bump 0.9.15-2

external-secrets · Apr 12, 2024 · 4610a3c · 4610a3c
1 parent e4d90cf
commit 4610a3c
Show file tree

Hide file tree

Showing 11 changed files with 356 additions and 12 deletions.
diff --git a/Makefile b/Makefile
@@ -3,7 +3,7 @@
 # To re-generate a bundle for another specific version without changing the standard setup, you can:
 # - use the VERSION as arg of the bundle target (e.g make bundle VERSION=0.0.2)
 # - use environment variables to overwrite this value (e.g export VERSION=0.0.2)
-VERSION ?= 0.9.14
+VERSION ?= 0.9.15-2
 
 # CHANNELS define the bundle channels used in the bundle.
 # Add a new line here if you would like to change its default config. (E.g CHANNELS = "candidate,fast,stable")

diff --git a/bundle/manifests/external-secrets-operator.clusterserviceversion.yaml b/bundle/manifests/external-secrets-operator.clusterserviceversion.yaml
@@ -375,7 +375,7 @@ metadata:
           "kind": "ExternalSecret",
           "metadata": {
             "annotations": {
-              "acme.org/sha": 1234
+              "acme.org/sha": "1234"
             },
             "labels": {
               "acme.org/owned-by": "q-team"
@@ -671,8 +671,8 @@ metadata:
     capabilities: Deep Insights
     categories: Security
     certified: "false"
-    containerImage: ghcr.io/external-secrets/external-secrets-helm-operator:v0.9.14
-    createdAt: "2024-03-30T14:06:37Z"
+    containerImage: ghcr.io/external-secrets/external-secrets-helm-operator:v0.9.15-2
+    createdAt: "2024-04-12T13:36:06Z"
     description: Operator to configure external-secrets helm-chart based operator
     operatorframework.io/cluster-monitoring: "true"
     operators.openshift.io/infrastructure-features: '["Disconnected"]'
@@ -683,7 +683,7 @@ metadata:
   labels:
     operatorframework.io/arch.amd64: supported
     operatorframework.io/os.linux: supported
-  name: external-secrets-operator.v0.9.14
+  name: external-secrets-operator.v0.9.15-2
   namespace: external-secrets
 spec:
   apiservicedefinitions: {}
@@ -727,6 +727,9 @@ spec:
     - kind: GCRAccessToken
       name: gcraccesstokens.generators.external-secrets.io
       version: v1alpha1
+    - kind: GithubAccessToken
+      name: githubaccesstokens.generators.external-secrets.io
+      version: v1alpha1
     - description: Configures external-secrets helm-chart based operator
       displayName: OperatorConfig
       kind: OperatorConfig
@@ -972,7 +975,7 @@ spec:
                   valueFrom:
                     fieldRef:
                       fieldPath: metadata.annotations['olm.targetNamespaces']
-                image: ghcr.io/external-secrets/external-secrets-helm-operator:v0.9.14
+                image: ghcr.io/external-secrets/external-secrets-helm-operator:v0.9.15-2
                 livenessProbe:
                   httpGet:
                     path: /healthz
@@ -1070,4 +1073,4 @@ spec:
   provider:
     name: External Secrets
     url: https://external-secrets.io
-  version: 0.9.14
+  version: 0.9.15-2
diff --git a/bundle/manifests/external-secrets.io_clusterexternalsecrets.yaml b/bundle/manifests/external-secrets.io_clusterexternalsecrets.yaml
@@ -528,8 +528,9 @@ spec:
                     type: object
                 type: object
               namespaceSelector:
-                description: The labels to select by to find the Namespaces to create
-                  the ExternalSecrets in.
+                description: |-
+                  The labels to select by to find the Namespaces to create the ExternalSecrets in.
+                  Deprecated: Use NamespaceSelectors instead.
                 properties:
                   matchExpressions:
                     description: matchExpressions is a list of label selector requirements.
@@ -572,6 +573,57 @@ spec:
                     type: object
                 type: object
                 x-kubernetes-map-type: atomic
+              namespaceSelectors:
+                description: A list of labels to select by to find the Namespaces
+                  to create the ExternalSecrets in. The selectors are ORed.
+                items:
+                  description: |-
+                    A label selector is a label query over a set of resources. The result of matchLabels and
+                    matchExpressions are ANDed. An empty label selector matches all objects. A null
+                    label selector matches no objects.
+                  properties:
+                    matchExpressions:
+                      description: matchExpressions is a list of label selector requirements.
+                        The requirements are ANDed.
+                      items:
+                        description: |-
+                          A label selector requirement is a selector that contains values, a key, and an operator that
+                          relates the key and values.
+                        properties:
+                          key:
+                            description: key is the label key that the selector applies
+                              to.
+                            type: string
+                          operator:
+                            description: |-
+                              operator represents a key's relationship to a set of values.
+                              Valid operators are In, NotIn, Exists and DoesNotExist.
+                            type: string
+                          values:
+                            description: |-
+                              values is an array of string values. If the operator is In or NotIn,
+                              the values array must be non-empty. If the operator is Exists or DoesNotExist,
+                              the values array must be empty. This array is replaced during a strategic
+                              merge patch.
+                            items:
+                              type: string
+                            type: array
+                        required:
+                        - key
+                        - operator
+                        type: object
+                      type: array
+                    matchLabels:
+                      additionalProperties:
+                        type: string
+                      description: |-
+                        matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
+                        map is equivalent to an element of matchExpressions, whose key field is "key", the
+                        operator is "In", and the values array contains only "value". The requirements are ANDed.
+                      type: object
+                  type: object
+                  x-kubernetes-map-type: atomic
+                type: array
               namespaces:
                 description: Choose namespaces by name. This field is ORed with anything
                   that NamespaceSelector ends up choosing.

