Moritz Johner
76cf8ad263
feat: allow generators to be referenced from a PushSecret ( #3965 )
...
This removes the need for an intermediary Kind=ExternalSecret and
Kind=Secret when using a generator.
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2024-10-02 06:43:00 +00:00
Gustavo Fernandes de Carvalho
098d03792d
chore: update security best practice ( #3794 )
...
Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com>
2024-08-15 21:31:01 +02:00
Ketil
eae808d851
docs: document fullPemToPkcs12 functions ( #3749 )
...
Signed-off-by: Ketil Gjerde <477141+mysteq@users.noreply.github.com>
2024-08-02 10:21:31 +02:00
Tyler Renslow
a2c7923e35
docs: Remove references to pemCertificate and pemPrivateKey functions ( #3744 )
...
* Update docs
Fixes #3260 Removes old deprecated template function
Signed-off-by: Tyler Renslow <tdrenslow@gmail.com>
* Update templating-v1.md
Signed-off-by: Tyler Renslow <tdrenslow@gmail.com>
---------
Signed-off-by: Tyler Renslow <tdrenslow@gmail.com>
2024-07-29 22:33:34 +02:00
Shuhei Kitagawa
b156e23743
Raise error when unknown key specified in template ( #3480 )
...
* Raise error when unknown key specified in template
Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
* Update the template docs to clarify the new behavior with non-existing keys
Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
---------
Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
2024-05-17 09:57:11 -03:00
Parth Patel
6d08e679be
Fixed docs nav bar and a couple of broken links ( #3445 )
...
Signed-off-by: Parth Patel <p.patel81@yahoo.com>
2024-05-05 07:47:47 -03:00
Tyki6
e32233f401
Update common-k8s-secret-types.md to fix get secret jsonpath ( #3434 )
...
Signed-off-by: Tyki6 <57527739+tyki6@users.noreply.github.com>
2024-04-30 14:15:10 -03:00
Shuhei Kitagawa
43a7a16baf
Update Go and golangci-lint version ( #3396 )
...
Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
2024-04-25 06:36:11 -03:00
Rodrigo Fior Kuntzer
9ff2354213
fix: introducing support for conversion strategy for PushSecret. ( #3292 )
...
* fix: introducing support for conversion strategy for PushSecret.
Signed-off-by: Rodrigo Fior Kuntzer <rodrigo@miro.com>
* fix: unit tests code quality.
Signed-off-by: Rodrigo Fior Kuntzer <rodrigo@miro.com>
---------
Signed-off-by: Rodrigo Fior Kuntzer <rodrigo@miro.com>
2024-04-04 16:31:28 +02:00
Mohit Bishesh
ac6d53da54
Update all-keys-one-secret.md ( #3320 )
...
* Update all-keys-one-secret.md
Signed-off-by: Mohit Bishesh mohitbishesh7@gmail.com
Signed-off-by: Mohit Bishesh <74617917+MohitBishesh@users.noreply.github.com>
Signed-off-by: Mohit Bishesh <mohitbishesh7@gmail.com>
* Updating the grammar and surname
Signed-off-by: Mohit Bishesh <mohitbishesh7@gmail.com>
Signed-off-by: Mohit Bishesh <mohitbishesh7@gmail.com>
---------
Signed-off-by: Mohit Bishesh <74617917+MohitBishesh@users.noreply.github.com>
Signed-off-by: Mohit Bishesh <mohitbishesh7@gmail.com>
2024-04-04 08:10:57 +02:00
Carolin Dohmen
29e5f71d8b
Add PushSecret UpdatePolicy (to replace PR #3100 ) ( #3117 )
...
* Add PushSecret UpdatePolicy
Signed-off-by: Carolin Dohmen <carodohmen@gmail.com>
* Adjust description of UpdatePolicy in PushSecret Spec
Signed-off-by: Carolin Dohmen <carodohmen@gmail.com>
* Restructure PushSecret Status
Signed-off-by: Carolin Dohmen <carodohmen@gmail.com>
* Refactor PushSecret controller method
Signed-off-by: Carolin Dohmen <carodohmen@gmail.com>
* Add missing methods for new providers
Signed-off-by: Carolin Dohmen <carodohmen@gmail.com>
* Add missing method to onboardbase client
Signed-off-by: Carolin Dohmen <carodohmen@gmail.com>
* Add docs on PushSecret UpdatePolicy
Signed-off-by: Carolin Dohmen <carodohmen@gmail.com>
* Use constant for error message
Signed-off-by: Carolin Dohmen <carodohmen@gmail.com>
---------
Signed-off-by: Carolin Dohmen <carodohmen@gmail.com>
2024-03-08 11:17:31 +01:00
Lucas Severo Alves
6edd8d38dd
docs: adds note to Lifecycle creation policy owner docs ( #3235 )
...
