Skip to content

Commit bda8793

Browse files
DebakelOrakelDebakelOrakel
authored
Merge pull request #2 from projectsyn/commodore-renovate/dependency-external-secrets
Update Helm release external-secrets to v0.18.0
2 parents f09e8a8 + bb6ed99 commit bda8793

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

41 files changed

+423
-127
lines changed

‎class/defaults.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ parameters:
1313
charts:
1414
external-secrets:
1515
source: https://charts.external-secrets.io
16-
version: v0.17.0
16+
version: 0.18.0
1717

1818
helm_values:
1919
image:

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/cert-controller-deployment.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ metadata:
55
app.kubernetes.io/instance: external-secrets
66
app.kubernetes.io/managed-by: Helm
77
app.kubernetes.io/name: external-secrets-cert-controller
8-
app.kubernetes.io/version: v0.17.0
9-
helm.sh/chart: external-secrets-0.17.0
8+
app.kubernetes.io/version: v0.18.0
9+
helm.sh/chart: external-secrets-0.18.0
1010
name: external-secrets-cert-controller
1111
namespace: syn-external-secrets-operator
1212
spec:
@@ -22,8 +22,8 @@ spec:
2222
app.kubernetes.io/instance: external-secrets
2323
app.kubernetes.io/managed-by: Helm
2424
app.kubernetes.io/name: external-secrets-cert-controller
25-
app.kubernetes.io/version: v0.17.0
26-
helm.sh/chart: external-secrets-0.17.0
25+
app.kubernetes.io/version: v0.18.0
26+
helm.sh/chart: external-secrets-0.18.0
2727
spec:
2828
automountServiceAccountToken: true
2929
containers:
@@ -39,7 +39,7 @@ spec:
3939
- --loglevel=info
4040
- --zap-time-encoding=epoch
4141
- --enable-partial-cache=true
42-
image: oci.external-secrets.io/external-secrets/external-secrets:v0.17.0
42+
image: oci.external-secrets.io/external-secrets/external-secrets:v0.18.0
4343
imagePullPolicy: IfNotPresent
4444
name: cert-controller
4545
ports:

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/cert-controller-rbac.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ metadata:
55
app.kubernetes.io/instance: external-secrets
66
app.kubernetes.io/managed-by: Helm
77
app.kubernetes.io/name: external-secrets-cert-controller
8-
app.kubernetes.io/version: v0.17.0
9-
helm.sh/chart: external-secrets-0.17.0
8+
app.kubernetes.io/version: v0.18.0
9+
helm.sh/chart: external-secrets-0.18.0
1010
name: external-secrets-cert-controller
1111
rules:
1212
- apiGroups:
@@ -79,8 +79,8 @@ metadata:
7979
app.kubernetes.io/instance: external-secrets
8080
app.kubernetes.io/managed-by: Helm
8181
app.kubernetes.io/name: external-secrets-cert-controller
82-
app.kubernetes.io/version: v0.17.0
83-
helm.sh/chart: external-secrets-0.17.0
82+
app.kubernetes.io/version: v0.18.0
83+
helm.sh/chart: external-secrets-0.18.0
8484
name: external-secrets-cert-controller
8585
roleRef:
8686
apiGroup: rbac.authorization.k8s.io

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/cert-controller-serviceaccount.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ metadata:
55
app.kubernetes.io/instance: external-secrets
66
app.kubernetes.io/managed-by: Helm
77
app.kubernetes.io/name: external-secrets-cert-controller
8-
app.kubernetes.io/version: v0.17.0
9-
helm.sh/chart: external-secrets-0.17.0
8+
app.kubernetes.io/version: v0.18.0
9+
helm.sh/chart: external-secrets-0.18.0
1010
name: external-secrets-cert-controller
1111
namespace: syn-external-secrets-operator

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/crds/clusterexternalsecret.yaml‎

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -175,6 +175,7 @@ spec:
175175
- VaultDynamicSecret
176176
- Webhook
177177
- Grafana
178+
- MFA
178179
type: string
179180
name:
180181
description: Specify the name of the generator
@@ -375,6 +376,7 @@ spec:
375376
- VaultDynamicSecret
376377
- Webhook
377378
- Grafana
379+
- MFA
378380
type: string
379381
name:
380382
description: Specify the name of the generator
@@ -1380,9 +1382,8 @@ spec:
13801382
type: object
13811383
type: object
13821384
namespaceSelector:
1383-
description: |-
1384-
The labels to select by to find the Namespaces to create the ExternalSecrets in.
1385-
Deprecated: Use NamespaceSelectors instead.
1385+
description: The labels to select by to find the Namespaces to create
1386+
the ExternalSecrets in
13861387
properties:
13871388
matchExpressions:
13881389
description: matchExpressions is a list of label selector requirements.

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/crds/clustergenerator.yaml‎

