Repository navigation
Update Helm release external-secrets to v2.14.0 - #372
Merged
Merged
Conversation
Argo CD Diff PreviewSummary: Modified (1):
± sandbox-oci-external-secrets (+183|-56)sandbox-oci-external-secrets (applications/appset-ops-tools.yaml)Deployment: external-secrets/sandbox-oci-external-secrets - --metrics-addr=:8080
- --loglevel=info
- --zap-time-encoding=epoch
- image: ghcr.io/external-secrets/external-secrets:v2.13.0
+ image: ghcr.io/external-secrets/external-secrets:v2.14.0
imagePullPolicy: IfNotPresent
name: external-secrets
ports:Deployment: external-secrets/sandbox-oci-external-secrets-cert-controller - --loglevel=info
- --zap-time-encoding=epoch
- --enable-partial-cache=true
- image: ghcr.io/external-secrets/external-secrets:v2.13.0
+ image: ghcr.io/external-secrets/external-secrets:v2.14.0
imagePullPolicy: IfNotPresent
name: cert-controller
ports:Deployment: external-secrets/sandbox-oci-external-secrets-webhook - --healthz-addr=:8081
- --loglevel=info
- --zap-time-encoding=epoch
- image: ghcr.io/external-secrets/external-secrets:v2.13.0
+ image: ghcr.io/external-secrets/external-secrets:v2.14.0
imagePullPolicy: IfNotPresent
name: webhook
ports:CustomResourceDefinition: acraccesstokens.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: acraccesstokens.generators.external-secrets.ioCustomResourceDefinition: beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.ioCustomResourceDefinition: cloudsmithaccesstokens.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: cloudsmithaccesstokens.generators.external-secrets.ioCustomResourceDefinition: clusterexternalsecrets.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: clusterexternalsecrets.external-secrets.ioCustomResourceDefinition: clustergenerators.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: clustergenerators.generators.external-secrets.io
@@ skipped 816 lines (9 -> 824) @@
generate a GitHub access token.
properties:
appID:
+ description: AppID is the GitHub App ID. Exactly one of AppID
+ or AppIDRef must be set.
type: string
+ appIDRef:
+ description: AppIDRef references a secret key containing the
+ GitHub App ID. Exactly one of AppID or AppIDRef must be
+ set.
+ properties:
+ key:
+ description: |-
+ A key in the referenced Secret.
+ Some instances of this field may be defaulted, in others it may be required.
+ maxLength: 253
+ minLength: 1
+ pattern: ^[-._a-zA-Z0-9]+$
+ type: string
+ name:
+ description: The name of the Secret resource being referred
+ to.
+ maxLength: 253
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
+ type: string
+ namespace:
+ description: |-
+ The namespace of the Secret resource being referred to.
+ Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
+ maxLength: 63
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
+ type: string
+ type: object
auth:
description: Auth configures how ESO authenticates with a
Github instance.
@@ skipped 38 lines (863 -> 900) @@
- privateKey
type: object
installID:
+ description: InstallID is the GitHub App installation ID.
+ Exactly one of InstallID or InstallIDRef must be set.
type: string
+ installIDRef:
+ description: |-
+ InstallIDRef references a secret key containing the GitHub App installation ID. Exactly one of InstallID or
+ InstallIDRef must be set.
+ properties:
+ key:
+ description: |-
+ A key in the referenced Secret.
+ Some instances of this field may be defaulted, in others it may be required.
+ maxLength: 253
+ minLength: 1
+ pattern: ^[-._a-zA-Z0-9]+$
+ type: string
+ name:
+ description: The name of the Secret resource being referred
+ to.
+ maxLength: 253
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
+ type: string
+ namespace:
+ description: |-
+ The namespace of the Secret resource being referred to.
+ Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
+ maxLength: 63
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
+ type: string
+ type: object
permissions:
additionalProperties:
type: string
@@ skipped 12 lines (939 -> 950) @@
to https://github.com/.
type: string
required:
- - appID
- auth
- - installID
type: object
+ x-kubernetes-validations:
+ - message: exactly one of the fields in [appID appIDRef] must
+ be set
+ rule: (has(self.appID)?1:0)+(has(self.appIDRef)?1:0) == 1
+ - message: exactly one of the fields in [installID installIDRef]
+ must be set
+ rule: (has(self.installID)?1:0)+(has(self.installIDRef)?1:0)
+ == 1
gitlabDeployTokenSpec:
description: GitlabDeployTokenSpec defines the desired state to
generate a GitLab deploy token.CustomResourceDefinition: clusterpushsecrets.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: clusterpushsecrets.external-secrets.ioCustomResourceDefinition: clustersecretstores.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: clustersecretstores.external-secrets.io
@@ skipped 2498 lines (9 -> 2506) @@
rule: has(self.auth) || has(self.authRef)
- message: at most one of the fields in [auth authRef] may be
set
- rule: '[has(self.auth),has(self.authRef)].filter(x,x==true).size()
- <= 1'
+ rule: (has(self.auth)?1:0)+(has(self.authRef)?1:0) <= 1
delinea:
description: |-
Delinea DevOps Secrets Vault
@@ skipped 2495 lines (2516 -> 5010) @@
x-kubernetes-validations:
- message: at most one of the fields in [vault environment] may
be set
- rule: '[has(self.vault),has(self.environment)].filter(x,x==true).size()
- <= 1'
+ rule: (has(self.vault)?1:0)+(has(self.environment)?1:0) <= 1
openBao:
description: OpenBao configures this store to sync secrets using
the OpenBao provider.
@@ skipped 90 lines (5020 -> 5109) @@
x-kubernetes-validations:
- message: exactly one of the fields in [roleId roleRef]
must be set
- rule: '[has(self.roleId),has(self.roleRef)].filter(x,x==true).size()
- == 1'
+ rule: (has(self.roleId)?1:0)+(has(self.roleRef)?1:0)
+ == 1
kubernetes:
description: |-
Kubernetes authenticates with OpenBao by passing a ServiceAccount
@@ skipped 83 lines (5120 -> 5202) @@
x-kubernetes-validations:
- message: exactly one of the fields in [serviceAccountRef
secretRef] must be set
- rule: '[has(self.serviceAccountRef),has(self.secretRef)].filter(x,x==true).size()
- == 1'
+ rule: (has(self.serviceAccountRef)?1:0)+(has(self.secretRef)?1:0)
+ == 1
namespace:
description: |-
Name of the [OpenBao Namespace] to authenticate to. This can be different
@@ skipped 89 lines (5213 -> 5301) @@
x-kubernetes-validations:
- message: exactly one of the fields in [appRole tokenSecretRef
userPass kubernetes] must be set
- rule: '[has(self.appRole),has(self.tokenSecretRef),has(self.userPass),has(self.kubernetes)].filter(x,x==true).size()
- == 1'
+ rule: (has(self.appRole)?1:0)+(has(self.tokenSecretRef)?1:0)+(has(self.userPass)?1:0)+(has(self.kubernetes)?1:0)
+ == 1
caBundle:
description: |-
PEM encoded CA bundle used to validate the OpenBao server certificate. If
@@ skipped 74 lines (5312 -> 5385) @@
x-kubernetes-validations:
- message: at most one of the fields in [caBundle caProvider]
may be set
- rule: '[has(self.caBundle),has(self.caProvider)].filter(x,x==true).size()
- <= 1'
+ rule: (has(self.caBundle)?1:0)+(has(self.caProvider)?1:0) <=
+ 1
oracle:
description: Oracle configures this store to sync secrets using
Oracle Vault providerCustomResourceDefinition: ecrauthorizationtokens.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: ecrauthorizationtokens.generators.external-secrets.ioCustomResourceDefinition: externalsecrets.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: externalsecrets.external-secrets.ioCustomResourceDefinition: fakes.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: fakes.generators.external-secrets.ioCustomResourceDefinition: gcraccesstokens.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: gcraccesstokens.generators.external-secrets.ioCustomResourceDefinition: generatorstates.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: generatorstates.generators.external-secrets.ioCustomResourceDefinition: githubaccesstokens.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: githubaccesstokens.generators.external-secrets.io
@@ skipped 36 lines (9 -> 44) @@
a GitHub access token.
