:sparkles: Kubernetes v1.24 upgrade by dependabot[bot] · Pull Request #1345 · external-secrets/external-secrets

dependabot · 2022-07-11T08:09:04Z

I'm gonna take this over from dependabot. Looking into this, this is a bigger task to do. Essentially:

bump kubernetes to 1.24
split go.mod into main and e2e modules so we don't need the argo/flux dependencies in the main mod
This is needed because argo doesn't integrate with 1.23 yet
migrate kubernetes and vault provider to NOT fetch the service account tokens via Kind=Secret and instead use TokenRequest API
- research: impact on existing vault users
extend the serviceAccountRef to include a audience field
refactor kubernetes provider to match provider/client interfaces (should do with vault in the future, too)
fix e2e tests

Impact for Vault Users

When using TokenRequest API the issuer claim changes from kubernetes/serviceaccount to https://<controlplane-api-endpoint>. From vault's perspective this can be a breaking change if the config param is set to this value: disable_issuer_validation=false. By default (Vault >= 1.9) this value is false. Users may set that value to true but this flag has been deprecated and should not be used. Instead, issuer validation is disabled by default.

So you're affected if:

you're running Vault < 1.9 and have not set disable_issuer_validation=true
your running Vault >= 1.9 and have set disable_issuer_validation=false

Impact for Kubernetes Users

TokenRequest API is beta since 1.12 and enabled by default
there should be no impact for users

Bumps sigs.k8s.io/controller-runtime from 0.11.2 to 0.12.3.

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.12.3

What's Changed

✨ Provide access to admission.Request in custom validator/defaulter in kubernetes-sigs/controller-runtime#1952

Full Changelog: kubernetes-sigs/controller-runtime@v0.12.2...v0.12.3

v0.12.2

changes since v0.12.1

✨ New Features

Allow TLS to be entirely configured on webhook server (#1914)

🐛 Bug Fixes

Fix webhook write response error for broken HTTP connection (#1931)

Fix issue with starting multiple test envs (#1913)

don't override global log in builder (#1911)

Thanks to all our contributors!

v0.12.1

changes since v0.12.0

🐛 Bug Fixes

fix loading CRDs from multiple directories in envtests (#1905)

Thanks to all our contributors!

v0.12.0

changes since v0.11.2

⚠️ Breaking Changes

make fake client delete operations honor dry run opt (#1873)

logging: align to Kubernetes structured logging, add reconcileID (#1827)

leaderelection: use 'leases' as default resource lock object (#1773)

✨ New Features

certwatcher: add metrics to monitor certificate reads (#1877)

Bump to k8s.io v1.24.0 (#1885)

Bump to k8s.io v1.24.0-rc.1 (#1879)

return a bool from AddFinalizer and RemoveFinalizer (#1636)

update client-go to 1.24-beta (#1864)

Add BaseContext to manager Options for use with Runnables (#1846)

Upgrade k8s dependencies from 1.23.0 to 1.23.5 (#1843)

Add Kubernetes Gomega extension with to make testing controllers easier (#1767)

... (truncated)

Commits

cd0058a Merge pull request #1952 from k8s-infra-cherrypick-robot/cherry-pick-1950-to-...
b698f2b Provide access to admission.Request in custom validator/defaulter
f561596 ✨ Bump k8s.io packages to v1.24.2 (#1940)
697e66d Merge pull request #1931 from k8s-infra-cherrypick-robot/cherry-pick-1930-to-...
0d4500b Fix webhook write response error for broken HTTP connection
d15de97 Merge pull request #1914 from k8s-infra-cherrypick-robot/cherry-pick-1897-to-...
54d6a15 Allow TLS config to be entirely configured on webhook server
160efcb Merge pull request #1913 from k8s-infra-cherrypick-robot/cherry-pick-1910-to-...
6c84577 Fix issue with starting multiple test envs
1efdbd7 Merge pull request #1911 from k8s-infra-cherrypick-robot/cherry-pick-1907-to-...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

paul-the-alien

Greetings!
Thank you for contributing to this project!
If this is your first time contributing, please make
sure to read the Developer and Contributing Process guides.
Please also mind and follow our Code of Conduct.

Useful commands:

make fmt: Formats the code
make check-diff: Ensures the branch is clean
make reviewable: Ensures a PR is ready for review

ghost · 2022-07-11T08:09:56Z

👇 Click on the image for a new way to code review

Make big changes easier — review code in small groups of related files
Know where to start — see the whole change at a glance
Take a code tour — explore the change with an interactive tour
Make comments and review — all fully sync’ed with github

Try it now!

Legend

moolen · 2022-07-30T17:59:53Z

// moved contents to first post ☝️

moolen · 2022-08-03T21:05:04Z

pkg/provider/vault/vault.go

+		// Kubernetes <v1.24 fetch token via ServiceAccount.Secrets[]
+		// this behaviour was removed in v1.24 and we must use TokenRequest API (see below)
 		jwt, err := v.secretKeyRefForServiceAccount(ctx, kubernetesAuth.ServiceAccountRef)
+		if jwt != "" {
+			return jwt, err
+		}
+		if err != nil {
+			v.log.V(1).Info("unable to fetch jwt from service account secret")
+		}
+		// Kubernetes >=v1.24: fetch token via TokenRequest API
+		// note: this is a massive change from vault perspective: the `iss` claim will very likely change.
+		// Vault 1.9 deprecated issuer validation by default, and authentication with Vault clusters <1.9 will likely fail.
+		jwt, err = v.serviceAccountToken(ctx, *kubernetesAuth.ServiceAccountRef, nil, 600)


vault provider tries to use the same mechanics as before. If they fail (they will with 1.24+) - it'll try to use the TokenRequest API.

This may cause issues if a user sets disable_issuer_validation=false - this is deprecated and with vault 1.9 it's set by default to true.

moolen · 2022-08-03T21:09:08Z

pkg/provider/kubernetes/auth.go

-		Namespace: k.namespace,
-		Name:      serviceAccountRef.Name,
-	}
+func (k *BaseClient) serviceAccountToken(ctx context.Context, serviceAccountRef *esmeta.ServiceAccountSelector) ([]byte, error) {


Kubernetes provider will migrate to the new TokenRequest API. I don't see a need to keep the old ServiceAccount.Secrets[] approach.

moolen · 2022-08-03T21:10:00Z

e2e/k8s/vault-config/configure-vault.sh

    kubernetes_host=https://kubernetes.default.svc.cluster.local \
-    kubernetes_ca_cert=@/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
+    kubernetes_ca_cert=@/var/run/secrets/kubernetes.io/serviceaccount/ca.crt \
+    issuer=https://kubernetes.default.svc.cluster.local


we're still using an old version <1.9 of vault in our e2e tests, hence we gotta fix the issuer validation

moolen · 2022-08-09T21:19:50Z

apis/externalsecrets/v1beta1/secretstore_vault_types.go

 	// Optional audiences field that will be used to request a temporary Kubernetes service
 	// account token for the service account referenced by `serviceAccountRef`.
 	// Defaults to a single audience `vault` it not specified.
+	// Deprecated: use serviceAccountRef.Audiences instead


I want to deprecate this in favor of serviceAccountRef.Audiences[].

It looks like expirationSeconds is not needed because we generate a service account token on the fly and use it only once. There is no replacement for expirationSeconds

moolen · 2022-08-09T21:33:41Z

apis/meta/v1/types.go

+	// Audience specifies the `aud` claim for the service account token
+	// If the service account uses a well-known annotation for e.g. IRSA or GCP Workload Identity
+	// then this audiences will be appended to the list
+	// +optional
+	Audiences []string `json:"audiences,omitempty"`


The idea is to add that audiences everywhere. provider can use/set a default which can be extended with this field.
It has been implemented for all providers.

moolen · 2022-08-09T21:45:31Z

/ok-to-test-managed sha=e5ed381 provider=aws

moolen · 2022-08-09T21:45:37Z

/ok-to-test-managed sha=e5ed381 provider=gcp

github-actions · 2022-08-09T21:47:04Z

💰 Infracost estimate: monthly cost will increase by $235 📈

Project	Previous	New	Diff
external-secrets/external-secrets/terraform/aws/plan.json	$0	$235	+$235

Infracost output

Project: external-secrets/external-secrets/terraform/aws/plan.json

+ module.cluster.module.eks.aws_cloudwatch_log_group.this[0]
  Monthly cost depends on usage

    + Data ingested
      Monthly cost depends on usage
        +$0.50 per GB

    + Archival Storage
      Monthly cost depends on usage
        +$0.03 per GB

    + Insights queries data scanned
      Monthly cost depends on usage
        +$0.005 per GB

+ module.cluster.module.eks.aws_eks_cluster.this[0]
  +$73.00

    + EKS cluster
      +$73.00

+ module.cluster.module.eks.module.eks_managed_node_group["example"].aws_eks_node_group.this[0]
  +$125

    + Instance usage (Linux/UNIX, on-demand, t3.large)
      +$121

    + CPU credits
      $0.00

    + Storage (general purpose SSD, gp2)
      +$4.00

+ module.cluster.module.vpc.aws_cloudwatch_log_group.flow_log[0]
  Monthly cost depends on usage

    + Data ingested
      Monthly cost depends on usage
        +$0.50 per GB

    + Archival Storage
      Monthly cost depends on usage
        +$0.03 per GB

    + Insights queries data scanned
      Monthly cost depends on usage
        +$0.005 per GB

+ module.cluster.module.vpc.aws_eip.nat[0]
  +$3.65

    + IP address (if unused)
      +$3.65

+ module.cluster.module.vpc.aws_nat_gateway.this[0]
  +$32.85

    + NAT gateway
      +$32.85

    + Data processed
      Monthly cost depends on usage
        +$0.045 per GB

Monthly cost change for external-secrets/external-secrets/terraform/aws/plan.json
Amount:  +$235 ($0.00 → $235)

──────────────────────────────────
Key: ~ changed, + added, - removed

58 cloud resources were detected:
∙ 6 were estimated, 4 of which include usage-based costs, see https://infracost.io/usage-file
∙ 49 were free:
  ∙ 13 x aws_security_group_rule
  ∙ 6 x aws_iam_role_policy_attachment
  ∙ 6 x aws_route_table_association
  ∙ 6 x aws_subnet
  ∙ 4 x aws_iam_role
  ∙ 4 x aws_security_group
  ∙ 2 x aws_route
  ∙ 2 x aws_route_table
  ∙ 1 x aws_flow_log
  ∙ 1 x aws_iam_openid_connect_provider
  ∙ 1 x aws_iam_policy
  ∙ 1 x aws_internet_gateway
  ∙ 1 x aws_launch_template
  ∙ 1 x aws_vpc
∙ 3 are not supported yet, see https://infracost.io/requested-resources:
  ∙ 3 x aws_eks_addon

This comment will be updated when the cost estimate changes.

