search

trosvald / home-ops

My OnPrem Kubernetes cluster. Deploy on top of Talos Linux, automated via Flux, renovate 🤖, and Github actions
0 stars 0 forks source link

fix(helm): update external-secrets ( 0.10.5 → 0.10.6 ) #370

Closed monosense-arc[bot] closed 6 days ago

monosense-arc[bot] commented 1 week ago

This PR contains the following updates:

Package Update Change
external-secrets patch 0.10.5 -> 0.10.6

[!WARNING] Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

external-secrets/external-secrets (external-secrets) ### [`v0.10.6`](https://redirect.github.com/external-secrets/external-secrets/releases/tag/v0.10.6) [Compare Source](https://redirect.github.com/external-secrets/external-secrets/compare/v0.10.5...v0.10.6) Image: `ghcr.io/external-secrets/external-secrets:v0.10.6` Image: `ghcr.io/external-secrets/external-secrets:v0.10.6-ubi` Image: `ghcr.io/external-secrets/external-secrets:v0.10.6-ubi-boringssl` #### What's Changed - docs: release helm charts for v0.10.5 by [@​Skarlso](https://redirect.github.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/4038](https://redirect.github.com/external-secrets/external-secrets/pull/4038) - feat: Support repositories and permissions in GitHub generator by [@​konradasb](https://redirect.github.com/konradasb) in [https://github.com/external-secrets/external-secrets/pull/4039](https://redirect.github.com/external-secrets/external-secrets/pull/4039) - chore: Add Hostinger to ADOPTERS.md by [@​konradasb](https://redirect.github.com/konradasb) in [https://github.com/external-secrets/external-secrets/pull/4053](https://redirect.github.com/external-secrets/external-secrets/pull/4053) - chore(deps): bump distroless/static from `69830f2` to `cc226ca` by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4043](https://redirect.github.com/external-secrets/external-secrets/pull/4043) - chore(deps): bump mkdocs-macros-plugin from 1.3.6 to 1.3.7 in /hack/api-docs by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4044](https://redirect.github.com/external-secrets/external-secrets/pull/4044) - chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4045](https://redirect.github.com/external-secrets/external-secrets/pull/4045) - chore(deps): bump actions/cache from 4.1.1 to 4.1.2 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4046](https://redirect.github.com/external-secrets/external-secrets/pull/4046) - chore(deps): bump actions/setup-python from 5.2.0 to 5.3.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4047](https://redirect.github.com/external-secrets/external-secrets/pull/4047) - chore(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4049](https://redirect.github.com/external-secrets/external-secrets/pull/4049) - chore(deps): bump github/codeql-action from 3.26.13 to 3.27.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4048](https://redirect.github.com/external-secrets/external-secrets/pull/4048) - chore: update dependencies by [@​eso-service-account-app](https://redirect.github.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/4050](https://redirect.github.com/external-secrets/external-secrets/pull/4050) - fix: improve SecretExists in Bitwarden provider by [@​logaritmisk](https://redirect.github.com/logaritmisk) in [https://github.com/external-secrets/external-secrets/pull/4058](https://redirect.github.com/external-secrets/external-secrets/pull/4058) - Adding Pulumi ESC to intro page by [@​aaronkao](https://redirect.github.com/aaronkao) in [https://github.com/external-secrets/external-secrets/pull/4062](https://redirect.github.com/external-secrets/external-secrets/pull/4062) - Updated stability and supported features for Akeyless by [@​eitan-kr](https://redirect.github.com/eitan-kr) in [https://github.com/external-secrets/external-secrets/pull/4061](https://redirect.github.com/external-secrets/external-secrets/pull/4061) - chore(deps): bump watchdog from 5.0.3 to 6.0.0 in /hack/api-docs by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4067](https://redirect.github.com/external-secrets/external-secrets/pull/4067) - chore(deps): bump pymdown-extensions from 10.11.2 to 10.12 in /hack/api-docs by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4068](https://redirect.github.com/external-secrets/external-secrets/pull/4068) - chore(deps): bump mkdocs-material from 9.5.42 to 9.5.43 in /hack/api-docs by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4069](https://redirect.github.com/external-secrets/external-secrets/pull/4069) - chore(deps): bump softprops/action-gh-release from 2.0.8 to 2.0.9 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4070](https://redirect.github.com/external-secrets/external-secrets/pull/4070) - chore: move inactive maintainers to emeritus by [@​Skarlso](https://redirect.github.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/4073](https://redirect.github.com/external-secrets/external-secrets/pull/4073) - chore: update dependencies by [@​eso-service-account-app](https://redirect.github.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/4071](https://redirect.github.com/external-secrets/external-secrets/pull/4071) - Update VaultAppRole documentation to show/use roleRef in its examples by [@​mtougeron](https://redirect.github.com/mtougeron) in [https://github.com/external-secrets/external-secrets/pull/4035](https://redirect.github.com/external-secrets/external-secrets/pull/4035) - feat: add option to configure topic information for GCM by [@​Skarlso](https://redirect.github.