1
0
Fork 0
mirror of https://github.com/external-secrets/external-secrets.git synced 2024-12-14 11:57:59 +00:00
Commit graph

2500 commits

Author SHA1 Message Date
Moritz Johner
c764775508
fix: downgrade pyyaml <6.0 (#2516)
Latest cython 3.0 breaks pyYAML 6.0. Installation fails with:
AttributeError: cython_sources

Cython 3.0 is in beta at the moment and this needs to be fixed upstream.

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-07-17 22:29:24 +02:00
Shuhei Kitagawa
b912c334aa
Remove builder.OnlyMetadata (#2505) 2023-07-17 19:47:38 +02:00
Shuhei Kitagawa
63d1917269
Use PartialObjectMetadata to get ExternalSecret (#2504)
Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
2023-07-17 19:35:53 +02:00
Michael Sauter
644d911caa
Highlight that property field must be set for DSV secret (#2511) 2023-07-17 11:09:04 +02:00
dependabot[bot]
e04c9e7de5
chore(deps): bump actions/setup-python from 4.6.1 to 4.7.0 (#2509)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.6.1 to 4.7.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4.6.1...v4.7.0)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-17 11:02:44 +02:00
dependabot[bot]
3d30b90a5e
chore(deps): bump helm/kind-action from 1.7.0 to 1.8.0 (#2510)
Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.7.0 to 1.8.0.
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](https://github.com/helm/kind-action/compare/v1.7.0...v1.8.0)

---
updated-dependencies:
- dependency-name: helm/kind-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-17 11:02:09 +02:00
dependabot[bot]
8fbde9a88b
chore(deps): bump golang from 1.20.5-alpine to 1.20.6-alpine (#2508)
Bumps golang from 1.20.5-alpine to 1.20.6-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-17 10:52:25 +02:00
Shuhei Kitagawa
e5f953bd5f
Refactor ClusterExternalSecretController tests (#2499)
Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
2023-07-17 09:24:21 +02:00
Alex Souslik
c08ef00c79
add processPushSecret key (#2479)
Signed-off-by: alex-souslik-hs <alex.s@hiredscore.com>
2023-07-14 22:35:09 +02:00
Shuhei Kitagawa
ce52c98bef
Kick ClusterExternalSecret reconciliation when a Namespace is updated (#2486)
Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
2023-07-14 20:21:11 +02:00
Vishal Singha Roy
299d71c8e1
Adding feature info for populating metadata from IBM Secrets Manager (#2481)
Signed-off-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>
Co-authored-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>
2023-07-12 06:48:10 +03:00
Vishal Singha Roy
3ab04767a5
Adding documentation for populating Kubernetes Secret with metadata f… (#2487)
* Adding documentation for populating Kubernetes Secret with metadata from IBM Cloud Secrets Manager

Signed-off-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>

* Rephrasing a few lines

Signed-off-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>

---------

Signed-off-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>
Co-authored-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>
2023-07-11 21:03:29 +02:00
Everton Seiei Arakaki
6b686a7f86
docs: adjust conjur documentation (#2485)
Signed-off-by: Everton Seiei Arakaki <everton.seiei.arakaki@asml.com>
2023-07-10 22:08:37 +02:00
Moritz Johner
48d754db16
chore: bump helm chart (#2476)
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-07-07 21:25:36 +02:00
Badr NASS LAHSEN
05e7328d29
Update documentation to add CyberArk Conjur provider (#2473)
Signed-off-by: Badr.NassLahsen <badr.nasslahsen@cyberark.com>
2023-07-07 19:17:50 +02:00
Michael Sauter
bdf437c2e1
Add support for Delinea DevOps Secrets Vault (#2415)
* Add support for Delinea DevOps Secrets Vault

Closes #1709.

