Akeyless Provider for Secret Store CSI Driver

Akeyless provider for the Secrets Store CSI driver allows you to get secrets stored in Akeyless and use the Secrets Store CSI driver interface to mount them into Kubernetes pods.

Installation

Prerequisites

• Kubernetes 1.16+ for both the master and worker nodes (Linux-only)
• Secrets store CSI driver installed
• TokenRequest endpoint available, which requires setting the flags --service-account-signing-key-file and --service-account-issuer for kube-apiserver. Set by default from 1.20+ and earlier in most managed services.

Using helm

The recommended installation method is via helm 3:

helm repo add akeylesshttps://akeylesslabs.github.io/helm-charts
helm install akeyless akeyless/akeyless-csi-provider

Using yaml

You can also install using the deployment config in the deployment folder:

kubectl apply -f deployment/akeyless-csi-provider.yaml

Troubleshooting

To troubleshoot issues with Akeyless CSI provider, look at logs from the CSI provider pod running on the same node as your application pod:

kubectl get pods -o wide
# find the Akeyless CSI provider pod running on the same node as your application pod

kubectl logs akeyless-csi-provider-xxxxx