Use csi chart from release tag (#727)

Signed-off-by: Daniel Weiße <dw@edgeless.systems>

cli/internal/helm/charts/edgeless/constellation-services/charts/gcp-compute-persistent-disk-csi-driver/templates/node.yaml

@@ -34,13 +34,6 @@ spec:
               mountPath: /csi
             - name: registration-dir
               mountPath: /registration
-          livenessProbe:
-            initialDelaySeconds: 3
-            exec:
-              command:
-                - /csi-node-driver-registrar
-                - --kubelet-registration-path=/var/lib/kubelet/plugins/gcp.csi.confidential.cloud/csi.sock
-                - --mode=kubelet-registration-probe
         - name: gce-pd-driver
           image: {{ .Values.image.gcepdDriver.repo }}:{{ .Values.image.gcepdDriver.tag }}
           imagePullPolicy: {{ .Values.image.gcepdDriver.pullPolicy }}
@@ -62,16 +55,14 @@ spec:
             # The following mounts are required to trigger host udevadm from
             # container
             # But we don't want that, because it breaks cryptsetup
-            # Also, the task done by manually triggering udevadm are already
-            # performed by having the correct udev rules configured
             # - name: udev-rules-etc
             #   mountPath: /etc/udev
             # - name: udev-rules-lib
             #   mountPath: /lib/udev
             # - name: udev-socket
             #   mountPath: /run/udev
-            # - name: sys
-            #   mountPath: /sys
+            - name: sys
+              mountPath: /sys
             - name: cryptsetup
               mountPath: /run/cryptsetup
       volumes:
@@ -94,8 +85,6 @@ spec:
         # The following mounts are required to trigger host udevadm from
         # container
         # But we don't want that, because it breaks cryptsetup
-        # Also, the task done by manually triggering udevadm are already
-        # performed by having the correct udev rules configured
         # - name: udev-rules-etc
         #   hostPath:
         #     path: /etc/udev

cli/internal/helm/charts/edgeless/constellation-services/charts/gcp-compute-persistent-disk-csi-driver/values.yaml

@@ -1,28 +1,28 @@
 image:
   csiProvisioner:
     repo: k8s.gcr.io/sig-storage/csi-provisioner
-    tag: "v3.1.0"
+    tag: "v3.1.1"
     pullPolicy: IfNotPresent
   csiAttacher:
     repo: k8s.gcr.io/sig-storage/csi-attacher
-    tag: "v3.4.0"
+    tag: "v3.5.0"
     pullPolicy: IfNotPresent
   csiResizer:
     repo: k8s.gcr.io/sig-storage/csi-resizer
-    tag: "v1.4.0"
+    tag: "v1.5.0"
     pullPolicy: IfNotPresent
   csiSnapshotter:
     repo: k8s.gcr.io/sig-storage/csi-snapshotter
-    tag: "v4.0.1"
+    tag: "v6.0.1"
     pullPolicy: IfNotPresent
   csiNodeRegistrar:
     repo: k8s.gcr.io/sig-storage/csi-node-driver-registrar
-    tag: "v2.5.0"
+    tag: "v2.5.1"
     pullPolicy: IfNotPresent
   gcepdDriver:
     repo: ghcr.io/edgelesssys/constellation/gcp-csi-driver
     # CSI driver version is independent of Constellation releases
-    tag: "v1.0.0"
+    tag: "v1.1.0"
     pullPolicy: IfNotPresent
 
 csiController:

cli/internal/helm/testdata/GCP/constellation-services/charts/gcp-compute-persistent-disk-csi-driver/templates/node.yaml

@@ -34,13 +34,6 @@ spec:
               mountPath: /csi
             - name: registration-dir
               mountPath: /registration
-          livenessProbe:
-            initialDelaySeconds: 3
-            exec:
-              command:
-                - /csi-node-driver-registrar
-                - --kubelet-registration-path=/var/lib/kubelet/plugins/gcp.csi.confidential.cloud/csi.sock
-                - --mode=kubelet-registration-probe
         - name: gce-pd-driver
           image: csi-driver:v0.0.0
           imagePullPolicy: IfNotPresent
@@ -62,16 +55,14 @@ spec:
             # The following mounts are required to trigger host udevadm from
             # container
             # But we don't want that, because it breaks cryptsetup
-            # Also, the task done by manually triggering udevadm are already
-            # performed by having the correct udev rules configured
             # - name: udev-rules-etc
             #   mountPath: /etc/udev
             # - name: udev-rules-lib
             #   mountPath: /lib/udev
             # - name: udev-socket
             #   mountPath: /run/udev
-            # - name: sys
-            #   mountPath: /sys
+            - name: sys
+              mountPath: /sys
             - name: cryptsetup
               mountPath: /run/cryptsetup
       volumes:
@@ -94,8 +85,6 @@ spec:
         # The following mounts are required to trigger host udevadm from
         # container
         # But we don't want that, because it breaks cryptsetup
-        # Also, the task done by manually triggering udevadm are already
-        # performed by having the correct udev rules configured
         # - name: udev-rules-etc
         #   hostPath:
         #     path: /etc/udev

cli/internal/helm/update-csi-charts.sh

@@ -48,7 +48,7 @@ download_chart() {
 
 ## GCP CSI Driver
 # TODO: clone from main branch once we rebase on upstream
-download_chart "https://github.com/edgelesssys/constellation-gcp-compute-persistent-disk-csi-driver" "develop" "charts" "gcp-compute-persistent-disk-csi-driver"
+download_chart "https://github.com/edgelesssys/constellation-gcp-compute-persistent-disk-csi-driver" "v1.1.0" "charts" "gcp-compute-persistent-disk-csi-driver"
 
 ## Azure CSI Driver
 # TODO: clone from main branch once we rebase on upstream