mirrors/external-secrets
1
0
Fork 0
mirror of https://github.com/external-secrets/external-secrets.git synced 2024-12-14 11:57:59 +00:00
Code Activity
2266 commits 135 branches 173 tags 201 MiB
Commit graph

2266 commits

This branch
This branch
All branches
Author SHA1 Message Date
Moritz Johner
06cc4bfc39
chore: bump dependencies (#2314) 2023-05-15 11:11:10 +02:00
Moritz Johner
e2bc666a74
feat: LTS release process (#2155) 
* feat: auto-update dependencies

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

* docs: add release docs

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

* fix: remove note about image tag

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

* fix: add variables to allow build from release branch

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

* Update design/006-LTS-release.md

Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
Signed-off-by: Moritz Johner <moolen@users.noreply.github.com>

* Update design/006-LTS-release.md

Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
Signed-off-by: Moritz Johner <moolen@users.noreply.github.com>

* Update design/006-LTS-release.md

Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
Signed-off-by: Moritz Johner <moolen@users.noreply.github.com>

* Update design/006-LTS-release.md

Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
Signed-off-by: Moritz Johner <moolen@users.noreply.github.com>

* fix: github ref regex match release branch

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

* feat: migrate to new issue template format

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

---------

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
Signed-off-by: Moritz Johner <moolen@users.noreply.github.com>
Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
 2023-05-15 09:06:15 +02:00
Shanti G
405c12c314
update ibm secrets manager provider version to v2 (#2254) 
* update ibm secrets manager version to v2

Signed-off-by: tanishg6@gmail.com <tanishg6@gmail.com>

* update go.mod to point to v2.0.0

Signed-off-by: tanishg6@gmail.com <tanishg6@gmail.com>

---------

Signed-off-by: tanishg6@gmail.com <tanishg6@gmail.com>
Signed-off-by: Shanti G <81566195+Shanti-G@users.noreply.github.com>
 2023-05-14 09:18:56 +02:00
Gustavo Fernandes de Carvalho
ddfe51d715
🐛 bumping helm test snapshots (#2311) 
Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com>
 2023-05-13 06:40:26 -03:00
Brian Dean Richardson
9be0f87794
✨ allow vault roleId to come from k8s Secret (continued) (#2284) 
* allow vault roleId to come from k8s Secret

Signed-off-by: intrand <intrand@users.noreply.github.com>

* mark RoleID as optional in kubebuilder

Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
Signed-off-by: intrand <intrand@users.noreply.github.com>

* mark RoleRef as optional in kubebuilder

Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
Signed-off-by: intrand <intrand@users.noreply.github.com>

* validate RoleRef through webhook

Signed-off-by: intrand <intrand@users.noreply.github.com>

* chore: make fmt/reviewable vault roleId addition

Signed-off-by: Brian Richardson <brianthemathguy@gmail.com>

---------

Signed-off-by: intrand <intrand@users.noreply.github.com>
Signed-off-by: Brian Richardson <brianthemathguy@gmail.com>
Co-authored-by: intrand <intrand@users.noreply.github.com>
Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
 2023-05-12 07:56:26 -03:00
Gustavo Fernandes de Carvalho
1cf7c3a6e3
🧹 Bumping GolangciLint version and fixing lint issues (#2304) 
Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com>
 2023-05-12 05:11:33 -03:00
dependabot[bot]
c886568c27
chore(deps): bump golang from 1.20.3-alpine to 1.20.4-alpine (#2295) 
Bumps golang from 1.20.3-alpine to 1.20.4-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-05-11 22:55:18 +02:00
Gaurav Dasson
7b8fef2c18
✨ Enabling Vault IAM auth (#2208) 
* Enabling Vault IAM auth

