Skip to content

SSCSI-235: Add OpenShift Console QuickStart guides for Secrets Store CSI Driver - #94

Merged
openshift-merge-bot[bot] merged 1 commit into
openshift:mainfrom
chiragkyal:add-quickstart
Nov 24, 2025
Merged

SSCSI-235: Add OpenShift Console QuickStart guides for Secrets Store CSI Driver#94
openshift-merge-bot[bot] merged 1 commit into
openshift:mainfrom
chiragkyal:add-quickstart

Conversation

@chiragkyal

@chiragkyal chiragkyal commented Nov 20, 2025

Copy link
Copy Markdown
Member

Description

This PR adds OpenShift Console QuickStart guides to provide an interactive, step-by-step experience for getting started with the Secrets Store CSI Driver Operator.

What's Added

  1. Installation QuickStart (sscsi-install-quickstart.yaml)
  2. Example Usage QuickStart (sscsi-example-quickstart.yaml)
  3. Sample YAML (sscsi-sample-secretproviderclass-vault.yaml)

Usage

oc apply -f demo/console/quick-start/secrets-store-csi/

Access from OpenShift Console under "Quick Starts" menu.

image image

/cc @mytreya-rh

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Nov 20, 2025
@openshift-ci-robot

openshift-ci-robot commented Nov 20, 2025

Copy link
Copy Markdown

@chiragkyal: This pull request references SSCSI-235 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the task to target the "4.21.0" version, but no target version was set.

Details

In response to this:

Description

This PR adds OpenShift Console QuickStart guides to provide an interactive, step-by-step experience for getting started with the Secrets Store CSI Driver Operator.

What's Added

  1. Installation QuickStart (sscsi-install-quickstart.yaml)
  2. Example Usage QuickStart (sscsi-example-quickstart.yaml)
  3. Sample YAML (sscsi-sample-secretproviderclass-vault.yaml)

Usage

oc apply -f demo/console/quick-start/secrets-store-csi/

Access from OpenShift Console under "Quick Starts" menu.

/cc @mytreya-rh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci
openshift-ci Bot requested a review from mytreya-rh November 20, 2025 15:08
@coderabbitai

coderabbitai Bot commented Nov 20, 2025

Copy link
Copy Markdown

Walkthrough

Adds OpenShift Console quick-start content and examples for the Secrets Store CSI Driver: README note and multiple ConsoleQuickStart and ConsoleYAMLSample manifests covering operator install, usage, and provider-specific SecretProviderClass examples.

Changes

Cohort / File(s) Summary
README
demo/console/README.md
Adds a QuickStarts section describing included sample manifests and how to install them via oc apply -f.
ConsoleQuickStart manifests
demo/console/quick-start/secrets-store-csi/sscsi-install-quickstart.yaml, demo/console/quick-start/secrets-store-csi/sscsi-example-quickstart.yaml
Adds two ConsoleQuickStart resources: one to guide installation of the Secrets Store CSI Driver Operator and ClusterCSIDriver, and one to guide deploying/consuming secrets via SecretProviderClass with stepwise tasks and verification steps.
ConsoleYAMLSample — Vault
demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-vault.yaml
Adds a ConsoleYAMLSample demonstrating a Vault SecretProviderClass with placeholders for vault address, role, objects, and secret mappings.
ConsoleYAMLSample — AWS
demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-aws.yaml
Adds a ConsoleYAMLSample demonstrating an AWS Secrets Manager / SSM SecretProviderClass example (region, objects).
ConsoleYAMLSample — Azure
demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-azure.yaml
Adds a ConsoleYAMLSample demonstrating an Azure Key Vault SecretProviderClass (clientID, keyvaultName, tenantId, objects).
ConsoleYAMLSample — GCP
demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-gcp.yaml
Adds a ConsoleYAMLSample demonstrating a GCP Secret Manager SecretProviderClass with placeholders for project, secret, version, and file name.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

  • Verify ConsoleQuickStart structure and required fields match OpenShift console schema.
  • Validate YAML syntax for all added manifests.
  • Check placeholder values and example manifests for correctness and clarity.
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

Cache: Disabled due to data retention organization setting

Knowledge base: Disabled due to Reviews -> Disable Knowledge Base setting

📥 Commits

Reviewing files that changed from the base of the PR and between f0f5381 and cc4e432.

📒 Files selected for processing (7)
  • demo/console/README.md (1 hunks)
  • demo/console/quick-start/secrets-store-csi/sscsi-example-quickstart.yaml (1 hunks)
  • demo/console/quick-start/secrets-store-csi/sscsi-install-quickstart.yaml (1 hunks)
  • demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-aws.yaml (1 hunks)
  • demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-azure.yaml (1 hunks)
  • demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-gcp.yaml (1 hunks)
  • demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-vault.yaml (1 hunks)
✅ Files skipped from review due to trivial changes (1)
  • demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-azure.yaml
🚧 Files skipped from review as they are similar to previous changes (2)
  • demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-vault.yaml
  • demo/console/quick-start/secrets-store-csi/sscsi-example-quickstart.yaml
🧰 Additional context used
📓 Path-based instructions (1)
**

⚙️ CodeRabbit configuration file

-Focus on major issues impacting performance, readability, maintainability and security. Avoid nitpicks and avoid verbosity.

