Adding session tags & transitive tags to SecretStore definition by nimaft · Pull Request #2372 · external-secrets/external-secrets

nimaft · 2023-05-30T19:01:50Z

Problem Statement

This is not an actual problem, but it would make it easier to control access to your secrets when you use AWS provider with Secrets Manager in an external AWS account. Imagine you have numerous services running on your cluster and each service has a number of secrets stored in Secrets Manager. If you create one SecretStore for each service and pass session tags when retrieving secrets, you can have one single IAM role in your external account that checks the tags and matches them to your secrets' tags on the fly (one statement in your IAM policy). This way you don't need to create one IAM role for each service in your target account just to control access and to make sure services do not access each other's secret. More info on the issue #2343

Related Issue

Fixes #2343

Proposed Changes

There are two files that needs to be changed:

apis/externalsecrets/v1beta1/secretstore_aws_types.go: new structs are added to this file so you can include session tags and transitive tags in your SecretStore definition
pkg/provider/aws/auth/auth.go: on this file we check to see if a role's name is included in SecretStore object, if it exists, we check to see if session tags or transitive tags are included, if they are included we pass them with when assuming the role indicated in SecretStore. Transitive tags are used so the tags persist in case multiple roles are being assumed.

Checklist

I have read the contribution guidelines
All commits are signed with git commit --signoff
My changes have reasonable test coverage
All tests pass with make test
I ensured my PR is ready for review with make reviewable

paul-the-alien

Greetings!
Thank you for contributing to this project!
If this is your first time contributing, please make
sure to read the Developer and Contributing Process guides.
Please also mind and follow our Code of Conduct.

Useful commands:

make fmt: Formats the code
make check-diff: Ensures the branch is clean
make reviewable: Ensures a PR is ready for review

modified apis/externalsecrets/v1beta1/secretstore_aws_types.go to expect session tags and transitive tags structs modified pkg/provider/aws/auth/auth.go to pass session tags if they exist Signed-off-by: Nima Fotouhi <fotouhi@live.com>

modified apis/externalsecrets/v1beta1/secretstore_aws_types.go to include a new custom struct (Tag) used with SessionTags instead of []*sts.Tag modified pkg/provider/aws/auth/auth.go to convert custom Tag struct to sts.Tag before passing to assume role API call Signed-off-by: Nima Fotouhi <fotouhi@live.com>

Signed-off-by: Nima Fotouhi <fotouhi@live.com>

…secrets#2366) Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.6.0 to 4.6.1. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v4.6.0...v4.6.1) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Nima Fotouhi <fotouhi@live.com>

Staring 0.82, IBM Cloud Secrets Manager supports fetching secrets by name as well as ID. Signed-off-by: Idan Adar <iadar@il.ibm.com> Signed-off-by: Nima Fotouhi <fotouhi@live.com>

nimaft · 2023-05-30T19:42:42Z

Update 2: Had to manually pass user.name and user.email, ran make docs, but no file was changed. So I assume this PR should have all the required files. Please let me know if something is missing.

Here is the output of make docs:

Admin:~/environment/external-secrets (nimaft/awsTags) $ make docs
15:25:03 [ OK ] Finished generating deepcopy and crds
make -C ./hack/api-docs build
make[1]: Entering directory '/home/ubuntu/environment/external-secrets/hack/api-docs'
docker build -t github.com/external-secrets-mkdocs:latest --build-arg USER_ID=1000 -f Dockerfile .
[+] Building 0.3s (9/9) FINISHED                                                                                                          
 => [internal] load build definition from Dockerfile                                                                                 0.0s
 => => transferring dockerfile: 860B                                                                                                 0.0s
 => [internal] load .dockerignore                                                                                                    0.0s
 => => transferring context: 2B                                                                                                      0.0s
 => [internal] load metadata for docker.io/library/alpine:3.11                                                                       0.3s
 => [internal] load build context                                                                                                    0.0s
 => => transferring context: 38B                                                                                                     0.0s
 => [1/4] FROM docker.io/library/alpine:3.11@sha256:bcae378eacedab83da66079d9366c8f5df542d7ed9ab23bf487e3e1a8481375d                 0.0s
 => CACHED [2/4] COPY requirements.txt /                                                                                             0.0s
 => CACHED [3/4] RUN apk add -U --no-cache     python3     python3-dev     musl-dev     git     openssh     git-fast-import     bas  0.0s
 => CACHED [4/4] RUN pip3 install -r /requirements.txt                                                                               0.0s
 => exporting to image                                                                                                               0.0s
 => => exporting layers                                                                                                              0.0s
 => => writing image sha256:c0aa85220f7efa41f09ece99b0cf2d5ccf2529e2f1edb021bd1c16b82c193a92                                         0.0s
 => => naming to github.com/external-secrets-mkdocs:latest                                                                           0.0s
./generate.sh /home/ubuntu/environment/external-secrets/hack/api-docs/../..//docs/api/spec.md
I0531 15:25:04.420890    6372 main.go:129] parsing go packages in directory github.com/external-secrets/external-secrets/apis/externalsecrets/v1beta1
I0531 15:25:40.621059    6372 main.go:231] using package=github.com/external-secrets/external-secrets/apis/externalsecrets/v1beta1
W0531 15:25:40.629350    6372 main.go:442] not found external link source for type *string
I0531 15:25:40.661822    6372 main.go:167] written to /home/ubuntu/environment/external-secrets/hack/api-docs/../..//docs/api/spec.md
mkdir -p /home/ubuntu/environment/external-secrets/hack/api-docs/../..//site
docker run \
    --mount type=bind,source=/home/ubuntu/environment/external-secrets/hack/api-docs/../../,target=/repo \
        --sig-proxy=true \
        --rm \
        --user 1000:1000 \
        github.com/external-secrets-mkdocs:latest \
        /bin/bash -c "cd /repo && mike deploy --ignore --update-aliases -F hack/api-docs/mkdocs.yml main unstable;"
Config value 'nav': Expected nav to be a list, got dict with keys ('v2', 'v1')
WARNING  -  Config value 'nav': Expected nav to be a list, got dict with keys ('v2', 'v1')
INFO     -  [macros] - Macros arguments: {'module_name': 'main', 'modules': [], 'include_dir': 'docs/snippets', 'include_yaml': [], 'j2_block_start_string': '', 'j2_block_end_string': '', 'j2_variable_start_string': '', 'j2_variable_end_string': '', 'on_undefined': 'keep', 'on_error_fail': False, 'verbose': False}
INFO     -  [macros] - Extra variables (config file): ['version', 'analytics']
INFO     -  [macros] - Extra filters (module): ['pretty']
INFO     -  [macros] - Includes directory: docs/snippets
INFO     -  Cleaning site directory
INFO     -  Building documentation to directory: /repo/site
INFO     -  The following pages exist in the docs directory, but are not included in the "nav" configuration:
  - spec.md
  - provider/aws-pushsecret.md
  - snippets/provider-aws-access.md
WARNING  -  Documentation file 'guides/security-best-practices.md' contains a link to '../introduction/stability-support.md' which is not found in the documentation files.
INFO     -  Documentation built in 8.39 seconds
make[1]: Leaving directory '/home/ubuntu/environment/external-secrets/hack/api-docs'

Update: successfully ran all the make reviewable tasks except for make docs.

Original message:
~~Quick notes folks, I don't have docker on my laptop and using finch, when I run make reviewable, I get the following error ( finch doesn't support --sig-proxy):~~

finch run \
            --mount type=bind,source=/xxxx/external-secrets/hack/api-docs/../../,target=/repo \
                --sig-proxy=true \
                --rm \
                --user xxx:xxx \
                github.com/external-secrets-mkdocs:latest \
                /bin/bash -c "cd /repo && mike deploy --ignore --update-aliases -F hack/api-docs/mkdocs.yml main unstable;"
FATA[0000] unknown flag: --sig-proxy                    
FATA[0000] exit status 1                                
make[1]: *** [build] Error 1
make: *** [docs] Error 2

From finch documentation:
Unimplemented docker run flags: --attach, --blkio-weight-device, --cpu-rt-*, --detach-keys, --device-*, --disable-content-trust, --domainname, --expose, --health-*, --ip6, --isolation, --no-healthcheck, --link*, --mac-address, --publish-all, --sig-proxy, --storage-opt, --userns, --volume-driver, --volumes-from

Signed-off-by: Nima Fotouhi <fotouhi@live.com>

… dependant to presence of SessionTags. So if user includes Transitive Tags in SecretStore definition without Session Tags, tags get ignored Signed-off-by: Nima Fotouhi <fotouhi@live.com>

sonarqubecloud · 2023-05-31T16:25:53Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
1 Code Smell

No Coverage information
0.0% Duplication

moolen · 2023-06-01T08:24:28Z

/ok-to-test sha=4611bba

moolen · 2023-06-01T08:26:45Z

Changes LGTM. I did a testdrive and it works with the trust policy mentioned here #2343 (comment) 🎉, great work!

I have triggered e2e tests 👆 to ensure there are no regressions with the existing auth methods. Also, i'm working on e2e tests for this feature, i'm going to open a separate PR for that.

moolen

LGTM! Thank you for your contribution 🙇

nimaft · 2023-06-01T13:38:05Z

@moolen @gusfcarvalho Thank you so much folks, it was a pleasure contributing to this project. 🙏🙏