Signed-off-by: Gaurav Dasson <gaurav.dasson@gmail.com>

* Adding spec

Signed-off-by: Gaurav Dasson <gaurav.dasson@gmail.com>

* Adding test cases and decoupling vault provider from aws for iam auth

Signed-off-by: Gaurav Dasson <gaurav.dasson@gmail.com>

* Fixing comments

Signed-off-by: Gaurav Dasson <gaurav.dasson@gmail.com>

* Fixing linter issues

Signed-off-by: Gaurav Dasson <gaurav.dasson@gmail.com>

* Fixing the check-diff errors

Signed-off-by: Gaurav Dasson <gaurav.dasson@gmail.com>

* Adding support for assumeRole operations when using static creds

Signed-off-by: Gaurav Dasson <gdasson@Gauravs-Mac-mini.local>

* Bumping the dependencies to fix the go.mod/go.sum conflicts

Signed-off-by: Gaurav Dasson <gdasson@Gauravs-Mac-mini.local>

* Bumping up e2e go mod files

Signed-off-by: Gaurav Dasson <gaurav.dasson@gmail.com>

---------

Signed-off-by: Gaurav Dasson <gaurav.dasson@gmail.com>
 2023-05-11 06:10:07 -03:00
Moritz Johner
f6475d63b0
feat: add security best practices doc, restructure guides section (#2290) 
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
 2023-05-11 08:21:30 +02:00
Miworfi
ddb384cfe5
chore: new adopter (#2293) 
PITS Global Data Recovery Services

Signed-off-by: Miworfi <87698848+miworfi@users.noreply.github.com>
 2023-05-04 21:51:11 +02:00
Matthew Hembree
6a2a050928
feat: add RBAC rules for user-facing ClusterRoles (#2286) 
Signed-off-by: Matthew Hembree <matthew_hembree@yahoo.com>
 2023-05-03 22:32:24 +02:00
Moritz Johner
99a691f804
feat: add hostNetwork option for controller/certController in helm chart (#2269) 
Signed-off-by: Moritz Johner <Moritz.Johner@form3.tech>
 2023-05-02 22:00:00 +02:00
Moritz Johner
6130c8f43b
chore: update deps (#2283) 
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
 2023-05-02 21:37:54 +02:00
Dominik Zeiger
035ff38172
🐛 Gitlab: separate gitlab client and provider (#2259) 
* Gitlab: separate gitlab client and provider

Signed-off-by: Dominik Zeiger <dominik@zeiger.biz>

* Gitlab: cleanup

Signed-off-by: Dominik Zeiger <dominik@zeiger.biz>

* Gitlab: formatter

Signed-off-by: Dominik Zeiger <dominik@zeiger.biz>

* fix: lint / goheader

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

---------

Signed-off-by: Dominik Zeiger <dominik@zeiger.biz>
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
Co-authored-by: Moritz Johner <beller.moritz@googlemail.com>
 2023-05-02 20:15:57 +02:00
Benny
4478fccf9b
Add MBTI as adopter (#2265) 
Added Mercedes-Benz Tech Innovation to the list of adopters, as we use the project in at least one of our projects.

Benjamin Bertow benjamin.bertow@mercedes-benz.com, Mercedes-Benz Tech Innovation GmbH.
https://github.com/mercedes-benz/foss/blob/master/PROVIDER_INFORMATION.md

Signed-off-by: Benny <benjamin.bertow@mercedes-benz.com>
 2023-04-27 05:59:54 -03:00
Sebastián Gómez
fc7281a39b
Added examples for all the Generators in the docs. Fixes #2260 (#2261) 
Also, some generators's examples didn't have the `.metadata.name` property.

Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com>
 2023-04-26 17:00:14 -03:00
dependabot[bot]
59ca28db5f
chore(deps): bump actions/setup-python from 4.5.0 to 4.6.0 (#2251) 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.5.0 to 4.6.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4.5.0...v4.6.0)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-04-26 19:45:49 +02:00
Gareth Evans
524fe2344d
chore: adding VMware Tanzu to the adopters list (#2262) 
Signed-off-by: Gareth Evans <gareth@bryncynfelin.co.uk>
 2023-04-26 12:31:13 -03:00
Moritz Johner
6c4bbb2e9c
fix: certController misses leases RBAC to enable leader election (#2258) 
Signed-off-by: Moritz Johner <Moritz.Johner@form3.tech>
 2023-04-26 15:10:15 +02:00
Sebastián Gómez
81b9546e0f
Password yaml was missing the name (#2256) 
I also thought it could be usefull to provide an External Secret that uses the Password from the example

Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com>
 2023-04-25 21:05:22 +02:00
Alexandre Desjardins
2cf9203142
feat(helm): use good securityContext by default (#2250) 
* feat(helm): use good securityContext by default

