v0.32.0

0.32.0 (January 14, 2026)

Changes:

• Default vault version updated to 1.21.2
• Default vault-csi-provider version updated to 1.7.0
• Default vault-k8s version updated to 1.7.2
• Tested with Vault versions 1.21-1.19, 1.16
• Tested with Kubernetes versions 1.35-1.31
• Test with Kind v0.31.0

Features:

• server: Add OpenShift service-ca operator automation GH-1165

Improvements:

• server: Allow users to specify the target service for the ServiceMonitor GH-1148

Bugs:

• server: Add namespace to network policy template GH-1152
• server: Check if disable_mlock is already set before adding to end of HCL config GH-1154
• server: provide declarative parameters for volumeClaimTemplates GH-982

v0.31.0

0.31.0 (September 25, 2025)

Changes:

• Default vault version updated to 1.20.4
• Default vault-csi-provider version updated to 1.6.0
• Change default csi.daemonSet.providersDir to "/var/run/secrets-store-csi-providers"

Features:

• csi: Add Red Hat certified vault-csi-provider image to OpenShift defaults GH-1134

Improvements:

• server: Add metricRelabelings to serviceMonitor options GH-1131

v0.30.1

0.30.1 (July 28, 2025)

Changes:

• Default vault version updated to 1.20.1
• Default vault-k8s version updated to 1.7.0
• Default vault-csi-provider version updated to 1.5.1
• Tested with Kubernetes versions 1.29-1.33

Bugs:

• server: Allow server.service.active.annotations and server.service.standby.annotation to override server.service.annotations GH-1121

v0.30.0

0.30.0 (March 27, 2025)

Changes:

• Default vault version updated to 1.19.0
• Default vault-k8s version updated to 1.6.2
• Tested with Kubernetes versions 1.28-1.32

Features:

• server: Support setting custom preStop commands GH-1099

Improvements:

• server: Add pod labels to server-test.yaml GH-1094

Bugs:

• server: Fix invalid yaml in server test when volumeMounts or volumes are empty GH-855
• injector: Add RBAC for deleting configmaps GH-1100

v0.29.1

0.29.1 (November 20, 2024)

Bugs

• server: restore support for templated config GH-1073

v0.29.0

0.29.0 (November 7, 2024)

Changes

• Default vault version updated to 1.18.1
• Default vault-k8s version updated to 1.5.0
• Default vault-csi-provider version updated to 1.5.0
• Tested with Kubernetes versions 1.28-1.31

Features

• csi: Allow modification of the hostNetwork parameter on the DaemonSet GH-1046

Bugs

• Properly handle JSON formatted server config GH-1049

v0.28.1

0.28.1 (July 11, 2024)

Changes

• Default vault version updated to 1.17.2
• Default vault-k8s version updated to 1.4.2
• Default vault-csi-provider version updated to 1.4.3
• Tested with Kubernetes versions 1.26-1.30

Improvements

• Configurable tlsConfig and authorization for Prometheus ServiceMonitor GH-1025
• Remove UPDATE from injector-mutating-webhook GH-783
• Add scope to mutating webhook GH-1037

v0.28.0

0.28.0 (April 8, 2024)

Changes

• Default vault version updated to 1.16.1
• Default vault-k8s version updated to 1.4.1
• Default vault-csi-provider version updated to 1.4.2
• Tested with Kubernetes versions 1.25-1.29

Features

• server: Add annotation on config change GH-1001

Bugs

• injector: add missing get nodes permission to ClusterRole GH-1005

v0.27.0

0.27.0 (November 16, 2023)

Changes

• Default vault version updated to 1.15.2

Features

• server: Support setting persistentVolumeClaimRetentionPolicy on the StatefulSet GH-965
• server: Support setting labels on PVCs GH-969
• server: Support setting ingress rules for networkPolicy GH-877

Improvements

• Support exec in the server liveness probe GH-971

v0.26.1

0.26.1 (October 30, 2023)

Bugs:

• Fix templating of server.ha.replicas when set via override file. The 0.26.0 chart would ignore server.ha.replicas and always deploy 3 server replicas when server.ha.enabled=true unless overridden by command line when issuing the helm command: --set server.ha.replicas=<some_number>. Fixed in GH-961