Signed-off-by: Lucas Severo Alves <lseveroa@redhat.com>
Co-authored-by: Lucas Pimentel Quintao <luk.2001@hotmail.com>
2024-03-06 10:30:20 +01:00
Mathias Maes
74ed3facb7
Add PEM to PKCS12 template function ( #3101 )
...
* Add PEM to PKCS12 template function
Signed-off-by: Mathias Maes <mathias.maes@aloxy.io>
* add docs
Signed-off-by: Mathias Maes <mathias.maes@aloxy.io>
* add pemToPkcs12Pass
Signed-off-by: Mathias Maes <mathias.maes@aloxy.io>
* fix formatting
Signed-off-by: Mathias Maes <mathias.maes@aloxy.io>
---------
Signed-off-by: Mathias Maes <mathias.maes@aloxy.io>
2024-02-27 09:36:53 +01:00
kyasbal
b6b4f12509
Fix wrong namespaceSelector configuration in snippet in document ( #3054 )
...
The snippet[1] was not aligning with the schema defined in CRD.
[1] https://external-secrets.io/latest/guides/security-best-practices/
Signed-off-by: kyasbal <kyasbal1994@gmail.com>
2024-01-20 22:26:12 +01:00
Moritz Johner
00249f1d43
Create OSSF scorecard job ( #3032 )
...
* Create scorecard.yml
Adds a scorecard workflow to regularly check the repo.
See docs: https://github.com/marketplace/actions/ossf-scorecard-action#scorecard-badge
Signed-off-by: Moritz Johner <moolen@users.noreply.github.com>
2024-01-18 21:03:07 +01:00
aviadkray
92187cf2b9
fix grammar ( #2991 )
2024-01-12 22:47:41 +01:00
Robert Paschedag
45e2bd3796
added some example for v2 literal templating ( #3007 )
...
Signed-off-by: Robert Paschedag <robert.paschedag@sap.com>
Co-authored-by: Robert Paschedag <robert.paschedag@sap.com>
2024-01-09 09:38:23 +01:00
Matúš Ferech
0ac250dd2d
Fix typo in pushsecrets docs ( #2998 )
2024-01-04 15:28:05 +01:00
Gergely Brautigam
d6e24a82bd
feat: add templating to PushSecret ( #2926 )
...
* feat: add templating to PushSecret
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
* adding unit tests around templating basic concepts and verifying output
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
* extracting some of the common functions of the parser
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
* remove some more duplication
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
* removed commented out code segment
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
* added documentation for templating feature
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
* simplified the templating for annotations and labels
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
---------
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
2023-12-22 21:45:34 +01:00
Ryan Arnold
8fd952c6e7
Docs: Add details on how to use FilterPEM function ( #2893 )
...
* Docs - add note clarifying how to use filterpem for future readers
Signed-off-by: arnoldrw <arnold.rw@pg.com>
* Update docs/guides/templating.md
Co-authored-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Ryan Arnold <51235300+arnoldrw@users.noreply.github.com>
---------
Signed-off-by: arnoldrw <arnold.rw@pg.com>
Signed-off-by: Ryan Arnold <51235300+arnoldrw@users.noreply.github.com>
Co-authored-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
2023-11-29 20:37:13 +01:00
Gergely Brautigam
3fbe318582
feat: allow pushing the whole secret to the provider ( #2862 )
...
* feat: allow pushing the whole secret to the provider
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
* add documentation about pushing a whole secret
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
* disabling this feature for the rest of the providers for now
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
* added scenario for update with existing property
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
---------
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
2023-11-21 22:00:21 +01:00
visokoo
2e4067ed3f
docs: remove additional space in dockercreds example that causes the last curly brace to be removed ( #2877 )
...
Signed-off-by: Vivian Ta <ta.vivian@gmail.com>
2023-11-15 13:41:47 +01:00
Charl Klein
06301854d0
docs: - Minor Note to assist future readers ( #2839 )
...
Signed-off-by: CharlKlein <19486531+CharlKlein@users.noreply.github.com>
2023-11-02 20:36:09 +01:00
Sebastián Gómez
f5a4107b3f
Updated docum of PushSecret ( #2391 )
...
* Updated docum of PushSecret
Closes #2242
Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com>
* Updated image and completed diagram file
Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com>
---------
Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com>
2023-10-11 21:20:50 +02:00
rteeling
ddae00dd6d
Documentation: callout templating escapes for helm users ( #2704 )
...
* callout templating escapes for helm users
Signed-off-by: rteeling <rteeling@users.noreply.github.com>
* quote the snippet file
Signed-off-by: rteeling <rteeling@users.noreply.github.com>
---------
Signed-off-by: rteeling <rteeling@users.noreply.github.com>
Co-authored-by: rteeling <rteeling@users.noreply.github.com>
2023-09-20 21:20:14 +02:00
Moritz Johner
0334c2801c
fix: template funcs need to be wrapped in raw block ( #2642 )
...
