Update CSI sidecar images and set a csi-snapshotter timeout

charts/cloudstack-csi/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: cloudstack-csi
 description: A Helm chart for CloudStack CSI driver
 type: application
-version: 3.0.2
+version: 3.0.3
 appVersion: 3.0.0
 sources:
   - https://github.com/cloudstack/cloudstack-csi-driver

charts/cloudstack-csi/templates/csi-clusterrole.yaml

@@ -98,5 +98,8 @@ rules:
   - apiGroups: [""]
     resources: ["events"]
     verbs: ["list", "watch", "create", "update", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["volumeattributesclasses"]
+    verbs: ["get", "list", "watch"]
 {{- end}}
 {{- end}}

charts/cloudstack-csi/values.yaml

@@ -25,7 +25,7 @@ sidecars:
     image:
       pullPolicy: IfNotPresent
       repository: registry.k8s.io/sig-storage/csi-provisioner
-      tag: "v5.0.1"
+      tag: "v6.3.0"
     logLevel: 2
     # Feature gates to enable
     featureGates: "Topology=true"
@@ -52,7 +52,7 @@ sidecars:
     image:
       pullPolicy: IfNotPresent
       repository: registry.k8s.io/sig-storage/csi-attacher
-      tag: "v4.6.1"
+      tag: "v4.13.0"
     # Tune leader lease election for csi-attacher.
     # Leader election is on by default.
     leaderElection:
@@ -76,7 +76,7 @@ sidecars:
     image:
       pullPolicy: IfNotPresent
       repository: registry.k8s.io/sig-storage/livenessprobe
-      tag: "v2.12.0"
+      tag: "v2.20.0"
     # Extra arguments passed to livenessprobe.
     extraArgs: []
     resources: {}
@@ -88,7 +88,7 @@ sidecars:
     image:
       pullPolicy: IfNotPresent
       repository: registry.k8s.io/sig-storage/csi-resizer
-      tag: "v1.11.1"
+      tag: "v2.2.1"
     # Tune leader lease election for csi-resizer.
     # Leader election is on by default.
     leaderElection:
@@ -113,7 +113,7 @@ sidecars:
     image:
       pullPolicy: IfNotPresent
       repository: registry.k8s.io/sig-storage/csi-node-driver-registrar
-      tag: "v2.10.1"
+      tag: "v2.18.0"
     logLevel: 2
     # Extra arguments passed to node-driver-registrar.
     extraArgs: []

deploy/k8s/00-snapshot-crds.yaml

@@ -1,4 +1,4 @@
-## CRD for VolumeSnapshotClass from https://github.com/kubernetes-csi/external-snapshotter/blob/v8.3.0/client/config/crd/groupsnapshot.storage.k8s.io_volumegroupsnapshotclasses.yaml
+## CRD from https://github.com/kubernetes-csi/external-snapshotter/blob/v8.6.0/client/config/crd/snapshot.storage.k8s.io_volumesnapshotclasses.yaml
 ---
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
@@ -142,8 +142,8 @@ status:
     plural: ""
   conditions: []
   storedVersions: []
+## CRD from https://github.com/kubernetes-csi/external-snapshotter/blob/v8.6.0/client/config/crd/snapshot.storage.k8s.io_volumesnapshotcontents.yaml
 ---
-## VolumeSnapshotContent CRD - https://github.com/kubernetes-csi/external-snapshotter/blob/v8.3.0/client/config/crd/snapshot.storage.k8s.io_volumesnapshotcontents.yaml
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
@@ -600,8 +600,8 @@ status:
     plural: ""
   conditions: []
   storedVersions: []
+## CRD from https://github.com/kubernetes-csi/external-snapshotter/blob/v8.6.0/client/config/crd/snapshot.storage.k8s.io_volumesnapshots.yaml
 ---
-## VolumeSnapshot CRD - https://github.com/kubernetes-csi/external-snapshotter/blob/v8.3.0/client/config/crd/snapshot.storage.k8s.io_volumesnapshots.yaml
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:

deploy/k8s/controller-deployment.yaml

@@ -102,7 +102,7 @@ spec:
             allowPrivilegeEscalation: false
 
         - name: external-provisioner
-          image: registry.k8s.io/sig-storage/csi-provisioner:v5.0.1
+          image: registry.k8s.io/sig-storage/csi-provisioner:v6.3.0
           imagePullPolicy: IfNotPresent
           args:
             - "--v=4"
@@ -130,7 +130,7 @@ spec:
             allowPrivilegeEscalation: false
 