Signed-off-by: Alexandre Desjardins <alexandre.bd@tutanota.com>

* update helm tests in line with default securityContext

Signed-off-by: Alexandre Desjardins <alexandre.bd@tutanota.com>

---------

Signed-off-by: Alexandre Desjardins <alexandre.bd@tutanota.com>
 2023-04-24 20:34:43 +02:00
Sam Hopwell
0b9f33e5f7
Add topologySpreadConstraints config (#2237) 
Signed-off-by: Sam Hopwell <sam.hopwell@cybsafe.com>
 2023-04-24 13:28:29 +02:00
Moritz Johner
6e1bde384a
fix: re-generate helm test fixtures (#2249) 
* fix: update helm test fixtures

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

* fix: helm workflow should run when CRDs change

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

---------

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
 2023-04-23 21:27:55 +02:00
Iavael
d79b068dd5
Fix scaleway config validation in ClusterSecretStore (#2247) 
Signed-off-by: Iavael <iavael@users.noreply.github.com>
 2023-04-23 00:14:10 +02:00
Moritz Johner
d605a5b450
chore: update deps (#2227) 
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
 2023-04-16 15:42:44 +02:00
Isaac
f3c5888bd5
[Documentation] Align getting started documents regarding CRDs with actuality (installCRDs is true by default) (#2225) 
Signed-off-by: Isaac Hui <ihui@dropbox.com>
 2023-04-16 14:55:05 +02:00
dependabot[bot]
4345a7180e
chore(deps): bump golang from 1.20.2-alpine to 1.20.3-alpine (#2211) 
Bumps golang from 1.20.2-alpine to 1.20.3-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-04-16 14:53:02 +02:00
Maxim Rubchinsky
59f5759106
✨ Add Alibaba RRSA auth support (#1752) 
support alibaba oidc assume role

---------

Signed-off-by: Maxim Rubchinsky <maxim.rubchinsky@wiz.io>
Co-authored-by: Moritz Johner <beller.moritz@googlemail.com>
 2023-04-16 14:12:30 +02:00
charan986
5e7184dd26
Added GJSON pkg support extracting secret key value from JSON (#2201) 
Signed-off-by: charan986 <51893702+charan986@users.noreply.github.com>
 2023-04-12 17:59:38 +02:00
JJ Łakis
34892e7e52
Add blog post about GCP with on-prem (#2206) 
Signed-off-by: JJ Łakis <mlody3k@gmail.com>
 2023-04-06 12:04:39 +02:00
Moritz Johner
4d420d498a
chore: bump deps (#2203) 
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
 2023-04-05 21:15:18 +02:00
Kratik Jain
f931c6a6da
Helm: Enabled Modifying namespace of ServiceMonitors (#2190) 
* Added namespace in ServiceMonitor

Signed-off-by: Kratik Jain <kratik1998@gmail.com>

* Added namespace in values.yaml for ServiceMonitor

Signed-off-by: Kratik Jain <kratik1998@gmail.com>

* chore: gen helm docs

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

* fix: update test

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

---------

Signed-off-by: Kratik Jain <kratik1998@gmail.com>
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
Co-authored-by: Moritz Johner <beller.moritz@googlemail.com>
Co-authored-by: Moritz Johner <moolen@users.noreply.github.com>
 2023-04-05 21:14:25 +02:00
Matthias Baetens
eedd90c567
Fix Google Cloud Secret Manager typo (#2196) 
See [issue](https://github.com/external-secrets/external-secrets/issues/2195)

Signed-off-by: Matthias Baetens <baetensmatthias@gmail.com>
 2023-04-05 20:26:50 +02:00
choilmto
5267c6ee5d
Implement and test logic for external id field when assuming IAM role for AWS (#2023) 
Added external id field to struct. Wrote test in AWS provider to check
external ID field in IAM role. Added external id info to current log
when starting an aws session.

