From 26adfc63a045cc9e73c2d53fdb8195f6e350b769 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 9 Oct 2026 23:37:33 +0000 Subject: [PATCH 1/2] chore(kubernetes/components/external-secrets/production): update helm release external-secrets to v2.12.0 --- kubernetes/components/external-secrets/production/helmfile.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kubernetes/components/external-secrets/production/helmfile.yaml b/kubernetes/components/external-secrets/production/helmfile.yaml index 762ca061..22fad107 100644 --- a/kubernetes/components/external-secrets/production/helmfile.yaml +++ b/kubernetes/components/external-secrets/production/helmfile.yaml @@ -9,6 +9,6 @@ releases: - name: external-secrets namespace: external-secrets chart: external-secrets/external-secrets - version: "2.11.0" + version: "2.12.0" values: - values.yaml.gotmpl From 37dbe595d28b1b183af288fd9c7a9465c015ec6b Mon Sep 17 00:00:00 2001 From: "panicboat-github-workflow-bot[bot]" <215137590+panicboat-github-workflow-bot[bot]@users.noreply.github.com> Date: Fri, 9 Oct 2026 23:38:39 +0000 Subject: [PATCH 2/2] chore(kubernetes/manifests/production): hydrate manifests Signed-off-by: github-actions[bot] --- .../production/external-secrets/manifest.yaml | 562 ++++++++++++++++-- 1 file changed, 517 insertions(+), 45 deletions(-) diff --git a/kubernetes/manifests/production/external-secrets/manifest.yaml b/kubernetes/manifests/production/external-secrets/manifest.yaml index d48b6cba..7b7f776c 100644 --- a/kubernetes/manifests/production/external-secrets/manifest.yaml +++ b/kubernetes/manifests/production/external-secrets/manifest.yaml @@ -6,10 +6,10 @@ metadata: name: external-secrets namespace: external-secrets labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm --- # Source: external-secrets/templates/webhook-serviceaccount.yaml @@ -20,10 +20,10 @@ metadata: namespace: external-secrets labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets-webhook app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm app.kubernetes.io/metrics: "webhook" --- @@ -3302,6 +3302,11 @@ spec: default: false description: Set NoUpper to disable uppercase characters type: boolean + prefix: + description: |- + Prefix is prepended to every generated password after encoding. + It is not counted in length or subject to the character settings. + type: string secretKeys: description: |- SecretKeys defines the keys that will be populated with generated passwords. @@ -3310,6 +3315,11 @@ spec: type: string minItems: 1 type: array + suffix: + description: |- + Suffix is appended to every generated password after encoding. + It is not counted in length or subject to the character settings. + type: string symbolCharacters: description: |- SymbolCharacters specifies the special characters that should be used @@ -7048,6 +7058,61 @@ spec: - apiKeyRef - userRef type: object + azure: + description: Azure enables authentication to Conjur via the authn-azure authenticator. + properties: + account: + description: Account is the Conjur organization account name. + type: string + clientId: + description: |- + ClientID is the Azure managed identity client ID. Required for user-assigned + managed identities; omit for system-assigned identities. + type: string + hostId: + description: |- + HostID is the Conjur host mapped to the Azure managed identity + (e.g. "data/myapp/myhost"). + type: string + serviceAccountRef: + description: |- + ServiceAccountRef specifies the Kubernetes service account for which to request + a token via the TokenRequest API. That token is used as the Azure JWT for Conjur + authn-azure. If omitted, the token is fetched from the Azure IMDS endpoint instead. + properties: + audiences: + description: |- + Audience specifies the `aud` claim for the service account token + Some providers automatically extend the audience field based on well-known annotations for workload + identity (e.g. IRSA or GCP Workload Identity) + items: + type: string + type: array + name: + description: The name of the ServiceAccount resource being referred to. + maxLength: 253 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ + type: string + namespace: + description: |- + Namespace of the resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + maxLength: 63 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ + type: string + required: + - name + type: object + serviceID: + description: ServiceID is the Conjur authn-azure webservice identifier (e.g. "prod"). + type: string + required: + - account + - hostId + - serviceID + type: object cert: description: Cert enables certificate-based authentication using a client certificate and key. properties: @@ -7122,6 +7187,177 @@ spec: - clientKeyRef - serviceID type: object + gcp: + description: GCP enables authentication to Conjur via the authn-gcp authenticator. + properties: + account: + description: Account is the Conjur organization account name. + type: string + hostId: + description: |- + HostID is the Conjur host mapped to the GCP service account + (e.g. "data/myapp/myhost"). + type: string + secretRef: + description: |- + SecretRef holds a reference to a Kubernetes Secret containing a pre-obtained + GCP identity token. If omitted, the token is fetched from the GCP Metadata + Service automatically (requires GKE Workload Identity or a GCE/GKE node). + properties: + jwt: + description: JWT is a reference to the Kubernetes Secret key holding the GCP identity token. + properties: + key: + description: |- + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + maxLength: 253 + minLength: 1 + pattern: ^[-._a-zA-Z0-9]+$ + type: string + name: + description: The name of the Secret resource being referred to. + maxLength: 253 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ + type: string + namespace: + description: |- + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + maxLength: 63 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ + type: string + type: object + required: + - jwt + type: object + serviceID: + description: |- + ServiceID is the Conjur authn-gcp webservice identifier (e.g. "prod"). + Note: Conjur's authn-gcp authenticator does not include the service ID in the + authentication URL; this field is reserved for future use. + type: string + required: + - account + - hostId + type: object + iam: + description: IAM enables authentication to Conjur via the authn-iam authenticator. + properties: + account: + description: Account is the Conjur organization account name. + type: string + hostId: + description: |- + HostID is the Conjur host mapped to the AWS IAM role + (e.g. "data/myapp/123456789012/MyRole"). + type: string + insecure: + description: |- + Insecure allows authenticating to Conjur over plain HTTP. The AWS IAM authenticator + sends a signed request as a bearer credential, so this should only be enabled when the + connection is otherwise protected (e.g. a service mesh sidecar terminating TLS). + type: boolean + secretRef: + description: |- + SecretRef holds optional references to Kubernetes Secrets containing explicit + AWS credentials. If omitted, the default AWS SDK credential chain is used + (IRSA, instance metadata, environment variables, etc.). + properties: + accessKeyIDSecretRef: + description: A reference to a Secret key containing the AWS Access Key ID. + properties: + key: + description: |- + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + maxLength: 253 + minLength: 1 + pattern: ^[-._a-zA-Z0-9]+$ + type: string + name: + description: The name of the Secret resource being referred to. + maxLength: 253 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ + type: string + namespace: + description: |- + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + maxLength: 63 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ + type: string + type: object + secretAccessKeySecretRef: + description: A reference to a Secret key containing the AWS Secret Access Key. + properties: + key: + description: |- + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + maxLength: 253 + minLength: 1 + pattern: ^[-._a-zA-Z0-9]+$ + type: string + name: + description: The name of the Secret resource being referred to. + maxLength: 253 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ + type: string + namespace: + description: |- + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + maxLength: 63 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ + type: string + type: object + sessionTokenSecretRef: + description: |- + A reference to a Secret key containing the AWS Session Token. + Required only when using temporary credentials. + properties: + key: + description: |- + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + maxLength: 253 + minLength: 1 + pattern: ^[-._a-zA-Z0-9]+$ + type: string + name: + description: The name of the Secret resource being referred to. + maxLength: 253 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ + type: string + namespace: + description: |- + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + maxLength: 63 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ + type: string + type: object + required: + - accessKeyIDSecretRef + - secretAccessKeySecretRef + type: object + serviceID: + description: ServiceID is the Conjur authn-iam webservice identifier (e.g. "prod"). + type: string + required: + - account + - hostId + - serviceID + type: object jwt: description: Jwt enables JWT authentication using Kubernetes service account tokens. properties: @@ -19432,6 +19668,11 @@ spec: default: false description: Set NoUpper to disable uppercase characters type: boolean + prefix: + description: |- + Prefix is prepended to every generated password after encoding. + It is not counted in length or subject to the character settings. + type: string secretKeys: description: |- SecretKeys defines the keys that will be populated with generated passwords. @@ -19440,6 +19681,11 @@ spec: type: string minItems: 1 type: array + suffix: + description: |- + Suffix is appended to every generated password after encoding. + It is not counted in length or subject to the character settings. + type: string symbolCharacters: description: |- SymbolCharacters specifies the special characters that should be used @@ -21841,6 +22087,61 @@ spec: - apiKeyRef - userRef type: object + azure: + description: Azure enables authentication to Conjur via the authn-azure authenticator. + properties: + account: + description: Account is the Conjur organization account name. + type: string + clientId: + description: |- + ClientID is the Azure managed identity client ID. Required for user-assigned + managed identities; omit for system-assigned identities. + type: string + hostId: + description: |- + HostID is the Conjur host mapped to the Azure managed identity + (e.g. "data/myapp/myhost"). + type: string + serviceAccountRef: + description: |- + ServiceAccountRef specifies the Kubernetes service account for which to request + a token via the TokenRequest API. That token is used as the Azure JWT for Conjur + authn-azure. If omitted, the token is fetched from the Azure IMDS endpoint instead. + properties: + audiences: + description: |- + Audience specifies the `aud` claim for the service account token + Some providers automatically extend the audience field based on well-known annotations for workload + identity (e.g. IRSA or GCP Workload Identity) + items: + type: string + type: array + name: + description: The name of the ServiceAccount resource being referred to. + maxLength: 253 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ + type: string + namespace: + description: |- + Namespace of the resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + maxLength: 63 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ + type: string + required: + - name + type: object + serviceID: + description: ServiceID is the Conjur authn-azure webservice identifier (e.g. "prod"). + type: string + required: + - account + - hostId + - serviceID + type: object cert: description: Cert enables certificate-based authentication using a client certificate and key. properties: @@ -21915,6 +22216,177 @@ spec: - clientKeyRef - serviceID type: object + gcp: + description: GCP enables authentication to Conjur via the authn-gcp authenticator. + properties: + account: + description: Account is the Conjur organization account name. + type: string + hostId: + description: |- + HostID is the Conjur host mapped to the GCP service account + (e.g. "data/myapp/myhost"). + type: string + secretRef: + description: |- + SecretRef holds a reference to a Kubernetes Secret containing a pre-obtained + GCP identity token. If omitted, the token is fetched from the GCP Metadata + Service automatically (requires GKE Workload Identity or a GCE/GKE node). + properties: + jwt: + description: JWT is a reference to the Kubernetes Secret key holding the GCP identity token. + properties: + key: + description: |- + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + maxLength: 253 + minLength: 1 + pattern: ^[-._a-zA-Z0-9]+$ + type: string + name: + description: The name of the Secret resource being referred to. + maxLength: 253 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ + type: string + namespace: + description: |- + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + maxLength: 63 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ + type: string + type: object + required: + - jwt + type: object + serviceID: + description: |- + ServiceID is the Conjur authn-gcp webservice identifier (e.g. "prod"). + Note: Conjur's authn-gcp authenticator does not include the service ID in the + authentication URL; this field is reserved for future use. + type: string + required: + - account + - hostId + type: object + iam: + description: IAM enables authentication to Conjur via the authn-iam authenticator. + properties: + account: + description: Account is the Conjur organization account name. + type: string + hostId: + description: |- + HostID is the Conjur host mapped to the AWS IAM role + (e.g. "data/myapp/123456789012/MyRole"). + type: string + insecure: + description: |- + Insecure allows authenticating to Conjur over plain HTTP. The AWS IAM authenticator + sends a signed request as a bearer credential, so this should only be enabled when the + connection is otherwise protected (e.g. a service mesh sidecar terminating TLS). + type: boolean + secretRef: + description: |- + SecretRef holds optional references to Kubernetes Secrets containing explicit + AWS credentials. If omitted, the default AWS SDK credential chain is used + (IRSA, instance metadata, environment variables, etc.). + properties: + accessKeyIDSecretRef: + description: A reference to a Secret key containing the AWS Access Key ID. + properties: + key: + description: |- + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + maxLength: 253 + minLength: 1 + pattern: ^[-._a-zA-Z0-9]+$ + type: string + name: + description: The name of the Secret resource being referred to. + maxLength: 253 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ + type: string + namespace: + description: |- + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + maxLength: 63 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ + type: string + type: object + secretAccessKeySecretRef: + description: A reference to a Secret key containing the AWS Secret Access Key. + properties: + key: + description: |- + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + maxLength: 253 + minLength: 1 + pattern: ^[-._a-zA-Z0-9]+$ + type: string + name: + description: The name of the Secret resource being referred to. + maxLength: 253 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ + type: string + namespace: + description: |- + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + maxLength: 63 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ + type: string + type: object + sessionTokenSecretRef: + description: |- + A reference to a Secret key containing the AWS Session Token. + Required only when using temporary credentials. + properties: + key: + description: |- + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + maxLength: 253 + minLength: 1 + pattern: ^[-._a-zA-Z0-9]+$ + type: string + name: + description: The name of the Secret resource being referred to. + maxLength: 253 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ + type: string + namespace: + description: |- + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + maxLength: 63 + minLength: 1 + pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ + type: string + type: object + required: + - accessKeyIDSecretRef + - secretAccessKeySecretRef + type: object + serviceID: + description: ServiceID is the Conjur authn-iam webservice identifier (e.g. "prod"). + type: string + required: + - account + - hostId + - serviceID + type: object jwt: description: Jwt enables JWT authentication using Kubernetes service account tokens. properties: @@ -31905,7 +32377,7 @@ spec: - name: v1alpha1 schema: openAPIV3Schema: - description: UUID generates a version 1 UUID (e56657e3-764f-11ef-a397-65231a88c216). + description: UUID generates a version 4 UUID (21061816-abbd-40ef-8985-6db0fbcbc4c4). properties: apiVersion: description: |- @@ -33180,10 +33652,10 @@ kind: ClusterRole metadata: name: external-secrets-controller labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm rules: - apiGroups: @@ -33334,10 +33806,10 @@ kind: ClusterRole metadata: name: external-secrets-view labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm rbac.authorization.k8s.io/aggregate-to-view: "true" rbac.authorization.k8s.io/aggregate-to-edit: "true" @@ -33387,10 +33859,10 @@ kind: ClusterRole metadata: name: external-secrets-edit labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm rbac.authorization.k8s.io/aggregate-to-edit: "true" rbac.authorization.k8s.io/aggregate-to-admin: "true" @@ -33444,10 +33916,10 @@ metadata: name: external-secrets-servicebindings labels: servicebinding.io/controller: "true" - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm rules: - apiGroups: @@ -33466,10 +33938,10 @@ kind: ClusterRoleBinding metadata: name: external-secrets-controller labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm roleRef: apiGroup: rbac.authorization.k8s.io @@ -33487,10 +33959,10 @@ metadata: name: external-secrets-leaderelection namespace: external-secrets labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm rules: - apiGroups: @@ -33526,10 +33998,10 @@ metadata: name: external-secrets-leaderelection namespace: external-secrets labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm roleRef: apiGroup: rbac.authorization.k8s.io @@ -33547,10 +34019,10 @@ metadata: name: external-secrets-metrics namespace: external-secrets labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm spec: type: ClusterIP @@ -33571,10 +34043,10 @@ metadata: namespace: external-secrets labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets-webhook app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm app.kubernetes.io/metrics: "webhook" external-secrets.io/component: webhook @@ -33601,10 +34073,10 @@ metadata: name: external-secrets namespace: external-secrets labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm spec: replicas: 1 @@ -33616,10 +34088,10 @@ spec: template: metadata: labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm spec: serviceAccountName: external-secrets @@ -33637,7 +34109,7 @@ spec: runAsUser: 1000 seccompProfile: type: RuntimeDefault - image: ghcr.io/external-secrets/external-secrets:v2.11.0 + image: ghcr.io/external-secrets/external-secrets:v2.12.0 imagePullPolicy: IfNotPresent args: - --concurrent=1 @@ -33665,10 +34137,10 @@ metadata: namespace: external-secrets labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets-webhook app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm app.kubernetes.io/metrics: "webhook" spec: @@ -33682,10 +34154,10 @@ spec: metadata: labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets-webhook app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm app.kubernetes.io/metrics: "webhook" spec: @@ -33704,7 +34176,7 @@ spec: runAsUser: 1000 seccompProfile: type: RuntimeDefault - image: ghcr.io/external-secrets/external-secrets:v2.11.0 + image: ghcr.io/external-secrets/external-secrets:v2.12.0 imagePullPolicy: IfNotPresent args: - webhook @@ -33759,10 +34231,10 @@ metadata: namespace: external-secrets labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets-webhook app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm app.kubernetes.io/metrics: "webhook" external-secrets.io/component: webhook @@ -33784,10 +34256,10 @@ apiVersion: "monitoring.coreos.com/v1" kind: ServiceMonitor metadata: labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm release: kube-prometheus-stack name: external-secrets-metrics @@ -33812,10 +34284,10 @@ kind: ServiceMonitor metadata: labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets-webhook app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm app.kubernetes.io/metrics: "webhook" release: kube-prometheus-stack @@ -33842,10 +34314,10 @@ kind: ServiceMonitor metadata: labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets-cert-controller app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm app.kubernetes.io/metrics: "cert-controller" release: kube-prometheus-stack @@ -33873,10 +34345,10 @@ metadata: name: secretstore-validate labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets-webhook app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm app.kubernetes.io/metrics: "webhook" external-secrets.io/component: webhook @@ -33924,10 +34396,10 @@ metadata: name: externalsecret-validate labels: - helm.sh/chart: external-secrets-2.11.0 + helm.sh/chart: external-secrets-2.12.0 app.kubernetes.io/name: external-secrets-webhook app.kubernetes.io/instance: external-secrets - app.kubernetes.io/version: "v2.11.0" + app.kubernetes.io/version: "v2.12.0" app.kubernetes.io/managed-by: Helm app.kubernetes.io/metrics: "webhook" external-secrets.io/component: webhook