Signed-off-by: Michael Sauter <michael.sauter@boehringer-ingelheim.com>

* fix: remove merge conflict

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

* Improve documentation

Signed-off-by: Michael Sauter <michael.sauter@boehringer-ingelheim.com>

---------

Signed-off-by: Michael Sauter <michael.sauter@boehringer-ingelheim.com>
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
Co-authored-by: Moritz Johner <beller.moritz@googlemail.com>
Co-authored-by: Moritz Johner <moolen@users.noreply.github.com>
2023-07-06 18:01:43 +02:00
Moritz Johner
69fe93ea49
fix: make vault provider return NoSecretErr to respect deletionPolicy (#2455)
relates to #1512 #1502

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-07-06 08:22:34 +02:00
blexikaner
45aa382fc5
Remove unused values from helm chart (#2470)
* chore: remove unused servicemonitor-values from helm-chart

The templates for the servicemonitors of the webhook-deployment and the
certController have been removed in
https://github.com/external-secrets/external-secrets/pull/2136. This
commit removes the corresponding values in the values.yaml which are now
obsolete.

Signed-off-by: alexanderwoehler <alexander@woehler.org>

* docs: remove references to deleted servicemonitor-values from docs

Signed-off-by: alexanderwoehler <alexander@woehler.org>

---------

Signed-off-by: alexanderwoehler <alexander@woehler.org>
2023-07-06 07:57:39 +02:00
eso-service-account-app[bot]
13d59f9756
chore: update dependencies (#2463)
* update dependencies

Signed-off-by: External Secrets Operator <ExternalSecretsOperator@users.noreply.github.com>

* fix: downgrade kube-openapi

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

---------

Signed-off-by: External Secrets Operator <ExternalSecretsOperator@users.noreply.github.com>
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
Co-authored-by: External Secrets Operator <ExternalSecretsOperator@users.noreply.github.com>
Co-authored-by: Moritz Johner <beller.moritz@googlemail.com>
2023-07-05 19:51:50 +02:00
Moritz Johner
9074b98458
fix: add delinea env vars for e2e tests (#2469)
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-07-05 16:29:47 +02:00
Moritz Johner
d8bc4b755e
feat: add @shuheiktgw as maintainer 🎉 (#2459)
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-07-03 20:30:50 +02:00
Vishal Singha Roy
a755a49422
Add IBM provider metadata to secret labels and/or annotations (#2429)
* Set metadata to external secrets managed by cluster external secrets (#2413)

Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
Signed-off-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>

* Pull secret metadata from IBM Secrets Manager

Signed-off-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>

* Add lower-kebab name transformer to Doppler provider (#2418)

Signed-off-by: Joel Watson <joel.watson@doppler.com>
Signed-off-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>

* Fix E2E test setup on non-linux machines (#2414)

Signed-off-by: Michael Sauter <michael.sauter@boehringer-ingelheim.com>
Signed-off-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>

* Removing IncludeSecretMetadata from externalsecret_types.go

Signed-off-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>

* Changes to call IBM Secrets Manager once in case of KV Secret

Signed-off-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>

* Removing extra parameters to getKVSecret() is not required

Signed-off-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>

* Removing linting errors

Signed-off-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>

---------

Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
Signed-off-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>
Signed-off-by: Joel Watson <joel.watson@doppler.com>
Signed-off-by: Michael Sauter <michael.sauter@boehringer-ingelheim.com>
Co-authored-by: Shuhei Kitagawa <shuheiktgw@users.noreply.github.com>
Co-authored-by: Vishal Singha Roy <vishal.singha.roy@ibm.com>
Co-authored-by: Joel Watson <joel@watsonian.net>
Co-authored-by: Michael Sauter <mail@michaelsauter.net>
2023-07-03 08:50:45 +02:00
DusanCar11
298f580d1e
Add more context to error handling for parsing certs in order for log format to display properly (#2428)
* Add more context to error handling for parsing certs in order for
log format to display properly