Lines changed: 52 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -619,6 +619,57 @@ spec:
619619
- serviceAccount
620620
- url
621621
type: object
622+
mfaSpec:
623+
description: MFASpec controls the behavior of the mfa generator.
624+
properties:
625+
algorithm:
626+
description: Algorithm to use for encoding. Defaults to
627+
SHA1 as per the RFC.
628+
type: string
629+
length:
630+
description: Length defines the token length. Defaults to
631+
6 characters.
632+
type: integer
633+
secret:
634+
description: Secret is a secret selector to a secret containing
635+
the seed secret to generate the TOTP value from.
636+
properties:
637+
key:
638+
description: |-
639+
A key in the referenced Secret.
640+
Some instances of this field may be defaulted, in others it may be required.
641+
maxLength: 253
642+
minLength: 1
643+
pattern: ^[-._a-zA-Z0-9]+$
644+
type: string
645+
name:
646+
description: The name of the Secret resource being referred
647+
to.
648+
maxLength: 253
649+
minLength: 1
650+
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
651+
type: string
652+
namespace:
653+
description: |-
654+
The namespace of the Secret resource being referred to.
655+
Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
656+
maxLength: 63
657+
minLength: 1
658+
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
659+
type: string
660+
type: object
661+
timePeriod:
662+
description: TimePeriod defines how long the token can be
663+
active. Defaults to 30 seconds.
664+
type: integer
665+
when:
666+
description: When defines a time parameter that can be used
667+
to pin the origin time of the generated token.
668+
format: date-time
669+
type: string
670+
required:
671+
- secret
672+
type: object
622673
passwordSpec:
623674
description: PasswordSpec controls the behavior of the password
624675
generator.
@@ -847,11 +898,7 @@ spec:
847898
(such as arn:aws:iam::123456789012:mfa/user)
848899
type: string
849900
sessionDuration:
850-
description: |-
851-
SessionDuration The duration, in seconds, that the credentials should remain valid. Acceptable durations for
852-
IAM user sessions range from 900 seconds (15 minutes) to 129,600 seconds (36 hours), with 43,200 seconds
853-
(12 hours) as the default.
854-
format: int64
901+
format: int32
855902
type: integer
856903
tokenCode:
857904
description: TokenCode is the value provided by the

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/crds/clusterpushsecret.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -275,6 +275,7 @@ spec:
275275
- VaultDynamicSecret
276276
- Webhook
277277
- Grafana
278+
- MFA
278279
type: string
279280
name:
280281
description: Specify the name of the generator resource

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/crds/clustersecretstore.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2709,8 +2709,8 @@ spec:
27092709
type: string
27102710
type: object
27112711
vault:
2712-
description: Vault defines the vault's name to access. Do
2713-
NOT add op:// prefix. This will be done automatically.
2712+
description: Vault defines the vault's name or uuid to access.
2713+
Do NOT add op:// prefix. This will be done automatically.
27142714
type: string
27152715
required:
27162716
- auth

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/crds/externalsecret.yaml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -154,6 +154,7 @@ spec:
154154
- VaultDynamicSecret
155155
- Webhook
156156
- Grafana
157+
- MFA
157158
type: string
158159
name:
159160
description: Specify the name of the generator resource
@@ -351,6 +352,7 @@ spec:
351352
- VaultDynamicSecret
352353
- Webhook
353354
- Grafana
355+
- MFA
354356
type: string
355357
name:
356358
description: Specify the name of the generator resource

‎tests/golden/defaults/external-secrets-operator/external-secrets-operator/10_helm_chart/external-secrets/templates/crds/mfa.yaml‎

Lines changed: 97 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,97 @@
1+
apiVersion: apiextensions.k8s.io/v1
2+
kind: CustomResourceDefinition
3+
metadata:
4+
annotations:
5+
controller-gen.kubebuilder.io/version: v0.18.0
6+
labels:
7+
external-secrets.io/component: controller
8+
name: mfas.generators.external-secrets.io
9+
spec:
10+
group: generators.external-secrets.io
11+
names:
12+
categories:
13+
- external-secrets
14+
- external-secrets-generators
15+
kind: MFA
16+
listKind: MFAList
17+
plural: mfas
18+
singular: mfa
19+
scope: Namespaced
20+
versions:
21+
- name: v1alpha1
22+
schema:
23+
openAPIV3Schema:
24+
description: MFA generates a new TOTP token that is compliant with RFC 6238.
25+
properties:
26+
apiVersion:
27+
description: |-
28+
APIVersion defines the versioned schema of this representation of an object.
29+
Servers should convert recognized schemas to the latest internal value, and
30+
may reject unrecognized values.
31+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
32+
type: string
33+
kind:
34+
description: |-
35+
Kind is a string value representing the REST resource this object represents.
36+
Servers may infer this from the endpoint the client submits requests to.
37+
Cannot be updated.
38+
In CamelCase.
39+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
40+
type: string
41+
metadata:
42+
type: object
43+
spec:
44+
description: MFASpec controls the behavior of the mfa generator.
45+
properties:
46+
algorithm:
47+
description: Algorithm to use for encoding. Defaults to SHA1 as
48+
per the RFC.
49+
type: string
50+
length:
51+
description: Length defines the token length. Defaults to 6 characters.
52+
type: integer
53+
secret:
54+
description: Secret is a secret selector to a secret containing
55+
the seed secret to generate the TOTP value from.
56+
properties:
57+
key:
58+
description: |-
59+
A key in the referenced Secret.
60+
Some instances of this field may be defaulted, in others it may be required.
61+
maxLength: 253
62+
minLength: 1
63+
pattern: ^[-._a-zA-Z0-9]+$
64+
type: string
65+
name:
66+
description: The name of the Secret resource being referred
67+
to.
68+
maxLength: 253
69+
minLength: 1
70+
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
71+
type: string
72+
namespace:
73+
description: |-
74+
The namespace of the Secret resource being referred to.
75+
Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
76+
maxLength: 63
77+
minLength: 1
78+
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
79+
type: string
80+
type: object
81+
timePeriod:
82+
description: TimePeriod defines how long the token can be active.
83+
Defaults to 30 seconds.
84+
type: integer
85+
when:
86+
description: When defines a time parameter that can be used to pin
87+
the origin time of the generated token.
88+
format: date-time
89+
type: string
90+
required:
91+
- secret
92+
type: object
93+
type: object
94+
served: true
95+
storage: true
96+
subresources:
97+
status: {}

0 commit comments

Comments
 (0)