Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions helm/external-secrets/Chart.lock
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
dependencies:
- name: bitwarden-sdk-server
repository: oci://ghcr.io/external-secrets/charts
version: v0.5.1
digest: sha256:04be6ffa8a097670c52868f5fe98a11841116b7f484501cae98276215294ba50
generated: "2025-07-18T07:31:51.336505+02:00"
version: v0.6.0
digest: sha256:208b88721c3e5991e45a41a2d5dd376ac8d98af6991bc7da43e86955ccda1c9a
generated: "2026-03-23T08:21:39.974739+01:00"
5 changes: 3 additions & 2 deletions helm/external-secrets/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@ apiVersion: v2
name: external-secrets
description: External secret management for Kubernetes
type: application
version: 0.20.5
appVersion: v0.20.4
version: "2.3.0"
appVersion: "v2.3.0"
kubeVersion: '>= 1.30.0-0'
keywords:
- kubernetes-external-secrets
Expand All @@ -21,3 +21,4 @@ dependencies:
version: v0.4.2
repository: oci://ghcr.io/external-secrets/charts
condition: bitwarden-sdk-server.enabled
upstreamChartVersion: "2.3.0"
63 changes: 48 additions & 15 deletions helm/external-secrets/README.md

Large diffs are not rendered by default.

2 changes: 0 additions & 2 deletions helm/external-secrets/crd-base/acraccesstoken.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
{{- if .Values.giantswarm.crds.install }}
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
Expand Down Expand Up @@ -213,4 +212,3 @@ spec:
storage: true
subresources:
status: {}
{{- end }}
2 changes: 0 additions & 2 deletions helm/external-secrets/crd-base/cloudsmithaccesstoken.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
{{- if .Values.giantswarm.crds.install }}
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
Expand Down Expand Up @@ -97,4 +96,3 @@ spec:
storage: true
subresources:
status: {}
{{- end }}
69 changes: 55 additions & 14 deletions helm/external-secrets/crd-base/clusterexternalsecret.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
{{- if .Values.giantswarm.crds.install }}
{{- if (.Values.crds.createClusterExternalSecret) }}
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
Expand Down Expand Up @@ -121,6 +120,13 @@ spec:
- None
- Fetch
type: string
nullBytePolicy:
default: Ignore
description: Controls how ESO handles fetched secret data containing NUL bytes for this source.
enum:
- Ignore
- Fail
type: string
property:
description: Used to select a specific property of the Provider value (if a map), if supported
type: string
Expand Down Expand Up @@ -248,6 +254,13 @@ spec:
- None
- Fetch
type: string
nullBytePolicy:
default: Ignore
description: Controls how ESO handles fetched secret data containing NUL bytes for this source.
enum:
- Ignore
- Fail
type: string
property:
description: Used to select a specific property of the Provider value (if a map), if supported
type: string
Expand Down Expand Up @@ -285,6 +298,13 @@ spec:
description: Finds secrets base
type: string
type: object
nullBytePolicy:
default: Ignore
description: Controls how ESO handles fetched secret data containing NUL bytes for this find source.
enum:
- Ignore
- Fail
type: string
path:
description: A root path to start the find operations.
type: string
Expand Down Expand Up @@ -441,13 +461,13 @@ spec:
type: object
type: array
refreshInterval:
default: 1h
default: 1h0m0s
description: |-
RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
specified as Golang Duration strings.
Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
Example values: "1h", "2h30m", "10s"
May be set to zero to fetch and create it once. Defaults to 1h.
Example values: "1h0m0s", "2h30m0s", "10m0s"
May be set to "0s" to fetch and create it once. Defaults to 1h0m0s.
type: string
refreshPolicy:
description: |-
Expand Down Expand Up @@ -511,6 +531,25 @@ spec:
immutable:
description: Immutable defines if the final secret will be immutable
type: boolean
manifest:
description: |-
Manifest defines a custom Kubernetes resource to create instead of a Secret.
When specified, ExternalSecret will create the resource type defined here
(e.g., ConfigMap, Custom Resource) instead of a Secret.
Warning: Using Generic target. Make sure access policies and encryption are properly configured.
properties:
apiVersion:
description: APIVersion of the target resource (e.g., "v1" for ConfigMap, "argoproj.io/v1alpha1" for ArgoCD Application)
minLength: 1
type: string
kind:
description: Kind of the target resource (e.g., "ConfigMap", "Application")
minLength: 1
type: string
required:
- apiVersion
- kind
type: object
name:
description: |-
The name of the Secret resource to be managed.
Expand Down Expand Up @@ -638,11 +677,11 @@ spec:
type: object
target:
default: Data
description: TemplateTarget specifies where the rendered templates should be applied.
enum:
- Data
- Annotations
- Labels
description: |-
Target specifies where to place the template result.
For Secret resources, common values are: "Data", "Annotations", "Labels".
For custom resources (when spec.target.manifest is set), this supports
nested paths like "spec.database.config" or "data".
type: string
type: object
type: array
Expand All @@ -654,6 +693,7 @@ spec:
namespaceSelector:
description: |-
The labels to select by to find the Namespaces to create the ExternalSecrets in.

Deprecated: Use NamespaceSelectors instead.
properties:
matchExpressions:
Expand Down Expand Up @@ -750,6 +790,7 @@ spec:
namespaces:
description: |-
Choose namespaces by name. This field is ORed with anything that NamespaceSelectors ends up choosing.

Deprecated: Use NamespaceSelectors instead.
items:
maxLength: 63
Expand Down Expand Up @@ -1182,13 +1223,13 @@ spec:
type: object
type: array
refreshInterval:
default: 1h
default: 1h0m0s
description: |-
RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
specified as Golang Duration strings.
Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
Example values: "1h", "2h30m", "10s"
May be set to zero to fetch and create it once. Defaults to 1h.
Example values: "1h0m0s", "2h30m0s", "10m0s"
May be set to "0s" to fetch and create it once. Defaults to 1h0m0s.
type: string
refreshPolicy:
description: |-
Expand Down Expand Up @@ -1483,6 +1524,7 @@ spec:
namespaces:
description: |-
Choose namespaces by name. This field is ORed with anything that NamespaceSelectors ends up choosing.

Deprecated: Use NamespaceSelectors instead.
items:
maxLength: 63
Expand Down Expand Up @@ -1540,9 +1582,8 @@ spec:
type: array
type: object
type: object
served: false
served: {{ .Values.crds.unsafeServeV1Beta1 }}
storage: false
subresources:
status: {}
{{- end }}
{{- end }}
Loading