properties:
appID:
+ description: AppID is the GitHub App ID. Exactly one of AppID or AppIDRef
+ must be set.
type: string
+ appIDRef:
+ description: AppIDRef references a secret key containing the GitHub
+ App ID. Exactly one of AppID or AppIDRef must be set.
+ properties:
+ key:
+ description: |-
+ A key in the referenced Secret.
+ Some instances of this field may be defaulted, in others it may be required.
+ maxLength: 253
+ minLength: 1
+ pattern: ^[-._a-zA-Z0-9]+$
+ type: string
+ name:
+ description: The name of the Secret resource being referred to.
+ maxLength: 253
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
+ type: string
+ namespace:
+ description: |-
+ The namespace of the Secret resource being referred to.
+ Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
+ maxLength: 63
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
+ type: string
+ type: object
auth:
description: Auth configures how ESO authenticates with a Github instance.
properties:
@@ skipped 37 lines (81 -> 117) @@
- privateKey
type: object
installID:
+ description: InstallID is the GitHub App installation ID. Exactly
+ one of InstallID or InstallIDRef must be set.
type: string
+ installIDRef:
+ description: |-
+ InstallIDRef references a secret key containing the GitHub App installation ID. Exactly one of InstallID or
+ InstallIDRef must be set.
+ properties:
+ key:
+ description: |-
+ A key in the referenced Secret.
+ Some instances of this field may be defaulted, in others it may be required.
+ maxLength: 253
+ minLength: 1
+ pattern: ^[-._a-zA-Z0-9]+$
+ type: string
+ name:
+ description: The name of the Secret resource being referred to.
+ maxLength: 253
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
+ type: string
+ namespace:
+ description: |-
+ The namespace of the Secret resource being referred to.
+ Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
+ maxLength: 63
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
+ type: string
+ type: object
permissions:
additionalProperties:
type: string
@@ skipped 11 lines (155 -> 165) @@
description: URL configures the GitHub instance URL. Defaults to https://github.com/.
type: string
required:
- - appID
- auth
- - installID
type: object
+ x-kubernetes-validations:
+ - message: exactly one of the fields in [appID appIDRef] must be set
+ rule: (has(self.appID)?1:0)+(has(self.appIDRef)?1:0) == 1
+ - message: exactly one of the fields in [installID installIDRef] must
+ be set
+ rule: (has(self.installID)?1:0)+(has(self.installIDRef)?1:0) == 1
type: object
served: true
storage: trueCustomResourceDefinition: gitlabdeploytokens.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: gitlabdeploytokens.generators.external-secrets.ioCustomResourceDefinition: grafanas.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: grafanas.generators.external-secrets.ioCustomResourceDefinition: mfas.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: mfas.generators.external-secrets.ioCustomResourceDefinition: passwords.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: passwords.generators.external-secrets.ioCustomResourceDefinition: pushsecrets.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: pushsecrets.external-secrets.ioCustomResourceDefinition: quayaccesstokens.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: quayaccesstokens.generators.external-secrets.ioCustomResourceDefinition: secretstores.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: secretstores.external-secrets.io
@@ skipped 2498 lines (9 -> 2506) @@
rule: has(self.auth) || has(self.authRef)
- message: at most one of the fields in [auth authRef] may be
set
- rule: '[has(self.auth),has(self.authRef)].filter(x,x==true).size()
- <= 1'
+ rule: (has(self.auth)?1:0)+(has(self.authRef)?1:0) <= 1
delinea:
description: |-
Delinea DevOps Secrets Vault
@@ skipped 2495 lines (2516 -> 5010) @@
x-kubernetes-validations:
- message: at most one of the fields in [vault environment] may
be set
- rule: '[has(self.vault),has(self.environment)].filter(x,x==true).size()
- <= 1'
+ rule: (has(self.vault)?1:0)+(has(self.environment)?1:0) <= 1
openBao:
description: OpenBao configures this store to sync secrets using
the OpenBao provider.