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-08-23 11:08:40 +02:00
Layer8Err
81c88209cf
Update common-k8s-secret-types.md ( #2624 )
...
Add example for templating dockerconfigjson given:
* container registry name
* container registry host (e.g. ghcr.io)
* container registry password
Signed-off-by: Layer8Err <dwight.brenner@gmail.com>
2023-08-23 10:04:47 +02:00
rmdg88
1ad4a66ab1
Update common-k8s-secret-types.md ( #2541 )
...
corrected kubectl command syntax
Signed-off-by: rmdg88 <66125272+rmdg88@users.noreply.github.com>
2023-07-25 16:10:34 +02:00
Moritz Johner
759c5e40f9
docs: refer to support table for deletionPolicy support ( #2454 )
...
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-06-27 22:33:48 +02:00
Shuhei Kitagawa
3c1a1257bf
Fix a broken link in docs/guides/security-best-practices.md ( #2420 )
...
Signed-off-by: shuheiktgw <s-kitagawa@mercari.com>
2023-06-21 19:38:16 +02:00
Moritz Johner
9c436af220
feat: add ESO threat model ( #2308 )
...
* feat: add ESO threat model
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
* Update docs/guides/threat-model.md
Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
Signed-off-by: Moritz Johner <moolen@users.noreply.github.com>
* feat: add controls to disable CRDs C05
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
---------
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
Signed-off-by: Moritz Johner <moolen@users.noreply.github.com>
Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
2023-06-12 13:07:36 +02:00
Moritz Johner
f6475d63b0
feat: add security best practices doc, restructure guides section ( #2290 )
...
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2023-05-11 08:21:30 +02:00
Gustavo Fernandes de Carvalho
ad67363751
✨ Implements template MergePolicy. Fixes a few template merging bugs ( #2115 )
...
Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com>
2023-03-20 19:22:30 -03:00
bvdboom
13f26e6e24
📖 fix typo ( #2042 )
...
Signed-off-by: bvdboom <bvdboom@users.noreply.github.com>
Co-authored-by: Bernard <bv.local>
2023-02-23 14:08:39 +01:00
Gustavo Fernandes de Carvalho
0bd9ea4dbd
✨ Templates from string ( #1748 )
...
* Adds templates from string
Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com>
2023-01-03 19:02:43 -03:00
Steven Bressey
7416a84b2a
Add flag to set CRD names in cert controller ( #1811 )
...
* added new crd-names flag to reconcile only installed CRDs in cert controller
Signed-off-by: Steven Bressey <sbressey@bressey.me>
* add guide to disable cluster features
Signed-off-by: Steven Bressey <sbressey@bressey.me>
* fix fmt
Signed-off-by: Steven Bressey <sbressey@bressey.me>
Co-authored-by: Steven Bressey <sbressey@bressey.me>
2022-12-13 20:56:30 +01:00
DJΞRFY
55e0c50b30
📚 feat: improve docs ( #1749 )
...
Signed-off-by: Djerfy <djerfy@gmail.com>
2022-12-04 08:08:12 -03:00
Pascal Bro
3c5d369da2
Update getallsecrets.md ( #1774 )
...
typo
Signed-off-by: Pascal Bro <git@pascalbrokmeier.de>
Signed-off-by: Pascal Bro <git@pascalbrokmeier.de>
2022-12-03 09:33:49 +01:00
Dominik Zeiger
6ec0d2cd95
✨ gitlab: getAllSecrets ( #1681 )
...
* gitlab: getAllSecrets
Signed-off-by: Dominik Zeiger <dominik@zeiger.biz>
* Update pkg/provider/gitlab/gitlab.go
Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
Signed-off-by: Dominik Zeiger <domizei385@users.noreply.github.com>
Signed-off-by: Dominik Zeiger <dominik@zeiger.biz>
* gitlab: added some test coverage
Signed-off-by: Dominik Zeiger <dominik@zeiger.biz>
Signed-off-by: Dominik Zeiger <dominik@zeiger.biz>
Signed-off-by: Dominik Zeiger <domizei385@users.noreply.github.com>
Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
2022-11-01 15:09:36 -03:00
Moritz Johner
dabfa5a589
Feature: initial generator implementation + Github Actions OIDC/AWS ( #1539 )
...
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com>
2022-10-29 20:15:50 +02:00
Chris B
c6d09b004c
docs: fix typo in ownership-deletion-policy ( #1638 )
...
Signed-off-by: Chris B <chris@banks.cx>
Signed-off-by: Chris B <chris@banks.cx>
2022-10-14 16:38:05 +02:00
Sebastián Gómez
fc926afcb1
Updated the right path to the field ( #1557 )
...
Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com>
Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com>
2022-09-16 21:11:09 +02:00
Moritz Johner
3d3edcc8af
feat: add support matrix, refactor docs ( #1508 )
...
Signed-off-by: Moritz Johner <Moritz.Johner@form3.tech>
2022-09-01 09:53:22 +02:00