_{Is this comment useful? Yes, No, Other}

moolen · 2022-08-10T18:08:18Z

/ok-to-test-managed sha=e5ed381 provider=aws

moolen · 2022-08-10T18:55:07Z

@gusfcarvalho if you have some time to review 🙏 I left comments to explain a little bit of background.

gusfcarvalho · 2022-08-17T11:51:37Z

Sorry @moolen, I've been quite busy here! I'll take a look by the end of the week with no delays 🙏

gusfcarvalho · 2022-08-18T16:26:58Z

just ran tests around the bump itself and the ability to generate tokens with Hashivault - it works very well.

IMO, disable_iss_validation is not an issue even, because it would still happen for any k8s version >1.21 anyways. I think we're good to go.

gusfcarvalho · 2022-08-18T16:31:50Z

/approve

Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.11.2 to 0.12.3. - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.11.2...v0.12.3) --- updated-dependencies: - dependency-name: sigs.k8s.io/controller-runtime dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

This will be used by aws, azure, gcp, kubernetes & vault providers in combination with TokenRequest API: it will _append_ audience claims to provider-specific audiences. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

the kubernetes provider mixed up provider and client interfaces which made it really hard to reason about. This commit separates into two structs, each implements one interface. The client struct fields have been renamed and annotated so their use and scope is clear. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

expirationSeconds is not needed because we generate a service account token on the fly for a single use. There will be no replacement for this. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

sonarqubecloud · 2022-08-19T15:07:42Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
1 Code Smell

No Coverage information
0.0% Duplication

* build(deps): bump sigs.k8s.io/controller-tools from 0.9.0 to 0.9.2 (external-secrets#1322) * build(deps): bump sigs.k8s.io/controller-tools from 0.9.0 to 0.9.2 Bumps [sigs.k8s.io/controller-tools](https://github.com/kubernetes-sigs/controller-tools) from 0.9.0 to 0.9.2. - [Release notes](https://github.com/kubernetes-sigs/controller-tools/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-tools/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/controller-tools@v0.9.0...v0.9.2) --- updated-dependencies: - dependency-name: sigs.k8s.io/controller-tools dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * fix: re-gen CRDs Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Moritz Johner <beller.moritz@googlemail.com> * 📚 update references to select "main" instead of "master" (external-secrets#1346) * 📝 update references to select "main" instead of "master" * Remove unused variable * fix: handle empty conversionStrategy (external-secrets#1408) This is for the case when the conversion webhook does not set the conversionStrategy properly (it doesn't run the Defaulter). Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * feat: add LF footer copytight (external-secrets#1416) Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * 🐛fixes e2e tests (external-secrets#1420) Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> * 🐛 Fix/remove dependabot from e2e trusted (external-secrets#1422) * fixes e2e tests Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> * dependabot now needs /ok-to-test Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> * 🐛Fixing: github.actor instead of github.author (external-secrets#1424) Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> * ⬆️build(deps): bump github.com/xanzy/go-gitlab from 0.68.2 to 0.70.0 (external-secrets#1421) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.68.2 to 0.70.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](xanzy/go-gitlab@v0.68.2...v0.70.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ⬆️build(deps): bump google.golang.org/grpc from 1.47.0 to 1.48.0 (external-secrets#1414) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.47.0 to 1.48.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.47.0...v1.48.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ⬆️build(deps): bump github.com/fluxcd/helm-controller/api (external-secrets#1413) Bumps [github.com/fluxcd/helm-controller/api](https://github.com/fluxcd/helm-controller) from 0.22.1 to 0.22.2. - [Release notes](https://github.com/fluxcd/helm-controller/releases) - [Changelog](https://github.com/fluxcd/helm-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/helm-controller@v0.22.1...v0.22.2) --- updated-dependencies: - dependency-name: github.com/fluxcd/helm-controller/api dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ⬆️build(deps): bump sigstore/cosign-installer from 2.4.1 to 2.5.0 (external-secrets#1412) Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.4.1 to 2.5.0. - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@v2.4.1...v2.5.0) --- updated-dependencies: - dependency-name: sigstore/cosign-installer dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ⬆️build(deps): bump azure/setup-helm from 3.1 to 3.3 (external-secrets#1411) Bumps [azure/setup-helm](https://github.com/azure/setup-helm) from 3.1 to 3.3. - [Release notes](https://github.com/azure/setup-helm/releases) - [Commits](Azure/setup-helm@v3.1...v3.3) --- updated-dependencies: - dependency-name: azure/setup-helm dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ⬆️ Bump github.com/fluxcd/source-controller/api (external-secrets#1426) Bumps [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) from 0.25.10 to 0.25.11. - [Release notes](https://github.com/fluxcd/source-controller/releases) - [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/source-controller@v0.25.10...v0.25.11) --- updated-dependencies: - dependency-name: github.com/fluxcd/source-controller/api dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ⬆️ Bump github.com/Azure/go-autorest/autorest (external-secrets#1425) Bumps [github.com/Azure/go-autorest/autorest](https://github.com/Azure/go-autorest) from 0.11.27 to 0.11.28. - [Release notes](https://github.com/Azure/go-autorest/releases) - [Changelog](https://github.com/Azure/go-autorest/blob/main/CHANGELOG.md) - [Commits](Azure/go-autorest@autorest/v0.11.27...autorest/v0.11.28) --- updated-dependencies: - dependency-name: github.com/Azure/go-autorest/autorest dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ✨Implements dataFrom key rewrite (external-secrets#1381) * Implements dataFrom key rewrite Co-authored-by: Moritz Johner <moolen@users.noreply.github.com> Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> * docs: add example to remove invalid characters Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Co-authored-by: Moritz Johner <moolen@users.noreply.github.com> Co-authored-by: Moritz Johner <beller.moritz@googlemail.com> * chore: bump helm release (external-secrets#1432) Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * add missing default values for spec.target (external-secrets#1431) Add missing default values for ExternalSecretTarget on CRD definition Fixes external-secrets#1233 Signed-off-by: Helena Steck <steckhelena@gmail.com> * Bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (external-secrets#1437) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.4.0 to 1.5.0. - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.4.0...v1.5.0) --- updated-dependencies: - dependency-name: github.com/spf13/cobra dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.1.0 to 0.2.0 (external-secrets#1436) Bumps [github.com/hashicorp/vault/api/auth/kubernetes](https://github.com/hashicorp/vault) from 0.1.0 to 0.2.0. - [Release notes](https://github.com/hashicorp/vault/releases) - [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md) - [Commits](hashicorp/vault@v0.1.0...v0.2.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/vault/api/auth/kubernetes dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/crossplane/crossplane-runtime from 0.16.0 to 0.17.0 (external-secrets#1435) Bumps [github.com/crossplane/crossplane-runtime](https://github.com/crossplane/crossplane-runtime) from 0.16.0 to 0.17.0. - [Release notes](https://github.com/crossplane/crossplane-runtime/releases) - [Commits](crossplane/crossplane-runtime@v0.16.0...v0.17.0) --- updated-dependencies: - dependency-name: github.com/crossplane/crossplane-runtime dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump golang from 1.18-alpine to 1.19.0-alpine (external-secrets#1434) Bumps golang from 1.18-alpine to 1.19.0-alpine. --- updated-dependencies: - dependency-name: golang dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/AzureAD/microsoft-authentication-library-for-go (external-secrets#1440) Bumps [github.com/AzureAD/microsoft-authentication-library-for-go](https://github.com/AzureAD/microsoft-authentication-library-for-go) from 0.5.2 to 0.5.3. - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-go/releases) - [Changelog](https://github.com/AzureAD/microsoft-authentication-library-for-go/blob/dev/RELEASES.md) - [Commits](AzureAD/microsoft-authentication-library-for-go@v0.5.2...v0.5.3) --- updated-dependencies: - dependency-name: github.com/AzureAD/microsoft-authentication-library-for-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Fix provisionedNamespaces in Status field of ClusterExternalSecret keeps getting updated non-stop (external-secrets#1441) Signed-off-by: Kewei Ma <kewei@indeed.com> * clean: typo (clister) in azurekv_types (external-secrets#1442) Signed-off-by: Nandor Magyar <nandormagyar.it@gmail.com> Signed-off-by: Nandor Magyar <nandormagyar.it@gmail.com> * ⬆️github.com/akeylesslabs/akeyless-go/v2 from 2.16.8 to 2.17.0 (external-secrets#1438) * Bump github.com/akeylesslabs/akeyless-go/v2 from 2.16.8 to 2.17.0 Bumps [github.com/akeylesslabs/akeyless-go/v2](https://github.com/akeylesslabs/akeyless-go) from 2.16.8 to 2.17.0. - [Release notes](https://github.com/akeylesslabs/akeyless-go/releases) - [Changelog](https://github.com/akeylesslabs/akeyless-go/blob/master/docs/KmipRenewServerCertificate.md) - [Commits](akeylesslabs/akeyless-go@v2.16.8...v2.17.0) --- updated-dependencies: - dependency-name: github.com/akeylesslabs/akeyless-go/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * Fixing linting issues Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Gustavo Carvalho <gusfcarvalho@gmail.com> * 🧹 Removing Unknown License from allowed licenses (external-secrets#1446) Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> * 📚Fix comment specifying the default engineVersion. (external-secrets#1450) Signed-off-by: Tony Worthit <868644+TonyLovesDevOps@users.noreply.github.com> Signed-off-by: Tony Worthit <868644+TonyLovesDevOps@users.noreply.github.com> * fix: AWS attr. dot check off-by-one error (external-secrets#1459) * Fix off-by-one in check for dot in JSON attr. name Signed-off-by: stephen-dexda <stephen@dexda.io> * ⬆️ Bump github.com/prometheus/client_golang (external-secrets#1457) Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.12.2 to 1.13.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.12.2...v1.13.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ⬆️ Bump github.com/googleapis/gax-go/v2 from 2.4.0 to 2.5.1 (external-secrets#1456) Bumps [github.com/googleapis/gax-go/v2](https://github.com/googleapis/gax-go) from 2.4.0 to 2.5.1. - [Release notes](https://github.com/googleapis/gax-go/releases) - [Commits](googleapis/gax-go@v2.4.0...v2.5.1) --- updated-dependencies: - dependency-name: github.com/googleapis/gax-go/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ⬆️ Bump github.com/aliyun/alibaba-cloud-sdk-go (external-secrets#1455) Bumps [github.com/aliyun/alibaba-cloud-sdk-go](https://github.com/aliyun/alibaba-cloud-sdk-go) from 1.61.1673 to 1.61.1724. - [Release notes](https://github.com/aliyun/alibaba-cloud-sdk-go/releases) - [Changelog](https://github.com/aliyun/alibaba-cloud-sdk-go/blob/master/ChangeLog.txt) - [Commits](aliyun/alibaba-cloud-sdk-go@v1.61.1673...v1.61.1724) --- updated-dependencies: - dependency-name: github.com/aliyun/alibaba-cloud-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ⬆️ Bump helm/chart-testing-action from 2.2.1 to 2.3.0 (external-secrets#1453) Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.2.1 to 2.3.0. - [Release notes](https://github.com/helm/chart-testing-action/releases) - [Commits](helm/chart-testing-action@v2.2.1...v2.3.0) --- updated-dependencies: - dependency-name: helm/chart-testing-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/Azure/go-autorest/autorest/adal (external-secrets#1463) Bumps [github.com/Azure/go-autorest/autorest/adal](https://github.com/Azure/go-autorest) from 0.9.20 to 0.9.21. - [Release notes](https://github.com/Azure/go-autorest/releases) - [Changelog](https://github.com/Azure/go-autorest/blob/main/CHANGELOG.md) - [Commits](Azure/go-autorest@autorest/adal/v0.9.20...autorest/adal/v0.9.21) --- updated-dependencies: - dependency-name: github.com/Azure/go-autorest/autorest/adal dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/tidwall/gjson from 1.14.1 to 1.14.2 (external-secrets#1461) Bumps [github.com/tidwall/gjson](https://github.com/tidwall/gjson) from 1.14.1 to 1.14.2. - [Release notes](https://github.com/tidwall/gjson/releases) - [Commits](tidwall/gjson@v1.14.1...v1.14.2) --- updated-dependencies: - dependency-name: github.com/tidwall/gjson dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump google.golang.org/api from 0.90.0 to 0.92.0 (external-secrets#1462) Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.90.0 to 0.92.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.90.0...v0.92.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/xanzy/go-gitlab from 0.70.0 to 0.72.0 (external-secrets#1465) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.70.0 to 0.72.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](xanzy/go-gitlab@v0.70.0...v0.72.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: re-add akeyless url (external-secrets#1468) Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: remove convertKeys from aws providers (external-secrets#1470) ConvertKeys is called in the external secrets controller which takes care of mapping the keys. Calling it before returning the data is a bug as it interferes with the new rewrite feature. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * feat: add azkv.environmentType (external-secrets#1469) users of USGovCloud, ChinaCloud, GermanCloud need slightly different configuration for AADEndpoint and keyvault resource. This is based on CSI Secret Store Azure KV driver, Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * ✨ Kubernetes v1.24 upgrade (external-secrets#1345) * build(deps): bump sigs.k8s.io/controller-runtime from 0.11.2 to 0.12.3 Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.11.2 to 0.12.3. - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.11.2...v0.12.3) --- updated-dependencies: - dependency-name: sigs.k8s.io/controller-runtime dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * feat: bump kubernetes 1.24 Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: backwards-compatible vault implementation Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * feat: add audiences field to serviceAccountRef This will be used by aws, azure, gcp, kubernetes & vault providers in combination with TokenRequest API: it will _append_ audience claims to provider-specific audiences. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * feat: refactor kubernetes client to match provider/client interfaces the kubernetes provider mixed up provider and client interfaces which made it really hard to reason about. This commit separates into two structs, each implements one interface. The client struct fields have been renamed and annotated so their use and scope is clear. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: deprecate expirationSeconds expirationSeconds is not needed because we generate a service account token on the fly for a single use. There will be no replacement for this. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: rename token fetch audiences field Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: generate CRDs Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Moritz Johner <beller.moritz@googlemail.com> * chore(deps): bump go.uber.org/zap from 1.21.0 to 1.22.0 (external-secrets#1484) Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.21.0 to 1.22.0. - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](uber-go/zap@v1.21.0...v1.22.0) --- updated-dependencies: - dependency-name: go.uber.org/zap dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/IBM/go-sdk-core/v5 from 5.10.1 to 5.10.2 (external-secrets#1482) Bumps [github.com/IBM/go-sdk-core/v5](https://github.com/IBM/go-sdk-core) from 5.10.1 to 5.10.2. - [Release notes](https://github.com/IBM/go-sdk-core/releases) - [Changelog](https://github.com/IBM/go-sdk-core/blob/main/CHANGELOG.md) - [Commits](IBM/go-sdk-core@v5.10.1...v5.10.2) --- updated-dependencies: - dependency-name: github.com/IBM/go-sdk-core/v5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump sigstore/cosign-installer from 2.5.0 to 2.5.1 (external-secrets#1480) Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.5.0 to 2.5.1. - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@v2.5.0...v2.5.1) --- updated-dependencies: - dependency-name: sigstore/cosign-installer dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/IBM/secrets-manager-go-sdk (external-secrets#1481) Bumps [github.com/IBM/secrets-manager-go-sdk](https://github.com/IBM/secrets-manager-go-sdk) from 1.0.44 to 1.0.45. - [Release notes](https://github.com/IBM/secrets-manager-go-sdk/releases) - [Commits](IBM/secrets-manager-go-sdk@v1.0.44...v1.0.45) --- updated-dependencies: - dependency-name: github.com/IBM/secrets-manager-go-sdk dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump google.golang.org/api from 0.92.0 to 0.93.0 (external-secrets#1483) Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.92.0 to 0.93.