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/4055](https://redirect.github.com/external-secrets/external-secrets/pull/4055) - feat: add AWS STS Session token generator by [@​Skarlso](https://redirect.github.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/4041](https://redirect.github.com/external-secrets/external-secrets/pull/4041) - chore(helm): Add extra labels to the validating webhooks by [@​tete17](https://redirect.github.com/tete17) in [https://github.com/external-secrets/external-secrets/pull/4074](https://redirect.github.com/external-secrets/external-secrets/pull/4074) - Reduce refreshInterval example for ACR by [@​lindhe](https://redirect.github.com/lindhe) in [https://github.com/external-secrets/external-secrets/pull/4078](https://redirect.github.com/external-secrets/external-secrets/pull/4078) - Fix PushSecret lookup in keepersecurity provider by [@​idimov-keeper](https://redirect.github.com/idimov-keeper) in [https://github.com/external-secrets/external-secrets/pull/4077](https://redirect.github.com/external-secrets/external-secrets/pull/4077) - Add ability to use RetrySettings in the VaultDynamicSecret generator by [@​samm-git](https://redirect.github.com/samm-git) in [https://github.com/external-secrets/external-secrets/pull/4076](https://redirect.github.com/external-secrets/external-secrets/pull/4076) - chore(deps): bump golang from 1.23.2 to 1.23.3 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4089](https://redirect.github.com/external-secrets/external-secrets/pull/4089) - chore(deps): bump packaging from 24.1 to 24.2 in /hack/api-docs by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4090](https://redirect.github.com/external-secrets/external-secrets/pull/4090) - chore(deps): bump mkdocs-material from 9.5.43 to 9.5.44 in /hack/api-docs by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4091](https://redirect.github.com/external-secrets/external-secrets/pull/4091) - Update docs for ExternalSecrets's refreshInterval by [@​lindhe](https://redirect.github.com/lindhe) in [https://github.com/external-secrets/external-secrets/pull/4097](https://redirect.github.com/external-secrets/external-secrets/pull/4097) - chore(deps): bump zipp from 3.20.2 to 3.21.0 in /hack/api-docs by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4092](https://redirect.github.com/external-secrets/external-secrets/pull/4092) - chore(deps): bump regex from 2024.9.11 to 2024.11.6 in /hack/api-docs by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4093](https://redirect.github.com/external-secrets/external-secrets/pull/4093) - chore(deps): bump golang from 1.23.2-bookworm to 1.23.3-bookworm in /e2e by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4094](https://redirect.github.com/external-secrets/external-secrets/pull/4094) - chore: update dependencies by [@​eso-service-account-app](https://redirect.github.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/4096](https://redirect.github.com/external-secrets/external-secrets/pull/4096) - chore(deps): bump github/codeql-action from 3.27.0 to 3.27.1 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4088](https://redirect.github.com/external-secrets/external-secrets/pull/4088) - fix: typo in webhook.md by [@​salekseev](https://redirect.github.com/salekseev) in [https://github.com/external-secrets/external-secrets/pull/4100](https://redirect.github.com/external-secrets/external-secrets/pull/4100) - docs: reformat pushsecrets documentation to be a list by [@​twobiers](https://redirect.github.com/twobiers) in [https://github.com/external-secrets/external-secrets/pull/4102](https://redirect.github.com/external-secrets/external-secrets/pull/4102) - fix: refresh interval values by [@​gusfcarvalho](https://redirect.github.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/4111](https://redirect.github.com/external-secrets/external-secrets/pull/4111) - Sign helm chart artifact in ghcr.io by [@​aruuunn](https://redirect.github.com/aruuunn) in [https://github.com/external-secrets/external-secrets/pull/4098](https://redirect.github.com/external-secrets/external-secrets/pull/4098) - chore(deps): bump distroless/static from `cc226ca` to `f4a57e8` by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4112](https://redirect.github.com/external-secrets/external-secrets/pull/4112) - chore(deps): bump golang from `0974259` to `c694a4d` by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4113](https://redirect.github.com/external-secrets/external-secrets/pull/4113) - chore(deps): bump alpine from `beefdbd` to `1e42bbe` by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4114](https://redirect.github.com/external-secrets/external-secrets/pull/4114) - chore(deps): bump github/codeql-action from 3.27.1 to 3.27.4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4115](https://redirect.github.com/external-secrets/external-secrets/pull/4115) - chore(deps): bump codecov/codecov-action from 4.6.0 to 5.0.2 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4116](https://redirect.github.com/external-secrets/external-secrets/pull/4116) - chore(deps): bump softprops/action-gh-release from 2.0.9 to 2.1.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4117](https://redirect.github.com/external-secrets/external-secrets/pull/4117) - chore(deps): bump alpine from `beefdbd` to `1e42bbe` in /hack/api-docs by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4118](https://redirect.github.com/external-secrets/external-secrets/pull/4118) - chore(deps): bump alpine from `beefdbd` to `1e42bbe` in /e2e by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4119](https://redirect.github.com/external-secrets/external-secrets/pull/4119) - chore(deps): bump golang from `0e3377d` to `3f3b9da` in /e2e by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/4120](https://redirect.github.com/external-secrets/external-secrets/pull/4120) - fix: re-enable signing helm release by [@​moolen](https://redirect.github.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/4109](https://redirect.github.com/external-secrets/external-secrets/pull/4109) - chore: update dependencies by [@​eso-service-account-app](https://redirect.github.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/4122](https://redirect.github.com/external-secrets/external-secrets/pull/4122) - feat: enable concurrent reconciling for push secret reconciler by [@​Skarlso](https://redirect.github.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/4124](https://redirect.github.com/external-secrets/external-secrets/pull/4124) - feat: supporting pushing entire secret for bitwarden provider by [@​Skarlso](https://redirect.github.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/4106](https://redirect.github.com/external-secrets/external-secrets/pull/4106) - fix: do not import gpg key from forked repo by [@​moolen](https://redirect.github.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/4126](https://redirect.github.com/external-secrets/external-secrets/pull/4126) - feat: implement SecretExists function for gcp secretsmanager by [@​Skarlso](https://redirect.github.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/4127](https://redirect.github.com/external-secrets/external-secrets/pull/4127) - fix: restrict the token permission update to the push chart step by [@​Skarlso](https://redirect.github.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/4128](https://redirect.github.com/external-secrets/external-secrets/pull/4128) - fix: further restrict token permissions on helm action steps by [@​Skarlso](https://redirect.github.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/4129](https://redirect.github.com/external-secrets/external-secrets/pull/4129) - Change wrong YAML TLS keys in documentation by [@​ilovelinux](https://redirect.github.com/ilovelinux) in [https://github.com/external-secrets/external-secrets/pull/4131](https://redirect.github.com/external-secrets/external-secrets/pull/4131) #### New Contributors - [@​konradasb](https://redirect.github.com/konradasb) made their first contribution in [https://github.com/external-secrets/external-secrets/pull/4039](https://redirect.github.com/external-secrets/external-secrets/pull/4039) - [@​logaritmisk](https://redirect.github.com/logaritmisk) made their first contribution in [https://github.com/external-secrets/external-secrets/pull/4058](https://redirect.github.com/external-secrets/external-secrets/pull/4058) - [@​aaronkao](https://redirect.github.com/aaronkao) made their first contribution in [https://github.com/external-secrets/external-secrets/pull/4062](https://redirect.github.com/external-secrets/external-secrets/pull/4062) - [@​eitan-kr](https://redirect.github.com/eitan-kr) made their first contribution in [https://github.com/external-secrets/external-secrets/pull/4061](https://redirect.github.com/external-secrets/external-secrets/pull/4061) - [@​tete17](https://redirect.github.com/tete17) made their first contribution in [https://github.com/external-secrets/external-secrets/pull/4074](https://redirect.github.com/external-secrets/external-secrets/pull/4074) - [@​idimov-keeper](https://redirect.github.com/idimov-keeper) made their first contribution in [https://github.com/external-secrets/external-secrets/pull/4077](https://redirect.github.com/external-secrets/external-secrets/pull/4077) - [@​samm-git](https://redirect.github.com/samm-git) made their first contribution in [https://github.com/external-secrets/external-secrets/pull/4076](https://redirect.github.com/external-secrets/external-secrets/pull/4076) - [@​salekseev](https://redirect.github.com/salekseev) made their first contribution in [https://github.com/external-secrets/external-secrets/pull/4100](https://redirect.github.com/external-secrets/external-secrets/pull/4100) - [@​twobiers](https://redirect.github.com/twobiers) made their first contribution in [https://github.com/external-secrets/external-secrets/pull/4102](https://redirect.github.com/external-secrets/external-secrets/pull/4102) - [@​aruuunn](https://redirect.github.com/aruuunn) made their first contribution in [https://github.com/external-secrets/external-secrets/pull/4098](https://redirect.github.com/external-secrets/external-secrets/pull/4098) - [@​ilovelinux](https://redirect.github.com/ilovelinux) made their first contribution in [https://github.com/external-secrets/external-secrets/pull/4131](https://redirect.github.com/external-secrets/external-secrets/pull/4131) **Full Changelog**: https://github.com/external-secrets/external-secrets/compare/v0.10.5...v0.10.6

