Skip to content

Commit

Permalink
Merge pull request #65 from external-secrets/chore/bump-0-9-20
Browse files Browse the repository at this point in the history
chore: bump 0.9.20
  • Loading branch information
gusfcarvalho authored Jul 6, 2024
2 parents 254620e + 10ef690 commit b9c8887
Show file tree
Hide file tree
Showing 28 changed files with 847 additions and 21 deletions.
2 changes: 1 addition & 1 deletion Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
# To re-generate a bundle for another specific version without changing the standard setup, you can:
# - use the VERSION as arg of the bundle target (e.g make bundle VERSION=0.0.2)
# - use environment variables to overwrite this value (e.g export VERSION=0.0.2)
VERSION ?= 0.9.19
VERSION ?= 0.9.20

# CHANNELS define the bundle channels used in the bundle.
# Add a new line here if you would like to change its default config. (E.g CHANNELS = "candidate,fast,stable")
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -375,7 +375,7 @@ metadata:
"kind": "ExternalSecret",
"metadata": {
"annotations": {
"acme.org/sha": "1234"
"acme.org/sha": 1234
},
"labels": {
"acme.org/owned-by": "q-team"
Expand Down Expand Up @@ -671,8 +671,8 @@ metadata:
capabilities: Deep Insights
categories: Security
certified: "false"
containerImage: ghcr.io/external-secrets/external-secrets-helm-operator:v0.9.19
createdAt: "2024-06-04T19:48:07Z"
containerImage: ghcr.io/external-secrets/external-secrets-helm-operator:v0.9.20
createdAt: "2024-07-06T19:02:33Z"
description: Operator to configure external-secrets helm-chart based operator
operatorframework.io/cluster-monitoring: "true"
operators.openshift.io/infrastructure-features: '["Disconnected"]'
Expand All @@ -684,7 +684,7 @@ metadata:
operatorframework.io/arch.amd64: supported
operatorframework.io/arch.ppc64le: supported
operatorframework.io/os.linux: supported
name: external-secrets-operator.v0.9.19
name: external-secrets-operator.v0.9.20
namespace: external-secrets
spec:
apiservicedefinitions: {}
Expand Down Expand Up @@ -976,7 +976,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.annotations['olm.targetNamespaces']
image: ghcr.io/external-secrets/external-secrets-helm-operator:v0.9.19
image: ghcr.io/external-secrets/external-secrets-helm-operator:v0.9.20
livenessProbe:
httpGet:
path: /healthz
Expand Down Expand Up @@ -1074,4 +1074,4 @@ spec:
provider:
name: External Secrets
url: https://external-secrets.io
version: 0.9.19
version: 0.9.20
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,8 @@ metadata:
annotations:
controller-gen.kubebuilder.io/version: v0.15.0
creationTimestamp: null
labels:
external-secrets.io/component: controller
name: clusterexternalsecrets.external-secrets.io
spec:
conversion:
Expand Down
208 changes: 206 additions & 2 deletions bundle/manifests/external-secrets.io_clustersecretstores.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,8 @@ metadata:
annotations:
controller-gen.kubebuilder.io/version: v0.15.0
creationTimestamp: null
labels:
external-secrets.io/component: controller
name: clustersecretstores.external-secrets.io
spec:
conversion:
Expand Down Expand Up @@ -1655,6 +1657,11 @@ spec:
ClusterSecretStoreCondition describes a condition by which to choose namespaces to process ExternalSecrets in
for a ClusterSecretStore instance.
properties:
namespaceRegexes:
description: Choose namespaces by using regex matching
items:
type: string
type: array
namespaceSelector:
description: Choose namespace using a labelSelector
properties:
Expand Down Expand Up @@ -2298,6 +2305,68 @@ spec:
required:
- vaultUrl
type: object
bitwardensecretsmanager:
description: BitwardenSecretsManager configures this store to
sync secrets using BitwardenSecretsManager provider
properties:
apiURL:
type: string
auth:
description: |-
Auth configures how secret-manager authenticates with a bitwarden machine account instance.
Make sure that the token being used has permissions on the given secret.
properties:
secretRef:
description: BitwardenSecretsManagerSecretRef contains
the credential ref to the bitwarden instance.
properties:
credentials:
description: AccessToken used for the bitwarden instance.
properties:
key:
description: |-
The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be
defaulted, in others it may be required.
type: string
name:
description: The name of the Secret resource being
referred to.
type: string
namespace:
description: |-
Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaults
to the namespace of the referent.
type: string
type: object
required:
- credentials
type: object
required:
- secretRef
type: object
bitwardenServerSDKURL:
type: string
caBundle:
description: |-
Base64 encoded certificate for the bitwarden server sdk. The sdk MUST run with HTTPS to make sure no MITM attack
can be performed.