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets](https://togithub.com/external-secrets/external-secrets) | patch | `0.9.13` -> `0.9.14` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets)</summary> ### [`v0.9.14`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.9.14) [Compare Source](https://togithub.com/external-secrets/external-secrets/compare/v0.9.13...v0.9.14) Image: `ghcr.io/external-secrets/external-secrets:v0.9.14` Image: `ghcr.io/external-secrets/external-secrets:v0.9.14-ubi` Image: `ghcr.io/external-secrets/external-secrets:v0.9.14-ubi-boringssl` #### What's Changed - Aws ssm parameterstore issue 1839 by [@larntz](https://togithub.com/larntz) in [https://github.com/external-secrets/external-secrets/pull/2350](https://togithub.com/external-secrets/external-secrets/pull/2350) - fix: implement parameterstore versions by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2352](https://togithub.com/external-secrets/external-secrets/pull/2352) - 📚 Update stability-support.md by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2358](https://togithub.com/external-secrets/external-secrets/pull/2358) - chore(deps): bump actions/setup-python from 4.6.0 to 4.6.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2366](https://togithub.com/external-secrets/external-secrets/pull/2366) - Update stability-support.md by [@IdanAdar](https://togithub.com/IdanAdar) in [https://github.com/external-secrets/external-secrets/pull/2363](https://togithub.com/external-secrets/external-secrets/pull/2363) - chore: update dependencies by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2348](https://togithub.com/external-secrets/external-secrets/pull/2348) - Adds PushSecret property compatibility with Hashicorp vault Provider by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2361](https://togithub.com/external-secrets/external-secrets/pull/2361) - Adding session tags & transitive tags to SecretStore definition by [@nimaft](https://togithub.com/nimaft) in [https://github.com/external-secrets/external-secrets/pull/2372](https://togithub.com/external-secrets/external-secrets/pull/2372) - feat: allow to set a common set of labels in the helm chart by [@maximeguillet](https://togithub.com/maximeguillet) in [https://github.com/external-secrets/external-secrets/pull/2379](https://togithub.com/external-secrets/external-secrets/pull/2379) - chore(deps): bump mikepenz/release-changelog-builder-action from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2384](https://togithub.com/external-secrets/external-secrets/pull/2384) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2386](https://togithub.com/external-secrets/external-secrets/pull/2386) - Add reconcile_duration metrics by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2382](https://togithub.com/external-secrets/external-secrets/pull/2382) - Add status_condition metric for ClusterExternalSecret by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2380](https://togithub.com/external-secrets/external-secrets/pull/2380) - Fix the test Make task by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2381](https://togithub.com/external-secrets/external-secrets/pull/2381) - Fix exit with no error when cert violates lookahead by [@fernferret](https://togithub.com/fernferret) in [https://github.com/external-secrets/external-secrets/pull/2395](https://togithub.com/external-secrets/external-secrets/pull/2395) - feat: add SLIs to dashboard by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2360](https://togithub.com/external-secrets/external-secrets/pull/2360) - Stop discarding golangci-lint errors by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2383](https://togithub.com/external-secrets/external-secrets/pull/2383) - chore(deps): bump golang from 1.20.4-alpine to 1.20.5-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2405](https://togithub.com/external-secrets/external-secrets/pull/2405) - feat: add e2e tests for aws/assume-role by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2376](https://togithub.com/external-secrets/external-secrets/pull/2376) - feat: add ESO threat model by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2308](https://togithub.com/external-secrets/external-secrets/pull/2308) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2406](https://togithub.com/external-secrets/external-secrets/pull/2406) - Set metadata to external secrets managed by cluster external secrets by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2413](https://togithub.com/external-secrets/external-secrets/pull/2413) - Add lower-kebab name transformer to Doppler provider by [@watsonian](https://togithub.com/watsonian) in [https://github.com/external-secrets/external-secrets/pull/2418](https://togithub.com/external-secrets/external-secrets/pull/2418) - Fix E2E test setup on non-linux machines by [@michaelsauter](https://togithub.com/michaelsauter) in [https://github.com/external-secrets/external-secrets/pull/2414](https://togithub.com/external-secrets/external-secrets/pull/2414) - Add Conjur provider by [@davidh-cyberark](https://togithub.com/davidh-cyberark) in [https://github.com/external-secrets/external-secrets/pull/2412](https://togithub.com/external-secrets/external-secrets/pull/2412) - chore(deps): bump actions/setup-go from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2430](https://togithub.com/external-secrets/external-secrets/pull/2430) - Mount ~/.gitconfig when running make docs by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2421](https://togithub.com/external-secrets/external-secrets/pull/2421) - Fix a broken link in docs/guides/security-best-practices.md by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2420](https://togithub.com/external-secrets/external-secrets/pull/2420) - enhance azure workload identity documentation by [@mruoss](https://togithub.com/mruoss) in [https://github.com/external-secrets/external-secrets/pull/2437](https://togithub.com/external-secrets/external-secrets/pull/2437) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2432](https://togithub.com/external-secrets/external-secrets/pull/2432) - Add status_condition metrics for the secret store controllers by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2404](https://togithub.com/external-secrets/external-secrets/pull/2404) - Add support for cert-manager managed webhook certs by [@fernferret](https://togithub.com/fernferret) in [https://github.com/external-secrets/external-secrets/pull/2394](https://togithub.com/external-secrets/external-secrets/pull/2394) - chore: update roadmap status and version support by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2441](https://togithub.com/external-secrets/external-secrets/pull/2441) - fix: gen changelog and tags from the right branch by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2443](https://togithub.com/external-secrets/external-secrets/pull/2443) - fix: run helm release on release branch as well by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2444](https://togithub.com/external-secrets/external-secrets/pull/2444) - chore: bump helm chart by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2442](https://togithub.com/external-secrets/external-secrets/pull/2442) - Update docs/api/metrics.md by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2445](https://togithub.com/external-secrets/external-secrets/pull/2445) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2448](https://togithub.com/external-secrets/external-secrets/pull/2448) - fix Error exposing secret in the logs by [@jordiprats](https://togithub.com/jordiprats) in [https://github.com/external-secrets/external-secrets/pull/2431](https://togithub.com/external-secrets/external-secrets/pull/2431) - Fix ClusterExternalSecret printcolumns by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2451](https://togithub.com/external-secrets/external-secrets/pull/2451) - docs: refer to support table for deletionPolicy support by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2454](https://togithub.com/external-secrets/external-secrets/pull/2454) - Add more context to error handling for parsing certs in order for log format to display properly by [@DusanNikolic11](https://togithub.com/DusanNikolic11) in [https://github.com/external-secrets/external-secrets/pull/2428](https://togithub.com/external-secrets/external-secrets/pull/2428) - Add IBM provider metadata to secret labels and/or annotations by [@vsroy](https://togithub.com/vsroy) in [https://github.com/external-secrets/external-secrets/pull/2429](https://togithub.com/external-secrets/external-secrets/pull/2429) - feat: add [@shuheiktgw](https://togithub.com/shuheiktgw) as maintainer :tada: by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2459](https://togithub.com/external-secrets/external-secrets/pull/2459) - fix: add delinea env vars for e2e tests by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2469](https://togithub.com/external-secrets/external-secrets/pull/2469) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2463](https://togithub.com/external-secrets/external-secrets/pull/2463) - Remove unused values from helm chart by [@alexanderwoehler](https://togithub.com/alexanderwoehler) in [https://github.com/external-secrets/external-secrets/pull/2470](https://togithub.com/external-secrets/external-secrets/pull/2470) - fix: vault deletionPolicy by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2455](https://togithub.com/external-secrets/external-secrets/pull/2455) - Add support for Delinea DevOps Secrets Vault by [@michaelsauter](https://togithub.com/michaelsauter) in [https://github.com/external-secrets/external-secrets/pull/2415](https://togithub.com/external-secrets/external-secrets/pull/2415) - Update documentation to add CyberArk Conjur provider by [@bnasslahsen](https://togithub.com/bnasslahsen) in [https://github.com/external-secrets/external-secrets/pull/2473](https://togithub.com/external-secrets/external-secrets/pull/2473) - chore: bump helm chart by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2476](https://togithub.com/external-secrets/external-secrets/pull/2476) - docs: adjust conjur documentation by [@EvertonSA](https://togithub.com/EvertonSA) in [https://github.com/external-secrets/external-secrets/pull/2485](https://togithub.com/external-secrets/external-secrets/pull/2485) - Adding documentation for populating Kubernetes Secret with metadata f… by [@vsroy](https://togithub.com/vsroy) in [https://github.com/external-secrets/external-secrets/pull/2487](https://togithub.com/external-secrets/external-secrets/pull/2487) - Adding feature info for populating metadata from IBM Secrets Manager by [@vsroy](https://togithub.com/vsroy) in [https://github.com/external-secrets/external-secrets/pull/2481](https://togithub.com/external-secrets/external-secrets/pull/2481) - Kick ClusterExternalSecret reconciliation when a Namespace is updated by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2486](https://togithub.com/external-secrets/external-secrets/pull/2486) - Add processPushSecret key by [@alex-souslik-hs](https://togithub.com/alex-souslik-hs) in [https://github.com/external-secrets/external-secrets/pull/2479](https://togithub.com/external-secrets/external-secrets/pull/2479) - Refactor ClusterExternalSecretController tests by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2499](https://togithub.com/external-secrets/external-secrets/pull/2499) - chore(deps): bump golang from 1.20.5-alpine to 1.20.6-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2508](https://togithub.com/external-secrets/external-secrets/pull/2508) - chore(deps): bump helm/kind-action from 1.7.0 to 1.8.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2510](https://togithub.com/external-secrets/external-secrets/pull/2510) - chore(deps): bump actions/setup-python from 4.6.1 to 4.7.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2509](https://togithub.com/external-secrets/external-secrets/pull/2509) - Highlight that `property` field must be set for DSV secret by [@michaelsauter](https://togithub.com/michaelsauter) in [https://github.com/external-secrets/external-secrets/pull/2511](https://togithub.com/external-secrets/external-secrets/pull/2511) - Use PartialObjectMetadata to get ExternalSecret by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2504](https://togithub.com/external-secrets/external-secrets/pull/2504) - Remove builder.OnlyMetadata by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2505](https://togithub.com/external-secrets/external-secrets/pull/2505) - fix: downgrade pyyaml <6.0 by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2516](https://togithub.com/external-secrets/external-secrets/pull/2516) - Fix ClusterExternalSecret FailedNamespaces and ProvisionedNamespaces by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2506](https://togithub.com/external-secrets/external-secrets/pull/2506) - Install tools implicitly by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2527](https://togithub.com/external-secrets/external-secrets/pull/2527) - Fix CES problems by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2526](https://togithub.com/external-secrets/external-secrets/pull/2526) - Update docs in common-k8s-secret-types.md by [@rmdg88](https://togithub.com/rmdg88) in [https://github.com/external-secrets/external-secrets/pull/2541](https://togithub.com/external-secrets/external-secrets/pull/2541) - Bug/escape special characters vault by [@arnouthoebreckx](https://togithub.com/arnouthoebreckx) in [https://github.com/external-secrets/external-secrets/pull/2537](https://togithub.com/external-secrets/external-secrets/pull/2537) - Fixed potential linting issue on webhook pdb manifest by [@vtorikianupgrade](https://togithub.com/vtorikianupgrade) in [https://github.com/external-secrets/external-secrets/pull/2551](https://togithub.com/external-secrets/external-secrets/pull/2551) - helm: Add certController readiness port configuration and link prometheus.service.port to args by [@noony](https://togithub.com/noony) in [https://github.com/external-secrets/external-secrets/pull/2529](https://togithub.com/external-secrets/external-secrets/pull/2529) - IBM Provider: Fix documentation templating errors by [@Evan-Bluhm](https://togithub.com/Evan-Bluhm) in [https://github.com/external-secrets/external-secrets/pull/2564](https://togithub.com/external-secrets/external-secrets/pull/2564) - Fix flaky ClusterExternalSecret test by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2558](https://togithub.com/external-secrets/external-secrets/pull/2558) - Disable Git top-level directory owner check by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2559](https://togithub.com/external-secrets/external-secrets/pull/2559) - added userPass authentication to the hashicorp vault provider by [@c0ffee](https://togithub.com/c0ffee) in [https://github.com/external-secrets/external-secrets/pull/2539](https://togithub.com/external-secrets/external-secrets/pull/2539) - Support PushSecret Property for GCP by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2465](https://togithub.com/external-secrets/external-secrets/pull/2465) - chore: bump dependencies by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2568](https://togithub.com/external-secrets/external-secrets/pull/2568) - Integrate Cloak Secrets by [@9876691](https://togithub.com/9876691) in [https://github.com/external-secrets/external-secrets/pull/2108](https://togithub.com/external-secrets/external-secrets/pull/2108) - docs: update release process by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2570](https://togithub.com/external-secrets/external-secrets/pull/2570) - Bumping 0.9.2 by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2574](https://togithub.com/external-secrets/external-secrets/pull/2574) - feat: Include remove orphans logic by [@dacamposol](https://togithub.com/dacamposol) in [https://github.com/external-secrets/external-secrets/pull/1389](https://togithub.com/external-secrets/external-secrets/pull/1389) - Remove paginating namespaces by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2580](https://togithub.com/external-secrets/external-secrets/pull/2580) - IBM Provider: convert the fetched secret to map to access the properties by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2597](https://togithub.com/external-secrets/external-secrets/pull/2597) - Revert "IBM Provider: convert the fetched secret to map to access the properties" by [@IdanAdar](https://togithub.com/IdanAdar) in [https://github.com/external-secrets/external-secrets/pull/2602](https://togithub.com/external-secrets/external-secrets/pull/2602) - IBM Provider: convert the fetched secret to map to access the properties by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2603](https://togithub.com/external-secrets/external-secrets/pull/2603) - Fix orphaned secrets logic with CreationPolicy=Merge by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2587](https://togithub.com/external-secrets/external-secrets/pull/2587) - Fix grafana dashboard $datasource by [@NissesSenap](https://togithub.com/NissesSenap) in [https://github.com/external-secrets/external-secrets/pull/2594](https://togithub.com/external-secrets/external-secrets/pull/2594) - Update the devguide by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2588](https://togithub.com/external-secrets/external-secrets/pull/2588) - Fixing when orphaned secret deletion when target.Name is not set by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2609](https://togithub.com/external-secrets/external-secrets/pull/2609) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2605](https://togithub.com/external-secrets/external-secrets/pull/2605) - release 0.9.3 by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2612](https://togithub.com/external-secrets/external-secrets/pull/2612) - IBM Provider: handle special case for imported cert secret type by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2629](https://togithub.com/external-secrets/external-secrets/pull/2629) - Set builder.OnlyMetadata back for Secrets by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2625](https://togithub.com/external-secrets/external-secrets/pull/2625) - IBM Provider: handle case where secret is destroyed by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2637](https://togithub.com/external-secrets/external-secrets/pull/2637) - Update docs FAQ regarding refreshTime and lastTransitionTime by [@rakrueger](https://togithub.com/rakrueger) in [https://github.com/external-secrets/external-secrets/pull/2640](https://togithub.com/external-secrets/external-secrets/pull/2640) - Fix a command in Google Cloud Secret Manager document by [@ftnext](https://togithub.com/ftnext) in [https://github.com/external-secrets/external-secrets/pull/2627](https://togithub.com/external-secrets/external-secrets/pull/2627) - Update common-k8s-secret-types.md by [@Layer8Err](https://togithub.com/Layer8Err) in [https://github.com/external-secrets/external-secrets/pull/2624](https://togithub.com/external-secrets/external-secrets/pull/2624) - chore(deps): bump golang from 1.20.6-alpine to 1.21.0-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2604](https://togithub.com/external-secrets/external-secrets/pull/2604) - Using Bitwarden notes for multiline secrets by [@laszlocph](https://togithub.com/laszlocph) in [https://github.com/external-secrets/external-secrets/pull/2635](https://togithub.com/external-secrets/external-secrets/pull/2635) - fix: template funcs need to be wrapped in raw block by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2642](https://togithub.com/external-secrets/external-secrets/pull/2642) - fixing label limits by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2645](https://togithub.com/external-secrets/external-secrets/pull/2645) - chore: bump 0.9.4 by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2649](https://togithub.com/external-secrets/external-secrets/pull/2649) - Add in s390x build by [@Joshua-Beha](https://togithub.com/Joshua-Beha) in [https://github.com/external-secrets/external-secrets/pull/2613](https://togithub.com/external-secrets/external-secrets/pull/2613) - Fix a ClusterExternalSecret flaky test by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2641](https://togithub.com/external-secrets/external-secrets/pull/2641) - Stop using builder.OnlyMetadata for ExternalSecrets by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2626](https://togithub.com/external-secrets/external-secrets/pull/2626) - docs: add AWS IAM policy for usage with PushSecret by [@aschaber1](https://togithub.com/aschaber1) in [https://github.com/external-secrets/external-secrets/pull/2653](https://togithub.com/external-secrets/external-secrets/pull/2653) - Stop ignoring ExternalSecret reconciliation error by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2583](https://togithub.com/external-secrets/external-secrets/pull/2583) - Remove metrics when a resouce is deleted by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2576](https://togithub.com/external-secrets/external-secrets/pull/2576) - Delete old ClusterExternalSecrets when name changed by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2601](https://togithub.com/external-secrets/external-secrets/pull/2601) - Introduce RetrySettings support for Hashicorp Vault by [@12345ieee](https://togithub.com/12345ieee) in [https://github.com/external-secrets/external-secrets/pull/2528](https://togithub.com/external-secrets/external-secrets/pull/2528) - fix(externalsecret): infinite reconcile loop with Merge secret by [@agaudreault](https://togithub.com/agaudreault) in [https://github.com/external-secrets/external-secrets/pull/2525](https://togithub.com/external-secrets/external-secrets/pull/2525) - chore: bump dependencies by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2654](https://togithub.com/external-secrets/external-secrets/pull/2654) - Report not ready when no namespace matches by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2582](https://togithub.com/external-secrets/external-secrets/pull/2582) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2657](https://togithub.com/external-secrets/external-secrets/pull/2657) - Support PushSecret metadata by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2600](https://togithub.com/external-secrets/external-secrets/pull/2600) - bump Kubernetes support version by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2659](https://togithub.com/external-secrets/external-secrets/pull/2659) - chore: bump EKS e2e test version by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2666](https://togithub.com/external-secrets/external-secrets/pull/2666) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2675](https://togithub.com/external-secrets/external-secrets/pull/2675) - Refacto scaleway provider by [@luxifer](https://togithub.com/luxifer) in [https://github.com/external-secrets/external-secrets/pull/2667](https://togithub.com/external-secrets/external-secrets/pull/2667) - Convert IBM auth struct fields to pointers by [@Akurata](https://togithub.com/Akurata) in [https://github.com/external-secrets/external-secrets/pull/2669](https://togithub.com/external-secrets/external-secrets/pull/2669) - Docs: Improve Hashicorp Vault PushSecret documentation by [@xoanmi](https://togithub.com/xoanmi) in [https://github.com/external-secrets/external-secrets/pull/2679](https://togithub.com/external-secrets/external-secrets/pull/2679) - feat: Updated check ServiceMontior check to include APIVersions check for helm charts by [@ppatel1604](https://togithub.com/ppatel1604) in [https://github.com/external-secrets/external-secrets/pull/2683](https://togithub.com/external-secrets/external-secrets/pull/2683) - chore(deps): bump tibdex/github-app-token from 1 to 2 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2686](https://togithub.com/external-secrets/external-secrets/pull/2686) - Fix: Replaced selectorLabels with labels by [@ppatel1604](https://togithub.com/ppatel1604) in [https://github.com/external-secrets/external-secrets/pull/2672](https://togithub.com/external-secrets/external-secrets/pull/2672) - chore(deps): bump actions/checkout from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2687](https://togithub.com/external-secrets/external-secrets/pull/2687) - chore(deps): bump golang from 1.21.0-alpine to 1.21.1-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2688](https://togithub.com/external-secrets/external-secrets/pull/2688) - fix: do not swallow errors when create or update fails by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2693](https://togithub.com/external-secrets/external-secrets/pull/2693) - fix: ensure to correctly encode binary data as base64 by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2681](https://togithub.com/external-secrets/external-secrets/pull/2681) - chore(deps): bump docker/setup-qemu-action from 2 to 3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2707](https://togithub.com/external-secrets/external-secrets/pull/2707) - chore(deps): bump docker/login-action from 2 to 3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2708](https://togithub.com/external-secrets/external-secrets/pull/2708) - chore(deps): bump docker/setup-buildx-action from 2 to 3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2706](https://togithub.com/external-secrets/external-secrets/pull/2706) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2710](https://togithub.com/external-secrets/external-secrets/pull/2710) - Update Flux example to 0.9.4 by [@Apollorion](https://togithub.com/Apollorion) in [https://github.com/external-secrets/external-secrets/pull/2715](https://togithub.com/external-secrets/external-secrets/pull/2715) - Documentation: callout templating escapes for helm users by [@rteeling](https://togithub.com/rteeling) in [https://github.com/external-secrets/external-secrets/pull/2704](https://togithub.com/external-secrets/external-secrets/pull/2704) - fix: do not recreate secret if deletion timestamp is set by [@markuslackner](https://togithub.com/markuslackner) in [https://github.com/external-secrets/external-secrets/pull/2718](https://togithub.com/external-secrets/external-secrets/pull/2718) - Use locks for GCP PushSecrets by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2678](https://togithub.com/external-secrets/external-secrets/pull/2678) - fix: assign default value to prevent nil panic by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2722](https://togithub.com/external-secrets/external-secrets/pull/2722) - chore: update dependencies by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2724](https://togithub.com/external-secrets/external-secrets/pull/2724) - chore: bump version by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2725](https://togithub.com/external-secrets/external-secrets/pull/2725) - Let ManagedField handle metadata by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2705](https://togithub.com/external-secrets/external-secrets/pull/2705) - Conjur JWT support by [@kbristow](https://togithub.com/kbristow) in [https://github.com/external-secrets/external-secrets/pull/2591](https://togithub.com/external-secrets/external-secrets/pull/2591) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2729](https://togithub.com/external-secrets/external-secrets/pull/2729) - Complement full-cluster-secret-store oracle provider example by [@antoniolago](https://togithub.com/antoniolago) in [https://github.com/external-secrets/external-secrets/pull/2731](https://togithub.com/external-secrets/external-secrets/pull/2731) - Fix helm.test by reflecting recent changes by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2733](https://togithub.com/external-secrets/external-secrets/pull/2733) - Reflect certController.readinessProbe.port to readinessProbe by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2732](https://togithub.com/external-secrets/external-secrets/pull/2732) - Support PushSecret Property for AWS SM by [@benbertrands](https://togithub.com/benbertrands) in [https://github.com/external-secrets/external-secrets/pull/2623](https://togithub.com/external-secrets/external-secrets/pull/2623) - doc: add more info for clusterLocation parameter in gcp by [@ricosega](https://togithub.com/ricosega) in [https://github.com/external-secrets/external-secrets/pull/2741](https://togithub.com/external-secrets/external-secrets/pull/2741) - Scaleway secret path by [@luxifer](https://togithub.com/luxifer) in [https://github.com/external-secrets/external-secrets/pull/2737](https://togithub.com/external-secrets/external-secrets/pull/2737) - add force flag to bitwarden sync in bitwarden cli deployment documentation by [@garyhodgson](https://togithub.com/garyhodgson) in [https://github.com/external-secrets/external-secrets/pull/2742](https://togithub.com/external-secrets/external-secrets/pull/2742) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2749](https://togithub.com/external-secrets/external-secrets/pull/2749) - chore(deps): bump actions/setup-python from 4.7.0 to 4.7.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2765](https://togithub.com/external-secrets/external-secrets/pull/2765) - chore(deps): bump golang from 1.21.1-alpine to 1.21.2-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2766](https://togithub.com/external-secrets/external-secrets/pull/2766) - \[adopters] Adding Pets at home by [@userbradley](https://togithub.com/userbradley) in [https://github.com/external-secrets/external-secrets/pull/2773](https://togithub.com/external-secrets/external-secrets/pull/2773) - leverage IBM provider's latest API to get the secret by name by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2750](https://togithub.com/external-secrets/external-secrets/pull/2750) - Oracle provider retry by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2762](https://togithub.com/external-secrets/external-secrets/pull/2762) - Updated docum of PushSecret by [@sebagomez](https://togithub.com/sebagomez) in [https://github.com/external-secrets/external-secrets/pull/2391](https://togithub.com/external-secrets/external-secrets/pull/2391) - fix: enable sharedConfigState in AWS auth provider by [@Kevintjeb](https://togithub.com/Kevintjeb) in [https://github.com/external-secrets/external-secrets/pull/2777](https://togithub.com/external-secrets/external-secrets/pull/2777) - Fix the k8s double encoding problem by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2760](https://togithub.com/external-secrets/external-secrets/pull/2760) - docs: mention auth-delegator role in vault provider by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2734](https://togithub.com/external-secrets/external-secrets/pull/2734) - bump chart to 0.9.6 by [@knelasevero](https://togithub.com/knelasevero) in [https://github.com/external-secrets/external-secrets/pull/2786](https://togithub.com/external-secrets/external-secrets/pull/2786) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2788](https://togithub.com/external-secrets/external-secrets/pull/2788) - chore(deps): bump golang from 1.21.2-alpine to 1.21.3-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2787](https://togithub.com/external-secrets/external-secrets/pull/2787) - feat: bump go + deps by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2794](https://togithub.com/external-secrets/external-secrets/pull/2794) - bump 0.9.7 chart by [@knelasevero](https://togithub.com/knelasevero) in [https://github.com/external-secrets/external-secrets/pull/2796](https://togithub.com/external-secrets/external-secrets/pull/2796) - chore(deps): bump fkirc/skip-duplicate-actions from 5.3.0 to 5.3.