Secrets Store CSI Driver ConfigHub Proof Transcript

Run date: 2026-05-27

Receipts:

runs/secrets-store-csi-driver-confighub-proof/latest/confighub-proof-receipt.yaml
runs/secrets-store-csi-driver-confighub-proof/latest/function-scan-receipt.yaml
runs/secrets-store-csi-driver-confighub-proof/latest/safe-ops-receipt.yaml

Commands

New to cub? Install the cub CLI first. Public catalog packages pull and render anonymously, and you sign in only once a command saves or changes ConfigHub data.

Here is what the command does. cub installer is an open-source plugin for the cub CLI. cub installer setup pulls a catalog package and writes its Kubernetes files locally, leaving delivery to kubectl, Argo CD or Flux. The generated scripts stop before doing any work when the plugin or kustomize is missing.

cub installer doc packages/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0 --json
cub installer setup --pull packages/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0 --base default --work-dir .tmp/confighub-proof/secrets-store-csi-driver-default --non-interactive --namespace kube-system
cub installer render --work-dir .tmp/confighub-proof/secrets-store-csi-driver-default
cub installer package packages/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0 -o .tmp/confighub-proof/secrets-store-csi-driver-archives/secrets-store-csi-driver-a.tgz
cub installer upload --work-dir .tmp/confighub-proof/secrets-store-csi-driver-default --space helm-secrets-store-csi-driver-confighub-proof --component SecretsStoreCSIDriver --layer App --environment Demo --owner ConfigHubHelm --variant default --unit-label Component=SecretsStoreCSIDriver --unit-label HelmChart=secrets-store-csi-driver-secrets-store-csi-driver --unit-label HelmChartVersion=1.6.0 --unit-label Variant=default --unit-label Proof=secrets-store-csi-driver-confighub-proof --retry
cub installer plan --work-dir .tmp/confighub-proof/secrets-store-csi-driver-default
cub variant create staging helm-secrets-store-csi-driver-confighub-proof --environment Staging --region local --namespace kube-system --space-pattern template:{{.Labels.Component}}-{{.Labels.Variant}} --allow-exists --wait --timeout 10m
cub unit list --space helm-secrets-store-csi-driver-confighub-proof --where "Labels.Proof = 'secrets-store-csi-driver-confighub-proof'"
cub function vet vet-format --space helm-secrets-store-csi-driver-confighub-proof --where "Labels.Proof = 'secrets-store-csi-driver-confighub-proof'"
cub unit apply --space helm-secrets-store-csi-driver-confighub-proof --where "Labels.Proof = 'secrets-store-csi-driver-confighub-proof'" --dry-run

Result

rendered objects: 11
separated secrets: 0
ConfigHub Units: 12
Kubernetes Units: 11
installer record Units: 1
staging clone Units: 12
function scan: pass
safe ops: pass