type: string
identityURL:
type: string
organizationID:
description: OrganizationID determines which organization
this secret store manages.
type: string
projectID:
description: ProjectID determines which project this secret
store manages.
type: string
required:
- auth
- caBundle
- organizationID
- projectID
type: object
chef:
description: Chef configures this store to sync secrets with chef
server
Expand Down Expand Up @@ -2580,6 +2649,45 @@ spec:
- clientSecret
- tenant
type: object
device42:
description: Device42 configures this store to sync secrets using
the Device42 provider
properties:
auth:
description: Auth configures how secret-manager authenticates
with a Device42 instance.
properties:
secretRef:
properties:
credentials:
description: Username / Password is used for authentication.
properties:
key:
description: |-
The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be
defaulted, in others it may be required.
type: string
name:
description: The name of the Secret resource being
referred to.
type: string
namespace:
description: |-
Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaults
to the namespace of the referent.
type: string
type: object
type: object
required:
- secretRef
type: object
host:
description: URL configures the Device42 instance URL.
type: string
required:
- auth
- host
type: object
doppler:
description: Doppler configures this store to sync secrets using
the Doppler provider
Expand Down Expand Up @@ -2772,6 +2880,10 @@ spec:
- serviceAccountRef
type: object
type: object
location:
description: Location optionally defines a location for a
secret
type: string
projectID:
description: ProjectID project where secret is located
type: string
Expand Down Expand Up @@ -2890,6 +3002,81 @@ spec:
required:
- auth
type: object
infisical:
description: Infisical configures this store to sync secrets using
the Infisical provider
properties:
auth:
description: Auth configures how the Operator authenticates
with the Infisical API
properties:
universalAuthCredentials:
properties:
clientId:
description: |-
A reference to a specific 'key' within a Secret resource,
In some instances, `key` is a required field.
properties:
key:
description: |-
The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be
defaulted, in others it may be required.
type: string
name:
description: The name of the Secret resource being
referred to.
type: string
namespace:
description: |-
Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaults
to the namespace of the referent.
type: string
type: object
clientSecret:
description: |-
A reference to a specific 'key' within a Secret resource,
In some instances, `key` is a required field.
properties:
key:
description: |-
The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be
defaulted, in others it may be required.
type: string
name:
description: The name of the Secret resource being
referred to.
type: string
namespace:
description: |-
Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaults
to the namespace of the referent.
type: string
type: object
required:
- clientId
- clientSecret
type: object
type: object
hostAPI:
default: https://app.infisical.com/api
type: string
secretsScope:
properties:
environmentSlug:
type: string
projectSlug:
type: string
secretsPath:
default: /
type: string
required:
- environmentSlug
- projectSlug
type: object
required:
- auth
- secretsScope
type: object
keepersecurity:
description: KeeperSecurity configures this store to sync secrets
using the KeeperSecurity provider
Expand Down Expand Up @@ -3023,6 +3210,25 @@ spec:
type: object
type: object
type: object
authRef:
description: A reference to a secret that contains the auth
information.
properties:
key:
description: |-
The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be
defaulted, in others it may be required.
type: string
name:
description: The name of the Secret resource being referred
to.
type: string
namespace:
description: |-
Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaults
to the namespace of the referent.
type: string
type: object
remoteNamespace:
default: default
description: Remote namespace to fetch the secrets from
Expand Down Expand Up @@ -3066,8 +3272,6 @@ spec:
description: configures the Kubernetes server Address.
type: string
type: object
required:
- auth
type: object
onboardbase:
description: Onboardbase configures this store to sync secrets
Expand Down
2 changes: 2 additions & 0 deletions bundle/manifests/external-secrets.io_externalsecrets.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,8 @@ metadata:
annotations:
controller-gen.kubebuilder.io/version: v0.15.0
creationTimestamp: null
labels:
external-secrets.io/component: controller
name: externalsecrets.external-secrets.io
spec:
conversion:
Expand Down
Loading

0 comments on commit b9c8887

Please sign in to comment.