mirror of
https://github.com/external-secrets/external-secrets.git
synced 2024-12-14 11:57:59 +00:00
67fedc840e
* build(deps): bump sigs.k8s.io/controller-runtime from 0.11.2 to 0.12.3 Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.11.2 to 0.12.3. - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/master/RELEASE.md) - [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.11.2...v0.12.3) --- updated-dependencies: - dependency-name: sigs.k8s.io/controller-runtime dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * feat: bump kubernetes 1.24 Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: backwards-compatible vault implementation Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * feat: add audiences field to serviceAccountRef This will be used by aws, azure, gcp, kubernetes & vault providers in combination with TokenRequest API: it will _append_ audience claims to provider-specific audiences. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * feat: refactor kubernetes client to match provider/client interfaces the kubernetes provider mixed up provider and client interfaces which made it really hard to reason about. This commit separates into two structs, each implements one interface. The client struct fields have been renamed and annotated so their use and scope is clear. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: deprecate expirationSeconds expirationSeconds is not needed because we generate a service account token on the fly for a single use. There will be no replacement for this. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: rename token fetch audiences field Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: generate CRDs Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Moritz Johner <beller.moritz@googlemail.com>
32 lines
1.1 KiB
Docker
32 lines
1.1 KiB
Docker
ARG GO_VERSION=1.17
|
|
FROM golang:$GO_VERSION-buster as builder
|
|
|
|
ENV KUBECTL_VERSION="v1.24.3"
|
|
ENV HELM_VERSION="v3.7.1"
|
|
|
|
RUN go get -u github.com/onsi/ginkgo/v2/ginkgo
|
|
RUN wget -q https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl -O /usr/local/bin/kubectl && \
|
|
chmod +x /usr/local/bin/kubectl && \
|
|
wget -q https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz -O - | tar -xzO linux-amd64/helm > /usr/local/bin/helm && \
|
|
chmod +x /usr/local/bin/helm
|
|
|
|
FROM alpine:3.15.0
|
|
RUN apk add -U --no-cache \
|
|
ca-certificates \
|
|
bash \
|
|
curl \
|
|
tzdata \
|
|
libc6-compat \
|
|
openssl
|
|
|
|
COPY --from=builder /go/bin/ginkgo /usr/local/bin/
|
|
COPY --from=builder /usr/local/bin/kubectl /usr/local/bin/
|
|
COPY --from=builder /usr/local/bin/helm /usr/local/bin/
|
|
|
|
COPY entrypoint.sh /entrypoint.sh
|
|
COPY suites/provider/provider.test /provider.test
|
|
COPY suites/argocd/argocd.test /argocd.test
|
|
COPY suites/flux/flux.test /flux.test
|
|
COPY k8s /k8s
|
|
|
|
CMD [ "/entrypoint.sh" ]
|