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2797](https://togithub.com/external-secrets/external-secrets/pull/2797) - fix: do not iterate on the raw response value by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2801](https://togithub.com/external-secrets/external-secrets/pull/2801) - Oracle: Workload Identity authentication by [@anders-swanson](https://togithub.com/anders-swanson) in [https://github.com/external-secrets/external-secrets/pull/2781](https://togithub.com/external-secrets/external-secrets/pull/2781) - fix: update the linter so that it runs latest and disable debguard by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2806](https://togithub.com/external-secrets/external-secrets/pull/2806) - fix: also fix the ci jobs linter version by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2807](https://togithub.com/external-secrets/external-secrets/pull/2807) - add directive to apply template on secret names by [@sonny-semc](https://togithub.com/sonny-semc) in [https://github.com/external-secrets/external-secrets/pull/2802](https://togithub.com/external-secrets/external-secrets/pull/2802) - feat: add namespace list selector to ClusterExternalSecrets by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2803](https://togithub.com/external-secrets/external-secrets/pull/2803) - Add Support for fips regions. by [@tomelliot16](https://togithub.com/tomelliot16) in [https://github.com/external-secrets/external-secrets/pull/2805](https://togithub.com/external-secrets/external-secrets/pull/2805) - Fix skew between refreshInterval and refreshTime that can lead to skipped refresh. by [@vtorikianupgrade](https://togithub.com/vtorikianupgrade) in [https://github.com/external-secrets/external-secrets/pull/2815](https://togithub.com/external-secrets/external-secrets/pull/2815) - add missing commands to the getting started guide by [@Nicolas-Roberto](https://togithub.com/Nicolas-Roberto) in [https://github.com/external-secrets/external-secrets/pull/2751](https://togithub.com/external-secrets/external-secrets/pull/2751) - feat: add AKS e2e managed by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2811](https://togithub.com/external-secrets/external-secrets/pull/2811) - chore: test e2e-managed & fixup docs by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2818](https://togithub.com/external-secrets/external-secrets/pull/2818) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2822](https://togithub.com/external-secrets/external-secrets/pull/2822) - Add validations for the enum values by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2819](https://togithub.com/external-secrets/external-secrets/pull/2819) - feat: give [@Skarlso](https://togithub.com/Skarlso) maintainer permissions by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2823](https://togithub.com/external-secrets/external-secrets/pull/2823) - chore: release 0.9.8 by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2826](https://togithub.com/external-secrets/external-secrets/pull/2826) - Let setup-go handle go related caches by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2828](https://togithub.com/external-secrets/external-secrets/pull/2828) - Error enhancements for data\[] array errors by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2834](https://togithub.com/external-secrets/external-secrets/pull/2834) - feat: k8s provider can handle all types of secret, fix [#2709](https://togithub.com/external-secrets/external-secrets/issues/2709) by [@minhoryang](https://togithub.com/minhoryang) in [https://github.com/external-secrets/external-secrets/pull/2792](https://togithub.com/external-secrets/external-secrets/pull/2792) - feat: Oracle provider service account masquerade by [@anders-swanson](https://togithub.com/anders-swanson) in [https://github.com/external-secrets/external-secrets/pull/2817](https://togithub.com/external-secrets/external-secrets/pull/2817) - ref: cleanup condition handling for objects by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2829](https://togithub.com/external-secrets/external-secrets/pull/2829) - design: PushSecret `updatePolicy` by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2664](https://togithub.com/external-secrets/external-secrets/pull/2664) - fix: remove sourceRef.generatorRef from .data\[] by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2735](https://togithub.com/external-secrets/external-secrets/pull/2735) - Docs - Minor Note to assist future readers by [@CharlKlein](https://togithub.com/CharlKlein) in [https://github.com/external-secrets/external-secrets/pull/2839](https://togithub.com/external-secrets/external-secrets/pull/2839) - Oracle provider implementation by [@anders-swanson](https://togithub.com/anders-swanson) in [https://github.com/external-secrets/external-secrets/pull/2840](https://togithub.com/external-secrets/external-secrets/pull/2840) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2850](https://togithub.com/external-secrets/external-secrets/pull/2850) - chore(deps): bump helm/chart-releaser-action from 1.5.0 to 1.6.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2848](https://togithub.com/external-secrets/external-secrets/pull/2848) - docs: Add Codefresh to list of adopters by [@korenyoni](https://togithub.com/korenyoni) in [https://github.com/external-secrets/external-secrets/pull/2856](https://togithub.com/external-secrets/external-secrets/pull/2856) - chore(deps): bump helm/chart-testing-action from 2.3.1 to 2.6.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2849](https://togithub.com/external-secrets/external-secrets/pull/2849) - fix: add missing omitempty json tags for optional fields by [@uhthomas](https://togithub.com/uhthomas) in [https://github.com/external-secrets/external-secrets/pull/2855](https://togithub.com/external-secrets/external-secrets/pull/2855) - Support GetAllSecrets for the fake provider by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2844](https://togithub.com/external-secrets/external-secrets/pull/2844) - feat: fix cert-controller readiness probe by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2857](https://togithub.com/external-secrets/external-secrets/pull/2857) - Refactor the PushSecret interface by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2859](https://togithub.com/external-secrets/external-secrets/pull/2859) - feat: update dataFrom with use of generator by [@LucasPimentel123](https://togithub.com/LucasPimentel123) in [https://github.com/external-secrets/external-secrets/pull/2793](https://togithub.com/external-secrets/external-secrets/pull/2793) - Validate data or dataFrom existence by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2867](https://togithub.com/external-secrets/external-secrets/pull/2867) - Update PAUL.yaml to include roger by [@knelasevero](https://togithub.com/knelasevero) in [https://github.com/external-secrets/external-secrets/pull/2873](https://togithub.com/external-secrets/external-secrets/pull/2873) - bump 0.9.9 by [@rogertuma](https://togithub.com/rogertuma) in [https://github.com/external-secrets/external-secrets/pull/2872](https://togithub.com/external-secrets/external-secrets/pull/2872) - chore(deps): bump golang from 1.21.3-alpine to 1.21.4-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2870](https://togithub.com/external-secrets/external-secrets/pull/2870) - feat: AWS SecretsManager Config (allow ForceDeleteWithoutRecovery for PushSecret) by [@korenyoni](https://togithub.com/korenyoni) in [https://github.com/external-secrets/external-secrets/pull/2854](https://togithub.com/external-secrets/external-secrets/pull/2854) - docs: remove additional space in dockercreds example that causes the last curly brace to be removed by [@visokoo](https://togithub.com/visokoo) in [https://github.com/external-secrets/external-secrets/pull/2877](https://togithub.com/external-secrets/external-secrets/pull/2877) - docs: fix deprecation policy typo by [@vsantos](https://togithub.com/vsantos) in [https://github.com/external-secrets/external-secrets/pull/2875](https://togithub.com/external-secrets/external-secrets/pull/2875) - add validations for the remaining enum values by [@lakhanjindam](https://togithub.com/lakhanjindam) in [https://github.com/external-secrets/external-secrets/pull/2860](https://togithub.com/external-secrets/external-secrets/pull/2860) - chore(deps): bump actions/github-script from 6 to 7 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2889](https://togithub.com/external-secrets/external-secrets/pull/2889) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2890](https://togithub.com/external-secrets/external-secrets/pull/2890) - feat: allow pushing the whole secret to the provider by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2862](https://togithub.com/external-secrets/external-secrets/pull/2862) - design: PushSecret generator integration by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2665](https://togithub.com/external-secrets/external-secrets/pull/2665) - fix: `webhook` support more types when parsing response by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2899](https://togithub.com/external-secrets/external-secrets/pull/2899) - docs: Recommend use of Workload Identity for Azure Key Vault by [@mloskot](https://togithub.com/mloskot) in [https://github.com/external-secrets/external-secrets/pull/2906](https://togithub.com/external-secrets/external-secrets/pull/2906) - Stop deleting all the Secret metadata by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2900](https://togithub.com/external-secrets/external-secrets/pull/2900) - Docs: Add details on how to use FilterPEM function by [@arnoldrw](https://togithub.com/arnoldrw) in [https://github.com/external-secrets/external-secrets/pull/2893](https://togithub.com/external-secrets/external-secrets/pull/2893) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2903](https://togithub.com/external-secrets/external-secrets/pull/2903) - fix: Small typo in the 'templateFrom' guide by [@pabrahamsson](https://togithub.com/pabrahamsson) in [https://github.com/external-secrets/external-secrets/pull/2912](https://togithub.com/external-secrets/external-secrets/pull/2912) - Remove references to Prometheus in Helm chart by [@sebagomez](https://togithub.com/sebagomez) in [https://github.com/external-secrets/external-secrets/pull/2814](https://togithub.com/external-secrets/external-secrets/pull/2814) - fix: ACR access token generator with Workload Identity by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2913](https://togithub.com/external-secrets/external-secrets/pull/2913) - Feat/Adding support for PushSecret using HashiCorp Vault KV v1 by [@tal-asulin](https://togithub.com/tal-asulin) in [https://github.com/external-secrets/external-secrets/pull/2879](https://togithub.com/external-secrets/external-secrets/pull/2879) - feat(fake): deprecate ValueMap to use Value instead by [@vsantos](https://togithub.com/vsantos) in [https://github.com/external-secrets/external-secrets/pull/2884](https://togithub.com/external-secrets/external-secrets/pull/2884) - typo: ref:[#2917](https://togithub.com/external-secrets/external-secrets/issues/2917) Fix typo in ExtermalSecretRewriteTransform by [@Kiyo510](https://togithub.com/Kiyo510) in [https://github.com/external-secrets/external-secrets/pull/2919](https://togithub.com/external-secrets/external-secrets/pull/2919) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2922](https://togithub.com/external-secrets/external-secrets/pull/2922) - Add CONTRIBUTING.md file by [@szh](https://togithub.com/szh) in [https://github.com/external-secrets/external-secrets/pull/2925](https://togithub.com/external-secrets/external-secrets/pull/2925) - docs(alibaba): add access key authentication by [@vsantos](https://togithub.com/vsantos) in [https://github.com/external-secrets/external-secrets/pull/2934](https://togithub.com/external-secrets/external-secrets/pull/2934) - Update Helm snapshot by [@leomichalski](https://togithub.com/leomichalski) in [https://github.com/external-secrets/external-secrets/pull/2935](https://togithub.com/external-secrets/external-secrets/pull/2935) - feat: add custom user agent to scaleway provider by [@luxifer](https://togithub.com/luxifer) in [https://github.com/external-secrets/external-secrets/pull/2938](https://togithub.com/external-secrets/external-secrets/pull/2938) - chore(deps): bump actions/setup-go from 4 to 5 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2943](https://togithub.com/external-secrets/external-secrets/pull/2943) - chore(deps): bump actions/stale from 8 to 9 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2942](https://togithub.com/external-secrets/external-secrets/pull/2942) - chore(deps): bump actions/setup-python from 4.7.1 to 5.0.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2941](https://togithub.com/external-secrets/external-secrets/pull/2941) - chore(deps): bump golang from 1.21.4-alpine to 1.21.5-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2944](https://togithub.com/external-secrets/external-secrets/pull/2944) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2946](https://togithub.com/external-secrets/external-secrets/pull/2946) - Update contact email ([#2948](https://togithub.com/external-secrets/external-secrets/issues/2948)) by [@rrgodhorus](https://togithub.com/rrgodhorus) in [https://github.com/external-secrets/external-secrets/pull/2949](https://togithub.com/external-secrets/external-secrets/pull/2949) - bump 0.9.10 by [@rogertuma](https://togithub.com/rogertuma) in [https://github.com/external-secrets/external-secrets/pull/2958](https://togithub.com/external-secrets/external-secrets/pull/2958) - Helm pod spec extra by [@adrianrobotka](https://togithub.com/adrianrobotka) in [https://github.com/external-secrets/external-secrets/pull/2930](https://togithub.com/external-secrets/external-secrets/pull/2930) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2960](https://togithub.com/external-secrets/external-secrets/pull/2960) - Add support for IBM Cloud Service Credentials secret type by [@nitzann](https://togithub.com/nitzann) in [https://github.com/external-secrets/external-secrets/pull/2950](https://togithub.com/external-secrets/external-secrets/pull/2950) - Minor: extension of PR [#2950](https://togithub.com/external-secrets/external-secrets/issues/2950) Add support for IBM Cloud Service Credentials secret type by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2967](https://togithub.com/external-secrets/external-secrets/pull/2967) - chore: replace deprecated command with environment file by [@jongwooo](https://togithub.com/jongwooo) in [https://github.com/external-secrets/external-secrets/pull/2970](https://togithub.com/external-secrets/external-secrets/pull/2970) - feat: introduce tilt into the development process by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2966](https://togithub.com/external-secrets/external-secrets/pull/2966) - fix(chart): setting processPushSecret by [@fadecore](https://togithub.com/fadecore) in [https://github.com/external-secrets/external-secrets/pull/2968](https://togithub.com/external-secrets/external-secrets/pull/2968) - feat: add templating to PushSecret by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2926](https://togithub.com/external-secrets/external-secrets/pull/2926) - Disable certController when certManager is enabled by webhook by [@kaldorn](https://togithub.com/kaldorn) in [https://github.com/external-secrets/external-secrets/pull/2952](https://togithub.com/external-secrets/external-secrets/pull/2952) - fix: do not error if helm chart versi </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://togithub.com/renovatebot/renovate).  Co-authored-by: lumiere-bot[bot] <98047013+lumiere-bot[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets](https://togithub.com/external-secrets/external-secrets) | patch | `0.9.13` -> `0.9.14` | --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets)</summary> ### [`v0.9.14`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.9.14) [Compare Source](https://togithub.com/external-secrets/external-secrets/compare/v0.9.13...v0.9.14) Image: `ghcr.io/external-secrets/external-secrets:v0.9.14` Image: `ghcr.io/external-secrets/external-secrets:v0.9.14-ubi` Image: `ghcr.io/external-secrets/external-secrets:v0.9.14-ubi-boringssl` #### What's Changed - Aws ssm parameterstore issue 1839 by [@larntz](https://togithub.com/larntz) in [https://github.com/external-secrets/external-secrets/pull/2350](https://togithub.com/external-secrets/external-secrets/pull/2350) - fix: implement parameterstore versions by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2352](https://togithub.com/external-secrets/external-secrets/pull/2352) - 📚 Update stability-support.md by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2358](https://togithub.com/external-secrets/external-secrets/pull/2358) - chore(deps): bump actions/setup-python from 4.6.0 to 4.6.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2366](https://togithub.com/external-secrets/external-secrets/pull/2366) - Update stability-support.md by [@IdanAdar](https://togithub.com/IdanAdar) in [https://github.com/external-secrets/external-secrets/pull/2363](https://togithub.com/external-secrets/external-secrets/pull/2363) - chore: update dependencies by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2348](https://togithub.com/external-secrets/external-secrets/pull/2348) - Adds PushSecret property compatibility with Hashicorp vault Provider by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2361](https://togithub.com/external-secrets/external-secrets/pull/2361) - Adding session tags & transitive tags to SecretStore definition by [@nimaft](https://togithub.com/nimaft) in [https://github.com/external-secrets/external-secrets/pull/2372](https://togithub.com/external-secrets/external-secrets/pull/2372) - feat: allow to set a common set of labels in the helm chart by [@maximeguillet](https://togithub.com/maximeguillet) in [https://github.com/external-secrets/external-secrets/pull/2379](https://togithub.com/external-secrets/external-secrets/pull/2379) - chore(deps): bump mikepenz/release-changelog-builder-action from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2384](https://togithub.com/external-secrets/external-secrets/pull/2384) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2386](https://togithub.com/external-secrets/external-secrets/pull/2386) - Add reconcile_duration metrics by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2382](https://togithub.com/external-secrets/external-secrets/pull/2382) - Add status_condition metric for ClusterExternalSecret by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2380](https://togithub.com/external-secrets/external-secrets/pull/2380) - Fix the test Make task by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2381](https://togithub.com/external-secrets/external-secrets/pull/2381) - Fix exit with no error when cert violates lookahead by [@fernferret](https://togithub.com/fernferret) in [https://github.com/external-secrets/external-secrets/pull/2395](https://togithub.com/external-secrets/external-secrets/pull/2395) - feat: add SLIs to dashboard by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2360](https://togithub.com/external-secrets/external-secrets/pull/2360) - Stop discarding golangci-lint errors by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2383](https://togithub.com/external-secrets/external-secrets/pull/2383) - chore(deps): bump golang from 1.20.4-alpine to 1.20.5-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2405](https://togithub.com/external-secrets/external-secrets/pull/2405) - feat: add e2e tests for aws/assume-role by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2376](https://togithub.com/external-secrets/external-secrets/pull/2376) - feat: add ESO threat model by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2308](https://togithub.com/external-secrets/external-secrets/pull/2308) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2406](https://togithub.com/external-secrets/external-secrets/pull/2406) - Set metadata to external secrets managed by cluster external secrets by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2413](https://togithub.com/external-secrets/external-secrets/pull/2413) - Add lower-kebab name transformer to Doppler provider by [@watsonian](https://togithub.com/watsonian) in [https://github.com/external-secrets/external-secrets/pull/2418](https://togithub.com/external-secrets/external-secrets/pull/2418) - Fix E2E test setup on non-linux machines by [@michaelsauter](https://togithub.com/michaelsauter) in [https://github.com/external-secrets/external-secrets/pull/2414](https://togithub.com/external-secrets/external-secrets/pull/2414) - Add Conjur provider by [@davidh-cyberark](https://togithub.com/davidh-cyberark) in [https://github.com/external-secrets/external-secrets/pull/2412](https://togithub.com/external-secrets/external-secrets/pull/2412) - chore(deps): bump actions/setup-go from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2430](https://togithub.com/external-secrets/external-secrets/pull/2430) - Mount ~/.gitconfig when running make docs by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2421](https://togithub.com/external-secrets/external-secrets/pull/2421) - Fix a broken link in docs/guides/security-best-practices.md by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2420](https://togithub.com/external-secrets/external-secrets/pull/2420) - enhance azure workload identity documentation by [@mruoss](https://togithub.com/mruoss) in [https://github.com/external-secrets/external-secrets/pull/2437](https://togithub.com/external-secrets/external-secrets/pull/2437) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2432](https://togithub.com/external-secrets/external-secrets/pull/2432) - Add status_condition metrics for the secret store controllers by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2404](https://togithub.com/external-secrets/external-secrets/pull/2404) - Add support for cert-manager managed webhook certs by [@fernferret](https://togithub.com/fernferret) in [https://github.com/external-secrets/external-secrets/pull/2394](https://togithub.com/external-secrets/external-secrets/pull/2394) - chore: update roadmap status and version support by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2441](https://togithub.com/external-secrets/external-secrets/pull/2441) - fix: gen changelog and tags from the right branch by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2443](https://togithub.com/external-secrets/external-secrets/pull/2443) - fix: run helm release on release branch as well by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2444](https://togithub.com/external-secrets/external-secrets/pull/2444) - chore: bump helm chart by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2442](https://togithub.com/external-secrets/external-secrets/pull/2442) - Update docs/api/metrics.md by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2445](https://togithub.com/external-secrets/external-secrets/pull/2445) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2448](https://togithub.com/external-secrets/external-secrets/pull/2448) - fix Error exposing secret in the logs by [@jordiprats](https://togithub.com/jordiprats) in [https://github.com/external-secrets/external-secrets/pull/2431](https://togithub.com/external-secrets/external-secrets/pull/2431) - Fix ClusterExternalSecret printcolumns by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2451](https://togithub.com/external-secrets/external-secrets/pull/2451) - docs: refer to support table for deletionPolicy support by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2454](https://togithub.com/external-secrets/external-secrets/pull/2454) - Add more context to error handling for parsing certs in order for log format to display properly by [@DusanNikolic11](https://togithub.com/DusanNikolic11) in [https://github.com/external-secrets/external-secrets/pull/2428](https://togithub.com/external-secrets/external-secrets/pull/2428) - Add IBM provider metadata to secret labels and/or annotations by [@vsroy](https://togithub.com/vsroy) in [https://github.com/external-secrets/external-secrets/pull/2429](https://togithub.com/external-secrets/external-secrets/pull/2429) - feat: add [@shuheiktgw](https://togithub.com/shuheiktgw) as maintainer :tada: by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2459](https://togithub.com/external-secrets/external-secrets/pull/2459) - fix: add delinea env vars for e2e tests by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2469](https://togithub.com/external-secrets/external-secrets/pull/2469) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2463](https://togithub.com/external-secrets/external-secrets/pull/2463) - Remove unused values from helm chart by [@alexanderwoehler](https://togithub.com/alexanderwoehler) in [https://github.com/external-secrets/external-secrets/pull/2470](https://togithub.com/external-secrets/external-secrets/pull/2470) - fix: vault deletionPolicy by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2455](https://togithub.com/external-secrets/external-secrets/pull/2455) - Add support for Delinea DevOps Secrets Vault by [@michaelsauter](https://togithub.com/michaelsauter) in [https://github.com/external-secrets/external-secrets/pull/2415](https://togithub.com/external-secrets/external-secrets/pull/2415) - Update documentation to add CyberArk Conjur provider by [@bnasslahsen](https://togithub.com/bnasslahsen) in [https://github.com/external-secrets/external-secrets/pull/2473](https://togithub.com/external-secrets/external-secrets/pull/2473) - chore: bump helm chart by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2476](https://togithub.com/external-secrets/external-secrets/pull/2476) - docs: adjust conjur documentation by [@EvertonSA](https://togithub.com/EvertonSA) in [https://github.com/external-secrets/external-secrets/pull/2485](https://togithub.com/external-secrets/external-secrets/pull/2485) - Adding documentation for populating Kubernetes Secret with metadata f… by [@vsroy](https://togithub.com/vsroy) in [https://github.com/external-secrets/external-secrets/pull/2487](https://togithub.com/external-secrets/external-secrets/pull/2487) - Adding feature info for populating metadata from IBM Secrets Manager by [@vsroy](https://togithub.com/vsroy) in [https://github.com/external-secrets/external-secrets/pull/2481](https://togithub.com/external-secrets/external-secrets/pull/2481) - Kick ClusterExternalSecret reconciliation when a Namespace is updated by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2486](https://togithub.com/external-secrets/external-secrets/pull/2486) - Add processPushSecret key by [@alex-souslik-hs](https://togithub.com/alex-souslik-hs) in [https://github.com/external-secrets/external-secrets/pull/2479](https://togithub.com/external-secrets/external-secrets/pull/2479) - Refactor ClusterExternalSecretController tests by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2499](https://togithub.com/external-secrets/external-secrets/pull/2499) - chore(deps): bump golang from 1.20.5-alpine to 1.20.6-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2508](https://togithub.com/external-secrets/external-secrets/pull/2508) - chore(deps): bump helm/kind-action from 1.7.0 to 1.8.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2510](https://togithub.com/external-secrets/external-secrets/pull/2510) - chore(deps): bump actions/setup-python from 4.6.1 to 4.7.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2509](https://togithub.com/external-secrets/external-secrets/pull/2509) - Highlight that `property` field must be set for DSV secret by [@michaelsauter](https://togithub.com/michaelsauter) in [https://github.com/external-secrets/external-secrets/pull/2511](https://togithub.com/external-secrets/external-secrets/pull/2511) - Use PartialObjectMetadata to get ExternalSecret by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2504](https://togithub.com/external-secrets/external-secrets/pull/2504) - Remove builder.OnlyMetadata by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2505](https://togithub.com/external-secrets/external-secrets/pull/2505) - fix: downgrade pyyaml <6.0 by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2516](https://togithub.com/external-secrets/external-secrets/pull/2516) - Fix ClusterExternalSecret FailedNamespaces and ProvisionedNamespaces by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2506](https://togithub.com/external-secrets/external-secrets/pull/2506) - Install tools implicitly by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2527](https://togithub.com/external-secrets/external-secrets/pull/2527) - Fix CES problems by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2526](https://togithub.com/external-secrets/external-secrets/pull/2526) - Update docs in common-k8s-secret-types.md by [@rmdg88](https://togithub.com/rmdg88) in [https://github.com/external-secrets/external-secrets/pull/2541](https://togithub.com/external-secrets/external-secrets/pull/2541) - Bug/escape special characters vault by [@arnouthoebreckx](https://togithub.com/arnouthoebreckx) in [https://github.com/external-secrets/external-secrets/pull/2537](https://togithub.com/external-secrets/external-secrets/pull/2537) - Fixed potential linting issue on webhook pdb manifest by [@vtorikianupgrade](https://togithub.com/vtorikianupgrade) in [https://github.com/external-secrets/external-secrets/pull/2551](https://togithub.com/external-secrets/external-secrets/pull/2551) - helm: Add certController readiness port configuration and link prometheus.service.port to args by [@noony](https://togithub.com/noony) in [https://github.com/external-secrets/external-secrets/pull/2529](https://togithub.com/external-secrets/external-secrets/pull/2529) - IBM Provider: Fix documentation templating errors by [@Evan-Bluhm](https://togithub.com/Evan-Bluhm) in [https://github.com/external-secrets/external-secrets/pull/2564](https://togithub.com/external-secrets/external-secrets/pull/2564) - Fix flaky ClusterExternalSecret test by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2558](https://togithub.com/external-secrets/external-secrets/pull/2558) - Disable Git top-level directory owner check by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2559](https://togithub.com/external-secrets/external-secrets/pull/2559) - added userPass authentication to the hashicorp vault provider by [@c0ffee](https://togithub.com/c0ffee) in [https://github.com/external-secrets/external-secrets/pull/2539](https://togithub.com/external-secrets/external-secrets/pull/2539) - Support PushSecret Property for GCP by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2465](https://togithub.com/external-secrets/external-secrets/pull/2465) - chore: bump dependencies by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2568](https://togithub.com/external-secrets/external-secrets/pull/2568) - Integrate Cloak Secrets by [@9876691](https://togithub.com/9876691) in [https://github.com/external-secrets/external-secrets/pull/2108](https://togithub.com/external-secrets/external-secrets/pull/2108) - docs: update release process by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2570](https://togithub.com/external-secrets/external-secrets/pull/2570) - Bumping 0.9.2 by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2574](https://togithub.com/external-secrets/external-secrets/pull/2574) - feat: Include remove orphans logic by [@dacamposol](https://togithub.com/dacamposol) in [https://github.com/external-secrets/external-secrets/pull/1389](https://togithub.com/external-secrets/external-secrets/pull/1389) - Remove paginating namespaces by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2580](https://togithub.com/external-secrets/external-secrets/pull/2580) - IBM Provider: convert the fetched secret to map to access the properties by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2597](https://togithub.com/external-secrets/external-secrets/pull/2597) - Revert "IBM Provider: convert the fetched secret to map to access the properties" by [@IdanAdar](https://togithub.com/IdanAdar) in [https://github.com/external-secrets/external-secrets/pull/2602](https://togithub.com/external-secrets/external-secrets/pull/2602) - IBM Provider: convert the fetched secret to map to access the properties by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2603](https://togithub.com/external-secrets/external-secrets/pull/2603) - Fix orphaned secrets logic with CreationPolicy=Merge by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2587](https://togithub.com/external-secrets/external-secrets/pull/2587) - Fix grafana dashboard $datasource by [@NissesSenap](https://togithub.com/NissesSenap) in [https://github.com/external-secrets/external-secrets/pull/2594](https://togithub.com/external-secrets/external-secrets/pull/2594) - Update the devguide by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2588](https://togithub.com/external-secrets/external-secrets/pull/2588) - Fixing when orphaned secret deletion when target.Name is not set by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2609](https://togithub.com/external-secrets/external-secrets/pull/2609) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2605](https://togithub.com/external-secrets/external-secrets/pull/2605) - release 0.9.3 by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2612](https://togithub.com/external-secrets/external-secrets/pull/2612) - IBM Provider: handle special case for imported cert secret type by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2629](https://togithub.com/external-secrets/external-secrets/pull/2629) - Set builder.OnlyMetadata back for Secrets by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2625](https://togithub.com/external-secrets/external-secrets/pull/2625) - IBM Provider: handle case where secret is destroyed by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2637](https://togithub.com/external-secrets/external-secrets/pull/2637) - Update docs FAQ regarding refreshTime and lastTransitionTime by [@rakrueger](https://togithub.com/rakrueger) in [https://github.com/external-secrets/external-secrets/pull/2640](https://togithub.com/external-secrets/external-secrets/pull/2640) - Fix a command in Google Cloud Secret Manager document by [@ftnext](https://togithub.com/ftnext) in [https://github.com/external-secrets/external-secrets/pull/2627](https://togithub.com/external-secrets/external-secrets/pull/2627) - Update common-k8s-secret-types.md by [@Layer8Err](https://togithub.com/Layer8Err) in [https://github.com/external-secrets/external-secrets/pull/2624](https://togithub.com/external-secrets/external-secrets/pull/2624) - chore(deps): bump golang from 1.20.6-alpine to 1.21.0-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2604](https://togithub.com/external-secrets/external-secrets/pull/2604) - Using Bitwarden notes for multiline secrets by [@laszlocph](https://togithub.com/laszlocph) in [https://github.com/external-secrets/external-secrets/pull/2635](https://togithub.com/external-secrets/external-secrets/pull/2635) - fix: template funcs need to be wrapped in raw block by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2642](https://togithub.com/external-secrets/external-secrets/pull/2642) - fixing label limits by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2645](https://togithub.com/external-secrets/external-secrets/pull/2645) - chore: bump 0.9.4 by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2649](https://togithub.com/external-secrets/external-secrets/pull/2649) - Add in s390x build by [@Joshua-Beha](https://togithub.com/Joshua-Beha) in [https://github.com/external-secrets/external-secrets/pull/2613](https://togithub.com/external-secrets/external-secrets/pull/2613) - Fix a ClusterExternalSecret flaky test by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2641](https://togithub.com/external-secrets/external-secrets/pull/2641) - Stop using builder.OnlyMetadata for ExternalSecrets by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2626](https://togithub.com/external-secrets/external-secrets/pull/2626) - docs: add AWS IAM policy for usage with PushSecret by [@aschaber1](https://togithub.com/aschaber1) in [https://github.com/external-secrets/external-secrets/pull/2653](https://togithub.com/external-secrets/external-secrets/pull/2653) - Stop ignoring ExternalSecret reconciliation error by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2583](https://togithub.com/external-secrets/external-secrets/pull/2583) - Remove metrics when a resouce is deleted by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2576](https://togithub.com/external-secrets/external-secrets/pull/2576) - Delete old ClusterExternalSecrets when name changed by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2601](https://togithub.com/external-secrets/external-secrets/pull/2601) - Introduce RetrySettings support for Hashicorp Vault by [@12345ieee](https://togithub.com/12345ieee) in [https://github.com/external-secrets/external-secrets/pull/2528](https://togithub.com/external-secrets/external-secrets/pull/2528) - fix(externalsecret): infinite reconcile loop with Merge secret by [@agaudreault](https://togithub.com/agaudreault) in [https://github.com/external-secrets/external-secrets/pull/2525](https://togithub.com/external-secrets/external-secrets/pull/2525) - chore: bump dependencies by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2654](https://togithub.com/external-secrets/external-secrets/pull/2654) - Report not ready when no namespace matches by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2582](https://togithub.com/external-secrets/external-secrets/pull/2582) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2657](https://togithub.com/external-secrets/external-secrets/pull/2657) - Support PushSecret metadata by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2600](https://togithub.com/external-secrets/external-secrets/pull/2600) - bump Kubernetes support version by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2659](https://togithub.com/external-secrets/external-secrets/pull/2659) - chore: bump EKS e2e test version by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2666](https://togithub.com/external-secrets/external-secrets/pull/2666) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2675](https://togithub.com/external-secrets/external-secrets/pull/2675) - Refacto scaleway provider by [@luxifer](https://togithub.com/luxifer) in [https://github.com/external-secrets/external-secrets/pull/2667](https://togithub.com/external-secrets/external-secrets/pull/2667) - Convert IBM auth struct fields to pointers by [@Akurata](https://togithub.com/Akurata) in [https://github.com/external-secrets/external-secrets/pull/2669](https://togithub.com/external-secrets/external-secrets/pull/2669) - Docs: Improve Hashicorp Vault PushSecret documentation by [@xoanmi](https://togithub.com/xoanmi) in [https://github.com/external-secrets/external-secrets/pull/2679](https://togithub.com/external-secrets/external-secrets/pull/2679) - feat: Updated check ServiceMontior check to include APIVersions check for helm charts by [@ppatel1604](https://togithub.com/ppatel1604) in [https://github.com/external-secrets/external-secrets/pull/2683](https://togithub.com/external-secrets/external-secrets/pull/2683) - chore(deps): bump tibdex/github-app-token from 1 to 2 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2686](https://togithub.com/external-secrets/external-secrets/pull/2686) - Fix: Replaced selectorLabels with labels by [@ppatel1604](https://togithub.com/ppatel1604) in [https://github.com/external-secrets/external-secrets/pull/2672](https://togithub.com/external-secrets/external-secrets/pull/2672) - chore(deps): bump actions/checkout from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2687](https://togithub.com/external-secrets/external-secrets/pull/2687) - chore(deps): bump golang from 1.21.0-alpine to 1.21.1-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2688](https://togithub.com/external-secrets/external-secrets/pull/2688) - fix: do not swallow errors when create or update fails by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2693](https://togithub.com/external-secrets/external-secrets/pull/2693) - fix: ensure to correctly encode binary data as base64 by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2681](https://togithub.com/external-secrets/external-secrets/pull/2681) - chore(deps): bump docker/setup-qemu-action from 2 to 3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2707](https://togithub.com/external-secrets/external-secrets/pull/2707) - chore(deps): bump docker/login-action from 2 to 3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2708](https://togithub.com/external-secrets/external-secrets/pull/2708) - chore(deps): bump docker/setup-buildx-action from 2 to 3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2706](https://togithub.com/external-secrets/external-secrets/pull/2706) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2710](https://togithub.com/external-secrets/external-secrets/pull/2710) - Update Flux example to 0.9.4 by [@Apollorion](https://togithub.com/Apollorion) in [https://github.com/external-secrets/external-secrets/pull/2715](https://togithub.com/external-secrets/external-secrets/pull/2715) - Documentation: callout templating escapes for helm users by [@rteeling](https://togithub.com/rteeling) in [https://github.com/external-secrets/external-secrets/pull/2704](https://togithub.com/external-secrets/external-secrets/pull/2704) - fix: do not recreate secret if deletion timestamp is set by [@markuslackner](https://togithub.com/markuslackner) in [https://github.com/external-secrets/external-secrets/pull/2718](https://togithub.com/external-secrets/external-secrets/pull/2718) - Use locks for GCP PushSecrets by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2678](https://togithub.com/external-secrets/external-secrets/pull/2678) - fix: assign default value to prevent nil panic by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2722](https://togithub.com/external-secrets/external-secrets/pull/2722) - chore: update dependencies by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2724](https://togithub.com/external-secrets/external-secrets/pull/2724) - chore: bump version by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2725](https://togithub.com/external-secrets/external-secrets/pull/2725) - Let ManagedField handle metadata by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2705](https://togithub.com/external-secrets/external-secrets/pull/2705) - Conjur JWT support by [@kbristow](https://togithub.com/kbristow) in [https://github.com/external-secrets/external-secrets/pull/2591](https://togithub.com/external-secrets/external-secrets/pull/2591) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2729](https://togithub.com/external-secrets/external-secrets/pull/2729) - Complement full-cluster-secret-store oracle provider example by [@antoniolago](https://togithub.com/antoniolago) in [https://github.com/external-secrets/external-secrets/pull/2731](https://togithub.com/external-secrets/external-secrets/pull/2731) - Fix helm.test by reflecting recent changes by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2733](https://togithub.com/external-secrets/external-secrets/pull/2733) - Reflect certController.readinessProbe.port to readinessProbe by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2732](https://togithub.com/external-secrets/external-secrets/pull/2732) - Support PushSecret Property for AWS SM by [@benbertrands](https://togithub.com/benbertrands) in [https://github.com/external-secrets/external-secrets/pull/2623](https://togithub.com/external-secrets/external-secrets/pull/2623) - doc: add more info for clusterLocation parameter in gcp by [@ricosega](https://togithub.com/ricosega) in [https://github.com/external-secrets/external-secrets/pull/2741](https://togithub.com/external-secrets/external-secrets/pull/2741) - Scaleway secret path by [@luxifer](https://togithub.com/luxifer) in [https://github.com/external-secrets/external-secrets/pull/2737](https://togithub.com/external-secrets/external-secrets/pull/2737) - add force flag to bitwarden sync in bitwarden cli deployment documentation by [@garyhodgson](https://togithub.com/garyhodgson) in [https://github.com/external-secrets/external-secrets/pull/2742](https://togithub.com/external-secrets/external-secrets/pull/2742) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2749](https://togithub.com/external-secrets/external-secrets/pull/2749) - chore(deps): bump actions/setup-python from 4.7.0 to 4.7.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2765](https://togithub.com/external-secrets/external-secrets/pull/2765) - chore(deps): bump golang from 1.21.1-alpine to 1.21.2-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2766](https://togithub.com/external-secrets/external-secrets/pull/2766) - \[adopters] Adding Pets at home by [@userbradley](https://togithub.com/userbradley) in [https://github.com/external-secrets/external-secrets/pull/2773](https://togithub.com/external-secrets/external-secrets/pull/2773) - leverage IBM provider's latest API to get the secret by name by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2750](https://togithub.com/external-secrets/external-secrets/pull/2750) - Oracle provider retry by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2762](https://togithub.com/external-secrets/external-secrets/pull/2762) - Updated docum of PushSecret by [@sebagomez](https://togithub.com/sebagomez) in [https://github.com/external-secrets/external-secrets/pull/2391](https://togithub.com/external-secrets/external-secrets/pull/2391) - fix: enable sharedConfigState in AWS auth provider by [@Kevintjeb](https://togithub.com/Kevintjeb) in [https://github.com/external-secrets/external-secrets/pull/2777](https://togithub.com/external-secrets/external-secrets/pull/2777) - Fix the k8s double encoding problem by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2760](https://togithub.com/external-secrets/external-secrets/pull/2760) - docs: mention auth-delegator role in vault provider by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2734](https://togithub.com/external-secrets/external-secrets/pull/2734) - bump chart to 0.9.6 by [@knelasevero](https://togithub.com/knelasevero) in [https://github.com/external-secrets/external-secrets/pull/2786](https://togithub.com/external-secrets/external-secrets/pull/2786) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2788](https://togithub.com/external-secrets/external-secrets/pull/2788) - chore(deps): bump golang from 1.21.2-alpine to 1.21.3-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2787](https://togithub.com/external-secrets/external-secrets/pull/2787) - feat: bump go + deps by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2794](https://togithub.com/external-secrets/external-secrets/pull/2794) - bump 0.9.7 chart by [@knelasevero](https://togithub.com/knelasevero) in [https://github.com/external-secrets/external-secrets/pull/2796](https://togithub.com/external-secrets/external-secrets/pull/2796) - chore(deps): bump fkirc/skip-duplicate-actions from 5.3.0 to 5.3.