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.92.0...v0.93.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.0 (external-secrets#1485) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.72.0 to 0.73.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](xanzy/go-gitlab@v0.72.0...v0.73.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Update guides-datafrom-rewrite.md for typo (external-secrets#1491) Signed-off-by: Garrett Edwards <grrttedwards@users.noreply.github.com> Signed-off-by: Garrett Edwards <grrttedwards@users.noreply.github.com> * chore(deps): bump github.com/onsi/gomega from 1.20.0 to 1.20.1 (external-secrets#1499) Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.20.0 to 1.20.1. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.20.0...v1.20.1) --- updated-dependencies: - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump go.uber.org/zap from 1.22.0 to 1.23.0 (external-secrets#1498) Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.22.0 to 1.23.0. - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](uber-go/zap@v1.22.0...v1.23.0) --- updated-dependencies: - dependency-name: go.uber.org/zap dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.52 to 1.44.86 (external-secrets#1496) Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.52 to 1.44.86. - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md) - [Commits](aws/aws-sdk-go@v1.44.52...v1.44.86) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/akeylesslabs/akeyless-go/v2 (external-secrets#1495) Bumps [github.com/akeylesslabs/akeyless-go/v2](https://github.com/akeylesslabs/akeyless-go) from 2.17.0 to 2.18.0. - [Release notes](https://github.com/akeylesslabs/akeyless-go/releases) - [Changelog](https://github.com/akeylesslabs/akeyless-go/blob/master/docs/KmipRenewServerCertificate.md) - [Commits](akeylesslabs/akeyless-go@v2.17.0...v2.18.0) --- updated-dependencies: - dependency-name: github.com/akeylesslabs/akeyless-go/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/xanzy/go-gitlab from 0.73.0 to 0.73.1 (external-secrets#1497) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.73.0 to 0.73.1. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](xanzy/go-gitlab@v0.73.0...v0.73.1) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Small typo fix guides-multi-tenancy.md (external-secrets#1492) Signed-off-by: Christopher Watford <christopher.watford@gmail.com> Signed-off-by: Christopher Watford <christopher.watford@gmail.com> * Remove unnecessary space before a colon (external-secrets#1494) Signed-off-by: dubs11kt <dubs11kt@gmail.com> Signed-off-by: dubs11kt <dubs11kt@gmail.com> * Update ADOPTERS.md (external-secrets#1503) Adding Made People E-commerce agency as adopter Signed-off-by: terrpan <daniel.w.terry@gmail.com> Signed-off-by: terrpan <daniel.w.terry@gmail.com> * flip order of `err` and nil `secret` variable check in `listSecrets()` function of vault provider (external-secrets#1504) Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de> * Add webhook tls options (external-secrets#1466) During our internal security scan, the webhook for external-secrets was flagged because it supports protocol vulnerable to Sweet32 (https://sweet32.info/). In order to avoid the webhook from being flagged, we need to restrict the TLS ciphers on controller runtime. To do this I needed to update the dependency to 0.12.3 and some other conflicting dependencies. Signed-off-by: Joao Pedro Silva <jp.silva15@gmail.com> * Adding my published blog post (external-secrets#1506) I've added my blog post about ESO and integration with AWS Secrets Manager to this page. Signed-off-by: Emin Alemdar <77338109+eminalemdar@users.noreply.github.com> Signed-off-by: Emin Alemdar <77338109+eminalemdar@users.noreply.github.com> * feat: add support matrix, refactor docs (external-secrets#1508) Signed-off-by: Moritz Johner <Moritz.Johner@form3.tech> * Add warning due to DNS transfer (external-secrets#1513) Updated Readme with warnings and workaround Signed-off-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com> Signed-off-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com> * chore(deps): bump github.com/onsi/gomega from 1.20.1 to 1.20.2 (external-secrets#1522) Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.20.1 to 1.20.2. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.20.1...v1.20.2) --- updated-dependencies: - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/tidwall/gjson from 1.14.2 to 1.14.3 (external-secrets#1523) Bumps [github.com/tidwall/gjson](https://github.com/tidwall/gjson) from 1.14.2 to 1.14.3. - [Release notes](https://github.com/tidwall/gjson/releases) - [Commits](tidwall/gjson@v1.14.2...v1.14.3) --- updated-dependencies: - dependency-name: github.com/tidwall/gjson dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go (external-secrets#1519) Bumps [github.com/aliyun/alibaba-cloud-sdk-go](https://github.com/aliyun/alibaba-cloud-sdk-go) from 1.61.1724 to 1.61.1760. - [Release notes](https://github.com/aliyun/alibaba-cloud-sdk-go/releases) - [Changelog](https://github.com/aliyun/alibaba-cloud-sdk-go/blob/master/ChangeLog.txt) - [Commits](aliyun/alibaba-cloud-sdk-go@v1.61.1724...v1.61.1760) --- updated-dependencies: - dependency-name: github.com/aliyun/alibaba-cloud-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * feat: add stale bot to close issues automatically (external-secrets#1524) Signed-off-by: Moritz Johner <100202497+moritzjohner-form3@users.noreply.github.com> Signed-off-by: Moritz Johner <100202497+moritzjohner-form3@users.noreply.github.com> * chore(deps): bump github.com/hashicorp/vault/api/auth/ldap (external-secrets#1521) Bumps [github.com/hashicorp/vault/api/auth/ldap](https://github.com/hashicorp/vault) from 0.1.0 to 0.2.0. - [Release notes](https://github.com/hashicorp/vault/releases) - [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md) - [Commits](hashicorp/vault@v0.1.0...v0.2.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/vault/api/auth/ldap dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: aws parameter store json decode, bump go 1.19 (external-secrets#1525) * fix: parameter store should decode complex json values Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * chore: bump 0.6.0-rc1 (external-secrets#1538) Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * added akeyless k8s auth option (external-secrets#1531) * added akeyless k8s auth option Signed-off-by: Docs <renana@akeyless.io> * chore: refactor provider (external-secrets#1529) Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * DNS transfer to CNCF went ✅, we can remove notice (external-secrets#1548) Signed-off-by: Lucas Severo Alves <lucassalves65@gmail.com> * New Duration Metric (external-secrets#1533) Signed-off-by: Cristina DE DIOS GONZALEZ <cristina.dedios@amadeus.com> * chore(deps): bump github.com/google/go-cmp from 0.5.8 to 0.5.9 (external-secrets#1545) Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.8 to 0.5.9. - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](google/go-cmp@v0.5.8...v0.5.9) --- updated-dependencies: - dependency-name: github.com/google/go-cmp dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump sigstore/cosign-installer from 2.5.1 to 2.6.0 (external-secrets#1541) Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.5.1 to 2.6.0. - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@v2.5.1...v2.6.0) --- updated-dependencies: - dependency-name: sigstore/cosign-installer dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go (external-secrets#1543) Bumps [github.com/aliyun/alibaba-cloud-sdk-go](https://github.com/aliyun/alibaba-cloud-sdk-go) from 1.61.1760 to 1.61.1768. - [Release notes](https://github.com/aliyun/alibaba-cloud-sdk-go/releases) - [Changelog](https://github.com/aliyun/alibaba-cloud-sdk-go/blob/master/ChangeLog.txt) - [Commits](aliyun/alibaba-cloud-sdk-go@v1.61.1760...v1.61.1768) --- updated-dependencies: - dependency-name: github.com/aliyun/alibaba-cloud-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump actions/setup-python from 3.1.2 to 4.2.0 (external-secrets#1542) Bumps [actions/setup-python](https://github.com/actions/setup-python) from 3.1.2 to 4.2.0. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v3.1.2...v4.2.0) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/IBM/secrets-manager-go-sdk (external-secrets#1551) Bumps [github.com/IBM/secrets-manager-go-sdk](https://github.com/IBM/secrets-manager-go-sdk) from 1.0.45 to 1.0.46. - [Release notes](https://github.com/IBM/secrets-manager-go-sdk/releases) - [Commits](IBM/secrets-manager-go-sdk@v1.0.45...v1.0.46) --- updated-dependencies: - dependency-name: github.com/IBM/secrets-manager-go-sdk dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump google.golang.org/api from 0.94.0 to 0.95.0 (external-secrets#1546) Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.94.0 to 0.95.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.94.0...v0.95.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump golang from 1.19.0-alpine to 1.19.1-alpine (external-secrets#1540) Bumps golang from 1.19.0-alpine to 1.19.1-alpine. --- updated-dependencies: - dependency-name: golang dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.91 to 1.44.96 (external-secrets#1550) Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.91 to 1.44.96. - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md) - [Commits](aws/aws-sdk-go@v1.44.91...v1.44.96) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: unmarshal JSON error when empty secrets in Vault (external-secrets#1512) Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com> * feat: run scanner on pr (external-secrets#1553) Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: run trivy only when authenticated (external-secrets#1554) PRs from forked repos can not publish images, hence this scan fails. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: broken links in README (external-secrets#1556) Signed-off-by: robel yemane <ryhgb03@gmail.com> Signed-off-by: robel yemane <ryhgb03@gmail.com> * Updated the right path to the field (external-secrets#1557) Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com> Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com> * chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go (external-secrets#1562) Bumps [github.com/aliyun/alibaba-cloud-sdk-go](https://github.com/aliyun/alibaba-cloud-sdk-go) from 1.61.1768 to 1.61.1782. - [Release notes](https://github.com/aliyun/alibaba-cloud-sdk-go/releases) - [Changelog](https://github.com/aliyun/alibaba-cloud-sdk-go/blob/master/ChangeLog.txt) - [Commits](aliyun/alibaba-cloud-sdk-go@v1.61.1768...v1.61.1782) --- updated-dependencies: - dependency-name: github.com/aliyun/alibaba-cloud-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/akeylesslabs/akeyless-go/v2 (external-secrets#1560) Bumps [github.com/akeylesslabs/akeyless-go/v2](https://github.com/akeylesslabs/akeyless-go) from 2.18.0 to 2.19.0. - [Release notes](https://github.com/akeylesslabs/akeyless-go/releases) - [Changelog](https://github.com/akeylesslabs/akeyless-go/blob/master/docs/KmipRenewServerCertificate.md) - [Commits](akeylesslabs/akeyless-go@v2.18.0...v2.19.0) --- updated-dependencies: - dependency-name: github.com/akeylesslabs/akeyless-go/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/AzureAD/microsoft-authentication-library-for-go (external-secrets#1563) Bumps [github.com/AzureAD/microsoft-authentication-library-for-go](https://github.com/AzureAD/microsoft-authentication-library-for-go) from 0.6.1 to 0.7.0. - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-go/releases) - [Changelog](https://github.com/AzureAD/microsoft-authentication-library-for-go/blob/dev/RELEASES.md) - [Commits](AzureAD/microsoft-authentication-library-for-go@v0.6.1...v0.7.0) --- updated-dependencies: - dependency-name: github.com/AzureAD/microsoft-authentication-library-for-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump google.golang.org/api from 0.95.0 to 0.96.0 (external-secrets#1561) Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.95.0 to 0.96.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.95.0...v0.96.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.96 to 1.44.101 (external-secrets#1570) Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.96 to 1.44.101. - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Commits](aws/aws-sdk-go@v1.44.96...v1.44.101) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> Signed-off-by: Helena Steck <steckhelena@gmail.com> Signed-off-by: Kewei Ma <kewei@indeed.com> Signed-off-by: Nandor Magyar <nandormagyar.it@gmail.com> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Tony Worthit <868644+TonyLovesDevOps@users.noreply.github.com> Signed-off-by: stephen-dexda <stephen@dexda.io> Signed-off-by: Garrett Edwards <grrttedwards@users.noreply.github.com> Signed-off-by: Christopher Watford <christopher.watford@gmail.com> Signed-off-by: dubs11kt <dubs11kt@gmail.com> Signed-off-by: terrpan <daniel.w.terry@gmail.com> Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de> Signed-off-by: Joao Pedro Silva <jp.silva15@gmail.com> Signed-off-by: Emin Alemdar <77338109+eminalemdar@users.noreply.github.com> Signed-off-by: Moritz Johner <Moritz.Johner@form3.tech> Signed-off-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com> Signed-off-by: Moritz Johner <100202497+moritzjohner-form3@users.noreply.github.com> Signed-off-by: Docs <renana@akeyless.io> Signed-off-by: Lucas Severo Alves <lucassalves65@gmail.com> Signed-off-by: Cristina DE DIOS GONZALEZ <cristina.dedios@amadeus.com> Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com> Signed-off-by: robel yemane <ryhgb03@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Moritz Johner <beller.moritz@googlemail.com> Co-authored-by: Daniel Quackenbush <25692880+danquack@users.noreply.github.com> Co-authored-by: Moritz Johner <moolen@users.noreply.github.com> Co-authored-by: Gustavo Fernandes de Carvalho <gustavo.carvalho@container-solutions.com> Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com> Co-authored-by: Helena Steck <steckhelena@gmail.com> Co-authored-by: Kewei Ma <kewei@indeed.com> Co-authored-by: Nandor Magyar <nandor@rocketfuel.pw> Co-authored-by: Tony DevOps <868644+TonyLovesDevOps@users.noreply.github.com> Co-authored-by: stephen-dexda <46443882+stephen-dexda@users.noreply.github.com> Co-authored-by: Garrett Edwards <grrttedwards@users.noreply.github.com> Co-authored-by: Christopher Watford <christopher.watford@gmail.com> Co-authored-by: oddy <56793934+dubs11kt@users.noreply.github.com> Co-authored-by: terrpan <daniel.w.terry@gmail.com> Co-authored-by: Marcel Hoyer <mhoyer@pixelplastic.de> Co-authored-by: João Silva <jp.silva15@gmail.com> Co-authored-by: Emin Alemdar <77338109+eminalemdar@users.noreply.github.com> Co-authored-by: Moritz Johner <100202497+moritzjohner-form3@users.noreply.github.com> Co-authored-by: renanaAkeyless <renana@akeyless.io> Co-authored-by: Lucas Severo Alves <lucassalves65@gmail.com> Co-authored-by: Rhaenys <101413492+dreadful-dragon@users.noreply.github.com> Co-authored-by: Sebastián Gómez <1637983+sebagomez@users.noreply.github.com> Co-authored-by: Robel Yemane <ryhgb03@gmail.com>

