Akeyless provider for the Secrets Store CSI driver allows you to get secrets stored in Akeyless and use the Secrets Store CSI driver interface to mount them into Kubernetes pods.
- Kubernetes 1.16+ for both the master and worker nodes (Linux-only)
- Secrets store CSI driver installed
TokenRequestendpoint available, which requires setting the flags--service-account-signing-key-fileand--service-account-issuerforkube-apiserver. Set by default from 1.20+ and earlier in most managed services.
The recommended installation method is via helm 3:
helm repo add akeylesshttps://akeylesslabs.github.io/helm-charts
helm install akeyless akeyless/akeyless-csi-providerYou can also install using the deployment config in the deployment folder:
kubectl apply -f deployment/akeyless-csi-provider.yamlTo troubleshoot issues with Akeyless CSI provider, look at logs from the CSI provider pod running on the same node as your application pod:
kubectl get pods -o wide
# find the Akeyless CSI provider pod running on the same node as your application pod
kubectl logs akeyless-csi-provider-xxxxx