home-ops
home-ops copied to clipboard
Published
20 hours ago •
axeII
axeII
fix(helm): update chart external-secrets (0.16.1 → 0.16.2)
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| external-secrets | patch | 0.16.1 -> 0.16.2 |
Release Notes
external-secrets/external-secrets (external-secrets)
v0.16.2
Image: ghcr.io/external-secrets/external-secrets:v0.16.2
Image: ghcr.io/external-secrets/external-secrets:v0.16.2-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.16.2-ubi-boringssl
What's Changed
- chore: release charts v0.16.1 by @Skarlso in https://github.com/external-secrets/external-secrets/pull/4678
- feat: adds harden-runner to pipelines by @gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/4683
- [StepSecurity] Apply security best practices by @step-security-bot in https://github.com/external-secrets/external-secrets/pull/4684
- docs: update example for bitwarden password manager by @lunarys in https://github.com/external-secrets/external-secrets/pull/4674
- feat(helm): add grafana dashboard by @onedr0p in https://github.com/external-secrets/external-secrets/pull/4686
- chore(deps): bump softprops/action-gh-release from 2.2.1 to 2.2.2 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4688
- chore(deps): bump codecov/codecov-action from 5.4.0 to 5.4.2 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4689
- chore(deps): bump mkdocs-material from 9.6.11 to 9.6.12 in /hack/api-docs by @dependabot in https://github.com/external-secrets/external-secrets/pull/4690
- chore(deps): bump golang from 1.24.2-alpine@sha256:7772cb5322baa875edd74705556d08f0eeca7b9c4b5367754ce3f2f00041ccee to sha256:d9db32125db0c3a680cfb7a1afcaefb89c898a075ec148fdc2f0f646cc2ed509 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4691
- chore(deps): bump packaging from 24.2 to 25.0 in /hack/api-docs by @dependabot in https://github.com/external-secrets/external-secrets/pull/4693
- chore: update dependencies by @eso-service-account-app in https://github.com/external-secrets/external-secrets/pull/4694
- chore: Add skeeled to ADOPTERS.md by @carneiroskeeled in https://github.com/external-secrets/external-secrets/pull/4695
- Update md5 hashing algorithim to sha3 by @kbsteere in https://github.com/external-secrets/external-secrets/pull/4696
- fix: ci artefact push by @moolen in https://github.com/external-secrets/external-secrets/pull/4699
- chore(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4710
- chore(deps): bump actions/setup-python from 5.5.0 to 5.6.0 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4711
- chore(deps): bump anchore/sbom-action from 0.18.0 to 0.19.0 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4712
- chore(deps): bump step-security/harden-runner from 2.11.1 to 2.12.0 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4713
- chore(deps): bump ubi8/ubi from
8bd1b63to244e985by @dependabot in https://github.com/external-secrets/external-secrets/pull/4719 - chore(deps): bump certifi from 2025.1.31 to 2025.4.26 in /hack/api-docs by @dependabot in https://github.com/external-secrets/external-secrets/pull/4717
- chore(deps): bump importlib-metadata from 8.6.1 to 8.7.0 in /hack/api-docs by @dependabot in https://github.com/external-secrets/external-secrets/pull/4716
- chore(deps): bump pymdown-extensions from 10.14.3 to 10.15 in /hack/api-docs by @dependabot in https://github.com/external-secrets/external-secrets/pull/4715
- chore(deps): bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4714
- fix: add kmskeyid to secret creation by @Skarlso in https://github.com/external-secrets/external-secrets/pull/4729
- fix: ClusterExternalSecrets were not able to adopt externalSecret after update to v1 by @Meallia in https://github.com/external-secrets/external-secrets/pull/4724
- chore(deps): bump github/codeql-action from 3.28.16 to 3.28.17 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4735
- chore(deps): bump actions/create-github-app-token from 2.0.2 to 2.0.6 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4736
- chore(deps): bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4737
- chore(deps): bump golang from
00eccd4to79390b5in /e2e by @dependabot in https://github.com/external-secrets/external-secrets/pull/4738 - chore(deps): bump termcolor from 3.0.1 to 3.1.0 in /hack/api-docs by @dependabot in https://github.com/external-secrets/external-secrets/pull/4739
- chore(deps): bump charset-normalizer from 3.4.1 to 3.4.2 in /hack/api-docs by @dependabot in https://github.com/external-secrets/external-secrets/pull/4740
- chore(deps): bump golang from
7772cb5to7772cb5by @dependabot in https://github.com/external-secrets/external-secrets/pull/4741 - chore(deps): bump golangci/golangci-lint-action from 6.5.2 to 8.0.0 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4734
- chore: document kubernetes provider pushsecret type by @mhrabovcin in https://github.com/external-secrets/external-secrets/pull/4725
- feat(helm): Offer the possiblity to disable aggreate-to-view and aggregate-to-edit on default ClusterRoles by @linoleparquet in https://github.com/external-secrets/external-secrets/pull/4733
- Feat/generic webhook ntlm auth by @yifongau in https://github.com/external-secrets/external-secrets/pull/4316
New Contributors
- @step-security-bot made their first contribution in https://github.com/external-secrets/external-secrets/pull/4684
- @lunarys made their first contribution in https://github.com/external-secrets/external-secrets/pull/4674
- @carneiroskeeled made their first contribution in https://github.com/external-secrets/external-secrets/pull/4695
- @kbsteere made their first contribution in https://github.com/external-secrets/external-secrets/pull/4696
- @Meallia made their first contribution in https://github.com/external-secrets/external-secrets/pull/4724
- @mhrabovcin made their first contribution in https://github.com/external-secrets/external-secrets/pull/4725
- @linoleparquet made their first contribution in https://github.com/external-secrets/external-secrets/pull/4733
- @yifongau made their first contribution in https://github.com/external-secrets/external-secrets/pull/4316
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v0.16.1...v0.16.2
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- [ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot.
![bot-akira[bot] avatar](https://avatars.githubusercontent.com/in/825512?v=4 "Published by a pub.dev verified publisher"){kind=small}
--- kubernetes/apps/kube-system/external-secrets/app Kustomization: flux-system/cluster-apps-external-secrets HelmRelease: kube-system/external-secrets
+++ kubernetes/apps/kube-system/external-secrets/app Kustomization: flux-system/cluster-apps-external-secrets HelmRelease: kube-system/external-secrets
@@ -13,13 +13,13 @@
chart: external-secrets
interval: 15m
sourceRef:
kind: HelmRepository
name: external-secrets
namespace: flux-system
- version: 0.16.1
+ version: 0.16.2
install:
createNamespace: true
remediation:
retries: 3
interval: 15m
maxHistory: 3
--- HelmRelease: kube-system/external-secrets Deployment: kube-system/external-secrets-cert-controller
+++ HelmRelease: kube-system/external-secrets Deployment: kube-system/external-secrets-cert-controller
@@ -34,13 +34,13 @@
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000
seccompProfile:
type: RuntimeDefault
- image: oci.external-secrets.io/external-secrets/external-secrets:v0.16.1
+ image: oci.external-secrets.io/external-secrets/external-secrets:v0.16.2
imagePullPolicy: IfNotPresent
args:
- certcontroller
- --crd-requeue-interval=5m
- --service-name=external-secrets-webhook
- --service-namespace=kube-system
--- HelmRelease: kube-system/external-secrets Deployment: kube-system/external-secrets
+++ HelmRelease: kube-system/external-secrets Deployment: kube-system/external-secrets
@@ -34,13 +34,13 @@
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000
seccompProfile:
type: RuntimeDefault
- image: oci.external-secrets.io/external-secrets/external-secrets:v0.16.1
+ image: oci.external-secrets.io/external-secrets/external-secrets:v0.16.2
imagePullPolicy: IfNotPresent
args:
- --enable-leader-election=true
- --concurrent=1
- --metrics-addr=:8080
- --loglevel=info
--- HelmRelease: kube-system/external-secrets Deployment: kube-system/external-secrets-webhook
+++ HelmRelease: kube-system/external-secrets Deployment: kube-system/external-secrets-webhook
@@ -34,13 +34,13 @@
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000
seccompProfile:
type: RuntimeDefault
- image: oci.external-secrets.io/external-secrets/external-secrets:v0.16.1
+ image: oci.external-secrets.io/external-secrets/external-secrets:v0.16.2
imagePullPolicy: IfNotPresent
args:
- webhook
- --port=10250
- --dns-name=external-secrets-webhook.kube-system.svc
- --cert-dir=/tmp/certs