* rebase with external-secret (#1) * build(deps): bump sigs.k8s.io/controller-tools from 0.9.0 to 0.9.2 (#1322) * build(deps): bump sigs.k8s.io/controller-tools from 0.9.0 to 0.9.2 Bumps [sigs.k8s.io/controller-tools](https://github.com/kubernetes-sigs/controller-tools) from 0.9.0 to 0.9.2. - [Release notes](https://github.com/kubernetes-sigs/controller-tools/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-tools/blob/master/RELEASE.md) - [Commits](https://github.com/kubernetes-sigs/controller-tools/compare/v0.9.0...v0.9.2) --- updated-dependencies: - dependency-name: sigs.k8s.io/controller-tools dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * fix: re-gen CRDs Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Moritz Johner <beller.moritz@googlemail.com> * :books: update references to select "main" instead of "master" (#1346) * :memo: update references to select "main" instead of "master" * Remove unused variable * fix: handle empty conversionStrategy (#1408) This is for the case when the conversion webhook does not set the conversionStrategy properly (it doesn't run the Defaulter). Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * feat: add LF footer copytight (#1416) Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * 🐛fixes e2e tests (#1420) Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> * 🐛 Fix/remove dependabot from e2e trusted (#1422) * fixes e2e tests Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> * dependabot now needs /ok-to-test Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> * 🐛Fixing: github.actor instead of github.author (#1424) Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> * ⬆️build(deps): bump github.com/xanzy/go-gitlab from 0.68.2 to 0.70.0 (#1421) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.68.2 to 0.70.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.68.2...v0.70.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ⬆️build(deps): bump google.golang.org/grpc from 1.47.0 to 1.48.0 (#1414) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.47.0 to 1.48.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.47.0...v1.48.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ⬆️build(deps): bump github.com/fluxcd/helm-controller/api (#1413) Bumps [github.com/fluxcd/helm-controller/api](https://github.com/fluxcd/helm-controller) from 0.22.1 to 0.22.2. - [Release notes](https://github.com/fluxcd/helm-controller/releases) - [Changelog](https://github.com/fluxcd/helm-controller/blob/main/CHANGELOG.md) - [Commits](https://github.com/fluxcd/helm-controller/compare/v0.22.1...v0.22.2) --- updated-dependencies: - dependency-name: github.com/fluxcd/helm-controller/api dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ⬆️build(deps): bump sigstore/cosign-installer from 2.4.1 to 2.5.0 (#1412) Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.4.1 to 2.5.0. - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](https://github.com/sigstore/cosign-installer/compare/v2.4.1...v2.5.0) --- updated-dependencies: - dependency-name: sigstore/cosign-installer dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ⬆️build(deps): bump azure/setup-helm from 3.1 to 3.3 (#1411) Bumps [azure/setup-helm](https://github.com/azure/setup-helm) from 3.1 to 3.3. - [Release notes](https://github.com/azure/setup-helm/releases) - [Commits](https://github.com/azure/setup-helm/compare/v3.1...v3.3) --- updated-dependencies: - dependency-name: azure/setup-helm dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * :arrow_up: Bump github.com/fluxcd/source-controller/api (#1426) Bumps [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) from 0.25.10 to 0.25.11. - [Release notes](https://github.com/fluxcd/source-controller/releases) - [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md) - [Commits](https://github.com/fluxcd/source-controller/compare/v0.25.10...v0.25.11) --- updated-dependencies: - dependency-name: github.com/fluxcd/source-controller/api dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * :arrow_up: Bump github.com/Azure/go-autorest/autorest (#1425) Bumps [github.com/Azure/go-autorest/autorest](https://github.com/Azure/go-autorest) from 0.11.27 to 0.11.28. - [Release notes](https://github.com/Azure/go-autorest/releases) - [Changelog](https://github.com/Azure/go-autorest/blob/main/CHANGELOG.md) - [Commits](https://github.com/Azure/go-autorest/compare/autorest/v0.11.27...autorest/v0.11.28) --- updated-dependencies: - dependency-name: github.com/Azure/go-autorest/autorest dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ✨Implements dataFrom key rewrite (#1381) * Implements dataFrom key rewrite Co-authored-by: Moritz Johner <moolen@users.noreply.github.com> Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> * docs: add example to remove invalid characters Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Co-authored-by: Moritz Johner <moolen@users.noreply.github.com> Co-authored-by: Moritz Johner <beller.moritz@googlemail.com> * chore: bump helm release (#1432) Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * add missing default values for spec.target (#1431) Add missing default values for ExternalSecretTarget on CRD definition Fixes #1233 Signed-off-by: Helena Steck <steckhelena@gmail.com> * Bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (#1437) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.4.0 to 1.5.0. - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](https://github.com/spf13/cobra/compare/v1.4.0...v1.5.0) --- updated-dependencies: - dependency-name: github.com/spf13/cobra dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.1.0 to 0.2.0 (#1436) Bumps [github.com/hashicorp/vault/api/auth/kubernetes](https://github.com/hashicorp/vault) from 0.1.0 to 0.2.0. - [Release notes](https://github.com/hashicorp/vault/releases) - [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/vault/compare/v0.1.0...v0.2.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/vault/api/auth/kubernetes dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/crossplane/crossplane-runtime from 0.16.0 to 0.17.0 (#1435) Bumps [github.com/crossplane/crossplane-runtime](https://github.com/crossplane/crossplane-runtime) from 0.16.0 to 0.17.0. - [Release notes](https://github.com/crossplane/crossplane-runtime/releases) - [Commits](https://github.com/crossplane/crossplane-runtime/compare/v0.16.0...v0.17.0) --- updated-dependencies: - dependency-name: github.com/crossplane/crossplane-runtime dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump golang from 1.18-alpine to 1.19.0-alpine (#1434) Bumps golang from 1.18-alpine to 1.19.0-alpine. --- updated-dependencies: - dependency-name: golang dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/AzureAD/microsoft-authentication-library-for-go (#1440) Bumps [github.com/AzureAD/microsoft-authentication-library-for-go](https://github.com/AzureAD/microsoft-authentication-library-for-go) from 0.5.2 to 0.5.3. - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-go/releases) - [Changelog](https://github.com/AzureAD/microsoft-authentication-library-for-go/blob/dev/RELEASES.md) - [Commits](https://github.com/AzureAD/microsoft-authentication-library-for-go/compare/v0.5.2...v0.5.3) --- updated-dependencies: - dependency-name: github.com/AzureAD/microsoft-authentication-library-for-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Fix provisionedNamespaces in Status field of ClusterExternalSecret keeps getting updated non-stop (#1441) Signed-off-by: Kewei Ma <kewei@indeed.com> * clean: typo (clister) in azurekv_types (#1442) Signed-off-by: Nandor Magyar <nandormagyar.it@gmail.com> Signed-off-by: Nandor Magyar <nandormagyar.it@gmail.com> * ⬆️github.com/akeylesslabs/akeyless-go/v2 from 2.16.8 to 2.17.0 (#1438) * Bump github.com/akeylesslabs/akeyless-go/v2 from 2.16.8 to 2.17.0 Bumps [github.com/akeylesslabs/akeyless-go/v2](https://github.com/akeylesslabs/akeyless-go) from 2.16.8 to 2.17.0. - [Release notes](https://github.com/akeylesslabs/akeyless-go/releases) - [Changelog](https://github.com/akeylesslabs/akeyless-go/blob/master/docs/KmipRenewServerCertificate.md) - [Commits](https://github.com/akeylesslabs/akeyless-go/compare/v2.16.8...v2.17.0) --- updated-dependencies: - dependency-name: github.com/akeylesslabs/akeyless-go/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * Fixing linting issues Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Gustavo Carvalho <gusfcarvalho@gmail.com> * 🧹 Removing Unknown License from allowed licenses (#1446) Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> * 📚Fix comment specifying the default engineVersion. (#1450) Signed-off-by: Tony Worthit <868644+TonyLovesDevOps@users.noreply.github.com> Signed-off-by: Tony Worthit <868644+TonyLovesDevOps@users.noreply.github.com> * fix: AWS attr. dot check off-by-one error (#1459) * Fix off-by-one in check for dot in JSON attr. name Signed-off-by: stephen-dexda <stephen@dexda.io> * :arrow_up: Bump github.com/prometheus/client_golang (#1457) Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.12.2 to 1.13.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](https://github.com/prometheus/client_golang/compare/v1.12.2...v1.13.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * :arrow_up: Bump github.com/googleapis/gax-go/v2 from 2.4.0 to 2.5.1 (#1456) Bumps [github.com/googleapis/gax-go/v2](https://github.com/googleapis/gax-go) from 2.4.0 to 2.5.1. - [Release notes](https://github.com/googleapis/gax-go/releases) - [Commits](https://github.com/googleapis/gax-go/compare/v2.4.0...v2.5.1) --- updated-dependencies: - dependency-name: github.com/googleapis/gax-go/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * :arrow_up: Bump github.com/aliyun/alibaba-cloud-sdk-go (#1455) Bumps [github.com/aliyun/alibaba-cloud-sdk-go](https://github.com/aliyun/alibaba-cloud-sdk-go) from 1.61.1673 to 1.61.1724. - [Release notes](https://github.com/aliyun/alibaba-cloud-sdk-go/releases) - [Changelog](https://github.com/aliyun/alibaba-cloud-sdk-go/blob/master/ChangeLog.txt) - [Commits](https://github.com/aliyun/alibaba-cloud-sdk-go/compare/v1.61.1673...v1.61.1724) --- updated-dependencies: - dependency-name: github.com/aliyun/alibaba-cloud-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * :arrow_up: Bump helm/chart-testing-action from 2.2.1 to 2.3.0 (#1453) Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.2.1 to 2.3.0. - [Release notes](https://github.com/helm/chart-testing-action/releases) - [Commits](https://github.com/helm/chart-testing-action/compare/v2.2.1...v2.3.0) --- updated-dependencies: - dependency-name: helm/chart-testing-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/Azure/go-autorest/autorest/adal (#1463) Bumps [github.com/Azure/go-autorest/autorest/adal](https://github.com/Azure/go-autorest) from 0.9.20 to 0.9.21. - [Release notes](https://github.com/Azure/go-autorest/releases) - [Changelog](https://github.com/Azure/go-autorest/blob/main/CHANGELOG.md) - [Commits](https://github.com/Azure/go-autorest/compare/autorest/adal/v0.9.20...autorest/adal/v0.9.21) --- updated-dependencies: - dependency-name: github.com/Azure/go-autorest/autorest/adal dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/tidwall/gjson from 1.14.1 to 1.14.2 (#1461) Bumps [github.com/tidwall/gjson](https://github.com/tidwall/gjson) from 1.14.1 to 1.14.2. - [Release notes](https://github.com/tidwall/gjson/releases) - [Commits](https://github.com/tidwall/gjson/compare/v1.14.1...v1.14.2) --- updated-dependencies: - dependency-name: github.com/tidwall/gjson dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump google.golang.org/api from 0.90.0 to 0.92.0 (#1462) Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.90.0 to 0.92.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.90.0...v0.92.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/xanzy/go-gitlab from 0.70.0 to 0.72.0 (#1465) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.70.0 to 0.72.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.70.0...v0.72.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: re-add akeyless url (#1468) Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: remove convertKeys from aws providers (#1470) ConvertKeys is called in the external secrets controller which takes care of mapping the keys. Calling it before returning the data is a bug as it interferes with the new rewrite feature. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * feat: add azkv.environmentType (#1469) users of USGovCloud, ChinaCloud, GermanCloud need slightly different configuration for AADEndpoint and keyvault resource. This is based on CSI Secret Store Azure KV driver, Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * :sparkles: Kubernetes v1.24 upgrade (#1345) * build(deps): bump sigs.k8s.io/controller-runtime from 0.11.2 to 0.12.3 Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.11.2 to 0.12.3. - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/master/RELEASE.md) - [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.11.2...v0.12.3) --- updated-dependencies: - dependency-name: sigs.k8s.io/controller-runtime dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * feat: bump kubernetes 1.24 Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: backwards-compatible vault implementation Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * feat: add audiences field to serviceAccountRef This will be used by aws, azure, gcp, kubernetes & vault providers in combination with TokenRequest API: it will _append_ audience claims to provider-specific audiences. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * feat: refactor kubernetes client to match provider/client interfaces the kubernetes provider mixed up provider and client interfaces which made it really hard to reason about. This commit separates into two structs, each implements one interface. The client struct fields have been renamed and annotated so their use and scope is clear. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: deprecate expirationSeconds expirationSeconds is not needed because we generate a service account token on the fly for a single use. There will be no replacement for this. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: rename token fetch audiences field Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: generate CRDs Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Moritz Johner <beller.moritz@googlemail.com> * chore(deps): bump go.uber.org/zap from 1.21.0 to 1.22.0 (#1484) Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.21.0 to 1.22.0. - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](https://github.com/uber-go/zap/compare/v1.21.0...v1.22.0) --- updated-dependencies: - dependency-name: go.uber.org/zap dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/IBM/go-sdk-core/v5 from 5.10.1 to 5.10.2 (#1482) Bumps [github.com/IBM/go-sdk-core/v5](https://github.com/IBM/go-sdk-core) from 5.10.1 to 5.10.2. - [Release notes](https://github.com/IBM/go-sdk-core/releases) - [Changelog](https://github.com/IBM/go-sdk-core/blob/main/CHANGELOG.md) - [Commits](https://github.com/IBM/go-sdk-core/compare/v5.10.1...v5.10.2) --- updated-dependencies: - dependency-name: github.com/IBM/go-sdk-core/v5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump sigstore/cosign-installer from 2.5.0 to 2.5.1 (#1480) Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.5.0 to 2.5.1. - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](https://github.com/sigstore/cosign-installer/compare/v2.5.0...v2.5.1) --- updated-dependencies: - dependency-name: sigstore/cosign-installer dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/IBM/secrets-manager-go-sdk (#1481) Bumps [github.com/IBM/secrets-manager-go-sdk](https://github.com/IBM/secrets-manager-go-sdk) from 1.0.44 to 1.0.45. - [Release notes](https://github.com/IBM/secrets-manager-go-sdk/releases) - [Commits](https://github.com/IBM/secrets-manager-go-sdk/compare/v1.0.44...v1.0.45) --- updated-dependencies: - dependency-name: github.com/IBM/secrets-manager-go-sdk dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump google.golang.org/api from 0.92.0 to 0.93.0 (#1483) Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.92.0 to 0.93.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.92.0...v0.93.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.0 (#1485) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.72.0 to 0.73.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.72.0...v0.73.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Update guides-datafrom-rewrite.md for typo (#1491) Signed-off-by: Garrett Edwards <grrttedwards@users.noreply.github.com> Signed-off-by: Garrett Edwards <grrttedwards@users.noreply.github.com> * chore(deps): bump github.com/onsi/gomega from 1.20.0 to 1.20.1 (#1499) Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.20.0 to 1.20.1. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/gomega/compare/v1.20.0...v1.20.1) --- updated-dependencies: - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump go.uber.org/zap from 1.22.0 to 1.23.0 (#1498) Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.22.0 to 1.23.0. - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](https://github.com/uber-go/zap/compare/v1.22.0...v1.23.0) --- updated-dependencies: - dependency-name: go.uber.org/zap dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.52 to 1.44.86 (#1496) Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.52 to 1.44.86. - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.52...v1.44.86) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/akeylesslabs/akeyless-go/v2 (#1495) Bumps [github.com/akeylesslabs/akeyless-go/v2](https://github.com/akeylesslabs/akeyless-go) from 2.17.0 to 2.18.0. - [Release notes](https://github.com/akeylesslabs/akeyless-go/releases) - [Changelog](https://github.com/akeylesslabs/akeyless-go/blob/master/docs/KmipRenewServerCertificate.md) - [Commits](https://github.com/akeylesslabs/akeyless-go/compare/v2.17.0...v2.18.0) --- updated-dependencies: - dependency-name: github.com/akeylesslabs/akeyless-go/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/xanzy/go-gitlab from 0.73.0 to 0.73.1 (#1497) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.73.0 to 0.73.1. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.73.0...v0.73.1) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Small typo fix guides-multi-tenancy.md (#1492) Signed-off-by: Christopher Watford <christopher.watford@gmail.com> Signed-off-by: Christopher Watford <christopher.watford@gmail.com> * Remove unnecessary space before a colon (#1494) Signed-off-by: dubs11kt <dubs11kt@gmail.com> Signed-off-by: dubs11kt <dubs11kt@gmail.com> * Update ADOPTERS.md (#1503) Adding Made People E-commerce agency as adopter Signed-off-by: terrpan <daniel.w.terry@gmail.com> Signed-off-by: terrpan <daniel.w.terry@gmail.com> * flip order of `err` and nil `secret` variable check in `listSecrets()` function of vault provider (#1504) Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de> * Add webhook tls options (#1466) During our internal security scan, the webhook for external-secrets was flagged because it supports protocol vulnerable to Sweet32 (https://sweet32.info/). In order to avoid the webhook from being flagged, we need to restrict the TLS ciphers on controller runtime. To do this I needed to update the dependency to 0.12.3 and some other conflicting dependencies. Signed-off-by: Joao Pedro Silva <jp.silva15@gmail.com> * Adding my published blog post (#1506) I've added my blog post about ESO and integration with AWS Secrets Manager to this page. Signed-off-by: Emin Alemdar <77338109+eminalemdar@users.noreply.github.com> Signed-off-by: Emin Alemdar <77338109+eminalemdar@users.noreply.github.com> * feat: add support matrix, refactor docs (#1508) Signed-off-by: Moritz Johner <Moritz.Johner@form3.tech> * Add warning due to DNS transfer (#1513) Updated Readme with warnings and workaround Signed-off-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com> Signed-off-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com> * chore(deps): bump github.com/onsi/gomega from 1.20.1 to 1.20.2 (#1522) Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.20.1 to 1.20.2. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/gomega/compare/v1.20.1...v1.20.2) --- updated-dependencies: - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/tidwall/gjson from 1.14.2 to 1.14.3 (#1523) Bumps [github.com/tidwall/gjson](https://github.com/tidwall/gjson) from 1.14.2 to 1.14.3. - [Release notes](https://github.com/tidwall/gjson/releases) - [Commits](https://github.com/tidwall/gjson/compare/v1.14.2...v1.14.3) --- updated-dependencies: - dependency-name: github.com/tidwall/gjson dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go (#1519) Bumps [github.com/aliyun/alibaba-cloud-sdk-go](https://github.com/aliyun/alibaba-cloud-sdk-go) from 1.61.1724 to 1.61.1760. - [Release notes](https://github.com/aliyun/alibaba-cloud-sdk-go/releases) - [Changelog](https://github.com/aliyun/alibaba-cloud-sdk-go/blob/master/ChangeLog.txt) - [Commits](https://github.com/aliyun/alibaba-cloud-sdk-go/compare/v1.61.1724...v1.61.1760) --- updated-dependencies: - dependency-name: github.com/aliyun/alibaba-cloud-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * feat: add stale bot to close issues automatically (#1524) Signed-off-by: Moritz Johner <100202497+moritzjohner-form3@users.noreply.github.com> Signed-off-by: Moritz Johner <100202497+moritzjohner-form3@users.noreply.github.com> * chore(deps): bump github.com/hashicorp/vault/api/auth/ldap (#1521) Bumps [github.com/hashicorp/vault/api/auth/ldap](https://github.com/hashicorp/vault) from 0.1.0 to 0.2.0. - [Release notes](https://github.com/hashicorp/vault/releases) - [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/vault/compare/v0.1.0...v0.2.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/vault/api/auth/ldap dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: aws parameter store json decode, bump go 1.19 (#1525) * fix: parameter store should decode complex json values Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * chore: bump 0.6.0-rc1 (#1538) Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * added akeyless k8s auth option (#1531) * added akeyless k8s auth option Signed-off-by: Docs <renana@akeyless.io> * chore: refactor provider (#1529) Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * DNS transfer to CNCF went ✅, we can remove notice (#1548) Signed-off-by: Lucas Severo Alves <lucassalves65@gmail.com> * New Duration Metric (#1533) Signed-off-by: Cristina DE DIOS GONZALEZ <cristina.dedios@amadeus.com> * chore(deps): bump github.com/google/go-cmp from 0.5.8 to 0.5.9 (#1545) Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.8 to 0.5.9. - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](https://github.com/google/go-cmp/compare/v0.5.8...v0.5.9) --- updated-dependencies: - dependency-name: github.com/google/go-cmp dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump sigstore/cosign-installer from 2.5.1 to 2.6.0 (#1541) Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.5.1 to 2.6.0. - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](https://github.com/sigstore/cosign-installer/compare/v2.5.1...v2.6.0) --- updated-dependencies: - dependency-name: sigstore/cosign-installer dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go (#1543) Bumps [github.com/aliyun/alibaba-cloud-sdk-go](https://github.com/aliyun/alibaba-cloud-sdk-go) from 1.61.1760 to 1.61.1768. - [Release notes](https://github.com/aliyun/alibaba-cloud-sdk-go/releases) - [Changelog](https://github.com/aliyun/alibaba-cloud-sdk-go/blob/master/ChangeLog.txt) - [Commits](https://github.com/aliyun/alibaba-cloud-sdk-go/compare/v1.61.1760...v1.61.1768) --- updated-dependencies: - dependency-name: github.com/aliyun/alibaba-cloud-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump actions/setup-python from 3.1.2 to 4.2.0 (#1542) Bumps [actions/setup-python](https://github.com/actions/setup-python) from 3.1.2 to 4.2.0. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v3.1.2...v4.2.0) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/IBM/secrets-manager-go-sdk (#1551) Bumps [github.com/IBM/secrets-manager-go-sdk](https://github.com/IBM/secrets-manager-go-sdk) from 1.0.45 to 1.0.46. - [Release notes](https://github.com/IBM/secrets-manager-go-sdk/releases) - [Commits](https://github.com/IBM/secrets-manager-go-sdk/compare/v1.0.45...v1.0.46) --- updated-dependencies: - dependency-name: github.com/IBM/secrets-manager-go-sdk dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump google.golang.org/api from 0.94.0 to 0.95.0 (#1546) Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.94.0 to 0.95.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.94.0...v0.95.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump golang from 1.19.0-alpine to 1.19.1-alpine (#1540) Bumps golang from 1.19.0-alpine to 1.19.1-alpine. --- updated-dependencies: - dependency-name: golang dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.91 to 1.44.96 (#1550) Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.91 to 1.44.96. - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.91...v1.44.96) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: unmarshal JSON error when empty secrets in Vault (#1512) Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com> * feat: run scanner on pr (#1553) Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: run trivy only when authenticated (#1554) PRs from forked repos can not publish images, hence this scan fails. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: broken links in README (#1556) Signed-off-by: robel yemane <ryhgb03@gmail.com> Signed-off-by: robel yemane <ryhgb03@gmail.com> * Updated the right path to the field (#1557) Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com> Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com> * chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go (#1562) Bumps [github.com/aliyun/alibaba-cloud-sdk-go](https://github.com/aliyun/alibaba-cloud-sdk-go) from 1.61.1768 to 1.61.1782. - [Release notes](https://github.com/aliyun/alibaba-cloud-sdk-go/releases) - [Changelog](https://github.com/aliyun/alibaba-cloud-sdk-go/blob/master/ChangeLog.txt) - [Commits](https://github.com/aliyun/alibaba-cloud-sdk-go/compare/v1.61.1768...v1.61.1782) --- updated-dependencies: - dependency-name: github.com/aliyun/alibaba-cloud-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/akeylesslabs/akeyless-go/v2 (#1560) Bumps [github.com/akeylesslabs/akeyless-go/v2](https://github.com/akeylesslabs/akeyless-go) from 2.18.0 to 2.19.0. - [Release notes](https://github.com/akeylesslabs/akeyless-go/releases) - [Changelog](https://github.com/akeylesslabs/akeyless-go/blob/master/docs/KmipRenewServerCertificate.md) - [Commits](https://github.com/akeylesslabs/akeyless-go/compare/v2.18.0...v2.19.0) --- updated-dependencies: - dependency-name: github.com/akeylesslabs/akeyless-go/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/AzureAD/microsoft-authentication-library-for-go (#1563) Bumps [github.com/AzureAD/microsoft-authentication-library-for-go](https://github.com/AzureAD/microsoft-authentication-library-for-go) from 0.6.1 to 0.7.0. - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-go/releases) - [Changelog](https://github.com/AzureAD/microsoft-authentication-library-for-go/blob/dev/RELEASES.md) - [Commits](https://github.com/AzureAD/microsoft-authentication-library-for-go/compare/v0.6.1...v0.7.0) --- updated-dependencies: - dependency-name: github.com/AzureAD/microsoft-authentication-library-for-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump google.golang.org/api from 0.95.0 to 0.96.0 (#1561) Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.95.0 to 0.96.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.95.0...v0.96.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.96 to 1.44.101 (#1570) Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.96 to 1.44.101. - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.96...v1.44.101) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> Signed-off-by: Helena Steck <steckhelena@gmail.com> Signed-off-by: Kewei Ma <kewei@indeed.com> Signed-off-by: Nandor Magyar <nandormagyar.it@gmail.com> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Tony Worthit <868644+TonyLovesDevOps@users.noreply.github.com> Signed-off-by: stephen-dexda <stephen@dexda.io> Signed-off-by: Garrett Edwards <grrttedwards@users.noreply.github.com> Signed-off-by: Christopher Watford <christopher.watford@gmail.com> Signed-off-by: dubs11kt <dubs11kt@gmail.com> Signed-off-by: terrpan <daniel.w.terry@gmail.com> Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de> Signed-off-by: Joao Pedro Silva <jp.silva15@gmail.com> Signed-off-by: Emin Alemdar <77338109+eminalemdar@users.noreply.github.com> Signed-off-by: Moritz Johner <Moritz.Johner@form3.tech> Signed-off-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com> Signed-off-by: Moritz Johner <100202497+moritzjohner-form3@users.noreply.github.com> Signed-off-by: Docs <renana@akeyless.io> Signed-off-by: Lucas Severo Alves <lucassalves65@gmail.com> Signed-off-by: Cristina DE DIOS GONZALEZ <cristina.dedios@amadeus.com> Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com> Signed-off-by: robel yemane <ryhgb03@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Moritz Johner <beller.moritz@googlemail.com> Co-authored-by: Daniel Quackenbush <25692880+danquack@users.noreply.github.com> Co-authored-by: Moritz Johner <moolen@users.noreply.github.com> Co-authored-by: Gustavo Fernandes de Carvalho <gustavo.carvalho@container-solutions.com> Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com> Co-authored-by: Helena Steck <steckhelena@gmail.com> Co-authored-by: Kewei Ma <kewei@indeed.com> Co-authored-by: Nandor Magyar <nandor@rocketfuel.pw> Co-authored-by: Tony DevOps <868644+TonyLovesDevOps@users.noreply.github.com> Co-authored-by: stephen-dexda <46443882+stephen-dexda@users.noreply.github.com> Co-authored-by: Garrett Edwards <grrttedwards@users.noreply.github.com> Co-authored-by: Christopher Watford <christopher.watford@gmail.com> Co-authored-by: oddy <56793934+dubs11kt@users.noreply.github.com> Co-authored-by: terrpan <daniel.w.terry@gmail.com> Co-authored-by: Marcel Hoyer <mhoyer@pixelplastic.de> Co-authored-by: João Silva <jp.silva15@gmail.com> Co-authored-by: Emin Alemdar <77338109+eminalemdar@users.noreply.github.com> Co-authored-by: Moritz Johner <100202497+moritzjohner-form3@users.noreply.github.com> Co-authored-by: renanaAkeyless <renana@akeyless.io> Co-authored-by: Lucas Severo Alves <lucassalves65@gmail.com> Co-authored-by: Rhaenys <101413492+dreadful-dragon@users.noreply.github.com> Co-authored-by: Sebastián Gómez <1637983+sebagomez@users.noreply.github.com> Co-authored-by: Robel Yemane <ryhgb03@gmail.com> * Initial Commit initial commit. Added secretstore_chef_types.go file Author: Sourav Patnaik <souravpatnaik123@gmail.com> Date: Tue Sep 20 18:58:32 2022 +0530 * implemented NewClient - implemented NewClient() in pkg/provider/chef/chef.go file - implemented chef types under vibeta1 package A description that is wrapped about 72 chars so shows up decently in `git log`. * resolve merge conflict in files * removed lint errors * Chef ESO Dev ValidateStore() implementation. (#2) * Implemented ValidateStore - implemented ValidateStore() in pkg/provider/chef/chef.go file - ValidateStore() is a function which checks if the provided secret store is valid. Signed-off-by: Subroto Roy <subroto.roy@ibm.com> Signed-off-by: Subroto Roy <subrotoroy007@gmail.com> * Checks if Provider is nil * Implemented lint suggestions. * Added header for check in pkg/provider/chef/chef.go * Removed chef types from v1alpha1 * added test case added TestValidateStore in provider/chef/chef_test.go file Signed-off-by: Subroto Roy <subroto.roy@ibm.com> Signed-off-by: Subroto Roy <subrotoroy007@gmail.com> Co-authored-by: Subroto Roy <subroto.roy@ibm.com> Co-authored-by: Sourav Patnaik <souravpatnaik123@gmail.com> * Added commonValidation function (#5) * Added commonValidation method * Modified commonValidation to include other validations form validate store and renamed it to getChefProvider * replace github.com/go-chef/chef v0.28.0 => github.com/chef/go-chef v0.4.5 * resolved merge conflict * Added more test cases. * Param types combined as per linter suggestion. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: Gustavo Carvalho <gusfcarvalho@gmail.com> Signed-off-by: Helena Steck <steckhelena@gmail.com> Signed-off-by: Kewei Ma <kewei@indeed.com> Signed-off-by: Nandor Magyar <nandormagyar.it@gmail.com> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Tony Worthit <868644+TonyLovesDevOps@users.noreply.github.com> Signed-off-by: stephen-dexda <stephen@dexda.io> Signed-off-by: Garrett Edwards <grrttedwards@users.noreply.github.com> Signed-off-by: Christopher Watford <christopher.watford@gmail.com> Signed-off-by: dubs11kt <dubs11kt@gmail.com> Signed-off-by: terrpan <daniel.w.terry@gmail.com> Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de> Signed-off-by: Joao Pedro Silva <jp.silva15@gmail.com> Signed-off-by: Emin Alemdar <77338109+eminalemdar@users.noreply.github.com> Signed-off-by: Moritz Johner <Moritz.Johner@form3.tech> Signed-off-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com> Signed-off-by: Moritz Johner <100202497+moritzjohner-form3@users.noreply.github.com> Signed-off-by: Docs <renana@akeyless.io> Signed-off-by: Lucas Severo Alves <lucassalves65@gmail.com> Signed-off-by: Cristina DE DIOS GONZALEZ <cristina.dedios@amadeus.com> Signed-off-by: Sebastián Gómez <sebastiangomezcorrea@gmail.com> Signed-off-by: robel yemane <ryhgb03@gmail.com> Signed-off-by: Subroto Roy <subroto.roy@ibm.com> Signed-off-by: Subroto Roy <subrotoroy007@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Moritz Johner <beller.moritz@googlemail.com> Co-authored-by: Daniel Quackenbush <25692880+danquack@users.noreply.github.com> Co-authored-by: Moritz Johner <moolen@users.noreply.github.com> Co-authored-by: Gustavo Fernandes de Carvalho <gustavo.carvalho@container-solutions.com> Co-authored-by: Gustavo Fernandes de Carvalho <gusfcarvalho@gmail.com> Co-authored-by: Helena Steck <steckhelena@gmail.com> Co-authored-by: Kewei Ma <kewei@indeed.com> Co-authored-by: Nandor Magyar <nandor@rocketfuel.pw> Co-authored-by: Tony DevOps <868644+TonyLovesDevOps@users.noreply.github.com> Co-authored-by: stephen-dexda <46443882+stephen-dexda@users.noreply.github.com> Co-authored-by: Garrett Edwards <grrttedwards@users.noreply.github.com> Co-authored-by: Christopher Watford <christopher.watford@gmail.com> Co-authored-by: oddy <56793934+dubs11kt@users.noreply.github.com> Co-authored-by: terrpan <daniel.w.terry@gmail.com> Co-authored-by: Marcel Hoyer <mhoyer@pixelplastic.de> Co-authored-by: João Silva <jp.silva15@gmail.com> Co-authored-by: Emin Alemdar <77338109+eminalemdar@users.noreply.github.com> Co-authored-by: Moritz Johner <100202497+moritzjohner-form3@users.noreply.github.com> Co-authored-by: renanaAkeyless <renana@akeyless.io> Co-authored-by: Lucas Severo Alves <lucassalves65@gmail.com> Co-authored-by: Rhaenys <101413492+dreadful-dragon@users.noreply.github.com> Co-authored-by: Sebastián Gómez <1637983+sebagomez@users.noreply.github.com> Co-authored-by: Robel Yemane <ryhgb03@gmail.com> Co-authored-by: Sourav Patnaik <Sourav.Patnaik@ibm.com> Co-authored-by: Subroto Roy <42340771+SubrotoRoy@users.noreply.github.com> Co-authored-by: Subroto Roy <subroto.roy@ibm.com> Co-authored-by: Subroto Roy <subrotoroy007@gmail.com>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 11, 2022

dependabot bot mentioned this pull request Jul 11, 2022

build(deps): bump sigs.k8s.io/controller-runtime from 0.11.2 to 0.12.2 #1299

Closed

paul-the-alien bot reviewed Jul 11, 2022

View reviewed changes

dependabot bot force-pushed the dependabot/go_modules/sigs.k8s.io/controller-runtime-0.12.3 branch from 8c93f2e to f75967a Compare July 28, 2022 20:42

moolen self-assigned this Jul 30, 2022

moolen force-pushed the dependabot/go_modules/sigs.k8s.io/controller-runtime-0.12.3 branch 3 times, most recently from 0ac672b to 77709b8 Compare August 1, 2022 21:15

moolen changed the title ~~build(deps): bump sigs.k8s.io/controller-runtime from 0.11.2 to 0.12.3~~ ✨ Kubernetes v1.24 upgrade Aug 3, 2022

moolen force-pushed the dependabot/go_modules/sigs.k8s.io/controller-runtime-0.12.3 branch from ddaf035 to 20ab083 Compare August 3, 2022 21:02

moolen reviewed Aug 3, 2022

View reviewed changes

moolen force-pushed the dependabot/go_modules/sigs.k8s.io/controller-runtime-0.12.3 branch 2 times, most recently from 30d9c6c to e08ce12 Compare August 9, 2022 21:00

moolen reviewed Aug 9, 2022

View reviewed changes

moolen mentioned this pull request Aug 16, 2022

Add webhook tls options #1466

Merged

paul-the-alien bot approved these changes Aug 18, 2022

View reviewed changes

dependabot bot and others added 8 commits August 19, 2022 17:03

feat: bump kubernetes 1.24

82684d3

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

fix: backwards-compatible vault implementation

5f35a45

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

feat: add audiences field to serviceAccountRef

349f495

This will be used by aws, azure, gcp, kubernetes & vault providers in combination with TokenRequest API: it will _append_ audience claims to provider-specific audiences. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

fix: deprecate expirationSeconds

da1679f

expirationSeconds is not needed because we generate a service account token on the fly for a single use. There will be no replacement for this. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

fix: rename token fetch audiences field

e6c5691

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

fix: generate CRDs

f76eba9

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

moolen force-pushed the dependabot/go_modules/sigs.k8s.io/controller-runtime-0.12.3 branch from e5ed381 to f76eba9 Compare August 19, 2022 15:07

moolen merged commit 67fedc8 into main Aug 19, 2022

paul-the-alien bot deleted the dependabot/go_modules/sigs.k8s.io/controller-runtime-0.12.3 branch August 19, 2022 15:32

Uh oh!

Conversation

dependabot bot commented on behalf of github Jul 11, 2022 • edited by moolen Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Impact for Vault Users

Impact for Kubernetes Users

v0.12.3

What's Changed

v0.12.2

✨ New Features

🐛 Bug Fixes

v0.12.1

🐛 Bug Fixes

v0.12.0

⚠️ Breaking Changes

✨ New Features

Uh oh!

paul-the-alien bot left a comment

Choose a reason for hiding this comment

Uh oh!

ghost commented Jul 11, 2022 • edited by ghost Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Legend

Uh oh!

moolen commented Jul 30, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

moolen Aug 3, 2022

Choose a reason for hiding this comment

Uh oh!

moolen Aug 3, 2022

Choose a reason for hiding this comment

Uh oh!

moolen Aug 3, 2022

Choose a reason for hiding this comment

Uh oh!

moolen Aug 9, 2022

Choose a reason for hiding this comment

Uh oh!

moolen Aug 9, 2022

Choose a reason for hiding this comment

Uh oh!

moolen commented Aug 9, 2022

Uh oh!

moolen commented Aug 9, 2022

Uh oh!

github-actions bot commented Aug 9, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

moolen commented Aug 10, 2022

Uh oh!

moolen commented Aug 10, 2022

Uh oh!

gusfcarvalho commented Aug 17, 2022

Uh oh!

gusfcarvalho commented Aug 18, 2022

Uh oh!

gusfcarvalho commented Aug 18, 2022

Uh oh!

sonarqubecloud bot commented Aug 19, 2022

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Jul 11, 2022 •

edited by moolen

Loading

ghost commented Jul 11, 2022 •

edited by ghost

Loading

moolen commented Jul 30, 2022 •

edited

Loading

github-actions bot commented Aug 9, 2022 •

edited

Loading