Skip to content

feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.3.2 ) - autoclosed#398

Closed
flkr-23[bot] wants to merge 1 commit intomainfrom
renovate/external-secrets-1.x
Closed

feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.3.2 ) - autoclosed#398
flkr-23[bot] wants to merge 1 commit intomainfrom
renovate/external-secrets-1.x

Conversation

@flkr-23
Copy link
Contributor

@flkr-23 flkr-23 bot commented Nov 7, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
external-secrets major 0.16.11.3.2

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

external-secrets/external-secrets (external-secrets)

v1.3.2

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.3.2
Image: ghcr.io/external-secrets/external-secrets:v1.3.2-ubi
Image: ghcr.io/external-secrets/external-secrets:v1.3.2-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: external-secrets/external-secrets@v1.3.1...v1.3.2

v1.3.1

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.3.1
Image: ghcr.io/external-secrets/external-secrets:v1.3.1-ubi
Image: ghcr.io/external-secrets/external-secrets:v1.3.1-ubi-boringssl

For a Full release please referre to https://github.com/external-secrets/external-secrets/releases/tag/v1.3.0. This is a fix build for the docker publish flow.

What's Changed

General

Full Changelog: external-secrets/external-secrets@v1.3.0...v1.3.1

v1.2.1

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.2.1
Image: ghcr.io/external-secrets/external-secrets:v1.2.1-ubi
Image: ghcr.io/external-secrets/external-secrets:v1.2.1-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: external-secrets/external-secrets@v1.2.0...v1.2.1

v1.2.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.2.0
Image: ghcr.io/external-secrets/external-secrets:v1.2.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v1.2.0-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: external-secrets/external-secrets@v1.1.1...v1.2.0

v1.1.1

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.1.1
Image: ghcr.io/external-secrets/external-secrets:v1.1.1-ubi
Image: ghcr.io/external-secrets/external-secrets:v1.1.1-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: external-secrets/external-secrets@v1.1.0...v1.1.1

v1.1.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.1.0
Image: ghcr.io/external-secrets/external-secrets:v1.1.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v1.1.0-ubi-boringssl

What's Changed

!NOTE!: During last community meeting we discussed that we are retiring our scarf account. With that, we will be changing back to ghcr.io/external-secrets/external-secrets instead of oci.external-secrets.io/external-secrets/external-secrets.

For now, the old domain will live for a couple months to give people to change back. With this release , the values in the helm chart that define where the image is switched back to ghcr.

The helm-chart itself is served from under github-pages so that does not move.

General
Dependencies

New Contributors

Full Changelog: external-secrets/external-secrets@v1.0.0...v1.1.0

v1.0.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.0.0
Image: ghcr.io/external-secrets/external-secrets:v1.0.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v1.0.0-ubi-boringssl

What's Changed

General
Dependencies
  • chore(deps): bump alpine from 4bcff63 to 4b7ce07 in /hack/api-docs by @​dependabot[bot] in #​5507
  • chore(deps): bump golang from 1.25.2 to 1.25.3 by @​dependabot[bot] in #​5506
  • chore(deps): bump golang from aee43c3 to aee43c3 by @​dependabot[bot] in #​5516
  • chore(deps): bump golang from 1.25.2-bookworm to 1.25.3-bookw

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@flkr-23
Copy link
Contributor Author

flkr-23 bot commented Nov 7, 2025

--- kubernetes/apps/external-secrets/external-secrets/app Kustomization: external-secrets/external-secrets HelmRelease: external-secrets/external-secrets

+++ kubernetes/apps/external-secrets/external-secrets/app Kustomization: external-secrets/external-secrets HelmRelease: external-secrets/external-secrets

@@ -13,13 +13,13 @@

     spec:
       chart: external-secrets
       sourceRef:
         kind: HelmRepository
         name: external-secrets
         namespace: flux-system
-      version: 0.16.1
+      version: 1.3.2
   install:
     remediation:
       retries: 3
   interval: 30m
   upgrade:
     cleanupOnFail: true

