Hanzo KMS Provider for Secrets Store CSI Driver

Hanzo KMS provider for the Secrets Store CSI driver will allow you to mount Hanzo KMS secrets directly into your Kubernetes pods while maintaining secret-zero in your Kubernetes cluster.

Installation

Prerequisites

Kubernetes version >= 1.20
Secrets store CSI driver installed with tokenRequests audience configured
Kubernetes service account configured for native authentication with Hanzo KMS

Using helm (Recommended)

helm repo add kms-helm-charts 'https://dl.cloudsmith.io/public/hanzokms/helm-charts/helm/charts' 
  
helm repo update

helm install kms-csi-provider kms-helm-charts/kms-csi-provider

Using yaml

You can also install using the deployment config in the deployment folder:

kubectl apply -f deployment/kms-csi-provider.deployment.yaml

Usage

For guidance, refer to the official documentation here.

Troubleshooting

To troubleshoot issues with the Hanzo KMS CSI provider, refer to the logs of the Hanzo KMS CSI provider running on the same node as your pod.

kubectl logs kms-csi-provider-7x44t

You can also refer to the logs of the secrets store CSI driver. Modify the command below with the appropriate pod and namespace of your secrets store CSI driver installation.

kubectl logs csi-secrets-store-csi-driver-7h4jp -n=kube-system

1.6 KiB Raw Permalink Blame History