Repository navigation
chore(kubernetes/components/external-secrets/production): update helm release external-secrets to v2.12.0 - #1074
Merged
renovate[bot] merged 2 commits intoOct 9, 2026
Conversation
… release external-secrets to v2.12.0
panicboat-github-workflow-bot
Bot
added
the
deploy:external-secrets
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![renovate-approve[bot]](https://avatars.githubusercontent.com/in/7394?s=60&v=4){kind=small}
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Kustomize DiffService: 24 files changed:
24 modified Diffkubernetes/manifests/production/external-secrets/admissionregistration.k8s.io_v1_validatingwebhookconfiguration_externalsecret-validate.yaml@@ -8,9 +8,9 @@ metadata:
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/metrics: webhook
app.kubernetes.io/name: external-secrets-webhook
- app.kubernetes.io/version: v2.11.0
+ app.kubernetes.io/version: v2.12.0
external-secrets.io/component: webhook
- helm.sh/chart: external-secrets-2.11.0
+ helm.sh/chart: external-secrets-2.12.0
name: externalsecret-validate
webhooks:
- admissionReviewVersions:kubernetes/manifests/production/external-secrets/admissionregistration.k8s.io_v1_validatingwebhookconfiguration_secretstore-validate.yaml@@ -8,9 +8,9 @@ metadata:
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/metrics: webhook
app.kubernetes.io/name: external-secrets-webhook
- app.kubernetes.io/version: v2.11.0
+ app.kubernetes.io/version: v2.12.0
external-secrets.io/component: webhook
- helm.sh/chart: external-secrets-2.11.0
+ helm.sh/chart: external-secrets-2.12.0
name: secretstore-validate
webhooks:
- admissionReviewVersions:kubernetes/manifests/production/external-secrets/apiextensions.k8s.io_v1_customresourcedefinition_clustergenerators.generators.external-secrets.io.yaml@@ -1189,6 +1189,11 @@ spec:
default: false
description: Set NoUpper to disable uppercase characters
type: boolean
+ prefix:
+ description: |-
+ Prefix is prepended to every generated password after encoding.
+ It is not counted in length or subject to the character settings.
+ type: string
secretKeys:
description: |-
SecretKeys defines the keys that will be populated with generated passwords.
@@ -1197,6 +1202,11 @@ spec:
type: string
minItems: 1
type: array
+ suffix:
+ description: |-
+ Suffix is appended to every generated password after encoding.
+ It is not counted in length or subject to the character settings.
+ type: string
symbolCharacters:
description: |-
SymbolCharacters specifies the special characters that should be usedkubernetes/manifests/production/external-secrets/apiextensions.k8s.io_v1_customresourcedefinition_clustersecretstores.external-secrets.io.yaml@@ -1760,6 +1760,65 @@ spec:
- apiKeyRef
- userRef
type: object
+ azure:
+ description: Azure enables authentication to Conjur via
+ the authn-azure authenticator.
+ properties:
+ account:
+ description: Account is the Conjur organization account
+ name.
+ type: string
+ clientId:
+ description: |-
+ ClientID is the Azure managed identity client ID. Required for user-assigned
+ managed identities; omit for system-assigned identities.
+ type: string
+ hostId:
+ description: |-
+ HostID is the Conjur host mapped to the Azure managed identity
+ (e.g. "data/myapp/myhost").
+ type: string
+ serviceAccountRef:
+ description: |-
+ ServiceAccountRef specifies the Kubernetes service account for which to request
+ a token via the TokenRequest API. That token is used as the Azure JWT for Conjur
+ authn-azure. If omitted, the token is fetched from the Azure IMDS endpoint instead.
+ properties:
+ audiences:
+ description: |-
+ Audience specifies the `aud` claim for the service account token
+ Some providers automatically extend the audience field based on well-known annotations for workload
+ identity (e.g. IRSA or GCP Workload Identity)
+ items:
+ type: string
+ type: array
+ name:
+ description: The name of the ServiceAccount resource
+ being referred to.
+ maxLength: 253
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
+ type: string
+ namespace:
+ description: |-
+ Namespace of the resource being referred to.
+ Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
+ maxLength: 63
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
+ type: string
+ required:
+ - name
+ type: object
+ serviceID:
+ description: ServiceID is the Conjur authn-azure webservice
+ identifier (e.g. "prod").
+ type: string
+ required:
+ - account
+ - hostId
+ - serviceID
+ type: object
cert:
description: Cert enables certificate-based authentication
using a client certificate and key.
@@ -1839,6 +1898,189 @@ spec:
- clientKeyRef
- serviceID
type: object
+ gcp:
+ description: GCP enables authentication to Conjur via
+ the authn-gcp authenticator.
+ properties:
+ account:
+ description: Account is the Conjur organization account
+ name.
+ type: string
+ hostId:
+ description: |-
+ HostID is the Conjur host mapped to the GCP service account
+ (e.g. "data/myapp/myhost").
+ type: string
+ secretRef:
+ description: |-
+ SecretRef holds a reference to a Kubernetes Secret containing a pre-obtained
+ GCP identity token. If omitted, the token is fetched from the GCP Metadata
+ Service automatically (requires GKE Workload Identity or a GCE/GKE node).
+ properties:
+ jwt:
+ description: JWT is a reference to the Kubernetes
+ Secret key holding the GCP identity token.
+ properties:
+ key:
+ description: |-
+ A key in the referenced Secret.
+ Some instances of this field may be defaulted, in others it may be required.
+ maxLength: 253
+ minLength: 1
+ pattern: ^[-._a-zA-Z0-9]+$
+ type: string
+ name:
+ description: The name of the Secret resource
+ being referred to.
+ maxLength: 253
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
+ type: string
+ namespace:
+ description: |-
+ The namespace of the Secret resource being referred to.
+ Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
+ maxLength: 63
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
+ type: string
+ type: object
+ required:
+ - jwt
+ type: object
+ serviceID:
+ description: |-
+ ServiceID is the Conjur authn-gcp webservice identifier (e.g. "prod").
+ Note: Conjur's authn-gcp authenticator does not include the service ID in the
+ authentication URL; this field is reserved for future use.
+ type: string
+ required:
+ - account
+ - hostId
+ type: object
+ iam:
+ description: IAM enables authentication to Conjur via
+ the authn-iam authenticator.
+ properties:
+ account:
+ description: Account is the Conjur organization account
+ name.
+ type: string
+ hostId:
+ description: |-
+ HostID is the Conjur host mapped to the AWS IAM role
+ (e.g. "data/myapp/123456789012/MyRole").
+ type: string
+ insecure:
+ description: |-
+ Insecure allows authenticating to Conjur over plain HTTP. The AWS IAM authenticator
+ sends a signed request as a bearer credential, so this should only be enabled when the
+ connection is otherwise protected (e.g. a service mesh sidecar terminating TLS).
+ type: boolean
+ secretRef:
+ description: |-
+ SecretRef holds optional references to Kubernetes Secrets containing explicit
+ AWS credentials. If omitted, the default AWS SDK credential chain is used
+ (IRSA, instance metadata, environment variables, etc.).
+ properties:
+ accessKeyIDSecretRef:
+ description: A reference to a Secret key containing
+ the AWS Access Key ID.
+ properties:
+ See the full diff from https://github.com/panicboat/platform/actions/runs/38005463972 kubernetes/manifests/production/external-secrets/apiextensions.k8s.io_v1_customresourcedefinition_passwords.generators.external-secrets.io.yaml@@ -82,6 +82,11 @@ spec:
default: false
description: Set NoUpper to disable uppercase characters
type: boolean
+ prefix:
+ description: |-
+ Prefix is prepended to every generated password after encoding.
+ It is not counted in length or subject to the character settings.
+ type: string
secretKeys:
description: |-
SecretKeys defines the keys that will be populated with generated passwords.
@@ -90,6 +95,11 @@ spec:
type: string
minItems: 1
type: array
+ suffix:
+ description: |-
+ Suffix is appended to every generated password after encoding.
+ It is not counted in length or subject to the character settings.
+ type: string
symbolCharacters:
description: |-
SymbolCharacters specifies the special characters that should be usedkubernetes/manifests/production/external-secrets/apiextensions.k8s.io_v1_customresourcedefinition_secretstores.external-secrets.io.yaml@@ -1760,6 +1760,65 @@ spec:
- apiKeyRef
- userRef
type: object
+ azure:
+ description: Azure enables authentication to Conjur via
+ the authn-azure authenticator.
+ properties:
+ account:
+ description: Account is the Conjur organization account
+ name.
