Repository navigation
chore(deps): update helm release external-secrets to v2.15.0 - #1175
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
Contributor
ArgoCD Diff ResultAuth path: tailscale アプリケーション: external-secrets の差分パス: argoproj/external-secrets-operator ===== /Service external-secrets/external-secrets-webhook ======
1,33d0
< apiVersion: v1
< kind: Service
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:/Service:external-secrets/external-secrets-webhook
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets-webhook
< app.kubernetes.io/version: v2.14.0
< external-secrets.io/component: webhook
< helm.sh/chart: external-secrets-2.14.0
< name: external-secrets-webhook
< namespace: external-secrets
< uid: efd6f635-1b3f-4c2c-bb14-a9a395f1d7d8
< spec:
< clusterIP: 10.101.47.204
< clusterIPs:
< - 10.101.47.204
< internalTrafficPolicy: Cluster
< ipFamilies:
< - IPv4
< ipFamilyPolicy: SingleStack
< ports:
< - name: webhook
< port: 443
< protocol: TCP
< targetPort: webhook
< selector:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/name: external-secrets-webhook
< sessionAffinity: None
< type: ClusterIP
===== /ServiceAccount external-secrets/external-secrets ======
1,14d0
< apiVersion: v1
< kind: ServiceAccount
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:/ServiceAccount:external-secrets/external-secrets
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< name: external-secrets
< namespace: external-secrets
< uid: 89a8cc57-cc68-4786-81ca-6b6ca37f4df6
===== /ServiceAccount external-secrets/external-secrets-cert-controller ======
1,14d0
< apiVersion: v1
< kind: ServiceAccount
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:/ServiceAccount:external-secrets/external-secrets-cert-controller
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets-cert-controller
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< name: external-secrets-cert-controller
< namespace: external-secrets
< uid: e3f6ac14-ac57-41d2-b798-28424ae1f5cb
===== /ServiceAccount external-secrets/external-secrets-webhook ======
1,14d0
< apiVersion: v1
< kind: ServiceAccount
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:/ServiceAccount:external-secrets/external-secrets-webhook
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets-webhook
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< name: external-secrets-webhook
< namespace: external-secrets
< uid: de5ed02f-7bd1-4035-a02a-176a1e46b1f3
===== admissionregistration.k8s.io/ValidatingWebhookConfiguration /externalsecret-validate ======
1,44d0
< apiVersion: admissionregistration.k8s.io/v1
< kind: ValidatingWebhookConfiguration
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:admissionregistration.k8s.io/ValidatingWebhookConfiguration:external-secrets/externalsecret-validate
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets-webhook
< app.kubernetes.io/version: v2.14.0
< external-secrets.io/component: webhook
< helm.sh/chart: external-secrets-2.14.0
< name: externalsecret-validate
< uid: fd095bac-ebd2-44c4-bc24-84feeaed7909
< webhooks:
< - admissionReviewVersions:
< - v1
< - v1beta1
< clientConfig:
< caBundle: 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
< service:
< name: external-secrets-webhook
< namespace: external-secrets
< path: /validate-external-secrets-io-v1-externalsecret
< port: 443
< failurePolicy: Fail
< matchPolicy: Equivalent
< name: validate.externalsecret.external-secrets.io
< namespaceSelector: {}
< objectSelector: {}
< rules:
< - apiGroups:
< - external-secrets.io
< apiVersions:
< - v1
< operations:
< - CREATE
< - UPDATE
< - DELETE
< resources:
< - externalsecrets
< scope: Namespaced
< sideEffects: None
< timeoutSeconds: 5
===== admissionregistration.k8s.io/ValidatingWebhookConfiguration /secretstore-validate ======
1,73d0
< apiVersion: admissionregistration.k8s.io/v1
< kind: ValidatingWebhookConfiguration
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:admissionregistration.k8s.io/ValidatingWebhookConfiguration:external-secrets/secretstore-validate
