{"id":13820534,"url":"https://github.com/hashicorp/vault-csi-provider","last_synced_at":"2026-01-11T22:47:26.099Z","repository":{"id":38289864,"uuid":"208916337","full_name":"hashicorp/vault-csi-provider","owner":"hashicorp","description":"HashiCorp Vault Provider for Secret Store CSI Driver","archived":false,"fork":false,"pushed_at":"2025-04-16T23:28:52.000Z","size":28075,"stargazers_count":320,"open_issues_count":27,"forks_count":54,"subscribers_count":40,"default_branch":"main","last_synced_at":"2025-04-18T07:35:41.327Z","etag":null,"topics":["csi","kubernetes","provider","secret","vault"],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-09-16T23:27:53.000Z","updated_at":"2025-04-09T16:26:43.000Z","dependencies_parsed_at":"2023-10-03T00:18:38.660Z","dependency_job_id":"479ba6ad-e197-4dc1-bf58-93e71fbd28c7","html_url":"https://github.com/hashicorp/vault-csi-provider","commit_stats":{"total_commits":184,"total_committers":33,"mean_commits":5.575757575757576,"dds":0.6739130434782609,"last_synced_commit":"d96e0d8b151bdebb5467b2f006fcacd46c78a963"},"previous_names":["hashicorp/secrets-store-csi-driver-provider-vault"],"tags_count":20,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fvault-csi-provider","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fvault-csi-provider/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fvault-csi-provider/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fvault-csi-provider/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/vault-csi-provider/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254448579,"owners_count":22072764,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["csi","kubernetes","provider","secret","vault"],"created_at":"2024-08-04T08:01:04.959Z","updated_at":"2026-01-11T22:47:26.094Z","avatar_url":"https://github.com/hashicorp.png","language":"Go","funding_links":[],"categories":["kubernetes"],"sub_categories":[],"readme":"# HashiCorp Vault Provider for Secrets Store CSI Driver\n\n\u003e :warning: **Please note**: We take Vault's security and our users' trust very\nseriously. If you believe you have found a security issue in Vault Secrets Store\nCSI Provider, _please responsibly disclose_ by contacting us at\n[security@hashicorp.com](mailto:security@hashicorp.com).\n\nHashiCorp [Vault](https://vaultproject.io) provider for the [Secrets Store CSI driver](https://github.com/kubernetes-sigs/secrets-store-csi-driver) allows you to get secrets stored in\nVault and use the Secrets Store CSI driver interface to mount them into Kubernetes pods.\n\n## Installation\n\n### Prerequisites\n\n* Supported Kubernetes version, see the [documentation](https://developer.hashicorp.com/vault/docs/platform/k8s/csi#supported-kubernetes-versions) (runs on Linux nodes only)\n* [Secrets store CSI driver](https://secrets-store-csi-driver.sigs.k8s.io/getting-started/installation.html) installed\n\n### Using helm\n\nThe recommended installation method is via helm 3:\n\n```bash\nhelm repo add hashicorp https://helm.releases.hashicorp.com\n# Just installs Vault Secrets Store CSI provider. Adjust `server.enabled` and\n# `injector.enabled` if you also want helm to install Vault and the Vault Agent\n# injector.\nhelm install vault hashicorp/vault \\\n  --set \"server.enabled=false\" \\\n  --set \"injector.enabled=false\" \\\n  --set \"csi.enabled=true\"\n```\n\n### Using yaml\n\nYou can also install using the deployment config in the `deployment` folder:\n\n```bash\nkubectl apply -f deployment/vault-csi-provider.yaml\n```\n\n## Usage\n\nSee the [learn tutorial](https://learn.hashicorp.com/tutorials/vault/kubernetes-secret-store-driver)\nand [documentation pages](https://www.vaultproject.io/docs/platform/k8s/csi) for\nfull details of deploying, configuring and using Vault Secrets Store CSI provider.\nThe integration tests in [test/bats/provider.bats](./test/bats/provider.bats) also\nprovide a good set of fully worked and tested examples to build on.\n\n## Troubleshooting\n\nTo troubleshoot issues with Vault Secrets Store CSI provider, look at logs from\nthe Vault CSI provider pod running on the same node as your application pod:\n\n  ```bash\n  kubectl get pods -o wide\n  # find the Vault Secrets Store CSI provider pod running on the same node as\n  # your application pod\n\n  kubectl logs vault-csi-provider-7x44t\n  ```\n\n**Warning**\nThe `-debug=true` flag has been deprecated, please use `-log-level=debug` instead.\nAvailable log levels are `info`, `debug`, `trace`, `warn`, `error`, and `off`.\n\n## Developing\n\nThe Makefile has targets to automate building and testing:\n\n```bash\nmake build test\n```\n\nThe project also uses some linting and formatting tools. To install the tools:\n\n```bash\nmake bootstrap\n```\n\nYou can then run the additional checks:\n\n```bash\nmake fmt lint mod\n```\n\n## Testing\n\nTo run a full set of integration tests on a local kind cluster, ensure you have\nthe following additional dependencies installed:\n\n* `docker`\n* [`kind`](https://github.com/kubernetes-sigs/kind)\n* [`kubectl`](https://kubernetes.io/docs/tasks/tools/)\n* [`helm`](https://helm.sh/docs/intro/install/)\n* [`bats`](https://bats-core.readthedocs.io/en/stable/installation.html)\n\nYou can then run:\n\n```bash\nmake setup-kind e2e-image e2e-setup e2e-test\n```\n\nFinally tidy up the resources created in the kind cluster with:\n\n```bash\nmake e2e-teardown\n```\n\n### OpenShift\n\nTo test on OpenShift, install the [Secrets Store CSI Driver\nOperator][csi-operator-github], and follow the\n[instructions][install-csi-operator] to create a `ClusterCSIDriver` instance.\nYou can then run:\n\n```bash\nmake ci-build e2e-image-ubi GOOS=linux GOARCH=arm64\n\n# tag the e2e image and upload it somewhere accessible from OpenShift\ndocker tag e2e/vault-csi-provider:latest \u003cimage:tag\u003e\ndocker push \u003cimage:tag\u003e\n\nmake e2e-setup-openshift e2e-test EXTRA_VAULT_VALUES=\"--set csi.image.repository=\u003cimage\u003e,csi.image.tag=\u003ctag\u003e,csi.daemonSet.securityContext.container.privileged=true\"\n```\n\nFinally tidy up the resources created in the OpenShift cluster with:\n\n```bash\nmake e2e-teardown-openshift\n```\n\n[csi-operator-github]: https://github.com/openshift/secrets-store-csi-driver-operator\n[install-csi-operator]: https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/storage/using-container-storage-interface-csi#persistent-storage-csi-secrets-store-driver-install_persistent-storage-csi-secrets-store\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhashicorp%2Fvault-csi-provider","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhashicorp%2Fvault-csi-provider","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhashicorp%2Fvault-csi-provider/lists"}