Daniel Hix
324c7def06
feat: implement ClusterExternalSecret ( #542 )
...
Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
2022-03-20 09:32:27 +01:00
Moritz Johner
c1db2b5754
fix: integrate sdk changes
2022-03-18 20:39:15 +01:00
AndreyZamyslov
45449dccc9
Yandex Lockbox Connection Leaks ( #835 )
...
* fix Yandex Lockbox provider connection leaks (https://github.com/external-secrets/external-secrets/issues/833 )
* fix Yandex Lockbox provider connection leaks (https://github.com/external-secrets/external-secrets/issues/833 )
2022-03-16 17:58:01 +01:00
paul-the-alien[bot]
fb056cc9b5
Merge pull request #784 from external-secrets/feature/hashivault-getallsecrets
...
Implements Hashicorp Vault GetAllSecrets
2022-03-12 11:19:04 +00:00
Gustavo Carvalho
caf00a43aa
Chore: bumping gitlab-go to 0.58.0
...
Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com>
2022-03-10 08:46:17 -03:00
Gustavo Carvalho
b093db366d
Fixing lint
...
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-03-09 13:58:54 -03:00
Gustavo Carvalho
8be3cd5a72
Moving duplication validation logic to utils method
...
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-03-09 13:49:17 -03:00
paul-the-alien[bot]
439ecfaf9d
Merge pull request #783 from AtzeDeVries/allow-gcp-cross-project-secrets
...
GCP: allow cluster to be in different project
2022-03-09 10:03:20 +00:00
Gustavo Carvalho
164e8776ec
Adding docs and implementing ConversionStrategy
...
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-03-09 06:59:54 -03:00
Gustavo Carvalho
2f23fd28ed
Adding GetAllSecrets for Hashicorp Vault
...
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-03-09 05:40:09 -03:00
Gustavo Carvalho
0086fe2342
WIP: GetAllSecrets for vault method
...
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-03-09 05:39:09 -03:00
Atze de Vries
c560b0ced5
fix lint
2022-03-09 09:26:36 +01:00
Atze de Vries
03fc0e9dc1
use storespec directly in get ClusterProjectID
2022-03-09 08:49:50 +01:00
Atze de Vries
6574697e9e
remove unwanted stuff
2022-03-07 12:57:54 +01:00
Atze de Vries
d9f87c296d
rework clusterProjectID and add test
2022-03-07 12:56:08 +01:00
Atze de Vries
2f53ab8220
also make optional for v1beta1 and add note to docs
2022-03-03 19:35:38 +01:00
paul-the-alien[bot]
b9de64b967
Merge pull request #750 from external-secrets/feature/validating-webhook
...
Feature: validating webhook
2022-03-02 17:10:56 +00:00
Atze de Vries
da47ad2cac
GCP: allow cluster to be in different project
2022-03-02 11:24:04 +01:00
Moritz Johner
8fc4484cc6
feat: implement validating webhook
...
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2022-03-01 21:25:15 +01:00
Marc Billow
6de9399126
Fix template fallback logic to handle TemplateFrom syntax
2022-02-23 16:34:50 -06:00
Moritz Johner
fb8f496204
Merge branch 'main' into feature/conversion-webhook
2022-02-23 08:15:03 +01:00
rodrmartinez
045e056719
Fix sonarcloud code smells
2022-02-22 15:55:31 -03:00
rodrmartinez
e887e49436
leaves Validate() method empty for now
2022-02-22 15:46:58 -03:00
rodrmartinez
7c4a17a9c3
Merge branch 'main' into feature/kubernetes-provider
2022-02-17 15:38:45 -03:00
rodrmartinez
86d7710727
changing kubernetes api struct
2022-02-17 14:45:43 -03:00
Gustavo Carvalho
847b95e4fd
Merge branch 'main' into feature/conversion-webhook
...
Disabled secrets cache for cert controller.
