/csi-snapshot-controller.yaml b/deploy/csi-snapshot-controller.yaml index 19bf39cee7..d528458e05 100644 --- a/deploy/csi-snapshot-controller.yaml +++ b/deploy/csi-snapshot-controller.yaml @@ -53,3 +53,7 @@ spec: requests: cpu: 10m memory: 20Mi + securityContext: + capabilities: + drop: + - ALL