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by Renovate Bot.

monosense-arc[bot] commented 1 week ago 
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.10.5
+        image: ghcr.io/external-secrets/external-secrets:v0.10.6
         imagePullPolicy: IfNotPresent
         args:
         - certcontroller
         - --crd-requeue-interval=5m
         - --service-name=external-secrets-webhook
         - --service-namespace=external-secrets
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.10.5
+        image: ghcr.io/external-secrets/external-secrets:v0.10.6
         imagePullPolicy: IfNotPresent
         args:
         - --concurrent=1
         - --metrics-addr=:8080
         - --loglevel=info
         - --zap-time-encoding=epoch
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.10.5
+        image: ghcr.io/external-secrets/external-secrets:v0.10.6
         imagePullPolicy: IfNotPresent
         args:
         - webhook
         - --port=10250
         - --dns-name=external-secrets-webhook.external-secrets.svc
         - --cert-dir=/tmp/certs
--- HelmRelease: external-secrets/external-secrets ValidatingWebhookConfiguration: external-secrets/secretstore-validate

+++ HelmRelease: external-secrets/external-secrets ValidatingWebhookConfiguration: external-secrets/secretstore-validate

@@ -1,12 +1,15 @@

 ---
 apiVersion: admissionregistration.k8s.io/v1
 kind: ValidatingWebhookConfiguration
 metadata:
   name: secretstore-validate
   labels:
+    app.kubernetes.io/name: external-secrets-webhook
+    app.kubernetes.io/instance: external-secrets
+    app.kubernetes.io/managed-by: Helm
     external-secrets.io/component: webhook
 webhooks:
 - name: validate.secretstore.external-secrets.io
   rules:
   - apiGroups:
     - external-secrets.io
--- HelmRelease: external-secrets/external-secrets ValidatingWebhookConfiguration: external-secrets/externalsecret-validate

+++ HelmRelease: external-secrets/external-secrets ValidatingWebhookConfiguration: external-secrets/externalsecret-validate

@@ -1,12 +1,15 @@

 ---
 apiVersion: admissionregistration.k8s.io/v1
 kind: ValidatingWebhookConfiguration
 metadata:
   name: externalsecret-validate
   labels:
+    app.kubernetes.io/name: external-secrets-webhook
+    app.kubernetes.io/instance: external-secrets
+    app.kubernetes.io/managed-by: Helm
     external-secrets.io/component: webhook
 webhooks:
 - name: validate.externalsecret.external-secrets.io
   rules:
   - apiGroups:
     - external-secrets.io
monosense-arc[bot] commented 1 week ago 
--- kubernetes/main/apps/external-secrets/external-secrets/app Kustomization: flux-system/external-secrets HelmRelease: external-secrets/external-secrets

+++ kubernetes/main/apps/external-secrets/external-secrets/app Kustomization: flux-system/external-secrets HelmRelease: external-secrets/external-secrets

@@ -13,13 +13,13 @@

     spec:
       chart: external-secrets
       sourceRef:
         kind: HelmRepository
         name: external-secrets
         namespace: flux-system
-      version: 0.10.5
+      version: 0.10.6
   dependsOn:
   - name: onepassword-connect
     namespace: external-secrets
   install:
     remediation:
       retries: 3