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets-webhook
< app.kubernetes.io/version: v2.14.0
< external-secrets.io/component: webhook
< helm.sh/chart: external-secrets-2.14.0
< name: secretstore-validate
< uid: c125f6ac-e7bb-4713-8398-25c04ea18429
< webhooks:
< - admissionReviewVersions:
< - v1
< - v1beta1
< clientConfig:
< caBundle: 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
< service:
< name: external-secrets-webhook
< namespace: external-secrets
< path: /validate-external-secrets-io-v1-secretstore
< port: 443
< failurePolicy: Fail
< matchPolicy: Equivalent
< name: validate.secretstore.external-secrets.io
< namespaceSelector: {}
< objectSelector: {}
< rules:
< - apiGroups:
< - external-secrets.io
< apiVersions:
< - v1
< operations:
< - CREATE
< - UPDATE
< - DELETE
< resources:
< - secretstores
< scope: Namespaced
< sideEffects: None
< timeoutSeconds: 5
< - admissionReviewVersions:
< - v1
< - v1beta1
< clientConfig:
< caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURSakNDQWk2Z0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREEyTVJrd0Z3WURWUVFLRXhCbGVIUmwKY201aGJDMXpaV055WlhSek1Sa3dGd1lEVlFRREV4QmxlSFJsY201aGJDMXpaV055WlhSek1CNFhEVEkxTURjeQpOakV4TWpNMU9Gb1hEVE0xTURjeU5ERXlNak0xT0Zvd05qRVpNQmNHQTFVRUNoTVFaWGgwWlhKdVlXd3RjMlZqCmNtVjBjekVaTUJjR0ExVUVBeE1RWlhoMFpYSnVZV3d0YzJWamNtVjBjekNDQVNJd0RRWUpLb1pJaHZjTkFRRUIKQlFBRGdnRVBBRENDQVFvQ2dnRUJBTDNOa0x0S0NTaUVLQ3hhQVRrWExmUk03c09VeGsrcjlPRCsrUXVxTEVaaQprWGpuazc4V2ZFRjhKZHpzVmxqMHd3Z2hZMzNFUEQ1T0pTUnlra0J4MnJRSlZQdW43ekROQXQzK2FhVmZSd01rCmJXQjFIU3gwdXl2SG9ZUG5qU0NCeWVuUTd2c0s5RjJQdVhjSU9ucWVkbjBkQng0c0N0cVh2UFQ2MHAxazVUOFEKS2JoZStLU2RZUmlIeDFpQUJXZTlXTUxKNjNpcXZOa2NOcnBFbis5dXNCazVEa2FZUE5jajJGMHI1R0YxblNPSAo1Yk5idXhab1MvbW5vTUcrMkZhbE9qY0lYUHhlRkpjWjRaR0l0K0ZOOHNZK0xFUzdpOXBncXVkcmlybnRuUWJyClo2Tldtdk41VlR4TkpKYnNDaEdFM1ZNRFB4SDBueXZFUW1xakRsZUxDR2NDQXdFQUFhTmZNRjB3RGdZRFZSMFAKQVFIL0JBUURBZ0trTUE4R0ExVWRFd0VCL3dRRk1BTUJBZjh3SFFZRFZSME9CQllFRk4wT3pEZzNCc2NCcXNwcApMK3NNVnBmT09QZTFNQnNHQTFVZEVRUVVNQktDRUdWNGRHVnlibUZzTFhObFkzSmxkSE13RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFDN1FYa3orYlBLN1prOW5ZaXRKaGEycmZScCtXTU1xdCszVTQ1WlBkRlZkVys2VlFLRy8KYjZucmJ5WUkwcCs1U2grVk9kLzNoZXdyTWhPMmtDQjI4cW9hTjNjcXY0MFJ2aTN1WGtXQ0Y3anl1ZlNYRk5naQpuNWpHc2hzZ2IyWTAxQlR3SjdzaEFwVmJqQXNTZzBJTE4xYUFIK3J3cFMwYkVlVGsyTDZ6SnpiNHJYWFpzNzBkCnR3WnlIYTFacTJNck5xU1NPdDkzbmF5azVQOXRaMU1IakZRY3Zla0xBUTFuQVdWb0Rjb2hMWjEyOW5nRUdrdzEKRGxRRHFWMkVoQnhhVEJhd0ZtVDlvVVVWRWIxL1VWN3c2Um4zaTZSTXFKRHNyQTdxUVRQZ2JEZjB4TWxNT01ZUQpiYTYxdmRwak9DNlBueFl0U0FIRXB4eFZPd1dnNWZrbjNGVT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
< service:
< name: external-secrets-webhook
< namespace: external-secrets
< path: /validate-external-secrets-io-v1-clustersecretstore
< port: 443
< failurePolicy: Fail
< matchPolicy: Equivalent
< name: validate.clustersecretstore.external-secrets.io
< namespaceSelector: {}
< objectSelector: {}
< rules:
< - apiGroups:
< - external-secrets.io
< apiVersions:
< - v1
< operations:
< - CREATE
< - UPDATE
< - DELETE
< resources:
< - clustersecretstores
< scope: Cluster
< sideEffects: None
< timeoutSeconds: 5
===== apiextensions.k8s.io/CustomResourceDefinition /acraccesstokens.generators.external-secrets.io ======
1,222d0
< apiVersion: apiextensions.k8s.io/v1
< kind: CustomResourceDefinition
< metadata:
< annotations:
< controller-gen.kubebuilder.io/version: v0.23.0
< labels:
< external-secrets.io/component: controller
< name: acraccesstokens.generators.external-secrets.io
< uid: 120259ee-35ec-4529-9e52-83af1b483f12
< spec:
< conversion:
< strategy: None
< group: generators.external-secrets.io
< names:
< categories:
< - external-secrets
< - external-secrets-generators
< kind: ACRAccessToken
< listKind: ACRAccessTokenList
< plural: acraccesstokens
< singular: acraccesstoken
< scope: Namespaced
< versions:
< - name: v1alpha1
< schema:
< openAPIV3Schema:
< description: |-
< ACRAccessToken returns an Azure Container Registry token
< that can be used for pushing/pulling images.