diff --git a/bundle/manifests/external-secrets.io_pushsecrets.yaml b/bundle/manifests/external-secrets.io_pushsecrets.yaml
@@ -61,6 +61,14 @@ spec:
                 description: Secret Data that should be pushed to providers
                 items:
                   properties:
+                    conversionStrategy:
+                      default: None
+                      description: Used to define a conversion Strategy for the secret
+                        keys
+                      enum:
+                      - None
+                      - ReverseUnicode
+                      type: string
                     match:
                       description: Match a given Secret Key to be pushed to the provider.
                       properties:
@@ -326,6 +334,14 @@ spec:
                 additionalProperties:
                   additionalProperties:
                     properties:
+                      conversionStrategy:
+                        default: None
+                        description: Used to define a conversion Strategy for the
+                          secret keys
+                        enum:
+                        - None
+                        - ReverseUnicode
+                        type: string
                       match:
                         description: Match a given Secret Key to be pushed to the
                           provider.

diff --git a/bundle/manifests/generators.external-secrets.io_githubaccesstokens.yaml b/bundle/manifests/generators.external-secrets.io_githubaccesstokens.yaml
@@ -0,0 +1,108 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.14.0
+  creationTimestamp: null
+  name: githubaccesstokens.generators.external-secrets.io
+spec:
+  conversion:
+    strategy: Webhook
+    webhook:
+      clientConfig:
+        service:
+          name: kubernetes
+          namespace: default
+          path: /convert
+      conversionReviewVersions:
+      - v1
+  group: generators.external-secrets.io
+  names:
+    categories:
+    - githubaccesstoken
+    kind: GithubAccessToken
+    listKind: GithubAccessTokenList
+    plural: githubaccesstokens
+    shortNames:
+    - githubaccesstoken
+    singular: githubaccesstoken
+  scope: Namespaced
+  versions:
+  - name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        description: GithubAccessToken generates ghs_ accessToken
+        properties:
+          apiVersion:
+            description: |-
+              APIVersion defines the versioned schema of this representation of an object.
+              Servers should convert recognized schemas to the latest internal value, and
+              may reject unrecognized values.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+            type: string
+          kind:
+            description: |-
+              Kind is a string value representing the REST resource this object represents.
+              Servers may infer this from the endpoint the client submits requests to.
+              Cannot be updated.
+              In CamelCase.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+            type: string
+          metadata:
+            type: object
+          spec:
+            properties:
+              appID:
+                type: string
+              auth:
+                description: Auth configures how ESO authenticates with a Github instance.
+                properties:
+                  privatKey:
+                    properties:
+                      secretRef:
+                        description: |-
+                          A reference to a specific 'key' within a Secret resource,
+                          In some instances, `key` is a required field.
+                        properties:
+                          key:
+                            description: |-
+                              The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be
+                              defaulted, in others it may be required.
+                            type: string
+                          name:
+                            description: The name of the Secret resource being referred
+                              to.
+                            type: string
+                          namespace:
+                            description: |-
+                              Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaults
+                              to the namespace of the referent.
+                            type: string
+                        type: object
+                    required:
+                    - secretRef
+                    type: object
+                required:
+                - privatKey
+                type: object
+              installID:
+                type: string
+              url:
+                description: URL configures the Github instance URL. Defaults to https://github.com/.
+                type: string