+ type: string
+ clientId:
+ description: |-
+ ClientID is the Azure managed identity client ID. Required for user-assigned
+ managed identities; omit for system-assigned identities.
+ type: string
+ hostId:
+ description: |-
+ HostID is the Conjur host mapped to the Azure managed identity
+ (e.g. "data/myapp/myhost").
+ type: string
+ serviceAccountRef:
+ description: |-
+ ServiceAccountRef specifies the Kubernetes service account for which to request
+ a token via the TokenRequest API. That token is used as the Azure JWT for Conjur
+ authn-azure. If omitted, the token is fetched from the Azure IMDS endpoint instead.
+ properties:
+ audiences:
+ description: |-
+ Audience specifies the `aud` claim for the service account token
+ Some providers automatically extend the audience field based on well-known annotations for workload
+ identity (e.g. IRSA or GCP Workload Identity)
+ items:
+ type: string
+ type: array
+ name:
+ description: The name of the ServiceAccount resource
+ being referred to.
+ maxLength: 253
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
+ type: string
+ namespace:
+ description: |-
+ Namespace of the resource being referred to.
+ Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
+ maxLength: 63
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
+ type: string
+ required:
+ - name
+ type: object
+ serviceID:
+ description: ServiceID is the Conjur authn-azure webservice
+ identifier (e.g. "prod").
+ type: string
+ required:
+ - account
+ - hostId
+ - serviceID
+ type: object
cert:
description: Cert enables certificate-based authentication
using a client certificate and key.
@@ -1839,6 +1898,189 @@ spec:
- clientKeyRef
- serviceID
type: object
+ gcp:
+ description: GCP enables authentication to Conjur via
+ the authn-gcp authenticator.
+ properties:
+ account:
+ description: Account is the Conjur organization account
+ name.
+ type: string
+ hostId:
+ description: |-
+ HostID is the Conjur host mapped to the GCP service account
+ (e.g. "data/myapp/myhost").
+ type: string
+ secretRef:
+ description: |-
+ SecretRef holds a reference to a Kubernetes Secret containing a pre-obtained
+ GCP identity token. If omitted, the token is fetched from the GCP Metadata
+ Service automatically (requires GKE Workload Identity or a GCE/GKE node).
+ properties:
+ jwt:
+ description: JWT is a reference to the Kubernetes
+ Secret key holding the GCP identity token.
+ properties:
+ key:
+ description: |-
+ A key in the referenced Secret.
+ Some instances of this field may be defaulted, in others it may be required.
+ maxLength: 253
+ minLength: 1
+ pattern: ^[-._a-zA-Z0-9]+$
+ type: string
+ name:
+ description: The name of the Secret resource
+ being referred to.
+ maxLength: 253
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
+ type: string
+ namespace:
+ description: |-
+ The namespace of the Secret resource being referred to.
+ Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
+ maxLength: 63
+ minLength: 1
+ pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
+ type: string
+ type: object
+ required:
+ - jwt
+ type: object
+ serviceID:
+ description: |-
+ ServiceID is the Conjur authn-gcp webservice identifier (e.g. "prod").
+ Note: Conjur's authn-gcp authenticator does not include the service ID in the
+ authentication URL; this field is reserved for future use.
+ type: string
+ required:
+ - account
+ - hostId
+ type: object
+ iam:
+ description: IAM enables authentication to Conjur via
+ the authn-iam authenticator.
+ properties:
+ account:
+ description: Account is the Conjur organization account
+ name.
+ type: string
+ hostId:
+ description: |-
+ HostID is the Conjur host mapped to the AWS IAM role
+ (e.g. "data/myapp/123456789012/MyRole").
+ type: string
+ insecure:
+ description: |-
+ Insecure allows authenticating to Conjur over plain HTTP. The AWS IAM authenticator
+ sends a signed request as a bearer credential, so this should only be enabled when the
+ connection is otherwise protected (e.g. a service mesh sidecar terminating TLS).
+ type: boolean
+ secretRef:
+ description: |-
+ SecretRef holds optional references to Kubernetes Secrets containing explicit
+ AWS credentials. If omitted, the default AWS SDK credential chain is used
+ (IRSA, instance metadata, environment variables, etc.).
+ properties:
+ accessKeyIDSecretRef:
+ description: A reference to a Secret key containing
+ the AWS Access Key ID.