Signed-off-by: Cindy <choilmto@gmail.com>
 2023-04-05 20:08:13 +02:00
kallymsft
fb78d96d8c
Added support for standard K8s labels in metrics (#2064) 
* Added support for standard K8s labels in metrics

Signed-off-by: KA <110458464+kallymsft@users.noreply.github.com>

* Added feature-flag for label metrics

Signed-off-by: KA <110458464+kallymsft@users.noreply.github.com>

---------

Signed-off-by: KA <110458464+kallymsft@users.noreply.github.com>
 2023-04-05 19:58:17 +02:00
Moritz Johner
34ea2b035c
chore: bump deps (#2183) 
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
 2023-03-29 23:08:21 +02:00
dependabot[bot]
e59d8dc096
chore(deps): bump helm/chart-testing-action from 2.3.1 to 2.4.0 (#2169) 
Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.3.1 to 2.4.0.
- [Release notes](https://github.com/helm/chart-testing-action/releases)
- [Commits](https://github.com/helm/chart-testing-action/compare/v2.3.1...v2.4.0)

---
updated-dependencies:
- dependency-name: helm/chart-testing-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-03-29 19:11:47 +02:00
dependabot[bot]
585b97c0e1
chore(deps): bump actions/stale from 7 to 8 (#2168) 
Bumps [actions/stale](https://github.com/actions/stale) from 7 to 8.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-03-29 19:10:30 +02:00
Moritz Johner
8edc033fba
fix: vault logging structure (#2180) 
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
 2023-03-28 22:37:56 +02:00
Moritz Johner
b7fae518a7
fix: change meeting time (#2154) 
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
 2023-03-25 00:47:10 +01:00
Moritz Johner
b2269ee3fb
✨ dashboard variable (#2153) 
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
 2023-03-22 22:32:31 +01:00
Moritz Johner
e7088937f4
✨ update deps & fix dashboard json (#2148) 
* fix: export grafana dashboard properly

The dashboard JSON must be exported via the share UI, instead of the
JSON Model from settings.
This allows a user to select the correct datasource when importing it
via UI.

see here: https://grafana.com/docs/grafana/latest/dashboards/manage-dashboards/#exporting-a-dashboard

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

* chore: bump deps

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

---------

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
 2023-03-21 00:09:04 +01:00
dependabot[bot]
3dc39d7b49
chore(deps): bump helm/kind-action from 1.2.0 to 1.5.0 (#2140) 
Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.2.0 to 1.5.0.
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](https://github.com/helm/kind-action/compare/v1.2.0...v1.5.0)

---
updated-dependencies:
- dependency-name: helm/kind-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-03-20 23:34:28 +01:00
Gustavo Fernandes de Carvalho
ad67363751
✨ Implements template MergePolicy. Fixes a few template merging bugs (#2115) 
Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com>
 2023-03-20 19:22:30 -03:00
dependabot[bot]
717746c76f
chore(deps): bump actions/setup-go from 3 to 4 (#2141) 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3 to 4.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-03-20 23:00:25 +01:00
Márk Sági-Kazár
bb44582ef6
Add FOSDEM23 talk (#2133) 
Signed-off-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
 2023-03-20 22:57:05 +01:00
Shuhei Kitagawa
07f237e071
✨ Support MetadataPolicy=Fetch for GCP Secrets Manager (#2111) 
* Support MetadataPolicy=Fetch for GCP Secrets Manager

Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>

* Use '.' instead of '/' to split metadata

Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>

* Support annotations/labels

Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>

---------

Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
 2023-03-20 22:27:59 +01:00
Sebastián Gómez
ee13e61645
✨ Implement fetch metadata for K8s (#2106) 
* Implemente fetch metadata for K8s

Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com>
 2023-03-20 21:56:17 +01:00
Thibault Cohen
6c070bb538
Add bitwarden example (#2139) 
* Add bitwarden example

Signed-off-by: Thibault Cohen <47721+titilambert@users.noreply.github.com>

* Fix bitwarden docs

Signed-off-by: Thibault Cohen <47721+titilambert@users.noreply.github.com>

* fix: punctuation, newline for bullet list

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

---------

Signed-off-by: Thibault Cohen <47721+titilambert@users.noreply.github.com>
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
Co-authored-by: Moritz Johner <beller.moritz@googlemail.com>
 2023-03-20 21:47:47 +01:00
Gustavo Fernandes de Carvalho
71e7aa4ede
chore: bump 0.8.1 (#2138) 
Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com>
 2023-03-17 20:38:02 -03:00