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-02-17 09:35:20 -03:00
paul-the-alien[bot]
18b4f2be8b
Merge pull request #703 from external-secrets/chore/cleanup-azure-provider
...
chore: cleanup az/keyvault provider
2022-02-17 11:56:00 +00:00
paul-the-alien[bot]
4cca87b6d7
Merge pull request #729 from external-secrets/fix/disable-sec-cm-cache
...
feat: avoid caching secrets/configmaps
2022-02-17 09:15:31 +00:00
Gustavo Carvalho
40ec693479
Merge branch 'main' into feature/conversion-webhook
...
Fixed conflicts and implemented necessary changes for v1beta1
2022-02-16 16:00:32 -03:00
paul-the-alien[bot]
86aedda434
Merge pull request #701 from external-secrets/feature/template-string-interface
...
feat: implement template engine v2
2022-02-16 17:16:24 +00:00
Moritz Johner
899cf72f22
feat: avoid caching secrets/configmaps
...
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2022-02-16 14:37:42 +01:00
paul-the-alien[bot]
ff4af57a7b
Merge pull request #727 from external-secrets/fix/vault-key-with-dot
...
fix: vault keys should take precedence over gjson
2022-02-15 18:28:41 +00:00
Moritz Johner
094bcf0332
fix: vault keys should take precedence over gjson
2022-02-15 17:28:14 +01:00
castaneai
3fd3cc0186
Fix the leak in GCPSM when the secret operator cannot find the secret. ( #722 )
...
* fix(gcp): Fix the leak in GCPSM when the secret operator cannot find the secret.
The IAM client has an internal gRPC connection,
but if the secret fetch fails, the goroutine created by the gRPC connection will leak.
Therefore, close the IAM client when the creation of the GCPSM client fails.
* test: fix build error on fakeIAMClient
2022-02-15 16:54:11 +01:00
Gustavo Carvalho
96cb340ace
Implementing Requeue Interval for certController. Fixing unit tests and check-diff
...
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-02-14 16:05:17 -03:00
Gustavo Carvalho
1d8cfc4a12
Changed logic of Webhook check for certs.
...
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-02-14 15:46:10 -03:00
Gustavo Carvalho
31eedfbb26
Fixing up some code smells
...
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-02-14 10:36:12 -03:00
Gustavo Carvalho
1587fa02b1
Improved deployments and crd logic. Added cert-controller reconcile tests
...
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-02-14 10:08:27 -03:00
Gustavo Carvalho
3d9e5a9fdb
Adding controller tests for cert-controller
...
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-02-14 09:01:21 -03:00
Gustavo Carvalho
e776f6d843
WIP: implementing separate deployments
...
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-02-13 09:14:41 -03:00
Gustavo Carvalho
ab03bcdcc7
Making reviewable
...
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-02-11 15:17:20 -03:00
Gustavo Carvalho
a85e487d1d
Added unit tests for crd controller methods.
...
Added simple GetAllSecrets logic test
Starting (and failing to) test on controller level
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-02-11 15:14:14 -03:00
Gustavo Carvalho
024b64fe39
Added Readiness Probe for helm charts.
...
Fixed make generate command to not use kubectl
Fixed lint
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-02-11 08:10:11 -03:00
Moritz Johner
74fca707b3
feat(template): add filterPEM function
...
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2022-02-11 08:32:37 +01:00
Moritz Johner
9486dd85dd
fix(template): extract multiple certs/keys from PKCS#12
...
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2022-02-11 08:26:32 +01:00
Moritz Johner
009b60de19
fix(webhook): use v2 template funcs with webhook provider
...
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2022-02-11 08:26:32 +01:00
Moritz Johner
a627e82639
chore: fix smells
...
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2022-02-11 08:26:32 +01:00
Moritz Johner
54e68399ec
feat: implement template engine v2
...
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2022-02-11 08:26:31 +01:00
Gustavo Carvalho
23784803ff
Merge branch 'main' into feature/conversion-webhook
...
Updated Oracle provider new specs for v1beta1
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-02-10 16:55:37 -03:00
Gustavo Carvalho
fd9e09a1ee
WIP: Structured reconciliation loops for CRDs
...
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
2022-02-10 14:12:13 -03:00