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2797](https://togithub.com/external-secrets/external-secrets/pull/2797) - fix: do not iterate on the raw response value by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2801](https://togithub.com/external-secrets/external-secrets/pull/2801) - Oracle: Workload Identity authentication by [@anders-swanson](https://togithub.com/anders-swanson) in [https://github.com/external-secrets/external-secrets/pull/2781](https://togithub.com/external-secrets/external-secrets/pull/2781) - fix: update the linter so that it runs latest and disable debguard by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2806](https://togithub.com/external-secrets/external-secrets/pull/2806) - fix: also fix the ci jobs linter version by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2807](https://togithub.com/external-secrets/external-secrets/pull/2807) - add directive to apply template on secret names by [@sonny-semc](https://togithub.com/sonny-semc) in [https://github.com/external-secrets/external-secrets/pull/2802](https://togithub.com/external-secrets/external-secrets/pull/2802) - feat: add namespace list selector to ClusterExternalSecrets by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2803](https://togithub.com/external-secrets/external-secrets/pull/2803) - Add Support for fips regions. by [@tomelliot16](https://togithub.com/tomelliot16) in [https://github.com/external-secrets/external-secrets/pull/2805](https://togithub.com/external-secrets/external-secrets/pull/2805) - Fix skew between refreshInterval and refreshTime that can lead to skipped refresh. by [@vtorikianupgrade](https://togithub.com/vtorikianupgrade) in [https://github.com/external-secrets/external-secrets/pull/2815](https://togithub.com/external-secrets/external-secrets/pull/2815) - add missing commands to the getting started guide by [@Nicolas-Roberto](https://togithub.com/Nicolas-Roberto) in [https://github.com/external-secrets/external-secrets/pull/2751](https://togithub.com/external-secrets/external-secrets/pull/2751) - feat: add AKS e2e managed by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2811](https://togithub.com/external-secrets/external-secrets/pull/2811) - chore: test e2e-managed & fixup docs by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2818](https://togithub.com/external-secrets/external-secrets/pull/2818) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2822](https://togithub.com/external-secrets/external-secrets/pull/2822) - Add validations for the enum values by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2819](https://togithub.com/external-secrets/external-secrets/pull/2819) - feat: give [@Skarlso](https://togithub.com/Skarlso) maintainer permissions by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2823](https://togithub.com/external-secrets/external-secrets/pull/2823) - chore: release 0.9.8 by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2826](https://togithub.com/external-secrets/external-secrets/pull/2826) - Let setup-go handle go related caches by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2828](https://togithub.com/external-secrets/external-secrets/pull/2828) - Error enhancements for data\[] array errors by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2834](https://togithub.com/external-secrets/external-secrets/pull/2834) - feat: k8s provider can handle all types of secret, fix [#2709](https://togithub.com/external-secrets/external-secrets/issues/2709) by [@minhoryang](https://togithub.com/minhoryang) in [https://github.com/external-secrets/external-secrets/pull/2792](https://togithub.com/external-secrets/external-secrets/pull/2792) - feat: Oracle provider service account masquerade by [@anders-swanson](https://togithub.com/anders-swanson) in [https://github.com/external-secrets/external-secrets/pull/2817](https://togithub.com/external-secrets/external-secrets/pull/2817) - ref: cleanup condition handling for objects by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2829](https://togithub.com/external-secrets/external-secrets/pull/2829) - design: PushSecret `updatePolicy` by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2664](https://togithub.com/external-secrets/external-secrets/pull/2664) - fix: remove sourceRef.generatorRef from .data\[] by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2735](https://togithub.com/external-secrets/external-secrets/pull/2735) - Docs - Minor Note to assist future readers by [@CharlKlein](https://togithub.com/CharlKlein) in [https://github.com/external-secrets/external-secrets/pull/2839](https://togithub.com/external-secrets/external-secrets/pull/2839) - Oracle provider implementation by [@anders-swanson](https://togithub.com/anders-swanson) in [https://github.com/external-secrets/external-secrets/pull/2840](https://togithub.com/external-secrets/external-secrets/pull/2840) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2850](https://togithub.com/external-secrets/external-secrets/pull/2850) - chore(deps): bump helm/chart-releaser-action from 1.5.0 to 1.6.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2848](https://togithub.com/external-secrets/external-secrets/pull/2848) - docs: Add Codefresh to list of adopters by [@korenyoni](https://togithub.com/korenyoni) in [https://github.com/external-secrets/external-secrets/pull/2856](https://togithub.com/external-secrets/external-secrets/pull/2856) - chore(deps): bump helm/chart-testing-action from 2.3.1 to 2.6.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2849](https://togithub.com/external-secrets/external-secrets/pull/2849) - fix: add missing omitempty json tags for optional fields by [@uhthomas](https://togithub.com/uhthomas) in [https://github.com/external-secrets/external-secrets/pull/2855](https://togithub.com/external-secrets/external-secrets/pull/2855) - Support GetAllSecrets for the fake provider by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2844](https://togithub.com/external-secrets/external-secrets/pull/2844) - feat: fix cert-controller readiness probe by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2857](https://togithub.com/external-secrets/external-secrets/pull/2857) - Refactor the PushSecret interface by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2859](https://togithub.com/external-secrets/external-secrets/pull/2859) - feat: update dataFrom with use of generator by [@LucasPimentel123](https://togithub.com/LucasPimentel123) in [https://github.com/external-secrets/external-secrets/pull/2793](https://togithub.com/external-secrets/external-secrets/pull/2793) - Validate data or dataFrom existence by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2867](https://togithub.com/external-secrets/external-secrets/pull/2867) - Update PAUL.yaml to include roger by [@knelasevero](https://togithub.com/knelasevero) in [https://github.com/external-secrets/external-secrets/pull/2873](https://togithub.com/external-secrets/external-secrets/pull/2873) - bump 0.9.9 by [@rogertuma](https://togithub.com/rogertuma) in [https://github.com/external-secrets/external-secrets/pull/2872](https://togithub.com/external-secrets/external-secrets/pull/2872) - chore(deps): bump golang from 1.21.3-alpine to 1.21.4-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2870](https://togithub.com/external-secrets/external-secrets/pull/2870) - feat: AWS SecretsManager Config (allow ForceDeleteWithoutRecovery for PushSecret) by [@korenyoni](https://togithub.com/korenyoni) in [https://github.com/external-secrets/external-secrets/pull/2854](https://togithub.com/external-secrets/external-secrets/pull/2854) - docs: remove additional space in dockercreds example that causes the last curly brace to be removed by [@visokoo](https://togithub.com/visokoo) in [https://github.com/external-secrets/external-secrets/pull/2877](https://togithub.com/external-secrets/external-secrets/pull/2877) - docs: fix deprecation policy typo by [@vsantos](https://togithub.com/vsantos) in [https://github.com/external-secrets/external-secrets/pull/2875](https://togithub.com/external-secrets/external-secrets/pull/2875) - add validations for the remaining enum values by [@lakhanjindam](https://togithub.com/lakhanjindam) in [https://github.com/external-secrets/external-secrets/pull/2860](https://togithub.com/external-secrets/external-secrets/pull/2860) - chore(deps): bump actions/github-script from 6 to 7 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2889](https://togithub.com/external-secrets/external-secrets/pull/2889) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2890](https://togithub.com/external-secrets/external-secrets/pull/2890) - feat: allow pushing the whole secret to the provider by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2862](https://togithub.com/external-secrets/external-secrets/pull/2862) - design: PushSecret generator integration by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2665](https://togithub.com/external-secrets/external-secrets/pull/2665) - fix: `webhook` support more types when parsing response by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2899](https://togithub.com/external-secrets/external-secrets/pull/2899) - docs: Recommend use of Workload Identity for Azure Key Vault by [@mloskot](https://togithub.com/mloskot) in [https://github.com/external-secrets/external-secrets/pull/2906](https://togithub.com/external-secrets/external-secrets/pull/2906) - Stop deleting all the Secret metadata by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2900](https://togithub.com/external-secrets/external-secrets/pull/2900) - Docs: Add details on how to use FilterPEM function by [@arnoldrw](https://togithub.com/arnoldrw) in [https://github.com/external-secrets/external-secrets/pull/2893](https://togithub.com/external-secrets/external-secrets/pull/2893) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2903](https://togithub.com/external-secrets/external-secrets/pull/2903) - fix: Small typo in the 'templateFrom' guide by [@pabrahamsson](https://togithub.com/pabrahamsson) in [https://github.com/external-secrets/external-secrets/pull/2912](https://togithub.com/external-secrets/external-secrets/pull/2912) - Remove references to Prometheus in Helm chart by [@sebagomez](https://togithub.com/sebagomez) in [https://github.com/external-secrets/external-secrets/pull/2814](https://togithub.com/external-secrets/external-secrets/pull/2814) - fix: ACR access token generator with Workload Identity by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2913](https://togithub.com/external-secrets/external-secrets/pull/2913) - Feat/Adding support for PushSecret using HashiCorp Vault KV v1 by [@tal-asulin](https://togithub.com/tal-asulin) in [https://github.com/external-secrets/external-secrets/pull/2879](https://togithub.com/external-secrets/external-secrets/pull/2879) - feat(fake): deprecate ValueMap to use Value instead by [@vsantos](https://togithub.com/vsantos) in [https://github.com/external-secrets/external-secrets/pull/2884](https://togithub.com/external-secrets/external-secrets/pull/2884) - typo: ref:[#2917](https://togithub.com/external-secrets/external-secrets/issues/2917) Fix typo in ExtermalSecretRewriteTransform by [@Kiyo510](https://togithub.com/Kiyo510) in [https://github.com/external-secrets/external-secrets/pull/2919](https://togithub.com/external-secrets/external-secrets/pull/2919) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2922](https://togithub.com/external-secrets/external-secrets/pull/2922) - Add CONTRIBUTING.md file by [@szh](https://togithub.com/szh) in [https://github.com/external-secrets/external-secrets/pull/2925](https://togithub.com/external-secrets/external-secrets/pull/2925) - docs(alibaba): add access key authentication by [@vsantos](https://togithub.com/vsantos) in [https://github.com/external-secrets/external-secrets/pull/2934](https://togithub.com/external-secrets/external-secrets/pull/2934) - Update Helm snapshot by [@leomichalski](https://togithub.com/leomichalski) in [https://github.com/external-secrets/external-secrets/pull/2935](https://togithub.com/external-secrets/external-secrets/pull/2935) - feat: add custom user agent to scaleway provider by [@luxifer](https://togithub.com/luxifer) in [https://github.com/external-secrets/external-secrets/pull/2938](https://togithub.com/external-secrets/external-secrets/pull/2938) - chore(deps): bump actions/setup-go from 4 to 5 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2943](https://togithub.com/external-secrets/external-secrets/pull/2943) - chore(deps): bump actions/stale from 8 to 9 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2942](https://togithub.com/external-secrets/external-secrets/pull/2942) - chore(deps): bump actions/setup-python from 4.7.1 to 5.0.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2941](https://togithub.com/external-secrets/external-secrets/pull/2941) - chore(deps): bump golang from 1.21.4-alpine to 1.21.5-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2944](https://togithub.com/external-secrets/external-secrets/pull/2944) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2946](https://togithub.com/external-secrets/external-secrets/pull/2946) - Update contact email ([#2948](https://togithub.com/external-secrets/external-secrets/issues/2948)) by [@rrgodhorus](https://togithub.com/rrgodhorus) in [https://github.com/external-secrets/external-secrets/pull/2949](https://togithub.com/external-secrets/external-secrets/pull/2949) - bump 0.9.10 by [@rogertuma](https://togithub.com/rogertuma) in [https://github.com/external-secrets/external-secrets/pull/2958](https://togithub.com/external-secrets/external-secrets/pull/2958) - Helm pod spec extra by [@adrianrobotka](https://togithub.com/adrianrobotka) in [https://github.com/external-secrets/external-secrets/pull/2930](https://togithub.com/external-secrets/external-secrets/pull/2930) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2960](https://togithub.com/external-secrets/external-secrets/pull/2960) - Add support for IBM Cloud Service Credentials secret type by [@nitzann](https://togithub.com/nitzann) in [https://github.com/external-secrets/external-secrets/pull/2950](https://togithub.com/external-secrets/external-secrets/pull/2950) - Minor: extension of PR [#2950](https://togithub.com/external-secrets/external-secrets/issues/2950) Add support for IBM Cloud Service Credentials secret type by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2967](https://togithub.com/external-secrets/external-secrets/pull/2967) - chore: replace deprecated command with environment file by [@jongwooo](https://togithub.com/jongwooo) in [https://github.com/external-secrets/external-secrets/pull/2970](https://togithub.com/external-secrets/external-secrets/pull/2970) - feat: introduce tilt into the development process by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2966](https://togithub.com/external-secrets/external-secrets/pull/2966) - fix(chart): setting processPushSecret by [@fadecore](https://togithub.com/fadecore) in [https://github.com/external-secrets/external-secrets/pull/2968](https://togithub.com/external-secrets/external-secrets/pull/2968) - feat: add templating to PushSecret by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2926](https://togithub.com/external-secrets/external-secrets/pull/2926) - Disable certController when certManager is enabled by webhook by [@kaldorn](https://togithub.com/kaldorn) in [https://github.com/external-secrets/external-secrets/pull/2952](https://togithub.com/external-secrets/external-secrets/pull/2952) - fix: do not error if helm chart version already exists by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external- </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://togithub.com/renovatebot/renovate).  Co-authored-by: kireque-bot[bot] <143391978+kireque-bot[bot]@users.noreply.github.com>