@@ skipped 90 lines (5020 -> 5109) @@
x-kubernetes-validations:
- message: exactly one of the fields in [roleId roleRef]
must be set
- rule: '[has(self.roleId),has(self.roleRef)].filter(x,x==true).size()
- == 1'
+ rule: (has(self.roleId)?1:0)+(has(self.roleRef)?1:0)
+ == 1
kubernetes:
description: |-
Kubernetes authenticates with OpenBao by passing a ServiceAccount
@@ skipped 83 lines (5120 -> 5202) @@
x-kubernetes-validations:
- message: exactly one of the fields in [serviceAccountRef
secretRef] must be set
- rule: '[has(self.serviceAccountRef),has(self.secretRef)].filter(x,x==true).size()
- == 1'
+ rule: (has(self.serviceAccountRef)?1:0)+(has(self.secretRef)?1:0)
+ == 1
namespace:
description: |-
Name of the [OpenBao Namespace] to authenticate to. This can be different
@@ skipped 89 lines (5213 -> 5301) @@
x-kubernetes-validations:
- message: exactly one of the fields in [appRole tokenSecretRef
userPass kubernetes] must be set
- rule: '[has(self.appRole),has(self.tokenSecretRef),has(self.userPass),has(self.kubernetes)].filter(x,x==true).size()
- == 1'
+ rule: (has(self.appRole)?1:0)+(has(self.tokenSecretRef)?1:0)+(has(self.userPass)?1:0)+(has(self.kubernetes)?1:0)
+ == 1
caBundle:
description: |-
PEM encoded CA bundle used to validate the OpenBao server certificate. If
@@ skipped 74 lines (5312 -> 5385) @@
x-kubernetes-validations:
- message: at most one of the fields in [caBundle caProvider]
may be set
- rule: '[has(self.caBundle),has(self.caProvider)].filter(x,x==true).size()
- <= 1'
+ rule: (has(self.caBundle)?1:0)+(has(self.caProvider)?1:0) <=
+ 1
oracle:
description: Oracle configures this store to sync secrets using
Oracle Vault providerCustomResourceDefinition: sshkeys.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: sshkeys.generators.external-secrets.ioCustomResourceDefinition: stssessiontokens.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: stssessiontokens.generators.external-secrets.ioCustomResourceDefinition: uuids.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: uuids.generators.external-secrets.ioCustomResourceDefinition: vaultdynamicsecrets.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: vaultdynamicsecrets.generators.external-secrets.ioCustomResourceDefinition: webhooks.generators.external-secrets.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.19.0
+ controller-gen.kubebuilder.io/version: v0.23.0
labels:
external-secrets.io/component: controller
name: webhooks.generators.external-secrets.ioStats: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.13.0→2.14.0Release Notes
external-secrets/external-secrets (external-secrets)
v2.14.0Compare Source
Image:
ghcr.io/external-secrets/external-secrets:v2.14.0Image:
ghcr.io/external-secrets/external-secrets:v2.14.0-ubiImage:
ghcr.io/external-secrets/external-secrets:v2.14.0-ubi-boringsslWhat's Changed
General
Dependencies
803a35ato16e9e43by @dependabot[bot] in #7108New Contributors
Full Changelog: external-secrets/external-secrets@v2.13.0...v2.14.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.