+ properties:
+ See the full diff from https://github.com/panicboat/platform/actions/runs/38005463972 kubernetes/manifests/production/external-secrets/apiextensions.k8s.io_v1_customresourcedefinition_uuids.generators.external-secrets.io.yaml@@ -21,7 +21,7 @@ spec:
- name: v1alpha1
schema:
openAPIV3Schema:
- description: UUID generates a version 1 UUID (e56657e3-764f-11ef-a397-65231a88c216).
+ description: UUID generates a version 4 UUID (21061816-abbd-40ef-8985-6db0fbcbc4c4).
properties:
apiVersion:
description: |-kubernetes/manifests/production/external-secrets/external-secrets_apps_v1_deployment_external-secrets-webhook.yaml@@ -6,8 +6,8 @@ metadata:
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/metrics: webhook
app.kubernetes.io/name: external-secrets-webhook
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
name: external-secrets-webhook
namespace: external-secrets
spec:
@@ -24,8 +24,8 @@ spec:
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/metrics: webhook
app.kubernetes.io/name: external-secrets-webhook
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
spec:
automountServiceAccountToken: true
containers:
@@ -39,7 +39,7 @@ spec:
- --healthz-addr=:8081
- --loglevel=info
- --zap-time-encoding=epoch
- image: ghcr.io/external-secrets/external-secrets:v2.11.0
+ image: ghcr.io/external-secrets/external-secrets:v2.12.0
imagePullPolicy: IfNotPresent
name: webhook
ports:kubernetes/manifests/production/external-secrets/external-secrets_apps_v1_deployment_external-secrets.yaml@@ -5,8 +5,8 @@ metadata:
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: external-secrets
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
name: external-secrets
namespace: external-secrets
spec:
@@ -22,8 +22,8 @@ spec:
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: external-secrets
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
spec:
automountServiceAccountToken: true
containers:
@@ -32,7 +32,7 @@ spec:
- --metrics-addr=:8080
- --loglevel=info
- --zap-time-encoding=epoch
- image: ghcr.io/external-secrets/external-secrets:v2.11.0
+ image: ghcr.io/external-secrets/external-secrets:v2.12.0
imagePullPolicy: IfNotPresent
name: external-secrets
ports:kubernetes/manifests/production/external-secrets/external-secrets_cert-manager.io_v1_certificate_external-secrets-webhook.yaml@@ -6,9 +6,9 @@ metadata:
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/metrics: webhook
app.kubernetes.io/name: external-secrets-webhook
- app.kubernetes.io/version: v2.11.0
+ app.kubernetes.io/version: v2.12.0
external-secrets.io/component: webhook
- helm.sh/chart: external-secrets-2.11.0
+ helm.sh/chart: external-secrets-2.12.0
name: external-secrets-webhook
namespace: external-secrets
spec:kubernetes/manifests/production/external-secrets/external-secrets_monitoring.coreos.com_v1_servicemonitor_external-secrets-cert-controller-metrics.yaml@@ -6,8 +6,8 @@ metadata:
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/metrics: cert-controller
app.kubernetes.io/name: external-secrets-cert-controller
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
release: kube-prometheus-stack
name: external-secrets-cert-controller-metrics
namespace: external-secretskubernetes/manifests/production/external-secrets/external-secrets_monitoring.coreos.com_v1_servicemonitor_external-secrets-metrics.yaml@@ -5,8 +5,8 @@ metadata:
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: external-secrets
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
release: kube-prometheus-stack
name: external-secrets-metrics
namespace: external-secretskubernetes/manifests/production/external-secrets/external-secrets_monitoring.coreos.com_v1_servicemonitor_external-secrets-webhook-metrics.yaml@@ -6,8 +6,8 @@ metadata:
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/metrics: webhook
app.kubernetes.io/name: external-secrets-webhook
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
release: kube-prometheus-stack
name: external-secrets-webhook-metrics
namespace: external-secretskubernetes/manifests/production/external-secrets/external-secrets_rbac.authorization.k8s.io_v1_role_external-secrets-leaderelection.yaml@@ -5,8 +5,8 @@ metadata:
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: external-secrets
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
name: external-secrets-leaderelection
namespace: external-secrets
rules:kubernetes/manifests/production/external-secrets/external-secrets_rbac.authorization.k8s.io_v1_rolebinding_external-secrets-leaderelection.yaml@@ -5,8 +5,8 @@ metadata:
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: external-secrets
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
name: external-secrets-leaderelection
namespace: external-secrets
roleRef:kubernetes/manifests/production/external-secrets/external-secrets_v1_service_external-secrets-metrics.yaml@@ -5,8 +5,8 @@ metadata:
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: external-secrets
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
name: external-secrets-metrics
namespace: external-secrets
spec:kubernetes/manifests/production/external-secrets/external-secrets_v1_service_external-secrets-webhook.yaml@@ -6,9 +6,9 @@ metadata:
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/metrics: webhook
app.kubernetes.io/name: external-secrets-webhook
- app.kubernetes.io/version: v2.11.0
+ app.kubernetes.io/version: v2.12.0
external-secrets.io/component: webhook
- helm.sh/chart: external-secrets-2.11.0
+ helm.sh/chart: external-secrets-2.12.0
name: external-secrets-webhook
namespace: external-secrets
spec:kubernetes/manifests/production/external-secrets/external-secrets_v1_serviceaccount_external-secrets-webhook.yaml@@ -6,7 +6,7 @@ metadata:
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/metrics: webhook
app.kubernetes.io/name: external-secrets-webhook
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
name: external-secrets-webhook
namespace: external-secretskubernetes/manifests/production/external-secrets/external-secrets_v1_serviceaccount_external-secrets.yaml@@ -5,7 +5,7 @@ metadata:
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: external-secrets
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
name: external-secrets
namespace: external-secretskubernetes/manifests/production/external-secrets/rbac.authorization.k8s.io_v1_clusterrole_external-secrets-controller.yaml@@ -5,8 +5,8 @@ metadata:
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: external-secrets
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
name: external-secrets-controller
rules:
- apiGroups:kubernetes/manifests/production/external-secrets/rbac.authorization.k8s.io_v1_clusterrole_external-secrets-edit.yaml@@ -5,8 +5,8 @@ metadata:
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: external-secrets
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
name: external-secrets-editkubernetes/manifests/production/external-secrets/rbac.authorization.k8s.io_v1_clusterrole_external-secrets-servicebindings.yaml@@ -5,8 +5,8 @@ metadata:
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: external-secrets
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
servicebinding.io/controller: "true"
name: external-secrets-servicebindings
rules:kubernetes/manifests/production/external-secrets/rbac.authorization.k8s.io_v1_clusterrole_external-secrets-view.yaml@@ -5,8 +5,8 @@ metadata:
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: external-secrets
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
rbac.authorization.k8s.io/aggregate-to-view: "true"kubernetes/manifests/production/external-secrets/rbac.authorization.k8s.io_v1_clusterrolebinding_external-secrets-controller.yaml@@ -5,8 +5,8 @@ metadata:
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: external-secrets
- app.kubernetes.io/version: v2.11.0
- helm.sh/chart: external-secrets-2.11.0
+ app.kubernetes.io/version: v2.12.0
+ helm.sh/chart: external-secrets-2.12.0
name: external-secrets-controller
roleRef:
apiGroup: rbac.authorization.k8s.io
|
panicboat-github-workflow-bot
Bot
added
deploy:external-secrets
renovate
Bot
deleted the
renovate/kubernetescomponentsexternal-secretsproductionexternal-secrets
branch
October 9, 2026 23:40
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.11.0→2.12.0Release Notes
external-secrets/external-secrets (external-secrets)
v2.12.0Compare Source
Image:
ghcr.io/external-secrets/external-secrets:v2.12.0Image:
ghcr.io/external-secrets/external-secrets:v2.12.0-ubiImage:
ghcr.io/external-secrets/external-secrets:v2.12.0-ubi-boringsslWhat's Changed
General
Dependencies
c5cc9c2toa4b9ec0by @dependabot[bot] in #7001648f440to69a7b97in /e2e by @dependabot[bot] in #704428bd5feto294b683by @dependabot[bot] in #704228bd5feto294b683in /hack/api-docs by @dependabot[bot] in #7045a4b9ec0to7a38d75by @dependabot[bot] in #7041f2ea270to5813399by @dependabot[bot] in #69577a38d75to803a35aby @dependabot[bot] in #7079New Contributors
Full Changelog: external-secrets/external-secrets@v2.11.0...v2.12.0
Configuration
📅 Schedule: (in timezone Asia/Tokyo)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.