Infisical Provider for Secrets Store CSI Driver

Infisical provider for the Secrets Store CSI driver will allow you to mount Infisical secrets directly into your Kubernetes pods while maintaining secret-zero in your Kubernetes cluster.

Installation

Prerequisites

• Kubernetes version >= 1.20
• Secrets store CSI driver installed with tokenRequests audience configured
• Kubernetes service account configured for native authentication with Infisical

Using helm (Recommended)

helm repo add infisical-helm-charts 'https://dl.cloudsmith.io/public/infisical/helm-charts/helm/charts' 
  
helm repo update

helm install infisical-csi-provider infisical-helm-charts/infisical-csi-provider

Using yaml

You can also install using the deployment config in the deployment folder:

kubectl apply -f deployment/infisical-csi-provider.deployment.yaml

Usage

For guidance, refer to the official documentation here.

Troubleshooting

To troubleshoot issues with the Infisical CSI provider, refer to the logs of the Infisical CSI provider running on the same node as your pod.

kubectl logs infisical-csi-provider-7x44t

You can also refer to the logs of the secrets store CSI driver. Modify the command below with the appropriate pod and namespace of your secrets store CSI driver installation.

kubectl logs csi-secrets-store-csi-driver-7h4jp -n=kube-system