+            required:
+            - appID
+            - auth
+            - installID
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
+status:
+  acceptedNames:
+    kind: ""
+    plural: ""
+  conditions: null
+  storedVersions: null
diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml
@@ -13,4 +13,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: ghcr.io/external-secrets/external-secrets-helm-operator
-  newTag: v0.9.14
+  newTag: v0.9.15-2
diff --git a/config/manifests/bases/external-secrets-operator.clusterserviceversion.yaml b/config/manifests/bases/external-secrets-operator.clusterserviceversion.yaml
@@ -6,7 +6,7 @@ metadata:
     capabilities: Deep Insights
     categories: Security
     certified: "false"
-    containerImage: ghcr.io/external-secrets/external-secrets-helm-operator:v0.9.14
+    containerImage: ghcr.io/external-secrets/external-secrets-helm-operator:v0.9.15-2
     createdAt: "2021-11-22 00:00:00"
     description: Operator to configure external-secrets helm-chart based operator
     operatorframework.io/cluster-monitoring: "true"

diff --git a/config/manifests/crds/clusterexternalsecret.yml b/config/manifests/crds/clusterexternalsecret.yml
@@ -491,7 +491,9 @@ spec:
                       type: object
                   type: object
                 namespaceSelector:
-                  description: The labels to select by to find the Namespaces to create the ExternalSecrets in.
+                  description: |-
+                    The labels to select by to find the Namespaces to create the ExternalSecrets in.
+                    Deprecated: Use NamespaceSelectors instead.
                   properties:
                     matchExpressions:
                       description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -532,6 +534,54 @@ spec:
                       type: object
                   type: object
                   x-kubernetes-map-type: atomic
+                namespaceSelectors:
+                  description: A list of labels to select by to find the Namespaces to create the ExternalSecrets in. The selectors are ORed.
+                  items:
+                    description: |-
+                      A label selector is a label query over a set of resources. The result of matchLabels and
+                      matchExpressions are ANDed. An empty label selector matches all objects. A null
+                      label selector matches no objects.
+                    properties:
+                      matchExpressions:
+                        description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
+                        items:
+                          description: |-
+                            A label selector requirement is a selector that contains values, a key, and an operator that
+                            relates the key and values.
+                          properties:
+                            key:
+                              description: key is the label key that the selector applies to.
+                              type: string
+                            operator:
+                              description: |-
+                                operator represents a key's relationship to a set of values.
+                                Valid operators are In, NotIn, Exists and DoesNotExist.
+                              type: string
+                            values:
+                              description: |-
+                                values is an array of string values. If the operator is In or NotIn,
+                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
+                                the values array must be empty. This array is replaced during a strategic
+                                merge patch.
+                              items:
+                                type: string
+                              type: array
+                          required:
+                            - key
+                            - operator
+                          type: object
+                        type: array
+                      matchLabels:
+                        additionalProperties:
+                          type: string
+                        description: |-
+                          matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
+                          map is equivalent to an element of matchExpressions, whose key field is "key", the
+                          operator is "In", and the values array contains only "value". The requirements are ANDed.
+                        type: object
+                    type: object
+                    x-kubernetes-map-type: atomic
+                  type: array
                 namespaces:
                   description: Choose namespaces by name. This field is ORed with anything that NamespaceSelector ends up choosing.
                   items: