Update Helm release external-secrets to v0.15.1 (main)
This MR contains the following updates:
| Package | Update | Change |
|---|---|---|
| external-secrets | patch |
0.15.0 -> 0.15.1
|
Release Notes
external-secrets/external-secrets (external-secrets)
v0.15.1
Image: ghcr.io/external-secrets/external-secrets:v0.15.1
Image: ghcr.io/external-secrets/external-secrets:v0.15.1-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.15.1-ubi-boringssl
What's Changed
- chore: update helm charts to v0.15.0 by @Skarlso in https://github.com/external-secrets/external-secrets/pull/4566
- Exclude unused resources from rbac by @bb-Ricardo in https://github.com/external-secrets/external-secrets/pull/4572
- fix: disable
ClusterPushSecretreconciler when using scoped RBAC in helm chart by @mrsimo in https://github.com/external-secrets/external-secrets/pull/4571 - Clarify the implications of setting refreshInterval to 0 by @exaV in https://github.com/external-secrets/external-secrets/pull/4567
- Add
webhook.create: falsewarning comment by @thecosmicfrog in https://github.com/external-secrets/external-secrets/pull/4579 - fix: bump jwt for cve fix by @gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/4580
- adding conjur description by @aakashagg in https://github.com/external-secrets/external-secrets/pull/4578
- Lookup cluster workload identity from instance metadata by @xinau in https://github.com/external-secrets/external-secrets/pull/4575
- chore(deps): bump ubi8/ubi from
5993454to8bd1b63by @dependabot in https://github.com/external-secrets/external-secrets/pull/4581 - chore(deps): bump actions/cache from 4.2.2 to 4.2.3 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4582
- chore(deps): bump golangci/golangci-lint-action from 6.5.1 to 6.5.2 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4583
- chore(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4584
- chore(deps): bump github/codeql-action from 3.28.11 to 3.28.12 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4585
- chore(deps): bump platformdirs from 4.3.6 to 4.3.7 in /hack/api-docs by @dependabot in https://github.com/external-secrets/external-secrets/pull/4587
- chore(deps): bump mkdocs-material from 9.6.8 to 9.6.9 in /hack/api-docs by @dependabot in https://github.com/external-secrets/external-secrets/pull/4588
- chore(deps): bump fossas/fossa-action from 1.5.0 to 1.6.0 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4586
- chore: update dependencies by @eso-service-account-app in https://github.com/external-secrets/external-secrets/pull/4589
- fix: aliyun timeout is ms not second by @wei840222 in https://github.com/external-secrets/external-secrets/pull/4591
- feat: add regional secrets support for gcpsm by @gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/4563
- avoid unnecessary updates to CRDs and webhooks by @steved in https://github.com/external-secrets/external-secrets/pull/4561
- feat: make kubernetes auth prefer service account tokens over secrets by @gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/4596
- docs: typo fix in api/generator/quay.md by @tarilabs in https://github.com/external-secrets/external-secrets/pull/4597
New Contributors
- @bb-Ricardo made their first contribution in https://github.com/external-secrets/external-secrets/pull/4572
- @mrsimo made their first contribution in https://github.com/external-secrets/external-secrets/pull/4571
- @exaV made their first contribution in https://github.com/external-secrets/external-secrets/pull/4567
- @thecosmicfrog made their first contribution in https://github.com/external-secrets/external-secrets/pull/4579
- @aakashagg made their first contribution in https://github.com/external-secrets/external-secrets/pull/4578
- @xinau made their first contribution in https://github.com/external-secrets/external-secrets/pull/4575
- @wei840222 made their first contribution in https://github.com/external-secrets/external-secrets/pull/4591
- @steved made their first contribution in https://github.com/external-secrets/external-secrets/pull/4561
- @tarilabs made their first contribution in https://github.com/external-secrets/external-secrets/pull/4597
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v0.15.0...v0.15.1
CI configuration
Below you can choose test deployment variants to run in this MR's CI.
Click to open to CI configuration
Legend:
| Icon | Meaning | Available values |
|---|---|---|
| Infra Provider |
capd, capo, capm3
|
|
| Bootstrap Provider |
kubeadm (alias kadm), rke2
|
|
| Node OS |
ubuntu, suse
|
|
| Deployment Options |
light-deploy, dev-sources, ha, misc, maxsurge-0
|
|
| Pipeline Scenarios | Available scenario list and description |
-
🎬 preview☁️ capd🚀 kadm🐧 ubuntu -
🎬 preview☁️ capo🚀 rke2🐧 suse -
🎬 preview☁️ capm3🚀 rke2🐧 ubuntu -
☁️ capd🚀 kadm🛠️ light-deploy🐧 ubuntu -
☁️ capd🚀 rke2🛠️ light-deploy🐧 suse -
☁️ capo🚀 rke2🐧 suse -
☁️ capo🚀 kadm🐧 ubuntu -
☁️ capo🚀 rke2🎬 rolling-update🛠️ ha🐧 ubuntu -
☁️ capo🚀 kadm🎬 wkld-k8s-upgrade🐧 ubuntu -
☁️ capo🚀 rke2🎬 rolling-update-no-wkld🛠️ ha,misc🐧 suse -
☁️ capo🚀 rke2🎬 sylva-upgrade-from-1.3.x🛠️ ha,misc🐧 ubuntu -
☁️ capm3🚀 rke2🐧 suse -
☁️ capm3🚀 kadm🐧 ubuntu -
☁️ capm3🚀 kadm🎬 rolling-update-no-wkld🛠️ ha,misc🐧 ubuntu -
☁️ capm3🚀 rke2🎬 wkld-k8s-upgrade🛠️ ha🐧 suse -
☁️ capm3🚀 kadm🎬 rolling-update🛠️ ha🐧 ubuntu -
☁️ capm3🚀 rke2🎬 sylva-upgrade-from-1.3.x🛠️ misc,ha🐧 suse -
☁️ capm3🚀 kadm🎬 rolling-update🛠️ ha🐧 suse
Global config for deployment pipelines
-
autorun pipelines -
allow failure on pipelines -
record sylvactl events
Notes:
- Enabling
autorunwill make deployment pipelines to be run automatically without human interaction - Disabling
allow failurewill make deployment pipelines mandatory for pipeline success. - if both
autorunandallow failureare disabled, deployment pipelines will need manual triggering but will be blocking the pipeline
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot Sylva instance.
CI configuration couldn't be handle by MR description. A dedicated comment has been posted to control it.
If no checkbox is checked, a default pipeline will be enabled (capm3, or capo if capo label is set)