< Note: by default it will return an ACR Refresh Token with full access
< (depending on the identity).
< This can be scoped down to the repository level using .spec.scope.
< In case scope is defined it will return an ACR Access Token.
<
< See docs: https://github.com/Azure/acr/blob/main/docs/AAD-OAuth.md
< properties:
< apiVersion:
< description: |-
< APIVersion defines the versioned schema of this representation of an object.
< Servers should convert recognized schemas to the latest internal value, and
< may reject unrecognized values.
< More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
< type: string
< kind:
< description: |-
< Kind is a string value representing the REST resource this object represents.
< Servers may infer this from the endpoint the client submits requests to.
< Cannot be updated.
< In CamelCase.
< More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
< type: string
< metadata:
< type: object
< spec:
< description: |-
< ACRAccessTokenSpec defines how to generate the access token
< e.g. how to authenticate and which registry to use.
< see: https://github.com/Azure/acr/blob/main/docs/AAD-OAuth.md#overview
< properties:
< auth:
< description: ACRAuth defines the authentication methods for Azure
< Container Registry.
< properties:
< managedIdentity:
< description: ManagedIdentity uses Azure Managed Identity to authenticate
< with Azure.
< properties:
< identityId:
< description: If multiple Managed Identity is assigned to the
< pod, you can select the one to be used
< type: string
< type: object
< servicePrincipal:
< description: ServicePrincipal uses Azure Service Principal credentials
< to authenticate with Azure.
< properties:
< secretRef:
< description: |-
< AzureACRServicePrincipalAuthSecretRef defines the secret references for Azure Service Principal authentication.
< It uses static credentials stored in a Kind=Secret.
< properties:
< clientId:
< description: The Azure clientId of the service principle
< used for authentication.
< properties:
< key:
< description: |-
< A key in the referenced Secret.
< Some instances of this field may be defaulted, in others it may be required.
< maxLength: 253
< minLength: 1
< pattern: ^[-._a-zA-Z0-9]+$
< type: string
< name:
< description: The name of the Secret resource being
< referred to.
< maxLength: 253
< minLength: 1
< pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
< type: string
< namespace:
< description: |-
< The namespace of the Secret resource being referred to.
< Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
< maxLength: 63
< minLength: 1
< pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
< type: string
< type: object
< clientSecret:
< description: The Azure ClientSecret of the service principle
< used for authentication.
< properties:
< key:
< description: |-
< A key in the referenced Secret.
< Some instances of this field may be defaulted, in others it may be required.
< maxLength: 253
< minLength: 1
< pattern: ^[-._a-zA-Z0-9]+$
< type: string
< name:
< description: The name of the Secret resource being
< referred to.
< maxLength: 253
< minLength: 1
< pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
< type: string
< namespace:
< description: |-
< The namespace of the Secret resource being referred to.
< Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
< maxLength: 63
< minLength: 1
< pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
< type: string
< type: object
< type: object
< required:
< - secretRef
< type: object
< workloadIdentity:
< description: WorkloadIdentity uses Azure Workload Identity to
< authenticate with Azure.
< properties:
< serviceAccountRef:
< description: |-
< ServiceAccountRef specified the service account
< that should be used when authenticating with WorkloadIdentity.
< properties:
< audiences:
< description: |-
< Audience specifies the `aud` claim for the service account token
< Some providers automatically extend the audience field based on well-known annotations for workload
< identity (e.g. IRSA or GCP Workload Identity)
< items:
< type: string
< type: array
< name:
< description: The name of the ServiceAccount resource being
< referred to.
< maxLength: 253
< minLength: 1
< pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
< type: string
< namespace:
< description: |-
< Namespace of the resource being referred to.
< Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
< maxLength: 63
< minLength: 1
< pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
< type: string
< required:
< - name
< type: object
< type: object
< type: object
< environmentType:
< default: PublicCloud
< description: |-
< EnvironmentType specifies the Azure cloud environment endpoints to use for
< connecting and authenticating with Azure. By default, it points to the public cloud AAD endpoint.
< The following endpoints are available, also see here: https://github.com/Azure/go-autorest/blob/main/autorest/azure/environments.go#L152
< PublicCloud, USGovernmentCloud, ChinaCloud, GermanCloud
< enum:
< - PublicCloud
< - USGovernmentCloud
< - ChinaCloud
< - GermanCloud
< - AzureStackCloud
< type: string
< registry:
< description: |-
< the domain name of the ACR registry
< e.g. foobarexample.azurecr.io
< type: string
< scope:
< description: |-
< Define the scope for the access token, e.g. pull/push access for a repository.
< if not provided it will return a refresh token that has full scope.
< Note: you need to pin it down to the repository level, there is no wildcard available.