         - name: external-attacher
-          image: registry.k8s.io/sig-storage/csi-attacher:v4.6.1
+          image: registry.k8s.io/sig-storage/csi-attacher:v4.13.0
           imagePullPolicy: IfNotPresent
           args:
             - "--v=4"
@@ -155,7 +155,7 @@ spec:
             allowPrivilegeEscalation: false
 
         - name: external-resizer
-          image: registry.k8s.io/sig-storage/csi-resizer:v1.11.1
+          image: registry.k8s.io/sig-storage/csi-resizer:v2.2.1
           args:
             - "--v=5"
             - "--csi-address=$(ADDRESS)"
@@ -179,9 +179,10 @@ spec:
             readOnlyRootFilesystem: true
             allowPrivilegeEscalation: false
         - name: csi-snapshotter
-          image: registry.k8s.io/sig-storage/csi-snapshotter:v6.3.0
+          image: registry.k8s.io/sig-storage/csi-snapshotter:v8.6.0
           args:
             - "--v=5"
+            - "--timeout=300s"
             - "--csi-address=$(CSI_ADDRESS)"
             - "--leader-election"
             - "--leader-election-lease-duration=30s"
@@ -201,7 +202,7 @@ spec:
               cpu: 10m
               memory: 20Mi
         - name: snapshot-controller
-          image: registry.k8s.io/sig-storage/snapshot-controller:v6.3.0
+          image: registry.k8s.io/sig-storage/snapshot-controller:v8.6.0
           args:
             - "--v=5"
             - "--leader-election"
@@ -217,7 +218,7 @@ spec:
               memory: 20Mi
         - name: liveness-probe
           imagePullPolicy: IfNotPresent
-          image: registry.k8s.io/sig-storage/livenessprobe:v2.12.0
+          image: registry.k8s.io/sig-storage/livenessprobe:v2.20.0
           args:
             - "--v=4"
             - "--csi-address=$(ADDRESS)"

deploy/k8s/node-daemonset.yaml

@@ -95,7 +95,7 @@ spec:
             privileged: true
 
         - name: node-driver-registrar
-          image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1
+          image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.18.0
           imagePullPolicy: IfNotPresent
           args:
             - "--csi-address=$(ADDRESS)"
@@ -136,7 +136,7 @@ spec:
             allowPrivilegeEscalation: false
 
         - name: liveness-probe
-          image: registry.k8s.io/sig-storage/livenessprobe:v2.12.0
+          image: registry.k8s.io/sig-storage/livenessprobe:v2.20.0
           imagePullPolicy: IfNotPresent
           args:
             - "--v=4"

deploy/k8s/rbac.yaml

@@ -30,6 +30,9 @@ rules:
   - apiGroups: ["storage.k8s.io"]
     resources: ["storageclasses", "csinodes"]
     verbs: ["get", "list", "watch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["volumeattributesclasses"]
+    verbs: ["get", "list", "watch"]
   - apiGroups: ["storage.k8s.io"]
     resources: ["volumeattachments"]
     verbs: ["get", "list", "watch", "patch"]
@@ -97,13 +100,13 @@ rules:
   verbs: ["get", "list", "watch"]
 - apiGroups: ["snapshot.storage.k8s.io"]
   resources: ["volumesnapshotcontents"]
-  verbs: ["create", "get", "list", "watch", "update", "delete"]
+  verbs: ["create", "get", "list", "watch", "update", "delete", "patch"]
 - apiGroups: ["snapshot.storage.k8s.io"]
   resources: ["volumesnapshots"]
-  verbs: ["get", "list", "watch", "update"]
+  verbs: ["get", "list", "watch", "update", "patch"]
 - apiGroups: ["snapshot.storage.k8s.io"]
   resources: ["volumesnapshotcontents/status"]
-  verbs: ["update"]
+  verbs: ["update", "patch"]
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1