helm-charts-hardened/charts/spire/charts/spiffe-csi-driver/templates/spiffe-csi-driver.yaml

apiVersion: storage.k8s.io/v1
kind: CSIDriver
metadata:
  name: {{ .Values.pluginName | quote }}
  {{- with .Values.csiDriverLabels }}
  labels:
    {{- toYaml . | nindent 4 }}
  {{- end }}

spec:
  # Only ephemeral, inline volumes are supported. There is no need for a
  # controller to provision and attach volumes.
  attachRequired: false

  # Request the pod information which the CSI driver uses to verify that an
  # ephemeral mount was requested.
  podInfoOnMount: true

  # Don't change ownership on the contents of the mount since the Workload API
  # Unix Domain Socket is typically open to all (i.e. 0777).
  fsGroupPolicy: None

  # Declare support for ephemeral volumes only.
  volumeLifecycleModes:
    - Ephemeral