<
< examples:
< repository:my-repository:pull,push
< repository:my-repository:pull
<
< see docs for details: https://docs.docker.com/registry/spec/auth/scope/
< type: string
< tenantId:
< description: TenantID configures the Azure Tenant to send requests
< to. Required for ServicePrincipal auth type.
< type: string
< required:
< - auth
< - registry
< type: object
< type: object
< served: true
< storage: true
< subresources:
< status: {}
===== apiextensions.k8s.io/CustomResourceDefinition /beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io ======
1,219d0
< apiVersion: apiextensions.k8s.io/v1
< kind: CustomResourceDefinition
< metadata:
< annotations:
< controller-gen.kubebuilder.io/version: v0.23.0
< labels:
< external-secrets.io/component: controller
< name: beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io
< uid: 0904e05c-aeec-4b7c-8706-32f754892117
< spec:
< conversion:
< strategy: None
< group: generators.external-secrets.io
< names:
< categories:
< - external-secrets
< - external-secrets-generators
< kind: BeyondtrustWorkloadCredentialsDynamicSecret
< listKind: BeyondtrustWorkloadCredentialsDynamicSecretList
< plural: beyondtrustworkloadcredentialsdynamicsecrets
< singular: beyondtrustworkloadcredentialsdynamicsecret
< scope: Namespaced
< versions:
< - name: v1alpha1
< schema:
< openAPIV3Schema:
< description: |-
< BeyondtrustWorkloadCredentialsDynamicSecret represents a generator that requests dynamic credentials from BeyondTrust Workload Credentials.
< This generator calls the BeyondTrust Workload Credentials API to generate fresh, temporary credentials
< (such as AWS STS credentials) each time an ExternalSecret is refreshed.
< Dynamic secret definitions must be created in BeyondTrust Workload Credentials before they can be referenced.
< For complete documentation, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api
< properties:
< apiVersion:
< description: |-
< APIVersion defines the versioned schema of this representation of an object.
< Servers should convert recognized schemas to the latest internal value, and
< may reject unrecognized values.
< More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
< type: string
< kind:
< description: |-
< Kind is a string value representing the REST resource this object represents.
< Servers may infer this from the endpoint the client submits requests to.
< Cannot be updated.
< In CamelCase.
< More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
< type: string
< metadata:
< type: object
< spec:
< description: |-
< BeyondtrustWorkloadCredentialsDynamicSecretSpec defines the desired spec for BeyondtrustWorkloadCredentials dynamic generator.
< This generator enables obtaining temporary, short-lived credentials from BeyondTrust Workload Credentials.
< For more information, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api
< properties:
< controller:
< description: |-
< Controller selects the controller that should handle this generator.
< Leave empty to use the default controller.
<
---
⚠️ **diff出力が長すぎるため、一部内容を省略しました**
📝 **省略された内容**: 2,082,671文字
headers:
< additionalProperties:
< type: string
< description: Headers
< type: object
< method:
< description: Webhook Method
< type: string
< result:
< description: Result formatting
< properties:
< jsonPath:
< description: Json path of return value
< type: string
< type: object
< secrets:
< description: |-
< Secrets to fill in templates
< These secrets will be passed to the templating function as key value pairs under the given name
< items:
< description: WebhookSecret defines a secret reference that will
< be used in webhook templates.
< properties:
< name:
< description: Name of this secret in templates
< type: string
< secretRef:
< description: Secret ref to fill in credentials
< properties:
< key:
< description: The key where the token is found.
< maxLength: 253
< minLength: 1
< pattern: ^[-._a-zA-Z0-9]+$
< type: string
< name:
< description: The name of the Secret resource being referred
< to.
