Moritz Johner

Question: drop existing TCP connections to Instance Metadata API

1

This is probably related to #48. It happened to me after a cluster rollover. My Scenario: I start a pod. The application inside uses the aws sdk which tries to...

CNCF Onboarding Tasks

2

relates to: https://github.com/cncf/toc/issues/882 This Issue tracks the state of the tasks needed for onboarding :point_up_2: @knelasevero @gusfcarvalho feel free to @mention your name behind a TODO to claim it and...

Rename Kind=SecretSink to Kind=PushSecret

3

As discussed in the community meeting today, the `Kind=SecretSink` should be renamed to `Kind=PushSecret` (or something else, we're open to suggestions - naming is really hard :sweat_smile: ). The current...

Implement PushSecret

2

discussed in #641 We want to implement the SecretSink proposal https://github.com/external-secrets/external-secrets/blob/main/design/001-secretsink.md.

using provider metadata (tags, ...)

1

Multiple users reported a use-case to sync tags or arbitrary metadata from the secret provider. Yaml spec is defined in comment below. Implementation status: - [x] Azure KV - [...

ClusterSecretStore serviceAccountRef defaults to the namespace of the referent

15

@alfredkrohmer i just created this issue to track your problem. > Just discovered this while testing the 0.5.0 release, this change breaks a use case that we have: **not** specifying...

We can use syft/grype to scan the base image we use to detect tampering. In addition we should create an SBOM, store it as container attestation and sign it aswell...

SOPS multi-tenancy

6

Context: * running on EKS, using IRSA and pod-identity-webhook * multiple tenants should be onboarded onto the cluster * we're enforcing `spec.serviceAccountName` * one tenant should not be able to...

Feature: initial generator implementation + Github Actions OIDC/AWS

2

This PR adds the `generators.external-secrets.io` api group. It contains a set of new CRDs: `Password`, `Fake`, `ACRAccessToken`, `ECRAuthorizationToken`, `GCRAccessToken`. Design: https://github.com/external-secrets/external-secrets/pull/1338 Fixes: #1588 TODO: - [x] figure out a way...

Metrics: add provider API calls metric

4

We want to know how many API calls are being made towards a specific secret provider API. For a first iteration i would propose to add a simple `counter` metric...