Skip to content

feat(provider): add Barbican provider support#5398

Merged
Skarlso merged 23 commits intoexternal-secrets:mainfrom
rkferreira:feature/openstack-barbican-provider
Dec 7, 2025
Merged

feat(provider): add Barbican provider support#5398
Skarlso merged 23 commits intoexternal-secrets:mainfrom
rkferreira:feature/openstack-barbican-provider

Conversation

@rkferreira
Copy link
Copy Markdown
Contributor

Problem Statement

Create Openstack Barbican provider to use with k8s in Openstack.

Related Issue

No issue.

Proposed Changes

Create read only Barbican provider

Format

Ok.

Checklist

  • I have read the contribution guidelines
  • All commits are signed with git commit --signoff
  • My changes have reasonable test coverage
  • All tests pass with make test
  • I ensured my PR is ready for review with make reviewable

@github-actions github-actions bot added size/l kind/documentation Categorizes issue or PR as related to documentation. kind/dependency dependabot and upgrades area/provider kind/feature Categorizes issue or PR as related to a new feature. and removed size/l labels Oct 1, 2025
@rkferreira rkferreira force-pushed the feature/openstack-barbican-provider branch from 9c3a9a2 to b515b62 Compare October 3, 2025 11:57
@github-actions github-actions bot added the size/l label Oct 3, 2025
@rkferreira
Copy link
Copy Markdown
Contributor Author

fixed license, it was in a different comment format.

make check-diff is no longer running properly on mac arm, I should take some time to see that...

docker run --rm -u 503 -v /xxx/external-secrets:/github/workspace apache/skywalking-eyes:0.6.0 header check
exec /bin/license-eye: exec format error
make: *** [license.check] Error 255

@Skarlso
Copy link
Copy Markdown
Contributor

Skarlso commented Oct 3, 2025

That's interesting. I'm running mac arm and it's fine. 🤔

@Skarlso
Copy link
Copy Markdown
Contributor

Skarlso commented Oct 3, 2025

❯ go version
go version go1.25.1 darwin/arm64

@rkferreira
Copy link
Copy Markdown
Contributor Author

rkferreira commented Oct 3, 2025

I also find interesting... LoL

$ docker images
REPOSITORY                                                                                                              TAG                                                                  IMAGE ID        CREATED          PLATFORM       SIZE       BLOB SIZE
apache/skywalking-eyes                                                                                                  0.6.0                                                                319454b15d74    40 hours ago     linux/arm64    1.005GB    357.7MB

$ kind version
kind v0.27.0 go1.24.0 darwin/arm64

$ go version
go version go1.25.1 darwin/arm64

@Skarlso
Copy link
Copy Markdown
Contributor

Skarlso commented Oct 3, 2025

go: downloading github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.1
14:02:00 [ .. ] checking that branch is clean
14:02:00 [ OK ] branch is clean

It run successfully. 🤔

@rkferreira
Copy link
Copy Markdown
Contributor Author

I found the issue, it was with lima vm.

lima sudo systemctl start containerd
lima sudo nerdctl run --privileged --rm tonistiigi/binfmt:qemu-v7.0.0-28@sha256:66e11bea77a5ea9d6f0fe79b57cd2b189b5d15b93a2bdb925be22949232e4e55 --install all

Fast mode: Intel containers on ARM VM on ARM Host / ARM containers on Intel VM on Intel Host

worked like a charm...

docker run --rm -u 503 -v /xxx/external-secrets:/github/workspace apache/skywalking-eyes:0.6.0 header check
INFO Loading configuration from file: .licenserc.yaml
INFO Totally checked 1320 files, valid: 594, invalid: 0, ignored: 726, fixed: 0
09:57:21 [ .. ] checking that branch is clean
09:57:21 [ OK ] branch is clean

@rkferreira rkferreira force-pushed the feature/openstack-barbican-provider branch from b515b62 to 2ca4e88 Compare October 3, 2025 14:17
@Skarlso Skarlso moved this to In Review in External Secrets Oct 10, 2025
@Skarlso Skarlso self-assigned this Oct 10, 2025
Copy link
Copy Markdown
Contributor

@Skarlso Skarlso left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There are a bunch of other problems, but I'll take a look at those once the obvious ones are gone. :)

@rkferreira rkferreira force-pushed the feature/openstack-barbican-provider branch from cba5bbd to f944f8f Compare October 17, 2025 17:27
@rkferreira
Copy link
Copy Markdown
Contributor Author

do you have new checks ? locally check-diff and fmt are all ok.

maybe my branch is no up to date

@rkferreira
Copy link
Copy Markdown
Contributor Author

do you have new checks ? locally check-diff and fmt are all ok.

maybe my branch is no up to date

it seems it changed to "esutils"...

@rkferreira rkferreira force-pushed the feature/openstack-barbican-provider branch from 239032f to 8652d27 Compare October 22, 2025 12:33
@Skarlso
Copy link
Copy Markdown
Contributor

Skarlso commented Oct 22, 2025

Oh so it's okay now, right?

@Skarlso
Copy link
Copy Markdown
Contributor

Skarlso commented Nov 4, 2025

I will review this again hopefully today. :)

@Skarlso
Copy link
Copy Markdown
Contributor

Skarlso commented Nov 4, 2025

The move was that we put providers under providers/v1/* now, so we need to put Barbican in there. :)

Copy link
Copy Markdown
Contributor

@Skarlso Skarlso left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Two remarks then we are good. :)

Signed-off-by: Rodrigo Kellermann <kellermann@gmail.com>
@Skarlso
Copy link
Copy Markdown
Contributor

Skarlso commented Dec 4, 2025

Could you please take care of the unused parameter errors? :)

Signed-off-by: Rodrigo Kellermann <kellermann@gmail.com>
@rkferreira
Copy link
Copy Markdown
Contributor Author

Could you please take care of the unused parameter errors? :)

I changed then to not used _

Still complaining about "GetPayload" mock, but then its the expected interface name

gusfcarvalho
gusfcarvalho previously approved these changes Dec 5, 2025
Copy link
Copy Markdown
Member

@gusfcarvalho gusfcarvalho left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks for these changes 😄 it looks much cleaner as a front-end for users

@rkferreira
Copy link
Copy Markdown
Contributor Author

tests erros seems not my fault...

FAIL github.com/external-secrets/external-secrets/pkg/controllers/clusterpushsecret  0.370s

panic: store "secretserver" already registered

@Skarlso
Copy link
Copy Markdown
Contributor

Skarlso commented Dec 5, 2025

I'm not a 100% sure it's not the pr's fault. :D

@Skarlso
Copy link
Copy Markdown
Contributor

Skarlso commented Dec 5, 2025

Yeah, on this pr it fails locally as well. Main it does not fail. So definitely this PR.

@rkferreira
Copy link
Copy Markdown
Contributor Author

Yeah, on this pr it fails locally as well. Main it does not fail. So definitely this PR.

locally it was clean... I will get latest updates, as main was merged.

make test
(...)
PASS
coverage: 100.0% of statements
ok  	github.com/external-secrets/external-secrets/runtime/util/locks	(cached)	coverage: 100.0% of statements
10:11:29 [ OK ] go test unit-tests

@rkferreira
Copy link
Copy Markdown
Contributor Author

yeah... with latest it breaks... but break at points I didn't touch :)

// ProviderSpec returns a sample Barbican provider spec.
func ProviderSpec() *esv1.SecretStoreProvider {
return &esv1.SecretStoreProvider{
SecretServer: &esv1.SecretServerProvider{},
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is incorrect. It's a wonder how this worked. 🤔

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

// ProviderSpec returns a sample Barbican provider spec.
func ProviderSpec() *esv1.SecretStoreProvider {
	return &esv1.SecretStoreProvider{
		Barbican: &esv1.BarbicanProvider{},
	}
}

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it was the refactor...

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah :)

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I will test properly...

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, no worries. It's okay once this is fixed and the chart upgrade PR is in, this can be merged. :)

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We are waiting for this one #5687 first

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

make test is clean now.

I will setup my env to test it with OS, but later today.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have to update doc snippets with new Auth map

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

$ go build -tags all_providers -o external-secrets main.go
$ go run -tags all_providers main.go

$ kubectl get SecretStore -A
NAMESPACE   NAME       AGE   STATUS   CAPABILITIES   READY
default     barbican   13m   Valid    ReadOnly       True


$ kubectl get ExternalSecret
NAME                                   STORETYPE     STORE      REFRESH INTERVAL   STATUS         READY
barbican-external-secret               SecretStore   barbican   1h0m0s             SecretSynced   True
barbican-external-secret-02            SecretStore   barbican   1h0m0s             SecretSynced   True
barbican-external-secret-03            SecretStore   barbican   1h0m0s             SecretSynced   True
barbican-external-secret-03-1          SecretStore   barbican   1h0m0s             SecretSynced   True
barbican-external-secret-03-2          SecretStore   barbican   1h0m0s             SecretSynced   True
barbican-external-secret-03-3          SecretStore   barbican   1h0m0s             SecretSynced   True
barbican-external-secret-03-4          SecretStore   barbican   1h0m0s             SecretSynced   True
barbican-external-secret-certificate   SecretStore   barbican   1h0m0s             SecretSynced   True
barbican-external-secret-from          SecretStore   barbican   1h0m0s             SecretSynced   True
barbican-external-secret-passphrase    SecretStore   barbican   1h0m0s             SecretSynced   True
barbican-external-secret-pub-ssh-key   SecretStore   barbican   1h0m0s             SecretSynced   True


$ kubectl get secrets
NAME                              TYPE     DATA   AGE
barbican-result-certificate       Opaque   1      20s
barbican-result-pub-ssh-key       Opaque   1      20s
barbican-result-secret-02         Opaque   1      23s
barbican-result-secret-03         Opaque   1      23s
barbican-result-secret-03-1       Opaque   1      22s
barbican-result-secret-03-2       Opaque   2      22s
barbican-result-secret-03-3       Opaque   1      21s
barbican-result-secret-03-4       Opaque   2      21s
barbican-result-secret-test       Opaque   2      19s
barbican-result-test-from         Opaque   4      19s
barbican-result-test-passphrase   Opaque   3      20s


$ kubectl get secrets barbican-result-secret-03 -o yaml
apiVersion: v1
data:
  test03: xxx
kind: Secret
  name: barbican-result-secret-03
  namespace: default
  ownerReferences:
  - apiVersion: external-secrets.io/v1
    blockOwnerDeletion: true
    controller: true
    kind: ExternalSecret
    name: barbican-external-secret-03
    uid: cf2f9d38-496e-4ce7-9bfb-d38f61fc0cc7
  resourceVersion: "2752509"
  uid: 5b223c1b-0a09-442b-bf0d-f076cd62f1e2
type: Opaque

Signed-off-by: Rodrigo Kellermann <kellermann@gmail.com>
Signed-off-by: Rodrigo Kellermann <kellermann@gmail.com>
@rkferreira
Copy link
Copy Markdown
Contributor Author

$ make check-diff
(...)
Tests total: 19, failed: 0, passed: 19
15:55:08 [ OK ] Successfully updated all test snapshots
15:55:11 [ .. ] checking that branch is clean
15:55:11 [ OK ] branch is clean


$ make test
(...)
PASS
coverage: 100.0% of statements
ok  	github.com/external-secrets/external-secrets/runtime/util/locks	(cached)	coverage: 100.0% of statements
15:58:47 [ OK ] go test unit-tests

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Dec 7, 2025

Copy link
Copy Markdown
Contributor

@Skarlso Skarlso left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you very much for this work and thanks for sticking with it!

@Skarlso Skarlso merged commit 14d59bd into external-secrets:main Dec 7, 2025
31 checks passed
@github-project-automation github-project-automation bot moved this from In Review to Done in External Secrets Dec 7, 2025
tokiwong pushed a commit to tokiwong/external-secrets that referenced this pull request Dec 9, 2025
Co-authored-by: Gergely Brautigam <skarlso777@gmail.com>
Co-authored-by: Gustavo Fernandes de Carvalho <17139678+gusfcarvalho@users.noreply.github.com>
Signed-off-by: Alvin Wong <alvin.wong@forgerock.com>
alexlebens pushed a commit to alexlebens/infrastructure that referenced this pull request Dec 20, 2025
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `1.1.1` -> `1.2.0` |

---

### Release Notes

<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>

### [`v1.2.0`](https://github.com/external-secrets/external-secrets/releases/tag/v1.2.0)

[Compare Source](external-secrets/external-secrets@v1.1.1...v1.2.0)

Image: `ghcr.io/external-secrets/external-secrets:v1.2.0`
Image: `ghcr.io/external-secrets/external-secrets:v1.2.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v1.2.0-ubi-boringssl`

<!-- Release notes generated using configuration in .github/release.yml at main -->

#### What's Changed

##### General

- chore: bump 1.1.1 by [@&#8203;gusfcarvalho](https://github.com/gusfcarvalho) in [#&#8203;5687](external-secrets/external-secrets#5687)
- chore: fix the argocd e2e test case by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;5688](external-secrets/external-secrets#5688)
- feat(provider): add Barbican provider support by [@&#8203;rkferreira](https://github.com/rkferreira) in [#&#8203;5398](external-secrets/external-secrets#5398)
- docs(secretserver): promote secretserver provider to beta by [@&#8203;DelineaSahilWankhede](https://github.com/DelineaSahilWankhede) in [#&#8203;5668](external-secrets/external-secrets#5668)
- feat(controller): add flag to enable/disable secretstore reconcile by [@&#8203;Ilhan-Personal](https://github.com/Ilhan-Personal) in [#&#8203;5653](external-secrets/external-secrets#5653)
- fix(aws-secrets-manager): Apply filtering based on both name and tags if provided by [@&#8203;iypetrov](https://github.com/iypetrov) in [#&#8203;5685](external-secrets/external-secrets#5685)
- fix(gcpsm): SecretExists should check for regional secrets when store location is specified by [@&#8203;tokiwong](https://github.com/tokiwong) in [#&#8203;5708](external-secrets/external-secrets#5708)
- feat: introduce store deprecation by [@&#8203;gusfcarvalho](https://github.com/gusfcarvalho) in [#&#8203;5711](external-secrets/external-secrets#5711)
- feat(charts): add global values for common deployment configurations by [@&#8203;Gabryel8818](https://github.com/Gabryel8818) in [#&#8203;5652](external-secrets/external-secrets#5652)
- feat: add Doppler OIDC-based authentication by [@&#8203;mikesellitto](https://github.com/mikesellitto) in [#&#8203;5475](external-secrets/external-secrets#5475)
- fix: make custom configuration available regardless of environment by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;5713](external-secrets/external-secrets#5713)
- chore(chart): update bitwarden dependency to v0.5.2 by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;5719](external-secrets/external-secrets#5719)
- docs(templating): update rbac for generic targets by [@&#8203;lostick](https://github.com/lostick) in [#&#8203;5736](external-secrets/external-secrets#5736)
- fix(testing): Breaking changes should not break ci by [@&#8203;evrardjp](https://github.com/evrardjp) in [#&#8203;5739](external-secrets/external-secrets#5739)
- fix(security): Get rid of getSecretKey by [@&#8203;evrardjp](https://github.com/evrardjp) in [#&#8203;5738](external-secrets/external-secrets#5738)
- fix(aws): parse resource policies into canonical JSON (sorted) before comparing by [@&#8203;cmoscofian](https://github.com/cmoscofian) in [#&#8203;5622](external-secrets/external-secrets#5622)
- docs: Fix example in GCP documentation by [@&#8203;headcr4sh](https://github.com/headcr4sh) in [#&#8203;5745](external-secrets/external-secrets#5745)
- chore(secretserver): update dependencies to accept new DelineaXPM/tss-sdk-go by [@&#8203;DelineaSahilWankhede](https://github.com/DelineaSahilWankhede) in [#&#8203;5742](external-secrets/external-secrets#5742)
- fix(gcpsm): Improve SecretExists method in GCP secret manager provider by [@&#8203;tosih](https://github.com/tosih) in [#&#8203;5610](external-secrets/external-secrets#5610)
- chore(docs): add clarification to helm values being disabled by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;5746](external-secrets/external-secrets#5746)
- fix(release): apply [`64dc681`](external-secrets/external-secrets@64dc681) to release by [@&#8203;jakobmoellerdev](https://github.com/jakobmoellerdev) in [#&#8203;5749](external-secrets/external-secrets#5749)
- docs(release): 1.2 stability-support.md by [@&#8203;jakobmoellerdev](https://github.com/jakobmoellerdev) in [#&#8203;5750](external-secrets/external-secrets#5750)

##### Dependencies

- chore(deps): bump golang from 1.25.4 to 1.25.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5693](external-secrets/external-secrets#5693)
- chore(deps): bump golang from 1.25.4-bookworm to 1.25.5-bookworm in /e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5702](external-secrets/external-secrets#5702)
- chore(deps): bump ubi9/ubi from `dcd8128` to `75937d9` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5655](external-secrets/external-secrets#5655)
- chore(deps): bump peter-evans/slash-command-dispatch from 5.0.0 to 5.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5695](external-secrets/external-secrets#5695)
- chore(deps): bump github/codeql-action from 4.31.5 to 4.31.7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5696](external-secrets/external-secrets#5696)
- chore(deps): bump actions/stale from 10.1.0 to 10.1.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5697](external-secrets/external-secrets#5697)
- chore(deps): bump actions/create-github-app-token from 2.2.0 to 2.2.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5700](external-secrets/external-secrets#5700)
- chore(deps): bump step-security/harden-runner from 2.13.2 to 2.13.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5698](external-secrets/external-secrets#5698)
- chore(deps): bump actions/checkout from 6.0.0 to 6.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5699](external-secrets/external-secrets#5699)
- chore(deps): bump platformdirs from 4.5.0 to 4.5.1 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5705](external-secrets/external-secrets#5705)
- chore(deps): bump distroless/static from `87bce11` to `4b2a093` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5692](external-secrets/external-secrets#5692)
- chore(deps): bump alpine from 3.22 to 3.23 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5703](external-secrets/external-secrets#5703)
- chore(deps): bump urllib3 from 2.5.0 to 2.6.0 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5704](external-secrets/external-secrets#5704)
- chore(deps): bump pymdown-extensions from 10.17.2 to 10.18 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5706](external-secrets/external-secrets#5706)
- chore(deps): bump alpine from 3.22.2 to 3.23.0 in /e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5701](external-secrets/external-secrets#5701)
- chore(deps): bump golang from `2611181` to `2611181` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5721](external-secrets/external-secrets#5721)
- chore(deps): bump codecov/codecov-action from 5.5.1 to 5.5.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5725](external-secrets/external-secrets#5725)
- chore(deps): bump urllib3 from 2.6.0 to 2.6.2 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5730](external-secrets/external-secrets#5730)
- chore(deps): bump github/codeql-action from 4.31.7 to 4.31.8 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5726](external-secrets/external-secrets#5726)
- chore(deps): bump anchore/sbom-action from 0.20.10 to 0.20.11 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5724](external-secrets/external-secrets#5724)
- chore(deps): bump tornado from 6.5.2 to 6.5.3 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5732](external-secrets/external-secrets#5732)
- chore(deps): bump ubi9/ubi from `75937d9` to `d4feb57` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5722](external-secrets/external-secrets#5722)
- chore(deps): bump golang from `5117d68` to `09f53de` in /e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5729](external-secrets/external-secrets#5729)
- chore(deps): bump alpine from `4b7ce07` to `51183f2` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5694](external-secrets/external-secrets#5694)
- chore(deps): bump hashicorp/setup-terraform from [`712b439`](external-secrets/external-secrets@712b439) to [`071811a`](external-secrets/external-secrets@071811a) by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5727](external-secrets/external-secrets#5727)
- chore(deps): bump pymdown-extensions from 10.18 to 10.19.1 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5731](external-secrets/external-secrets#5731)
- chore(deps): bump step-security/harden-runner from 2.13.3 to 2.14.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5728](external-secrets/external-secrets#5728)
- chore(deps): bump actions/cache from 4.3.0 to 5.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5723](external-secrets/external-secrets#5723)

#### New Contributors

- [@&#8203;iypetrov](https://github.com/iypetrov) made their first contribution in [#&#8203;5685](external-secrets/external-secrets#5685)
- [@&#8203;tokiwong](https://github.com/tokiwong) made their first contribution in [#&#8203;5708](external-secrets/external-secrets#5708)
- [@&#8203;Gabryel8818](https://github.com/Gabryel8818) made their first contribution in [#&#8203;5652](external-secrets/external-secrets#5652)
- [@&#8203;mikesellitto](https://github.com/mikesellitto) made their first contribution in [#&#8203;5475](external-secrets/external-secrets#5475)
- [@&#8203;lostick](https://github.com/lostick) made their first contribution in [#&#8203;5736](external-secrets/external-secrets#5736)
- [@&#8203;cmoscofian](https://github.com/cmoscofian) made their first contribution in [#&#8203;5622](external-secrets/external-secrets#5622)
- [@&#8203;headcr4sh](https://github.com/headcr4sh) made their first contribution in [#&#8203;5745](external-secrets/external-secrets#5745)
- [@&#8203;tosih](https://github.com/tosih) made their first contribution in [#&#8203;5610](external-secrets/external-secrets#5610)

**Full Changelog**: <external-secrets/external-secrets@v1.1.1...v1.2.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/2737
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/provider kind/dependency dependabot and upgrades kind/documentation Categorizes issue or PR as related to documentation. kind/feature Categorizes issue or PR as related to a new feature. size/l

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

3 participants