Files:

  • demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-gcp.yaml
  • demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-aws.yaml
  • demo/console/quick-start/secrets-store-csi/sscsi-install-quickstart.yaml
  • demo/console/README.md
🪛 markdownlint-cli2 (0.18.1)
demo/console/README.md

9-9: Fenced code blocks should have a language specified

(MD040, fenced-code-language)

🔇 Additional comments (3)
demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-aws.yaml (1)

1-26: LGTM!

The manifest structure is correct, with proper ConsoleYAMLSample metadata, targetResource references, and well-templated AWS configuration including both Secrets Manager and SSM Parameter object types.

demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-gcp.yaml (1)

1-23: LGTM!

The manifest structure is correct and follows OpenShift ConsoleYAMLSample conventions. The GCP configuration with resourceName in project path format is appropriate.

demo/console/quick-start/secrets-store-csi/sscsi-install-quickstart.yaml (1)

25-75: Manifest content is well-structured.

The QuickStart tasks, review sections, and navigation instructions are clearly written and follow the ConsoleQuickStart pattern appropriately.


Comment @coderabbitai help to get the list of available commands and usage tips.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 4

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

Cache: Disabled due to data retention organization setting

Knowledge base: Disabled due to Reviews -> Disable Knowledge Base setting

📥 Commits

Reviewing files that changed from the base of the PR and between 1ed1d06 and f0f5381.

📒 Files selected for processing (4)
  • demo/console/README.md (1 hunks)
  • demo/console/quick-start/secrets-store-csi/sscsi-example-quickstart.yaml (1 hunks)
  • demo/console/quick-start/secrets-store-csi/sscsi-install-quickstart.yaml (1 hunks)
  • demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-vault.yaml (1 hunks)
🧰 Additional context used
📓 Path-based instructions (1)
**

⚙️ CodeRabbit configuration file

-Focus on major issues impacting performance, readability, maintainability and security. Avoid nitpicks and avoid verbosity.

Files:

  • demo/console/README.md
  • demo/console/quick-start/secrets-store-csi/sscsi-example-quickstart.yaml
  • demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-vault.yaml
  • demo/console/quick-start/secrets-store-csi/sscsi-install-quickstart.yaml
🪛 markdownlint-cli2 (0.18.1)
demo/console/README.md

9-9: Fenced code blocks should have a language specified

(MD040, fenced-code-language)

🔇 Additional comments (3)
demo/console/quick-start/secrets-store-csi/sscsi-sample-secretproviderclass-vault.yaml (1)

1-26: LGTM!

The ConsoleYAMLSample manifest is well-structured with clear placeholders and proper metadata. The Vault SecretProviderClass template provides good guidance for users.

demo/console/quick-start/secrets-store-csi/sscsi-example-quickstart.yaml (1)

1-138: Task workflow and structure are well-designed.

The four-task progression (verify operator → select project → create SecretProviderClass → deploy sample app) logically guides users through the operator's core concepts. Review sections with verification steps and helpful failure messages improve usability.

demo/console/quick-start/secrets-store-csi/sscsi-install-quickstart.yaml (1)

25-74: Two-task installation workflow is clear and well-documented.

The sequential tasks (install operator → deploy ClusterCSIDriver) provide good granularity. Verification steps with specific pod and project checks help users confirm successful deployment. Navigation hints using {{highlight}} markers improve UX.

- From the **top side-scrolling menu bar** click **SecretProviderClass** and then click **Create SecretProviderClass**
2. Fill in the required fields for a `SecretProviderClass` via the form **OR** click the **YAML View** to edit the manifest directly.
- NOTE: this includes knowing several pieces of information to properly fill in the `spec.provider` and `spec.secretObjects` fields.
This will also include, knowing the authentication method for the `provider` and prosessing any necessary credentials,

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Fix typo: "prosessing" → "processing".

Line 71 contains a spelling error in the note about authentication credentials.

Apply this diff:

-          This will also include, knowing the authentication method for the `provider` and prosessing any necessary credentials,
+          This will also include, knowing the authentication method for the `provider` and processing any necessary credentials,
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
This will also include, knowing the authentication method for the `provider` and prosessing any necessary credentials,
This will also include, knowing the authentication method for the `provider` and processing any necessary credentials,
🤖 Prompt for AI Agents
In demo/console/quick-start/secrets-store-csi/sscsi-example-quickstart.yaml
around line 71, there is a spelling mistake: replace "prosessing" with the
correct word "processing" so the note reads about knowing the authentication
method for the `provider` and processing any necessary credentials.

