Skip to content

fix: select secretstores in same ns as pushsecret#5109

Merged
moolen merged 5 commits intoexternal-secrets:mainfrom
gracedo:gracedo/fix_ps_ss_scope
Aug 12, 2025
Merged

fix: select secretstores in same ns as pushsecret#5109
moolen merged 5 commits intoexternal-secrets:mainfrom
gracedo:gracedo/fix_ps_ss_scope

Conversation

@gracedo
Copy link
Copy Markdown
Contributor

@gracedo gracedo commented Aug 7, 2025

Problem Statement

PushSecrets defining label selectors to select SecretStores are trying to select SecretStores from all namespaces, instead of the same namespace as the PushSecret. This causes errors reconciling the PushSecret as it attempts to get these SecretStores in the same namespace but they don't exist.

Related Issue

Proposed Changes

When listing SecretStores by label selector, the namespace option should be passed in to only get SecretStores in the same namespace as the PushSecret.

Checklist

  • I have read the contribution guidelines
  • All commits are signed with git commit --signoff
  • My changes have reasonable test coverage
  • All tests pass with make test
  • I ensured my PR is ready for review with make reviewable

@gracedo gracedo requested a review from a team as a code owner August 7, 2025 21:07
@gracedo gracedo requested a review from moolen August 7, 2025 21:07
Signed-off-by: Grace Do <xgrace@gmail.com>
@gracedo gracedo force-pushed the gracedo/fix_ps_ss_scope branch from e07e526 to 61e6ddf Compare August 7, 2025 21:08
@Skarlso
Copy link
Copy Markdown
Contributor

Skarlso commented Aug 8, 2025

/ok-to-test sha=61e6ddf949c8f61b8f0ff5912fe2731a13380912

@eso-service-account-app
Copy link
Copy Markdown
Contributor

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Aug 8, 2025

@sonarqubecloud
Copy link
Copy Markdown

@moolen
Copy link
Copy Markdown
Member

moolen commented Aug 12, 2025

/ok-to-test sha=5423347c7a480512433ca085af51f0e6a9f1cba2

@eso-service-account-app
Copy link
Copy Markdown
Contributor

Copy link
Copy Markdown
Member

@moolen moolen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for fixing this issue 🙇, really appreciated!
There's another issue with r.List() in pushsecret_controller which should be scoped to a namespace, thanks for raising this.

@moolen moolen merged commit de40e8f into external-secrets:main Aug 12, 2025
20 checks passed
alliseeisgold pushed a commit to alliseeisgold/external-secrets that referenced this pull request Aug 25, 2025
)

Signed-off-by: Grace Do <xgrace@gmail.com>
Co-authored-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Co-authored-by: Moritz Johner <moolen@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants