diff --git a/go.mod b/go.mod
index de095f460..f4c5ef52b 100644
--- a/go.mod
+++ b/go.mod
@@ -3,7 +3,7 @@ module github.com/ceph/ceph-csi
 go 1.18
 
 require (
-	github.com/IBM/keyprotect-go-client v0.9.0
+	github.com/IBM/keyprotect-go-client v0.9.1
 	github.com/aws/aws-sdk-go v1.44.146
 	github.com/aws/aws-sdk-go-v2/service/sts v1.17.6
 	github.com/ceph/ceph-csi/api v0.0.0-00010101000000-000000000000
diff --git a/go.sum b/go.sum
index 3ec1006b0..9d4b66862 100644
--- a/go.sum
+++ b/go.sum
@@ -81,8 +81,8 @@ github.com/DataDog/datadog-go v2.2.0+incompatible/go.mod h1:LButxg5PwREeZtORoXG3
 github.com/DataDog/datadog-go v3.2.0+incompatible/go.mod h1:LButxg5PwREeZtORoXG3tL4fMGNddJ+vMq1mwgfaqoQ=
 github.com/DataDog/zstd v1.4.4/go.mod h1:1jcaCB/ufaK+sKp1NBhlGmpz41jOoPQ35bpF36t7BBo=
 github.com/IBM/keyprotect-go-client v0.5.1/go.mod h1:5TwDM/4FRJq1ZOlwQL1xFahLWQ3TveR88VmL1u3njyI=
-github.com/IBM/keyprotect-go-client v0.9.0 h1:UwbyEHcaGlmLNK7PW0qo9VlxneN+0/2zoGBubHzbtro=
-github.com/IBM/keyprotect-go-client v0.9.0/go.mod h1:yr8h2noNgU8vcbs+vhqoXp3Lmv73PI0zAc6VMgFvWwM=
+github.com/IBM/keyprotect-go-client v0.9.1 h1:uoPmFX3voN/tH0o9+MdmGAI5/Bf1o25qv82QutQzvVU=
+github.com/IBM/keyprotect-go-client v0.9.1/go.mod h1:yr8h2noNgU8vcbs+vhqoXp3Lmv73PI0zAc6VMgFvWwM=
 github.com/Jeffail/gabs v1.1.1 h1:V0uzR08Hj22EX8+8QMhyI9sX2hwRu+/RJhJUmnwda/E=
 github.com/Jeffail/gabs v1.1.1/go.mod h1:6xMvQMK4k33lb7GUUpaAPh6nKMmemQeg5d4gn7/bOXc=
 github.com/Masterminds/semver v1.4.2/go.mod h1:MB6lktGJrhw8PrUyiEoblNEGEQ+RzHPF078ddwwvV3Y=
diff --git a/vendor/github.com/IBM/keyprotect-go-client/.bumpversion.cfg b/vendor/github.com/IBM/keyprotect-go-client/.bumpversion.cfg
new file mode 100644
index 000000000..8c4ca48bc
--- /dev/null
+++ b/vendor/github.com/IBM/keyprotect-go-client/.bumpversion.cfg
@@ -0,0 +1,8 @@
+[bumpversion]
+current_version = 0.9.1
+commit = True
+message = Update version {current_version} -> {new_version} [skip ci]
+
+[bumpversion:file:README.md]
+search = {current_version}
+replace = {new_version}
diff --git a/vendor/github.com/IBM/keyprotect-go-client/.gitattributes b/vendor/github.com/IBM/keyprotect-go-client/.gitattributes
new file mode 100644
index 000000000..7d2b3cf96
--- /dev/null
+++ b/vendor/github.com/IBM/keyprotect-go-client/.gitattributes
@@ -0,0 +1 @@
+*.enc binary
diff --git a/vendor/github.com/IBM/keyprotect-go-client/.gitignore b/vendor/github.com/IBM/keyprotect-go-client/.gitignore
index 548739959..f662033db 100644
--- a/vendor/github.com/IBM/keyprotect-go-client/.gitignore
+++ b/vendor/github.com/IBM/keyprotect-go-client/.gitignore
@@ -42,3 +42,18 @@ cover.*
 **/coverage.out
 **/coverage.tmp
 *.coverprofile
+
+.env
+
+# SDK generator
+.openapi-generator-ignore
+.openapi-generator/VERSION
+
+# IDE files
+*.idea
+*.log
+
+# files produced by "npm install" commands during build
+package.json
+package-lock.json
+node_modules/
\ No newline at end of file
diff --git a/vendor/github.com/IBM/keyprotect-go-client/.npmrc b/vendor/github.com/IBM/keyprotect-go-client/.npmrc
new file mode 100644
index 000000000..9cf949503
--- /dev/null
+++ b/vendor/github.com/IBM/keyprotect-go-client/.npmrc
@@ -0,0 +1 @@
+package-lock=false
\ No newline at end of file
diff --git a/vendor/github.com/IBM/keyprotect-go-client/.releaserc b/vendor/github.com/IBM/keyprotect-go-client/.releaserc
new file mode 100644
index 000000000..f4d095bfb
--- /dev/null
+++ b/vendor/github.com/IBM/keyprotect-go-client/.releaserc
@@ -0,0 +1,23 @@
+{
+  "debug": true,
+  "branches": [ "master" ],
+  "plugins": [
+    "@semantic-release/commit-analyzer",
+    "@semantic-release/release-notes-generator",
+    "@semantic-release/changelog",
+    [
+      "@semantic-release/exec", 
+      {
+        "prepareCmd": "bump2version --allow-dirty --current-version ${lastRelease.version} --new-version ${nextRelease.version} patch"
+      }
+    ],
+    [
+      "@semantic-release/git", 
+      {
+        "assets" : [ "CHANGELOG.md" ],
+        "message": "chore(release): ${nextRelease.version} release notes [skip ci]\n\n${nextRelease.notes}"
+      }
+    ],
+    "@semantic-release/github"
+  ]
+}
\ No newline at end of file
diff --git a/vendor/github.com/IBM/keyprotect-go-client/.travis.yml b/vendor/github.com/IBM/keyprotect-go-client/.travis.yml
index 35b38d341..ee7e31726 100644
--- a/vendor/github.com/IBM/keyprotect-go-client/.travis.yml
+++ b/vendor/github.com/IBM/keyprotect-go-client/.travis.yml
@@ -1,26 +1,47 @@
 language: go
-dist: xenial
+
+dist: bionic
 
