Moritz Johner

hej @mikebrow just FYI: there's another use-case for oci-hooks (i referenced the issue above). I think it would be important to have the `when` semantics from the [podman hook spec...

What is your refreshTime, can you post your manifest here? The ces must be reconciled in order for the es to be removed.

I can't reproduce the issue with the following manifests. I worked with a single and multiple namespaces. When i delete the label from the namespace the ExternalSecrets go away. Can...

from which pod are these logs?

I see :face_with_spiral_eyes: :palm_tree: . So, the CRDs contain a `conversion` webhook which point to the webhook service. This is only called if you still have `v1alpha1` resources. I think...

hmm, from the error message: `failed to list external-secrets.io/v1alpha1` it seems that someone tries to list `v1alpha1` which triggers the webhook. who could that be?

I ran this on a fairly rusty: `1.21.14-eks-18ef993`

@pm3ndoza you probably have an issue with security groups. You must allow access to the webhook service from the EKS control plane. There is a closed issue, please use the...

The CRD changes were implemented in #1062 and look like this: ```yaml apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: example-external-secret spec: # [...] data: # fetch all the tags in JSON...

Context: `SharedConfigState` was set to Disabled explicitly here: https://github.com/external-secrets/external-secrets/blob/main/pkg/provider/aws/auth/auth.go#L103 I don't mind enabling it.