Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: external-secrets/external-secrets
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.19.0
Choose a base ref
...
head repository: external-secrets/external-secrets
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.19.1
Choose a head ref
  • 13 commits
  • 39 files changed
  • 13 contributors

Commits on Aug 2, 2025

  1. chore: release helm chart for v0.19.0 (#5093)

    Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    Skarlso authored Aug 2, 2025
    Configuration menu
    Copy the full SHA
    5c99f2e View commit details
    Browse the repository at this point in the history
  2. chore: remove ubi note (#5094)

    Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    Skarlso authored Aug 2, 2025
    Configuration menu
    Copy the full SHA
    04ec19c View commit details
    Browse the repository at this point in the history

Commits on Aug 5, 2025

  1. chore(deps): bump pymdown-extensions in /hack/api-docs (#5100)

    Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.16 to 10.16.1.
    - [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
    - [Commits](facelessuser/pymdown-extensions@10.16...10.16.1)
    
    ---
    updated-dependencies:
    - dependency-name: pymdown-extensions
      dependency-version: 10.16.1
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Aug 5, 2025
    Configuration menu
    Copy the full SHA
    954d7cd View commit details
    Browse the repository at this point in the history
  2. chore(deps): bump ubi8/ubi from a910ffa to a463a8e (#5099)

    Bumps ubi8/ubi from `a910ffa` to `a463a8e`.
    
    ---
    updated-dependencies:
    - dependency-name: ubi8/ubi
      dependency-version: a463a8eb2e360f83a7f6baf32c53f7a07c13ff012658a203a7f5331fe93a4924
      dependency-type: direct:production
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: Gustavo Fernandes de Carvalho <17139678+gusfcarvalho@users.noreply.github.com>
    dependabot[bot] and gusfcarvalho authored Aug 5, 2025
    Configuration menu
    Copy the full SHA
    ddc6030 View commit details
    Browse the repository at this point in the history
  3. chore(deps): bump certifi from 2025.7.14 to 2025.8.3 in /hack/api-docs (

    #5097)
    
    Bumps [certifi](https://github.com/certifi/python-certifi) from 2025.7.14 to 2025.8.3.
    - [Commits](certifi/python-certifi@2025.07.14...2025.08.03)
    
    ---
    updated-dependencies:
    - dependency-name: certifi
      dependency-version: 2025.8.3
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Aug 5, 2025
    Configuration menu
    Copy the full SHA
    b7f6948 View commit details
    Browse the repository at this point in the history
  4. chore(deps): bump regex from 2024.11.6 to 2025.7.34 in /hack/api-docs (

    …#5096)
    
    Bumps [regex](https://github.com/mrabarnett/mrab-regex) from 2024.11.6 to 2025.7.34.
    - [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
    - [Commits](mrabarnett/mrab-regex@2024.11.6...2025.7.34)
    
    ---
    updated-dependencies:
    - dependency-name: regex
      dependency-version: 2025.7.34
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Aug 5, 2025
    Configuration menu
    Copy the full SHA
    a5f5299 View commit details
    Browse the repository at this point in the history
  5. fix: fail helm install if ClusterPushSecrets processing is enabled bu…

    …t PushSecrets processing is disabled. (#4896)
    
    Signed-off-by: Thomas D. Spear <thomas.spear@wcgclinical.com>
    Co-authored-by: Thomas D. Spear <thomas.spear@wcgclinical.com>
    Co-authored-by: Gustavo Fernandes de Carvalho <17139678+gusfcarvalho@users.noreply.github.com>
    Co-authored-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    4 people authored Aug 5, 2025
    Configuration menu
    Copy the full SHA
    3c847e3 View commit details
    Browse the repository at this point in the history
  6. fix: use server-side apply for CRD installation in Makefile (#5103)

    Signed-off-by: Alexander Chernov <alexander@chernov.it>
    alekc authored Aug 5, 2025
    Configuration menu
    Copy the full SHA
    2bdee92 View commit details
    Browse the repository at this point in the history

Commits on Aug 6, 2025

  1. deployment strategy support (#5091)

    * feat(aws): secretsmanager to update/patch/delete tags (#4984)
    
    * feat(aws): secretsmanager to update/patch/delete tags
    
    Signed-off-by: ivan katliarchuk <ivan.katliarchuk@gmail.com>
    
    * feat(aws): secretsmanager to update/patch/delete tags
    
    Signed-off-by: ivan katliarchuk <ivan.katliarchuk@gmail.com>
    
    * feat(aws): secretsmanager to update/patch/delete tags
    
    Signed-off-by: ivan katliarchuk <ivan.katliarchuk@gmail.com>
    
    ---------
    
    Signed-off-by: ivan katliarchuk <ivan.katliarchuk@gmail.com>
    Signed-off-by: Jeroen Jacobs <jeroen.jacobs@portofantwerpbruges.com>
    
    * Implement strategy support for deployments
    
    Signed-off-by: Jeroen Jacobs <jeroen.jacobs@portofantwerpbruges.com>
    
    * test: add missing templates to strategy tests…)
    