@flkr-23
Copy link
Contributor Author

flkr-23 bot commented Nov 7, 2025

--- HelmRelease: external-secrets/external-secrets ClusterRole: external-secrets/external-secrets-cert-controller

+++ HelmRelease: external-secrets/external-secrets ClusterRole: external-secrets/external-secrets-cert-controller

@@ -42,12 +42,20 @@

   - endpoints
   verbs:
   - list
   - get
   - watch
 - apiGroups:
+  - discovery.k8s.io
+  resources:
+  - endpointslices
+  verbs:
+  - list
+  - get
+  - watch
+- apiGroups:
   - ''
   resources:
   - events
   verbs:
   - create
   - patch
--- HelmRelease: external-secrets/external-secrets ClusterRole: external-secrets/external-secrets-controller

+++ HelmRelease: external-secrets/external-secrets ClusterRole: external-secrets/external-secrets-controller

@@ -60,24 +60,27 @@

   - delete
   - deletecollection
 - apiGroups:
   - generators.external-secrets.io
   resources:
   - acraccesstokens
+  - cloudsmithaccesstokens
   - clustergenerators
   - ecrauthorizationtokens
   - fakes
   - gcraccesstokens
   - githubaccesstokens
   - quayaccesstokens
   - passwords
+  - sshkeys
   - stssessiontokens
   - uuids
   - vaultdynamicsecrets
   - webhooks
   - grafanas
+  - mfas
   verbs:
   - get
   - list
   - watch
 - apiGroups:
   - ''
@@ -85,12 +88,19 @@

   - serviceaccounts
   - namespaces
   verbs:
   - get
   - list
   - watch
+- apiGroups:
+  - ''
+  resources:
+  - namespaces
+  verbs:
+  - update
+  - patch
 - apiGroups:
   - ''
   resources:
   - configmaps
   verbs:
   - get
--- HelmRelease: external-secrets/external-secrets ClusterRole: external-secrets/external-secrets-view

+++ HelmRelease: external-secrets/external-secrets ClusterRole: external-secrets/external-secrets-view

@@ -24,22 +24,26 @@

   - watch
   - list
 - apiGroups:
   - generators.external-secrets.io
   resources:
   - acraccesstokens
+  - cloudsmithaccesstokens
   - clustergenerators
   - ecrauthorizationtokens
   - fakes
   - gcraccesstokens
   - githubaccesstokens
   - quayaccesstokens
   - passwords
+  - sshkeys
   - vaultdynamicsecrets
   - webhooks
   - grafanas
   - generatorstates
+  - mfas
+  - uuids
   verbs:
   - get
   - watch
   - list
 
--- HelmRelease: external-secrets/external-secrets ClusterRole: external-secrets/external-secrets-edit

+++ HelmRelease: external-secrets/external-secrets ClusterRole: external-secrets/external-secrets-edit

@@ -25,23 +25,27 @@

   - patch
   - update
 - apiGroups:
   - generators.external-secrets.io
   resources:
   - acraccesstokens
+  - cloudsmithaccesstokens
   - clustergenerators
   - ecrauthorizationtokens
   - fakes
   - gcraccesstokens
   - githubaccesstokens
   - quayaccesstokens
   - passwords
+  - sshkeys
   - vaultdynamicsecrets
   - webhooks
   - grafanas
   - generatorstates
+  - mfas
+  - uuids
   verbs:
   - create
   - delete
   - deletecollection
   - patch
   - update
--- HelmRelease: external-secrets/external-secrets Service: external-secrets/external-secrets-webhook

+++ HelmRelease: external-secrets/external-secrets Service: external-secrets/external-secrets-webhook

@@ -10,13 +10,13 @@

     app.kubernetes.io/managed-by: Helm
     external-secrets.io/component: webhook
 spec:
   type: ClusterIP
   ports:
   - port: 443
-    targetPort: 10250
+    targetPort: webhook
     protocol: TCP
     name: webhook
   selector:
     app.kubernetes.io/name: external-secrets-webhook
     app.kubernetes.io/instance: external-secrets
 
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.16.1
+        image: ghcr.io/external-secrets/external-secrets:v1.3.2
         imagePullPolicy: IfNotPresent
         args:
         - certcontroller
         - --crd-requeue-interval=5m
         - --service-name=external-secrets-webhook
         - --service-namespace=external-secrets
@@ -52,13 +52,16 @@

         - --zap-time-encoding=epoch
         - --enable-partial-cache=true
         ports:
         - containerPort: 8080
           protocol: TCP
           name: metrics
+        - containerPort: 8081
+          protocol: TCP
+          name: ready
         readinessProbe:
           httpGet:
-            port: 8081
+            port: ready
             path: /readyz
           initialDelaySeconds: 20
           periodSeconds: 5
 
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.16.1
+        image: ghcr.io/external-secrets/external-secrets:v1.3.2
         imagePullPolicy: IfNotPresent
         args:
         - --enable-leader-election=true
         - --concurrent=1
         - --metrics-addr=:8080
         - --loglevel=info
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.16.1
+        image: ghcr.io/external-secrets/external-secrets:v1.3.2
         imagePullPolicy: IfNotPresent
         args:
         - webhook
         - --port=10250
         - --dns-name=external-secrets-webhook.external-secrets.svc
         - --cert-dir=/tmp/certs
@@ -53,15 +53,18 @@

         - containerPort: 8080
           protocol: TCP
           name: metrics
         - containerPort: 10250
           protocol: TCP
           name: webhook
+        - containerPort: 8081
+          protocol: TCP
+          name: ready
         readinessProbe:
           httpGet:
-            port: 8081
+            port: ready
             path: /readyz
           initialDelaySeconds: 20
           periodSeconds: 5
         volumeMounts:
         - name: certs
           mountPath: /tmp/certs

@flkr-23 flkr-23 bot changed the title feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.0.0 ) feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.1.0 ) Nov 21, 2025
@flkr-23 flkr-23 bot force-pushed the renovate/external-secrets-1.x branch from da59042 to f0cbdf3 Compare November 21, 2025 15:05
@flkr-23 flkr-23 bot force-pushed the renovate/external-secrets-1.x branch from f0cbdf3 to c6c1d81 Compare December 5, 2025 18:06
@flkr-23 flkr-23 bot changed the title feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.1.0 ) feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.1.1 ) Dec 5, 2025
@flkr-23 flkr-23 bot force-pushed the renovate/external-secrets-1.x branch from c6c1d81 to 762ac0d Compare December 19, 2025 15:05
@flkr-23 flkr-23 bot changed the title feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.1.1 ) feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.2.0 ) Dec 19, 2025
@flkr-23 flkr-23 bot force-pushed the renovate/external-secrets-1.x branch from 762ac0d to 4d4af8c Compare January 2, 2026 23:05
@flkr-23 flkr-23 bot changed the title feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.2.0 ) feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.2.1 ) Jan 2, 2026
@flkr-23 flkr-23 bot changed the title feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.2.1 ) feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.3.1 ) Jan 23, 2026
@flkr-23 flkr-23 bot force-pushed the renovate/external-secrets-1.x branch from 4d4af8c to 5a401ed Compare January 23, 2026 19:08
@flkr-23 flkr-23 bot force-pushed the renovate/external-secrets-1.x branch from 5a401ed to 86206cc Compare February 3, 2026 21:11
@flkr-23 flkr-23 bot changed the title feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.3.1 ) feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.3.2 ) Feb 3, 2026
@flkr-23 flkr-23 bot changed the title feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.3.2 ) feat(helm)!: Update chart external-secrets ( 0.16.1 → 1.3.2 ) - autoclosed Feb 6, 2026
@flkr-23 flkr-23 bot closed this Feb 6, 2026
@flkr-23 flkr-23 bot deleted the renovate/external-secrets-1.x branch February 6, 2026 16:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants