aws-ebs-csi-driver

AWS EBS CSI Driver

Chainguard's redistribution of the AWS EBS CSI Driver Helm chart, pre-configured with hardened Chainguard Images.

Prerequisites

Authentication is required to access this chart and its images. First, authenticate with Chainguard and configure your environment:

chainctl auth login
chainctl auth configure-docker --pull-token --save
helm registry login cgr.dev

Create an image pull secret for the cluster:

kubectl create secret docker-registry cgr-pull-secret \
  --docker-server=cgr.dev \
  --docker-username="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Username')" \
  --docker-password="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Secret')" \
  --namespace kube-system

Installation

helm install aws-ebs-csi-driver oci://cgr.dev/ORGANIZATION/charts/aws-ebs-csi-driver \
  --namespace kube-system \
  --set imagePullSecrets[0].name=cgr-pull-secret

About This Chart

This is a redistribution of the upstream AWS EBS CSI Driver Helm chart. All upstream configuration options and documentation apply.

For full documentation, see: https://github.com/kubernetes-sigs/aws-ebs-csi-driver

Chainguard Customizations

The upstream chart's values schema is relaxed to permit additional properties, enabling compatibility with AWS EKS Addon deployments which supply custom values (such as image.repository and image.tag) outside the upstream schema. This chart provides an aws_mp_addon_parameters.json file that defines the IAM permissions required when deploying this product as an EKS Addon.