Signed-off-by: Dusan Nikolic <dusannikolic11@gmail.com>

* Create error instead of string as arg

Signed-off-by: Dusan Nikolic <dusannikolic11@gmail.com>

* fix: unit test

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

---------

Signed-off-by: Dusan Nikolic <dusannikolic11@gmail.com>
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
Co-authored-by: Dusan Nikolic <dusannikolic@MacBook-Pro-66.local>
Co-authored-by: Moritz Johner <beller.moritz@googlemail.com>
2023-07-02 22:49:51 +02:00
Moritz Johner
759c5e40f9
docs: refer to support table for deletionPolicy support (#2454)
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-06-27 22:33:48 +02:00
Shuhei Kitagawa
2fc277236d
Fix ClusterExternalSecret printcolumns (#2451)
Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
2023-06-27 11:06:05 +02:00
Jordi Prats
10b15db2b2
Sanitize credentials from AWS client err (#2431)
Signed-off-by: Jordi Prats <jordi.prats@gmail.com>
2023-06-26 13:19:21 +02:00
eso-service-account-app[bot]
a4c136ced9
chore: update dependencies (#2448)
* update dependencies

Signed-off-by: External Secrets Operator <ExternalSecretsOperator@users.noreply.github.com>

* chore: downgrade kube-openapi due to incompat

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

---------

Signed-off-by: External Secrets Operator <ExternalSecretsOperator@users.noreply.github.com>
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
Co-authored-by: External Secrets Operator <ExternalSecretsOperator@users.noreply.github.com>
Co-authored-by: Moritz Johner <beller.moritz@googlemail.com>
2023-06-26 13:11:47 +02:00
Shuhei Kitagawa
f38e6fa8d8
Update docs/api/metrics.md (#2445)
Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
2023-06-24 22:07:33 +02:00
Moritz Johner
6ac427fa28
chore: bump helm chart (#2442)
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-06-22 23:33:06 +02:00
Moritz Johner
8c2c727205
fix: run helm release on release branch as well (#2444)
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-06-22 23:22:21 +02:00
Moritz Johner
891df5553a
fix: gen changelog and tag in the right place (#2443)
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-06-22 22:07:29 +02:00
Moritz Johner
090cfea763
chore: update roadmap status and version support (#2441)
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-06-22 20:22:50 +02:00
Eric
86aad7d8ab
Add support for cert-manager managed webhook certs (#2394)
* Add support for cert-manager managed webhook certs

Signed-off-by: Eric Stokes <fernferret@gmail.com>

* Ran make helm.docs to update README.md

Signed-off-by: Eric Stokes <fernferret@gmail.com>

* Added unittests for chart

Signed-off-by: Eric Stokes <fernferret@gmail.com>

* tidy: Fixed trailing whitespace

Signed-off-by: Eric Stokes <fernferret@gmail.com>

---------

Signed-off-by: Eric Stokes <fernferret@gmail.com>
2023-06-21 22:07:24 +02:00
Shuhei Kitagawa
b58b4505d5
Add status_condition metrics for the secret store controllers (#2404)
Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
2023-06-21 21:59:23 +02:00
eso-service-account-app[bot]
51e309258f
chore: update dependencies (#2432)
* update dependencies

Signed-off-by: External Secrets Operator <ExternalSecretsOperator@users.noreply.github.com>

* chore: update deps

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

---------

Signed-off-by: External Secrets Operator <ExternalSecretsOperator@users.noreply.github.com>
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
Co-authored-by: External Secrets Operator <ExternalSecretsOperator@users.noreply.github.com>
Co-authored-by: Moritz Johner <beller.moritz@googlemail.com>
2023-06-21 19:53:09 +02:00
Michael Ruoss
b05d14d4bc
enhance azure workload identity documentation (#2437)
Signed-off-by: Michael Ruoss <michael@michaelruoss.ch>
2023-06-21 19:43:17 +02:00
Shuhei Kitagawa
3c1a1257bf
Fix a broken link in docs/guides/security-best-practices.md (#2420)
Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
2023-06-21 19:38:16 +02:00
Shuhei Kitagawa
7ca43a7c84
Mount ~/.gitconfig when running make docs (#2421)
* Mount ~/.gitconfig when running make docs

Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>

* Use GIT_COMMITTER_NAME and GIT_COMMITTER_EMAIL

Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>

* Update hack/api-docs/requirements.txt

Signed-off-by: Moritz Johner <moolen@users.noreply.github.com>

---------

Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
Signed-off-by: Moritz Johner <moolen@users.noreply.github.com>
Co-authored-by: Moritz Johner <moolen@users.noreply.github.com>
2023-06-21 19:36:08 +02:00
dependabot[bot]
06faede276
chore(deps): bump actions/setup-go from 3 to 4 (#2430)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3 to 4.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-21 19:33:48 +02:00
David Hisel
de491a2790
Add Conjur provider (#2412)
* Add Conjur provider

Signed-off-by: David Hisel <David.Hisel@CyberArk.com>

* fix: lint

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

* fix: unit tests

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

---------

Signed-off-by: David Hisel <David.Hisel@CyberArk.com>
Signed-off-by: David Hisel <132942678+davidh-cyberark@users.noreply.github.com>
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
Co-authored-by: Moritz Johner <beller.moritz@googlemail.com>
2023-06-21 11:17:00 +02:00
Michael Sauter
a4508a8091
Fix E2E test setup on non-linux machines (#2414)
Signed-off-by: Michael Sauter <michael.sauter@boehringer-ingelheim.com>
2023-06-15 11:54:18 +02:00
Joel Watson
6a32b982f0
Add lower-kebab name transformer to Doppler provider (#2418)
Signed-off-by: Joel Watson <joel.watson@doppler.com>
2023-06-15 08:16:21 +02:00
Shuhei Kitagawa
9dd4186df1
Set metadata to external secrets managed by cluster external secrets (#2413)
Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
2023-06-14 23:23:04 +02:00
eso-service-account-app[bot]
c9d09546c1
chore: update dependencies (#2406)
* update dependencies

Signed-off-by: External Secrets Operator <ExternalSecretsOperator@users.noreply.github.com>

* fix: revert openapi change due to incompatibility

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

---------

Signed-off-by: External Secrets Operator <ExternalSecretsOperator@users.noreply.github.com>
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
Co-authored-by: External Secrets Operator <ExternalSecretsOperator@users.noreply.github.com>
Co-authored-by: Moritz Johner <moolen@users.noreply.github.com>
Co-authored-by: Moritz Johner <beller.moritz@googlemail.com>
2023-06-12 19:51:47 +02:00
Moritz Johner
9c436af220
feat: add ESO threat model (#2308)
* feat: add ESO threat model

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

* Update docs/guides/threat-model.md

Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
Signed-off-by: Moritz Johner <moolen@users.noreply.github.com>

* feat: add controls to disable CRDs C05

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

---------

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
Signed-off-by: Moritz Johner <moolen@users.noreply.github.com>
Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
2023-06-12 13:07:36 +02:00
Moritz Johner
05803f7aff
feat: add e2e tests for aws role-based auth (#2376)
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-06-12 12:58:29 +02:00
dependabot[bot]
248361d4e4
chore(deps): bump golang from 1.20.4-alpine to 1.20.5-alpine (#2405)
Bumps golang from 1.20.4-alpine to 1.20.5-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-12 11:51:02 +02:00
Shuhei Kitagawa
7a7ab8ad29
Stop discarding golangci-lint errors (#2383)
Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
2023-06-09 12:51:47 +02:00
Moritz Johner
9f91829566
feat: add SLIs to dashboard (#2360)
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-06-09 12:00:30 +02:00
Eric
fb944d599d
Fix exit with no error when cert violates lookahead (#2395)
Add an exit message when the certificate check triggers a fatal exit
(via cancel()). When cancel() is called, this cancels the main
context which causes the webhook to shutdown.

A return is also added to ensure the message "valid" comes out right
after "invalid" like so:

"certs are not valid at..."
"certs are valid"

Signed-off-by: Eric Stokes <fernferret@gmail.com>
2023-06-07 21:27:17 +02:00