@@ -0,0 +1,75 @@
apiVersion: console.openshift.io/v1

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

Remove BOM character from file start.

Line 1 begins with a UTF-8 BOM character () before apiVersion. Remove it to prevent parsing issues in YAML validators and tools.

Ensure the file starts directly with apiVersion: without any BOM prefix.

🤖 Prompt for AI Agents
In demo/console/quick-start/secrets-store-csi/sscsi-install-quickstart.yaml
around lines 1 to 1 the file begins with a UTF-8 BOM character (U+FEFF) before
"apiVersion", which can break YAML parsers; remove the BOM so the file starts
directly with "apiVersion:" (re-save the file without BOM / use an editor or
tool to strip the BOM or run a quick bytes-level replace to delete the leading
U+FEFF).

Comment thread demo/console/README.md
Comment on lines +9 to +10
```
oc apply -f /path/to/quickstart.yaml

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Specify language for the code block.

Per markdown linting rules (MD040), fenced code blocks should have a language identifier.

Apply this diff:

-```
+```bash
 oc apply -f /path/to/quickstart.yaml
-```
+```
🧰 Tools
🪛 markdownlint-cli2 (0.18.1)

9-9: Fenced code blocks should have a language specified

(MD040, fenced-code-language)

🤖 Prompt for AI Agents
In demo/console/README.md around lines 9 to 10, the fenced code block lacks a
language identifier; update the opening fence to include "bash" (i.e., change
``` to ```bash) so the block follows MD040 lint rules and keep the closing fence
unchanged, ensuring the code block renders with Bash syntax highlighting.

@openshift-ci

openshift-ci Bot commented Nov 20, 2025

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: chiragkyal

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Nov 20, 2025
Signed-off-by: chiragkyal <ckyal@redhat.com>
@openshift-ci-robot

openshift-ci-robot commented Nov 24, 2025

Copy link
Copy Markdown

@chiragkyal: This pull request references SSCSI-235 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the task to target the "4.21.0" version, but no target version was set.

Details

In response to this:

Description

This PR adds OpenShift Console QuickStart guides to provide an interactive, step-by-step experience for getting started with the Secrets Store CSI Driver Operator.

What's Added

  1. Installation QuickStart (sscsi-install-quickstart.yaml)
  2. Example Usage QuickStart (sscsi-example-quickstart.yaml)
  3. Sample YAML (sscsi-sample-secretproviderclass-vault.yaml)

Usage

oc apply -f demo/console/quick-start/secrets-store-csi/

Access from OpenShift Console under "Quick Starts" menu.

image

/cc @mytreya-rh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot

openshift-ci-robot commented Nov 24, 2025

Copy link
Copy Markdown

@chiragkyal: This pull request references SSCSI-235 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the task to target the "4.21.0" version, but no target version was set.

Details

In response to this:

Description

This PR adds OpenShift Console QuickStart guides to provide an interactive, step-by-step experience for getting started with the Secrets Store CSI Driver Operator.

What's Added

  1. Installation QuickStart (sscsi-install-quickstart.yaml)
  2. Example Usage QuickStart (sscsi-example-quickstart.yaml)
  3. Sample YAML (sscsi-sample-secretproviderclass-vault.yaml)

Usage

oc apply -f demo/console/quick-start/secrets-store-csi/

Access from OpenShift Console under "Quick Starts" menu.

image image

/cc @mytreya-rh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@mytreya-rh

Copy link
Copy Markdown
Contributor

/lgtm

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Nov 24, 2025
@emmajiafan

Copy link
Copy Markdown

/verified by jfan

@openshift-ci-robot openshift-ci-robot added the verified Signifies that the PR passed pre-merge verification criteria label Nov 24, 2025
@openshift-ci-robot

Copy link
Copy Markdown

@emmajiafan: This PR has been marked as verified by jfan.

Details

In response to this:

/verified by jfan

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@chiragkyal

Copy link
Copy Markdown
Member Author

/skip

@chiragkyal

Copy link
Copy Markdown
Member Author

/retest

1 similar comment
@chiragkyal

Copy link
Copy Markdown
Member Author

/retest

@openshift-ci-robot

Copy link
Copy Markdown

/retest-required

Remaining retests: 0 against base HEAD a504fc5 and 2 for PR HEAD cc4e432 in total

@openshift-ci

openshift-ci Bot commented Nov 24, 2025

Copy link
Copy Markdown
Contributor

@chiragkyal: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@openshift-merge-bot
openshift-merge-bot Bot merged commit 73a99ca into openshift:main Nov 24, 2025
14 checks passed
@chiragkyal
chiragkyal deleted the add-quickstart branch July 6, 2026 11:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged. verified Signifies that the PR passed pre-merge verification criteria

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants