Skip to content

Commit 212b4a1

Browse files
vshn-renovatevshn-renovate
committed
Update Helm release external-secrets to v0.20.1
Signed-off-by: Renovate Bot <[email protected]>
1 parent adbf41b commit 212b4a1

File tree

69 files changed

+6019
-445
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

69 files changed

+6019
-445
lines changed

‎class/defaults.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ parameters:
1313
charts:
1414
external-secrets:
1515
source: https://charts.external-secrets.io
16-
version: 0.18.0
16+
version: 0.20.1
1717

1818
helm_values:
1919
image:

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/cert-controller-deployment.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ metadata:
55
app.kubernetes.io/instance: external-secrets
66
app.kubernetes.io/managed-by: Helm
77
app.kubernetes.io/name: external-secrets-cert-controller
8-
app.kubernetes.io/version: v0.18.0
9-
helm.sh/chart: external-secrets-0.18.0
8+
app.kubernetes.io/version: v0.20.1
9+
helm.sh/chart: external-secrets-0.20.1
1010
name: external-secrets-cert-controller
1111
namespace: syn-external-secrets-operator
1212
spec:
@@ -22,8 +22,8 @@ spec:
2222
app.kubernetes.io/instance: external-secrets
2323
app.kubernetes.io/managed-by: Helm
2424
app.kubernetes.io/name: external-secrets-cert-controller
25-
app.kubernetes.io/version: v0.18.0
26-
helm.sh/chart: external-secrets-0.18.0
25+
app.kubernetes.io/version: v0.20.1
26+
helm.sh/chart: external-secrets-0.20.1
2727
spec:
2828
automountServiceAccountToken: true
2929
containers:
@@ -39,7 +39,7 @@ spec:
3939
- --loglevel=info
4040
- --zap-time-encoding=epoch
4141
- --enable-partial-cache=true
42-
image: oci.external-secrets.io/external-secrets/external-secrets:v0.18.0
42+
image: oci.external-secrets.io/external-secrets/external-secrets:v0.20.1
4343
imagePullPolicy: IfNotPresent
4444
name: cert-controller
4545
ports:

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/cert-controller-rbac.yaml‎

Lines changed: 12 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ metadata:
55
app.kubernetes.io/instance: external-secrets
66
app.kubernetes.io/managed-by: Helm
77
app.kubernetes.io/name: external-secrets-cert-controller
8-
app.kubernetes.io/version: v0.18.0
9-
helm.sh/chart: external-secrets-0.18.0
8+
app.kubernetes.io/version: v0.20.1
9+
helm.sh/chart: external-secrets-0.20.1
1010
name: external-secrets-cert-controller
1111
rules:
1212
- apiGroups:
@@ -45,6 +45,14 @@ rules:
4545
- list
4646
- get
4747
- watch
48+
- apiGroups:
49+
- discovery.k8s.io
50+
resources:
51+
- endpointslices
52+
verbs:
53+
- list
54+
- get
55+
- watch
4856
- apiGroups:
4957
- ''
5058
resources:
@@ -79,8 +87,8 @@ metadata:
7987
app.kubernetes.io/instance: external-secrets
8088
app.kubernetes.io/managed-by: Helm
8189
app.kubernetes.io/name: external-secrets-cert-controller
82-
app.kubernetes.io/version: v0.18.0
83-
helm.sh/chart: external-secrets-0.18.0
90+
app.kubernetes.io/version: v0.20.1
91+
helm.sh/chart: external-secrets-0.20.1
8492
name: external-secrets-cert-controller
8593
roleRef:
8694
apiGroup: rbac.authorization.k8s.io

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/cert-controller-serviceaccount.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ metadata:
55
app.kubernetes.io/instance: external-secrets
66
app.kubernetes.io/managed-by: Helm
77
app.kubernetes.io/name: external-secrets-cert-controller
8-
app.kubernetes.io/version: v0.18.0
9-
helm.sh/chart: external-secrets-0.18.0
8+
app.kubernetes.io/version: v0.20.1
9+
helm.sh/chart: external-secrets-0.20.1
1010
name: external-secrets-cert-controller
1111
namespace: syn-external-secrets-operator

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/crds/acraccesstoken.yaml‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
22
kind: CustomResourceDefinition
33
metadata:
44
annotations:
5-
controller-gen.kubebuilder.io/version: v0.18.0
5+
controller-gen.kubebuilder.io/version: v0.19.0
66
labels:
77
external-secrets.io/component: controller
88
name: acraccesstokens.generators.external-secrets.io
@@ -183,6 +183,7 @@ spec:
183183
- USGovernmentCloud
184184
- ChinaCloud
185185
- GermanCloud
186+
- AzureStackCloud
186187
type: string
187188
registry:
188189
description: |-

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/crds/cloudsmithaccesstoken.yaml‎

Lines changed: 95 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,95 @@
1+
apiVersion: apiextensions.k8s.io/v1
2+
kind: CustomResourceDefinition
3+
metadata:
4+
annotations:
5+
controller-gen.kubebuilder.io/version: v0.19.0
6+
labels:
7+
external-secrets.io/component: controller
8+
name: cloudsmithaccesstokens.generators.external-secrets.io
9+
spec:
10+
group: generators.external-secrets.io
11+
names:
12+
categories:
13+
- external-secrets
14+
- external-secrets-generators
15+
kind: CloudsmithAccessToken
16+
listKind: CloudsmithAccessTokenList
17+
plural: cloudsmithaccesstokens
18+
singular: cloudsmithaccesstoken
19+
scope: Namespaced
20+
versions:
21+
- name: v1alpha1
22+
schema:
23+
openAPIV3Schema:
24+
description: CloudsmithAccessToken generates Cloudsmith access token using
25+
OIDC authentication
26+
properties:
27+
apiVersion:
28+
description: |-
29+
APIVersion defines the versioned schema of this representation of an object.
30+
Servers should convert recognized schemas to the latest internal value, and
31+
may reject unrecognized values.
32+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
33+
type: string
34+
kind:
35+
description: |-
36+
Kind is a string value representing the REST resource this object represents.
37+
Servers may infer this from the endpoint the client submits requests to.
38+
Cannot be updated.
39+
In CamelCase.
40+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
41+
type: string
42+
metadata:
43+
type: object
44+
spec:
45+
properties:
46+
apiUrl:
47+
description: APIURL configures the Cloudsmith API URL. Defaults
48+
to https://api.cloudsmith.io.
49+
type: string
50+
orgSlug:
51+
description: OrgSlug is the organization slug in Cloudsmith
52+
type: string
53+
serviceAccountRef:
54+
description: Name of the service account you are federating with
55+
properties:
56+
audiences:
57+
description: |-
58+
Audience specifies the `aud` claim for the service account token
59+
If the service account uses a well-known annotation for e.g. IRSA or GCP Workload Identity
60+
then this audiences will be appended to the list
61+
items:
62+
type: string
63+
type: array
64+
name:
65+
description: The name of the ServiceAccount resource being referred
66+
to.
67+
maxLength: 253
68+
minLength: 1
69+
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
70+
type: string
71+
namespace:
72+
description: |-
73+
Namespace of the resource being referred to.
74+
Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
75+
maxLength: 63
76+
minLength: 1
77+
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
78+
type: string
79+
required:
80+
- name
81+
type: object
82+
serviceSlug:
83+
description: ServiceSlug is the service slug in Cloudsmith for OIDC
84+
authentication
85+
type: string
86+
required:
87+
- orgSlug
88+
- serviceAccountRef
89+
- serviceSlug
90+
type: object
91+
type: object
92+
served: true
93+
storage: true
94+
subresources:
95+
status: {}

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/crds/clusterexternalsecret.yaml‎

Lines changed: 43 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
22
kind: CustomResourceDefinition
33
metadata:
44
annotations:
5-
controller-gen.kubebuilder.io/version: v0.18.0
5+
controller-gen.kubebuilder.io/version: v0.19.0
66
labels:
77
external-secrets.io/component: controller
88
name: clusterexternalsecrets.external-secrets.io
@@ -164,12 +164,14 @@ spec:
164164
enum:
165165
- ACRAccessToken
166166
- ClusterGenerator
167+
- CloudsmithAccessToken
167168
- ECRAuthorizationToken
168169
- Fake
169170
- GCRAccessToken
170171
- GithubAccessToken
171172
- QuayAccessToken
172173
- Password
174+
- SSHKey
173175
- STSSessionToken
174176
- UUID
175177
- VaultDynamicSecret
@@ -306,7 +308,37 @@ spec:
306308
Used to rewrite secret Keys after getting them from the secret Provider
307309
Multiple Rewrite operations can be provided. They are applied in a layered order (first to last)
308310
items:
311+
maxProperties: 1
312+
minProperties: 1
309313
properties:
314+
merge:
315+
description: |-
316+
Used to merge key/values in one single Secret
317+
The resulting key will contain all values from the specified secrets
318+
properties:
319+
conflictPolicy:
320+
default: Error
321+
description: Used to define the policy to use
322+
in conflict resolution.
323+
type: string
324+
into:
325+
default: ''
326+
description: |-
327+
Used to define the target key of the merge operation.
328+
Required if strategy is JSON. Ignored otherwise.
329+
type: string
330+
priority:
331+
description: Used to define key priority in
332+
conflict resolution.
333+
items:
334+
type: string
335+
type: array
336+
strategy:
337+
default: Extract
338+
description: Used to define the strategy to
339+
use in the merge operation.
340+
type: string
341+
type: object
310342
regexp:
311343
description: |-
312344
Used to rewrite with regular expressions.
@@ -365,12 +397,14 @@ spec:
365397
enum:
366398
- ACRAccessToken
367399
- ClusterGenerator
400+
- CloudsmithAccessToken
368401
- ECRAuthorizationToken
369402
- Fake
370403
- GCRAccessToken
371404
- GithubAccessToken
372405
- QuayAccessToken
373406
- Password
407+
- SSHKey
374408
- STSSessionToken
375409
- UUID
376410
- VaultDynamicSecret
@@ -523,6 +557,10 @@ spec:
523557
additionalProperties:
524558
type: string
525559
type: object
560+
finalizers:
561+
items:
562+
type: string
563+
type: array
526564
labels:
527565
additionalProperties:
528566
type: string
@@ -938,6 +976,7 @@ spec:
938976
- GithubAccessToken
939977
- QuayAccessToken
940978
- Password
979+
- SSHKey
941980
- STSSessionToken
942981
- UUID
943982
- VaultDynamicSecret
@@ -1073,6 +1112,8 @@ spec:
10731112
Used to rewrite secret Keys after getting them from the secret Provider
10741113
Multiple Rewrite operations can be provided. They are applied in a layered order (first to last)
10751114
items:
1115+
maxProperties: 1
1116+
minProperties: 1
10761117
properties:
10771118
regexp:
10781119
description: |-
@@ -1138,6 +1179,7 @@ spec:
11381179
- GithubAccessToken
11391180
- QuayAccessToken
11401181
- Password
1182+
- SSHKey
11411183
- STSSessionToken
11421184
- UUID
11431185
- VaultDynamicSecret

0 commit comments

Comments
 (0)