< maxLength: 253
< minLength: 1
< pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
< type: string
< type: object
< required:
< - name
< - secretRef
< type: object
< type: array
< timeout:
< description: Timeout
< type: string
< url:
< description: Webhook url to call
< type: string
< required:
< - result
< - url
< type: object
< type: object
< served: true
< storage: true
< subresources:
< status: {}
===== apps/Deployment external-secrets/external-secrets ======
1,71d0
< apiVersion: apps/v1
< kind: Deployment
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:apps/Deployment:external-secrets/external-secrets
< deployment.kubernetes.io/revision: "8"
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< name: external-secrets
< namespace: external-secrets
< uid: 6a87c92b-8820-41e2-9b79-bbc48d48b7f3
< spec:
< progressDeadlineSeconds: 600
< replicas: 1
< revisionHistoryLimit: 10
< selector:
< matchLabels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/name: external-secrets
< strategy:
< rollingUpdate:
< maxSurge: 25%
< maxUnavailable: 25%
< type: RollingUpdate
< template:
< metadata:
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< spec:
< automountServiceAccountToken: true
< containers:
< - args:
< - --concurrent=1
< - --metrics-addr=:8080
< - --loglevel=info
< - --zap-time-encoding=epoch
< image: ghcr.io/external-secrets/external-secrets:v2.14.0
< imagePullPolicy: IfNotPresent
< name: external-secrets
< ports:
< - containerPort: 8080
< name: metrics
< protocol: TCP
< resources: {}
< securityContext:
< allowPrivilegeEscalation: false
< capabilities:
< drop:
< - ALL
< readOnlyRootFilesystem: true
< runAsNonRoot: true
< runAsUser: 1000
< seccompProfile:
< type: RuntimeDefault
< terminationMessagePath: /dev/termination-log
< terminationMessagePolicy: File
< dnsPolicy: ClusterFirst
< restartPolicy: Always
< schedulerName: default-scheduler
< securityContext: {}
< serviceAccount: external-secrets
< serviceAccountName: external-secrets
< terminationGracePeriodSeconds: 30
===== apps/Deployment external-secrets/external-secrets-cert-controller ======
1,91d0
< apiVersion: apps/v1
< kind: Deployment
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:apps/Deployment:external-secrets/external-secrets-cert-controller
< deployment.kubernetes.io/revision: "8"
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets-cert-controller
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< name: external-secrets-cert-controller
< namespace: external-secrets
< uid: b44edf77-c970-4e64-aa82-b09028d2c275
< spec:
< progressDeadlineSeconds: 600
< replicas: 1
< revisionHistoryLimit: 10
< selector:
< matchLabels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/name: external-secrets-cert-controller
< strategy:
< rollingUpdate:
< maxSurge: 25%
< maxUnavailable: 25%
< type: RollingUpdate
< template:
< metadata:
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets-cert-controller
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< spec:
< automountServiceAccountToken: true
< containers:
< - args:
< - certcontroller
< - --crd-requeue-interval=5m
< - --service-name=external-secrets-webhook
< - --service-namespace=external-secrets
< - --secret-name=external-secrets-webhook
< - --secret-namespace=external-secrets
< - --metrics-addr=:8080
< - --healthz-addr=:8081
< - --loglevel=info
< - --zap-time-encoding=epoch
< - --enable-partial-cache=true
< image: ghcr.io/external-secrets/external-secrets:v2.14.0
< imagePullPolicy: IfNotPresent
< name: cert-controller
< ports:
< - containerPort: 8080
< name: metrics
< protocol: TCP
< - containerPort: 8081
< name: ready
< protocol: TCP
< readinessProbe:
< failureThreshold: 3
< httpGet:
< path: /readyz
< port: ready
< scheme: HTTP
< initialDelaySeconds: 20
< periodSeconds: 5
< successThreshold: 1
< timeoutSeconds: 5
< resources: {}
< securityContext:
< allowPrivilegeEscalation: false
< capabilities:
< drop:
< - ALL
< readOnlyRootFilesystem: true
< runAsNonRoot: true
< runAsUser: 1000
< seccompProfile:
< type: RuntimeDefault
< terminationMessagePath: /dev/termination-log
< terminationMessagePolicy: File
< dnsPolicy: ClusterFirst
< restartPolicy: Always
< schedulerName: default-scheduler
< securityContext: {}
< serviceAccount: external-secrets-cert-controller
< serviceAccountName: external-secrets-cert-controller
< terminationGracePeriodSeconds: 30
===== apps/Deployment external-secrets/external-secrets-webhook ======
1,101d0
< apiVersion: apps/v1
< kind: Deployment
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:apps/Deployment:external-secrets/external-secrets-webhook
< deployment.kubernetes.io/revision: "8"
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets-webhook
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< name: external-secrets-webhook
< namespace: external-secrets
< uid: 0cc4e817-b370-4186-8b30-0895ec4b882d
< spec:
< progressDeadlineSeconds: 600
< replicas: 1
< revisionHistoryLimit: 10
< selector:
< matchLabels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/name: external-secrets-webhook
< strategy:
< rollingUpdate:
< maxSurge: 25%
< maxUnavailable: 25%
< type: RollingUpdate
< template:
< metadata:
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets-webhook
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< spec:
< automountServiceAccountToken: true
< containers:
< - args:
< - webhook
< - --port=10250
< - --dns-name=external-secrets-webhook.external-secrets.svc
< - --cert-dir=/tmp/certs
< - --check-interval=5m
< - --metrics-addr=:8080
< - --healthz-addr=:8081
< - --loglevel=info
< - --zap-time-encoding=epoch
< image: ghcr.io/external-secrets/external-secrets:v2.14.0
< imagePullPolicy: IfNotPresent
< name: webhook
< ports:
< - containerPort: 8080
< name: metrics
< protocol: TCP
< - containerPort: 10250
< name: webhook
< protocol: TCP
< - containerPort: 8081
< name: ready
< protocol: TCP
< readinessProbe:
< failureThreshold: 3
< httpGet:
< path: /readyz
< port: ready
< scheme: HTTP
< initialDelaySeconds: 20
< periodSeconds: 5
< successThreshold: 1
< timeoutSeconds: 5
< resources: {}
< securityContext:
< allowPrivilegeEscalation: false
< capabilities:
< drop:
< - ALL
< readOnlyRootFilesystem: true
< runAsNonRoot: true
< runAsUser: 1000
< seccompProfile:
< type: RuntimeDefault
< terminationMessagePath: /dev/termination-log
< terminationMessagePolicy: File
< volumeMounts:
< - mountPath: /tmp/certs
< name: certs
< readOnly: true
< dnsPolicy: ClusterFirst
< restartPolicy: Always
< schedulerName: default-scheduler
< securityContext: {}
< serviceAccount: external-secrets-webhook
< serviceAccountName: external-secrets-webhook
< terminationGracePeriodSeconds: 30
< volumes:
< - name: certs
< secret:
< defaultMode: 420
< secretName: external-secrets-webhook
===== argoproj.io/Application /external-secrets ======
0a1,23
> apiVersion: argoproj.io/v1alpha1
> kind: Application
> metadata:
> annotations:
> argocd.argoproj.io/tracking-id: external-secrets:argoproj.io/Application:external-secrets/external-secrets
> name: external-secrets
> spec:
> destination:
> namespace: external-secrets
> server: https://kubernetes.default.svc
> project: default
> sources:
> - chart: external-secrets
> repoURL: https://charts.external-secrets.io
> targetRevision: 2.15.0
> - path: argoproj/external-secrets-operator/manifests
> repoURL: https://github.com/boxp/lolice.git
> targetRevision: main
> syncPolicy:
> automated:
> selfHeal: true
> syncOptions:
> - ServerSideApply=true
===== external-secrets.io/ClusterSecretStore /parameterstore ======
1,24d0
< apiVersion: external-secrets.io/v1
< kind: ClusterSecretStore
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:external-secrets.io/ClusterSecretStore:external-secrets/parameterstore
< name: parameterstore
< uid: b163f118-bd64-470e-abee-5e637ff6d414
< spec:
< provider:
< aws:
< auth:
< secretRef:
< accessKeyIDSecretRef:
< key: access-key
< name: awssm-secret
< namespace: external-secrets
< secretAccessKeySecretRef:
< key: secret-access-key
< name: awssm-secret
< namespace: external-secrets
< region: ap-northeast-1
< role: arn:aws:iam::839695154978:role/external_secrets_role
< service: ParameterStore
< sessionTagsPolicy: None
===== rbac.authorization.k8s.io/ClusterRole /external-secrets-cert-controller ======
1,100d0
< apiVersion: rbac.authorization.k8s.io/v1
< kind: ClusterRole
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:rbac.authorization.k8s.io/ClusterRole:external-secrets/external-secrets-cert-controller
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets-cert-controller
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< name: external-secrets-cert-controller
< uid: ecf94d64-ae38-4d9b-a623-6945485b9c89
< rules:
< - apiGroups:
< - apiextensions.k8s.io
< resources:
< - customresourcedefinitions
< verbs:
< - get
< - list
< - watch
< - apiGroups:
< - apiextensions.k8s.io
< resourceNames:
< - externalsecrets.external-secrets.io
< - secretstores.external-secrets.io
< - clustersecretstores.external-secrets.io
< resources:
< - customresourcedefinitions
< verbs:
< - update
< - patch
< - apiGroups:
< - admissionregistration.k8s.io
< resources:
< - validatingwebhookconfigurations
< verbs:
< - list
< - watch
< - get
< - apiGroups:
< - admissionregistration.k8s.io
< resourceNames:
< - secretstore-validate
< - externalsecret-validate
< resources:
< - validatingwebhookconfigurations
< verbs:
< - update
< - patch
< - apiGroups:
< - ""
< resources:
< - endpoints
< verbs:
< - list
< - get
< - watch
< - apiGroups:
< - discovery.k8s.io
< resources:
< - endpointslices
< verbs:
< - list
< - get
< - watch
< - apiGroups:
< - ""
< resources:
< - events
< verbs:
< - create
< - patch
< - apiGroups:
< - ""
< resources:
< - secrets
< verbs:
< - get
< - list
< - watch
< - apiGroups:
< - ""
< resourceNames:
< - external-secrets-webhook
< resources:
< - secrets
< verbs:
< - update
< - patch
< - apiGroups:
< - coordination.k8s.io
< resources:
< - leases
< verbs:
< - get
< - create
< - update
< - patch
===== rbac.authorization.k8s.io/ClusterRole /external-secrets-controller ======
1,155d0
< apiVersion: rbac.authorization.k8s.io/v1
< kind: ClusterRole
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:rbac.authorization.k8s.io/ClusterRole:external-secrets/external-secrets-controller
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< name: external-secrets-controller
< uid: 63f13667-283e-4c17-beef-56f1c146ea48
< rules:
< - apiGroups:
< - external-secrets.io
< resources:
< - secretstores
< - clustersecretstores
< - externalsecrets
< - clusterexternalsecrets
< - pushsecrets
< - clusterpushsecrets
< verbs:
< - get
< - list
< - watch
< - apiGroups:
< - external-secrets.io
< resources:
< - externalsecrets
< - externalsecrets/status
< - externalsecrets/finalizers
< - secretstores
< - secretstores/status
< - secretstores/finalizers
< - clustersecretstores
< - clustersecretstores/status
< - clustersecretstores/finalizers
< - clusterexternalsecrets
< - clusterexternalsecrets/status
< - clusterexternalsecrets/finalizers
< - pushsecrets
< - pushsecrets/status
< - pushsecrets/finalizers
< - clusterpushsecrets
< - clusterpushsecrets/status
< - clusterpushsecrets/finalizers
< verbs:
< - get
< - update
< - patch
< - apiGroups:
< - generators.external-secrets.io
< resources:
< - generatorstates
< verbs:
< - get
< - list
< - watch
< - create
< - update
< - patch
< - delete
< - deletecollection
< - apiGroups:
< - generators.external-secrets.io
< resources:
< - acraccesstokens
< - cloudsmithaccesstokens
< - clustergenerators
< - ecrauthorizationtokens
< - fakes
< - gcraccesstokens
< - githubaccesstokens
< - gitlabdeploytokens
< - quayaccesstokens
< - passwords
< - sshkeys
< - stssessiontokens
< - uuids
< - vaultdynamicsecrets
< - webhooks
< - grafanas
< - mfas
< - beyondtrustworkloadcredentialsdynamicsecrets
< verbs:
< - get
< - list
< - watch
< - apiGroups:
< - ""
< resources:
< - serviceaccounts
< - namespaces
< verbs:
< - get
< - list
< - watch
< - apiGroups:
< - ""
< resources:
< - namespaces
< verbs:
< - update
< - patch
< - apiGroups:
< - ""
< resources:
< - configmaps
< verbs:
< - get
< - list
< - watch
< - apiGroups:
< - ""
< resources:
< - secrets
< verbs:
< - get
< - list
< - watch
< - create
< - update
< - delete
< - patch
< - apiGroups:
< - ""
< resources:
< - serviceaccounts/token
< verbs:
< - create
< - apiGroups:
< - ""
< resources:
< - events
< verbs:
< - create
< - patch
< - apiGroups:
< - external-secrets.io
< resources:
< - externalsecrets
< verbs:
< - create
< - update
< - delete
< - apiGroups:
< - external-secrets.io
< resources:
< - pushsecrets
< verbs:
< - create
< - update
< - delete
===== rbac.authorization.k8s.io/ClusterRole /external-secrets-edit ======
1,57d0
< apiVersion: rbac.authorization.k8s.io/v1
< kind: ClusterRole
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:rbac.authorization.k8s.io/ClusterRole:external-secrets/external-secrets-edit
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< rbac.authorization.k8s.io/aggregate-to-admin: "true"
< rbac.authorization.k8s.io/aggregate-to-edit: "true"
< name: external-secrets-edit
< uid: 894d256a-b72e-4bb0-bb9e-7b71c73b2751
< rules:
< - apiGroups:
< - external-secrets.io
< resources:
< - externalsecrets
< - secretstores
< - clustersecretstores
< - pushsecrets
< - clusterpushsecrets
< verbs:
< - create
< - delete
< - deletecollection
< - patch
< - update
< - apiGroups:
< - generators.external-secrets.io
< resources:
< - acraccesstokens
< - cloudsmithaccesstokens
< - clustergenerators
< - ecrauthorizationtokens
< - fakes
< - gcraccesstokens
< - githubaccesstokens
< - gitlabdeploytokens
< - quayaccesstokens
< - passwords
< - sshkeys
< - vaultdynamicsecrets
< - webhooks
< - grafanas
< - generatorstates
< - mfas
< - beyondtrustworkloadcredentialsdynamicsecrets
< - uuids
< verbs:
< - create
< - delete
< - deletecollection
< - patch
< - update
===== rbac.authorization.k8s.io/ClusterRole /external-secrets-servicebindings ======
1,24d0
< apiVersion: rbac.authorization.k8s.io/v1
< kind: ClusterRole
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:rbac.authorization.k8s.io/ClusterRole:external-secrets/external-secrets-servicebindings
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< servicebinding.io/controller: "true"
< name: external-secrets-servicebindings
< uid: 0ee82006-a7a0-46b4-9dce-6a6e2d86bede
< rules:
< - apiGroups:
< - external-secrets.io
< resources:
< - externalsecrets
< - pushsecrets
< verbs:
< - get
< - list
< - watch
===== rbac.authorization.k8s.io/ClusterRole /external-secrets-view ======
1,54d0
< apiVersion: rbac.authorization.k8s.io/v1
< kind: ClusterRole
