Introduce nodeExpandSecret in CSI PV source

[humblec]

Enhancement Description

CSI spec 1.5 enhanced the spec to add optional secrets field to
NodeExpandVolumeRequest. To support this, we need to have NodeExpandSecret to the
CSI PV source and also derive the expansion secret in csiclient to
send it out as part of the nodeexpand request.

• Kubernetes Enhancement Proposal: https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/3107-csi-nodeexpandsecret/

• Discussion Link: csi: add nodeExpandSecret support for CSI client & add unit test kubernetes#105963 (comment)

• Primary contact (assignee): @humblec

• Responsible SIGs: sig storage

• Enhancement target (which target equals to which milestone):

  • Alpha release target (x.y): 1.25
  • Beta release target (x.y): 1.27
  • Stable release target (x.y): 1.29

• Alpha

  • KEP (k/enhancements) update PR(s):
    • KEP-3107: SecretRef field addition to NodeExpandVolume request #3173
    • KEP-3107: update the test plan for nodeExpandSecret #3359
  • Code (k/k) update PR(s):
    • csi: add nodeExpandSecret support for CSI client & add unit test kubernetes#105963
  • Docs (k/website) update PR(s):
    • csi: add nodeExpandSecret KEP details website#35334
    • Add blog article to announce Secret references in NodeExpandVolume website#33979

• Beta

  • KEP (k/enhancements) update PR(s):
    • KEP-3107: target csiNodeExpandSecret beta in 1.27 #3531
  • Code (k/k) update PR(s):
    • promote CSINodeExpandSecret feature to Beta kubernetes#115621
    • e2e: add e2e test to node expand volume with secret kubernetes#115451
  • Docs (k/website) update PR(s):
    • https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/556-csi-volume-resizing/README.md doc: support 'nodeExpandSecretRef' to nodeExpandVolume #3038

• Stable

  • KEP (k/enhancements) update PR(s):
    • Graduate CSI Node expand secret feature to GA #4239
  • Code (k/k) update PR(s):
    • Promote CSINodeExpandSecret to GA kubernetes#121303
  • Docs (k/website) update PR(s):
    • Promote CSINodeExpandSecret to GA website#43535

• Additional Ref:
  Pass secret in NodeExpansion Call for the CSI driver kubernetes#95367
  Add Secrets in NodeExpandVolumeRequest container-storage-interface/spec#457

Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.

[humblec]

/sig storage

[humblec]

Cc @xing-yang @msau42 @jsafrane @gnufied

[humblec]

Cc @zhucan

[xing-yang]

/milestone v1.24

[msau42]

@humblec do you plan to put together a kep for this?

[humblec]

@humblec do you plan to put together a kep for this?

Yeah, thats the plan @msau42 .

[rhockenbury]

Hi @humblec! 1.24 Enhancements team here. Just checking in as we approach enhancements freeze at 18:00pm PT on Thursday Feb 3rd. This enhancement is targeting alpha for 1.24.

Here’s where this enhancement currently stands:

• Updated KEP file using the latest template has been merged into the k/enhancements repo.
• KEP status is marked as implementable for latest-milestone: 1.24
• KEP has a test plan section filled out.
• KEP has up to date graduation criteria.
• KEP has a production readiness review that has been completed and merged into k/enhancements.

Please plan to submit a KEP and PRR to satisfy this list of requirements. The status of this enhancement is at risk. Thanks!