 go:
- - 1.17.x
- - 1.18.x
- - 1.19.x
+- 1.17.x
+- 1.18.x
+- 1.19.x
 
 env:
-  - GO111MODULE=on
+  global:
+    - GO111MODULE=on
+
+before_install:
+  - sudo apt-get update
+  - pyenv global 3.8
 
 before_script:
   - GO111MODULE=off go get -u github.com/haya14busa/goverage
 
 install:
   - go build ./...
+  - curl -sfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh| sh -s -- -b $(go env GOPATH)/bin v1.49.0
+  - curl -sfL https://raw.githubusercontent.com/securego/gosec/master/install.sh | sh -s -- -b $(go env GOPATH)/bin
 
 script:
   - $GOPATH/bin/goverage -v -race -coverprofile=cover.out $(go list ./... | grep -v '/vendor|/scripts')
   - go tool cover -func=cover.out
   - go tool cover -html=cover.out -o=cover.html
 
-# FIXME: these scripts don't exist in this repo
-# after_success:
-#   - ./scripts/calculateCoverage.sh
-#   - ./scripts/publishCoverage.sh
+# To enable semantic-release, uncomment these sections.
+before_deploy:
+  - nvm install 14
+  - npm install -g npm@6.x
+  - npm install @semantic-release/changelog
+  - npm install @semantic-release/exec
+  - npm install @semantic-release/git
+  - npm install @semantic-release/github
+  - pip install --user bump2version
+#
+deploy:
+  - provider: script
+    script: npx semantic-release
+    skip_cleanup: true
+    on:
+      go: '1.18.x'
+      branch: master
\ No newline at end of file
diff --git a/vendor/github.com/IBM/keyprotect-go-client/CHANGELOG.md b/vendor/github.com/IBM/keyprotect-go-client/CHANGELOG.md
new file mode 100644
index 000000000..fbbded89c
--- /dev/null
+++ b/vendor/github.com/IBM/keyprotect-go-client/CHANGELOG.md
@@ -0,0 +1,7 @@
+## [0.9.1](https://github.com/IBM/keyprotect-go-client/compare/v0.9.0...v0.9.1) (2022-12-06)
+
+
+### Bug Fixes
+
+* **build:** adding SDK version to README ([#104](https://github.com/IBM/keyprotect-go-client/issues/104)) ([858b1ec](https://github.com/IBM/keyprotect-go-client/commit/858b1ecbb328d4c463b0473a1758141b92e44fe1))
+* **build:** integrate semantic-release based CI/CD ([#99](https://github.com/IBM/keyprotect-go-client/issues/99)) ([7776874](https://github.com/IBM/keyprotect-go-client/commit/77768745c974db99468e98a39f3981e264702609))
diff --git a/vendor/github.com/IBM/keyprotect-go-client/README.md b/vendor/github.com/IBM/keyprotect-go-client/README.md
index 0005f125e..32498649e 100644
--- a/vendor/github.com/IBM/keyprotect-go-client/README.md
+++ b/vendor/github.com/IBM/keyprotect-go-client/README.md
@@ -1,3 +1,5 @@
+# IBM Cloud Go SDK Version 0.9.1
+
 # keyprotect-go-client
 
 [![Build Status](https://travis-ci.com/IBM/keyprotect-go-client.svg?branch=master)](https://travis-ci.com/IBM/keyprotect-go-client)
diff --git a/vendor/modules.txt b/vendor/modules.txt
index d96fae216..068886cca 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -1,4 +1,4 @@
-# github.com/IBM/keyprotect-go-client v0.9.0
+# github.com/IBM/keyprotect-go-client v0.9.1
 ## explicit; go 1.15
 github.com/IBM/keyprotect-go-client
 github.com/IBM/keyprotect-go-client/iam