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:rbac.authorization.k8s.io/ClusterRole:external-secrets/external-secrets-view
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< rbac.authorization.k8s.io/aggregate-to-admin: "true"
< rbac.authorization.k8s.io/aggregate-to-edit: "true"
< rbac.authorization.k8s.io/aggregate-to-view: "true"
< name: external-secrets-view
< uid: 6bf8dca8-8368-44c0-a3ab-296125852956
< rules:
< - apiGroups:
< - external-secrets.io
< resources:
< - externalsecrets
< - secretstores
< - clustersecretstores
< - pushsecrets
< - clusterpushsecrets
< verbs:
< - get
< - watch
< - list
< - apiGroups:
< - generators.external-secrets.io
< resources:
< - acraccesstokens
< - beyondtrustworkloadcredentialsdynamicsecrets
< - cloudsmithaccesstokens
< - clustergenerators
< - ecrauthorizationtokens
< - fakes
< - gcraccesstokens
< - githubaccesstokens
< - gitlabdeploytokens
< - quayaccesstokens
< - passwords
< - sshkeys
< - vaultdynamicsecrets
< - webhooks
< - grafanas
< - generatorstates
< - mfas
< - uuids
< verbs:
< - get
< - watch
< - list
===== rbac.authorization.k8s.io/ClusterRoleBinding /external-secrets-cert-controller ======
1,21d0
< apiVersion: rbac.authorization.k8s.io/v1
< kind: ClusterRoleBinding
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:rbac.authorization.k8s.io/ClusterRoleBinding:external-secrets/external-secrets-cert-controller
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets-cert-controller
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< name: external-secrets-cert-controller
< uid: 36686bbb-43c4-4dcf-97c9-aa056f562c2e
< roleRef:
< apiGroup: rbac.authorization.k8s.io
< kind: ClusterRole
< name: external-secrets-cert-controller
< subjects:
< - kind: ServiceAccount
< name: external-secrets-cert-controller
< namespace: external-secrets
===== rbac.authorization.k8s.io/ClusterRoleBinding /external-secrets-controller ======
1,21d0
< apiVersion: rbac.authorization.k8s.io/v1
< kind: ClusterRoleBinding
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:rbac.authorization.k8s.io/ClusterRoleBinding:external-secrets/external-secrets-controller
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< name: external-secrets-controller
< uid: 7b8bf0ef-539c-4ea4-af5f-97216ca03260
< roleRef:
< apiGroup: rbac.authorization.k8s.io
< kind: ClusterRole
< name: external-secrets-controller
< subjects:
< - kind: ServiceAccount
< name: external-secrets
< namespace: external-secrets
===== rbac.authorization.k8s.io/Role external-secrets/external-secrets-leaderelection ======
1,40d0
< apiVersion: rbac.authorization.k8s.io/v1
< kind: Role
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:rbac.authorization.k8s.io/Role:external-secrets/external-secrets-leaderelection
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< name: external-secrets-leaderelection
< namespace: external-secrets
< uid: f7c407dc-281b-4390-a7b4-aecdb78d4d0c
< rules:
< - apiGroups:
< - ""
< resourceNames:
< - external-secrets-controller
< resources:
< - configmaps
< verbs:
< - get
< - update
< - patch
< - apiGroups:
< - ""
< resources:
< - configmaps
< verbs:
< - create
< - apiGroups:
< - coordination.k8s.io
< resources:
< - leases
< verbs:
< - get
< - create
< - update
< - patch
===== rbac.authorization.k8s.io/RoleBinding external-secrets/external-secrets-leaderelection ======
1,22d0
< apiVersion: rbac.authorization.k8s.io/v1
< kind: RoleBinding
< metadata:
< annotations:
< argocd.argoproj.io/tracking-id: external-secrets:rbac.authorization.k8s.io/RoleBinding:external-secrets/external-secrets-leaderelection
< labels:
< app.kubernetes.io/instance: external-secrets
< app.kubernetes.io/managed-by: Helm
< app.kubernetes.io/name: external-secrets
< app.kubernetes.io/version: v2.14.0
< helm.sh/chart: external-secrets-2.14.0
< name: external-secrets-leaderelection
< namespace: external-secrets
< uid: 748543c9-f39d-4360-968f-881fae900068
< roleRef:
< apiGroup: rbac.authorization.k8s.io
< kind: Role
< name: external-secrets-leaderelection
< subjects:
< - kind: ServiceAccount
< name: external-secrets
< namespace: external-secrets
ℹ️ 上記の差分が見つかりました💡 完全なdiffを確認するには、ローカルで |
Contributor
Chainsaw Manifest Validation✅ 全テスト通過 テスト対象コンポーネント: 📦 external-secrets-operator✅ PASSED テスト出力を展開 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.14.0→2.15.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
external-secrets/external-secrets (external-secrets)
v2.15.0Compare Source
Image:
ghcr.io/external-secrets/external-secrets:v2.15.0Image:
ghcr.io/external-secrets/external-secrets:v2.15.0-ubiImage:
ghcr.io/external-secrets/external-secrets:v2.15.0-ubi-boringsslWhat's Changed
General
Dependencies
034df5cto15f8637by @dependabot[bot] in #718315f8637to4488103by @dependabot[bot] in #7227New Contributors
Full Changelog: external-secrets/external-secrets@v2.14.0...v2.15.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.