    Signed-off-by: Jeroen Jacobs <jeroen.jacobs@portofantwerpbruges.com>
    
    * test: fix asserts
    
    Signed-off-by: Jeroen Jacobs <jeroen.jacobs@portofantwerpbruges.com>
    
    * fix: update the e2e test with the new store status value (#5089)
    
    * fix: update the e2e test with the new store status value
    
    Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    
    * add argo server side apply option
    
    Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    
    * fix tab character instead of spaces 🤦
    
    Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    
    * add replace true for CRD updates
    
    Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    
    * increase arcocd version and remove replace
    
    Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    
    ---------
    
    Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    Co-authored-by: Idan Adar <iadar@il.ibm.com>
    Signed-off-by: Jeroen Jacobs <jeroen.jacobs@portofantwerpbruges.com>
    
    * fix: correct usage of if in dlc and update for server side apply (#5092)
    
    * fix: correct usage of if in dlc and update for server side apply
    
    Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    
    * fix tilt server side apply
    
    Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    
    ---------
    
    Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    Signed-off-by: Jeroen Jacobs <jeroen.jacobs@portofantwerpbruges.com>
    
    * chore: release helm chart for v0.19.0 (#5093)
    
    Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    Signed-off-by: Jeroen Jacobs <jeroen.jacobs@portofantwerpbruges.com>
    
    * chore: remove ubi note (#5094)
    
    Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    Signed-off-by: Jeroen Jacobs <jeroen.jacobs@portofantwerpbruges.com>
    
    * test: fix readme
    
    Signed-off-by: Jeroen Jacobs <jeroen.jacobs@portofantwerpbruges.com>
    
    ---------
    
    Signed-off-by: ivan katliarchuk <ivan.katliarchuk@gmail.com>
    Signed-off-by: Jeroen Jacobs <jeroen.jacobs@portofantwerpbruges.com>
    Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    Co-authored-by: Ivan Ka <5395690+ivankatliarchuk@users.noreply.github.com>
    Co-authored-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    Co-authored-by: Idan Adar <iadar@il.ibm.com>
    4 people authored Aug 6, 2025
    Configuration menu
    Copy the full SHA
    3e0dadc View commit details
    Browse the repository at this point in the history
  2. feat: migration from endpoint to endpointslice (#5008)

    * feat: migration from endpoint to endpointslice
    
    Signed-off-by: Michal Virgovic <michal.virgovic1@gmail.com>
    
    * feat: extract the duplicate code to utils
    
    Signed-off-by: Michal Virgovic <michal.virgovic1@gmail.com>
    
    * feat: rename error vars
    
    Signed-off-by: Michal Virgovic <michal.virgovic1@gmail.com>
    
    * feat: add back the endpoint access
    
    Signed-off-by: Michal Virgovic <michal.virgovic1@gmail.com>
    
    ---------
    
    Signed-off-by: Michal Virgovic <michal.virgovic1@gmail.com>
    Co-authored-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    xvirgov and Skarlso authored Aug 6, 2025
    Configuration menu
    Copy the full SHA
    e212695 View commit details
    Browse the repository at this point in the history

Commits on Aug 8, 2025

  1. feat(helm) Just use named port for webhook (#5108)

    Signed-off-by: Pat Riehecky <riehecky@fnal.gov>
    Co-authored-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    jcpunk and Skarlso authored Aug 8, 2025
    Configuration menu
    Copy the full SHA
    38d355f View commit details
    Browse the repository at this point in the history
  2. add support for overriding name of PDB (#5090)

    * add support for overriding name of PDB
    
    Signed-off-by: Meg Ashby <meg@alloy.com>
    
    * moving logic to _helpers.tpl, also making changes to webhook and certController pdbs
    
    Signed-off-by: Meg Ashby <meg@alloy.com>
    
    * add test cases for each pdb type, add in defaults to values.aml
    
    Signed-off-by: Meg Ashby <meg@alloy.com>
    
    * add docs
    
    Signed-off-by: Meg Ashby <meg@alloy.com>
    
    * Update _helpers.tpl
    
    Signed-off-by: Meg Ashby <megashby@comcast.net>
    
    * Update webhook-poddisruptionbudget.yaml
    
    Signed-off-by: Meg Ashby <megashby@comcast.net>
    
    ---------
    
    Signed-off-by: Meg Ashby <meg@alloy.com>
    Signed-off-by: Meg Ashby <megashby@comcast.net>
    Co-authored-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
    megashby and Skarlso authored Aug 8, 2025
    Configuration menu
    Copy the full SHA
    b798d6d View commit details
    Browse the repository at this point in the history
  3. fix: do not run ApplyTemplate for immutable secrets in mutationFunc (

    …#5110)
    
    This makes sure that `mutationFunc` only calls ApplyTemplate (and updates the Secret) when the secret under check is freshly created and not immutable. Previously, it always ran the ApplyTemplate and that lead to races.
    
    fix #4976
    
    To verify fix, see reproducer at #4976 (comment)
    
    Signed-off-by: Jakob Möller <jakob.moeller@sap.com>
    jakobmoellerdev authored Aug 8, 2025
    Configuration menu
    Copy the full SHA
    df939d8 View commit details
    Browse the repository at this point in the history
Loading