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets](https://togithub.com/external-secrets/external-secrets) | patch | `0.9.7` -> `0.9.14` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets)</summary> ### [`v0.9.14`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.9.14) [Compare Source](https://togithub.com/external-secrets/external-secrets/compare/v0.9.13...v0.9.14) Image: `ghcr.io/external-secrets/external-secrets:v0.9.14` Image: `ghcr.io/external-secrets/external-secrets:v0.9.14-ubi` Image: `ghcr.io/external-secrets/external-secrets:v0.9.14-ubi-boringssl` ##### What's Changed - Aws ssm parameterstore issue 1839 by [@larntz](https://togithub.com/larntz) in [https://github.com/external-secrets/external-secrets/pull/2350](https://togithub.com/external-secrets/external-secrets/pull/2350) - fix: implement parameterstore versions by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2352](https://togithub.com/external-secrets/external-secrets/pull/2352) - 📚 Update stability-support.md by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2358](https://togithub.com/external-secrets/external-secrets/pull/2358) - chore(deps): bump actions/setup-python from 4.6.0 to 4.6.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2366](https://togithub.com/external-secrets/external-secrets/pull/2366) - Update stability-support.md by [@IdanAdar](https://togithub.com/IdanAdar) in [https://github.com/external-secrets/external-secrets/pull/2363](https://togithub.com/external-secrets/external-secrets/pull/2363) - chore: update dependencies by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2348](https://togithub.com/external-secrets/external-secrets/pull/2348) - Adds PushSecret property compatibility with Hashicorp vault Provider by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2361](https://togithub.com/external-secrets/external-secrets/pull/2361) - Adding session tags & transitive tags to SecretStore definition by [@nimaft](https://togithub.com/nimaft) in [https://github.com/external-secrets/external-secrets/pull/2372](https://togithub.com/external-secrets/external-secrets/pull/2372) - feat: allow to set a common set of labels in the helm chart by [@maximeguillet](https://togithub.com/maximeguillet) in [https://github.com/external-secrets/external-secrets/pull/2379](https://togithub.com/external-secrets/external-secrets/pull/2379) - chore(deps): bump mikepenz/release-changelog-builder-action from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2384](https://togithub.com/external-secrets/external-secrets/pull/2384) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2386](https://togithub.com/external-secrets/external-secrets/pull/2386) - Add reconcile_duration metrics by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2382](https://togithub.com/external-secrets/external-secrets/pull/2382) - Add status_condition metric for ClusterExternalSecret by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2380](https://togithub.com/external-secrets/external-secrets/pull/2380) - Fix the test Make task by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2381](https://togithub.com/external-secrets/external-secrets/pull/2381) - Fix exit with no error when cert violates lookahead by [@fernferret](https://togithub.com/fernferret) in [https://github.com/external-secrets/external-secrets/pull/2395](https://togithub.com/external-secrets/external-secrets/pull/2395) - feat: add SLIs to dashboard by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2360](https://togithub.com/external-secrets/external-secrets/pull/2360) - Stop discarding golangci-lint errors by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2383](https://togithub.com/external-secrets/external-secrets/pull/2383) - chore(deps): bump golang from 1.20.4-alpine to 1.20.5-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2405](https://togithub.com/external-secrets/external-secrets/pull/2405) - feat: add e2e tests for aws/assume-role by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2376](https://togithub.com/external-secrets/external-secrets/pull/2376) - feat: add ESO threat model by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2308](https://togithub.com/external-secrets/external-secrets/pull/2308) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2406](https://togithub.com/external-secrets/external-secrets/pull/2406) - Set metadata to external secrets managed by cluster external secrets by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2413](https://togithub.com/external-secrets/external-secrets/pull/2413) - Add lower-kebab name transformer to Doppler provider by [@watsonian](https://togithub.com/watsonian) in [https://github.com/external-secrets/external-secrets/pull/2418](https://togithub.com/external-secrets/external-secrets/pull/2418) - Fix E2E test setup on non-linux machines by [@michaelsauter](https://togithub.com/michaelsauter) in [https://github.com/external-secrets/external-secrets/pull/2414](https://togithub.com/external-secrets/external-secrets/pull/2414) - Add Conjur provider by [@davidh-cyberark](https://togithub.com/davidh-cyberark) in [https://github.com/external-secrets/external-secrets/pull/2412](https://togithub.com/external-secrets/external-secrets/pull/2412) - chore(deps): bump actions/setup-go from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2430](https://togithub.com/external-secrets/external-secrets/pull/2430) - Mount ~/.gitconfig when running make docs by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2421](https://togithub.com/external-secrets/external-secrets/pull/2421) - Fix a broken link in docs/guides/security-best-practices.md by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2420](https://togithub.com/external-secrets/external-secrets/pull/2420) - enhance azure workload identity documentation by [@mruoss](https://togithub.com/mruoss) in [https://github.com/external-secrets/external-secrets/pull/2437](https://togithub.com/external-secrets/external-secrets/pull/2437) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2432](https://togithub.com/external-secrets/external-secrets/pull/2432) - Add status_condition metrics for the secret store controllers by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2404](https://togithub.com/external-secrets/external-secrets/pull/2404) - Add support for cert-manager managed webhook certs by [@fernferret](https://togithub.com/fernferret) in [https://github.com/external-secrets/external-secrets/pull/2394](https://togithub.com/external-secrets/external-secrets/pull/2394) - chore: update roadmap status and version support by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2441](https://togithub.com/external-secrets/external-secrets/pull/2441) - fix: gen changelog and tags from the right branch by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2443](https://togithub.com/external-secrets/external-secrets/pull/2443) - fix: run helm release on release branch as well by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2444](https://togithub.com/external-secrets/external-secrets/pull/2444) - chore: bump helm chart by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2442](https://togithub.com/external-secrets/external-secrets/pull/2442) - Update docs/api/metrics.md by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2445](https://togithub.com/external-secrets/external-secrets/pull/2445) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2448](https://togithub.com/external-secrets/external-secrets/pull/2448) - fix Error exposing secret in the logs by [@jordiprats](https://togithub.com/jordiprats) in [https://github.com/external-secrets/external-secrets/pull/2431](https://togithub.com/external-secrets/external-secrets/pull/2431) - Fix ClusterExternalSecret printcolumns by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2451](https://togithub.com/external-secrets/external-secrets/pull/2451) - docs: refer to support table for deletionPolicy support by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2454](https://togithub.com/external-secrets/external-secrets/pull/2454) - Add more context to error handling for parsing certs in order for log format to display properly by [@DusanNikolic11](https://togithub.com/DusanNikolic11) in [https://github.com/external-secrets/external-secrets/pull/2428](https://togithub.com/external-secrets/external-secrets/pull/2428) - Add IBM provider metadata to secret labels and/or annotations by [@vsroy](https://togithub.com/vsroy) in [https://github.com/external-secrets/external-secrets/pull/2429](https://togithub.com/external-secrets/external-secrets/pull/2429) - feat: add [@shuheiktgw](https://togithub.com/shuheiktgw) as maintainer :tada: by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2459](https://togithub.com/external-secrets/external-secrets/pull/2459) - fix: add delinea env vars for e2e tests by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2469](https://togithub.com/external-secrets/external-secrets/pull/2469) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2463](https://togithub.com/external-secrets/external-secrets/pull/2463) - Remove unused values from helm chart by [@alexanderwoehler](https://togithub.com/alexanderwoehler) in [https://github.com/external-secrets/external-secrets/pull/2470](https://togithub.com/external-secrets/external-secrets/pull/2470) - fix: vault deletionPolicy by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2455](https://togithub.com/external-secrets/external-secrets/pull/2455) - Add support for Delinea DevOps Secrets Vault by [@michaelsauter](https://togithub.com/michaelsauter) in [https://github.com/external-secrets/external-secrets/pull/2415](https://togithub.com/external-secrets/external-secrets/pull/2415) - Update documentation to add CyberArk Conjur provider by [@bnasslahsen](https://togithub.com/bnasslahsen) in [https://github.com/external-secrets/external-secrets/pull/2473](https://togithub.com/external-secrets/external-secrets/pull/2473) - chore: bump helm chart by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2476](https://togithub.com/external-secrets/external-secrets/pull/2476) - docs: adjust conjur documentation by [@EvertonSA](https://togithub.com/EvertonSA) in [https://github.com/external-secrets/external-secrets/pull/2485](https://togithub.com/external-secrets/external-secrets/pull/2485) - Adding documentation for populating Kubernetes Secret with metadata f… by [@vsroy](https://togithub.com/vsroy) in [https://github.com/external-secrets/external-secrets/pull/2487](https://togithub.com/external-secrets/external-secrets/pull/2487) - Adding feature info for populating metadata from IBM Secrets Manager by [@vsroy](https://togithub.com/vsroy) in [https://github.com/external-secrets/external-secrets/pull/2481](https://togithub.com/external-secrets/external-secrets/pull/2481) - Kick ClusterExternalSecret reconciliation when a Namespace is updated by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2486](https://togithub.com/external-secrets/external-secrets/pull/2486) - Add processPushSecret key by [@alex-souslik-hs](https://togithub.com/alex-souslik-hs) in [https://github.com/external-secrets/external-secrets/pull/2479](https://togithub.com/external-secrets/external-secrets/pull/2479) - Refactor ClusterExternalSecretController tests by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2499](https://togithub.com/external-secrets/external-secrets/pull/2499) - chore(deps): bump golang from 1.20.5-alpine to 1.20.6-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2508](https://togithub.com/external-secrets/external-secrets/pull/2508) - chore(deps): bump helm/kind-action from 1.7.0 to 1.8.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2510](https://togithub.com/external-secrets/external-secrets/pull/2510) - chore(deps): bump actions/setup-python from 4.6.1 to 4.7.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2509](https://togithub.com/external-secrets/external-secrets/pull/2509) - Highlight that `property` field must be set for DSV secret by [@michaelsauter](https://togithub.com/michaelsauter) in [https://github.com/external-secrets/external-secrets/pull/2511](https://togithub.com/external-secrets/external-secrets/pull/2511) - Use PartialObjectMetadata to get ExternalSecret by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2504](https://togithub.com/external-secrets/external-secrets/pull/2504) - Remove builder.OnlyMetadata by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2505](https://togithub.com/external-secrets/external-secrets/pull/2505) - fix: downgrade pyyaml <6.0 by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2516](https://togithub.com/external-secrets/external-secrets/pull/2516) - Fix ClusterExternalSecret FailedNamespaces and ProvisionedNamespaces by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2506](https://togithub.com/external-secrets/external-secrets/pull/2506) - Install tools implicitly by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2527](https://togithub.com/external-secrets/external-secrets/pull/2527) - Fix CES problems by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2526](https://togithub.com/external-secrets/external-secrets/pull/2526) - Update docs in common-k8s-secret-types.md by [@rmdg88](https://togithub.com/rmdg88) in [https://github.com/external-secrets/external-secrets/pull/2541](https://togithub.com/external-secrets/external-secrets/pull/2541) - Bug/escape special characters vault by [@arnouthoebreckx](https://togithub.com/arnouthoebreckx) in [https://github.com/external-secrets/external-secrets/pull/2537](https://togithub.com/external-secrets/external-secrets/pull/2537) - Fixed potential linting issue on webhook pdb manifest by [@vtorikianupgrade](https://togithub.com/vtorikianupgrade) in [https://github.com/external-secrets/external-secrets/pull/2551](https://togithub.com/external-secrets/external-secrets/pull/2551) - helm: Add certController readiness port configuration and link prometheus.service.port to args by [@noony](https://togithub.com/noony) in [https://github.com/external-secrets/external-secrets/pull/2529](https://togithub.com/external-secrets/external-secrets/pull/2529) - IBM Provider: Fix documentation templating errors by [@Evan-Bluhm](https://togithub.com/Evan-Bluhm) in [https://github.com/external-secrets/external-secrets/pull/2564](https://togithub.com/external-secrets/external-secrets/pull/2564) - Fix flaky ClusterExternalSecret test by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2558](https://togithub.com/external-secrets/external-secrets/pull/2558) - Disable Git top-level directory owner check by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2559](https://togithub.com/external-secrets/external-secrets/pull/2559) - added userPass authentication to the hashicorp vault provider by [@c0ffee](https://togithub.com/c0ffee) in [https://github.com/external-secrets/external-secrets/pull/2539](https://togithub.com/external-secrets/external-secrets/pull/2539) - Support PushSecret Property for GCP by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2465](https://togithub.com/external-secrets/external-secrets/pull/2465) - chore: bump dependencies by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2568](https://togithub.com/external-secrets/external-secrets/pull/2568) - Integrate Cloak Secrets by [@9876691](https://togithub.com/9876691) in [https://github.com/external-secrets/external-secrets/pull/2108](https://togithub.com/external-secrets/external-secrets/pull/2108) - docs: update release process by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2570](https://togithub.com/external-secrets/external-secrets/pull/2570) - Bumping 0.9.2 by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2574](https://togithub.com/external-secrets/external-secrets/pull/2574) - feat: Include remove orphans logic by [@dacamposol](https://togithub.com/dacamposol) in [https://github.com/external-secrets/external-secrets/pull/1389](https://togithub.com/external-secrets/external-secrets/pull/1389) - Remove paginating namespaces by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2580](https://togithub.com/external-secrets/external-secrets/pull/2580) - IBM Provider: convert the fetched secret to map to access the properties by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2597](https://togithub.com/external-secrets/external-secrets/pull/2597) - Revert "IBM Provider: convert the fetched secret to map to access the properties" by [@IdanAdar](https://togithub.com/IdanAdar) in [https://github.com/external-secrets/external-secrets/pull/2602](https://togithub.com/external-secrets/external-secrets/pull/2602) - IBM Provider: convert the fetched secret to map to access the properties by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2603](https://togithub.com/external-secrets/external-secrets/pull/2603) - Fix orphaned secrets logic with CreationPolicy=Merge by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2587](https://togithub.com/external-secrets/external-secrets/pull/2587) - Fix grafana dashboard $datasource by [@NissesSenap](https://togithub.com/NissesSenap) in [https://github.com/external-secrets/external-secrets/pull/2594](https://togithub.com/external-secrets/external-secrets/pull/2594) - Update the devguide by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2588](https://togithub.com/external-secrets/external-secrets/pull/2588) - Fixing when orphaned secret deletion when target.Name is not set by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2609](https://togithub.com/external-secrets/external-secrets/pull/2609) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2605](https://togithub.com/external-secrets/external-secrets/pull/2605) - release 0.9.3 by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2612](https://togithub.com/external-secrets/external-secrets/pull/2612) - IBM Provider: handle special case for imported cert secret type by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2629](https://togithub.com/external-secrets/external-secrets/pull/2629) - Set builder.OnlyMetadata back for Secrets by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2625](https://togithub.com/external-secrets/external-secrets/pull/2625) - IBM Provider: handle case where secret is destroyed by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2637](https://togithub.com/external-secrets/external-secrets/pull/2637) - Update docs FAQ regarding refreshTime and lastTransitionTime by [@rakrueger](https://togithub.com/rakrueger) in [https://github.com/external-secrets/external-secrets/pull/2640](https://togithub.com/external-secrets/external-secrets/pull/2640) - Fix a command in Google Cloud Secret Manager document by [@ftnext](https://togithub.com/ftnext) in [https://github.com/external-secrets/external-secrets/pull/2627](https://togithub.com/external-secrets/external-secrets/pull/2627) - Update common-k8s-secret-types.md by [@Layer8Err](https://togithub.com/Layer8Err) in [https://github.com/external-secrets/external-secrets/pull/2624](https://togithub.com/external-secrets/external-secrets/pull/2624) - chore(deps): bump golang from 1.20.6-alpine to 1.21.0-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2604](https://togithub.com/external-secrets/external-secrets/pull/2604) - Using Bitwarden notes for multiline secrets by [@laszlocph](https://togithub.com/laszlocph) in [https://github.com/external-secrets/external-secrets/pull/2635](https://togithub.com/external-secrets/external-secrets/pull/2635) - fix: template funcs need to be wrapped in raw block by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2642](https://togithub.com/external-secrets/external-secrets/pull/2642) - fixing label limits by [@gusfcarvalho](https://togithub.com/gusfcarvalho) in [https://github.com/external-secrets/external-secrets/pull/2645](https://togithub.com/external-secrets/external-secrets/pull/2645) - chore: bump 0.9.4 by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2649](https://togithub.com/external-secrets/external-secrets/pull/2649) - Add in s390x build by [@Joshua-Beha](https://togithub.com/Joshua-Beha) in [https://github.com/external-secrets/external-secrets/pull/2613](https://togithub.com/external-secrets/external-secrets/pull/2613) - Fix a ClusterExternalSecret flaky test by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2641](https://togithub.com/external-secrets/external-secrets/pull/2641) - Stop using builder.OnlyMetadata for ExternalSecrets by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2626](https://togithub.com/external-secrets/external-secrets/pull/2626) - docs: add AWS IAM policy for usage with PushSecret by [@aschaber1](https://togithub.com/aschaber1) in [https://github.com/external-secrets/external-secrets/pull/2653](https://togithub.com/external-secrets/external-secrets/pull/2653) - Stop ignoring ExternalSecret reconciliation error by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2583](https://togithub.com/external-secrets/external-secrets/pull/2583) - Remove metrics when a resouce is deleted by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2576](https://togithub.com/external-secrets/external-secrets/pull/2576) - Delete old ClusterExternalSecrets when name changed by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2601](https://togithub.com/external-secrets/external-secrets/pull/2601) - Introduce RetrySettings support for Hashicorp Vault by [@12345ieee](https://togithub.com/12345ieee) in [https://github.com/external-secrets/external-secrets/pull/2528](https://togithub.com/external-secrets/external-secrets/pull/2528) - fix(externalsecret): infinite reconcile loop with Merge secret by [@agaudreault](https://togithub.com/agaudreault) in [https://github.com/external-secrets/external-secrets/pull/2525](https://togithub.com/external-secrets/external-secrets/pull/2525) - chore: bump dependencies by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2654](https://togithub.com/external-secrets/external-secrets/pull/2654) - Report not ready when no namespace matches by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2582](https://togithub.com/external-secrets/external-secrets/pull/2582) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2657](https://togithub.com/external-secrets/external-secrets/pull/2657) - Support PushSecret metadata by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2600](https://togithub.com/external-secrets/external-secrets/pull/2600) - bump Kubernetes support version by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2659](https://togithub.com/external-secrets/external-secrets/pull/2659) - chore: bump EKS e2e test version by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2666](https://togithub.com/external-secrets/external-secrets/pull/2666) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2675](https://togithub.com/external-secrets/external-secrets/pull/2675) - Refacto scaleway provider by [@luxifer](https://togithub.com/luxifer) in [https://github.com/external-secrets/external-secrets/pull/2667](https://togithub.com/external-secrets/external-secrets/pull/2667) - Convert IBM auth struct fields to pointers by [@Akurata](https://togithub.com/Akurata) in [https://github.com/external-secrets/external-secrets/pull/2669](https://togithub.com/external-secrets/external-secrets/pull/2669) - Docs: Improve Hashicorp Vault PushSecret documentation by [@xoanmi](https://togithub.com/xoanmi) in [https://github.com/external-secrets/external-secrets/pull/2679](https://togithub.com/external-secrets/external-secrets/pull/2679) - feat: Updated check ServiceMontior check to include APIVersions check for helm charts by [@ppatel1604](https://togithub.com/ppatel1604) in [https://github.com/external-secrets/external-secrets/pull/2683](https://togithub.com/external-secrets/external-secrets/pull/2683) - chore(deps): bump tibdex/github-app-token from 1 to 2 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2686](https://togithub.com/external-secrets/external-secrets/pull/2686) - Fix: Replaced selectorLabels with labels by [@ppatel1604](https://togithub.com/ppatel1604) in [https://github.com/external-secrets/external-secrets/pull/2672](https://togithub.com/external-secrets/external-secrets/pull/2672) - chore(deps): bump actions/checkout from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2687](https://togithub.com/external-secrets/external-secrets/pull/2687) - chore(deps): bump golang from 1.21.0-alpine to 1.21.1-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2688](https://togithub.com/external-secrets/external-secrets/pull/2688) - fix: do not swallow errors when create or update fails by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2693](https://togithub.com/external-secrets/external-secrets/pull/2693) - fix: ensure to correctly encode binary data as base64 by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2681](https://togithub.com/external-secrets/external-secrets/pull/2681) - chore(deps): bump docker/setup-qemu-action from 2 to 3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2707](https://togithub.com/external-secrets/external-secrets/pull/2707) - chore(deps): bump docker/login-action from 2 to 3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2708](https://togithub.com/external-secrets/external-secrets/pull/2708) - chore(deps): bump docker/setup-buildx-action from 2 to 3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2706](https://togithub.com/external-secrets/external-secrets/pull/2706) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2710](https://togithub.com/external-secrets/external-secrets/pull/2710) - Update Flux example to 0.9.4 by [@Apollorion](https://togithub.com/Apollorion) in [https://github.com/external-secrets/external-secrets/pull/2715](https://togithub.com/external-secrets/external-secrets/pull/2715) - Documentation: callout templating escapes for helm users by [@rteeling](https://togithub.com/rteeling) in [https://github.com/external-secrets/external-secrets/pull/2704](https://togithub.com/external-secrets/external-secrets/pull/2704) - fix: do not recreate secret if deletion timestamp is set by [@markuslackner](https://togithub.com/markuslackner) in [https://github.com/external-secrets/external-secrets/pull/2718](https://togithub.com/external-secrets/external-secrets/pull/2718) - Use locks for GCP PushSecrets by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2678](https://togithub.com/external-secrets/external-secrets/pull/2678) - fix: assign default value to prevent nil panic by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2722](https://togithub.com/external-secrets/external-secrets/pull/2722) - chore: update dependencies by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2724](https://togithub.com/external-secrets/external-secrets/pull/2724) - chore: bump version by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2725](https://togithub.com/external-secrets/external-secrets/pull/2725) - Let ManagedField handle metadata by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2705](https://togithub.com/external-secrets/external-secrets/pull/2705) - Conjur JWT support by [@kbristow](https://togithub.com/kbristow) in [https://github.com/external-secrets/external-secrets/pull/2591](https://togithub.com/external-secrets/external-secrets/pull/2591) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2729](https://togithub.com/external-secrets/external-secrets/pull/2729) - Complement full-cluster-secret-store oracle provider example by [@antoniolago](https://togithub.com/antoniolago) in [https://github.com/external-secrets/external-secrets/pull/2731](https://togithub.com/external-secrets/external-secrets/pull/2731) - Fix helm.test by reflecting recent changes by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2733](https://togithub.com/external-secrets/external-secrets/pull/2733) - Reflect certController.readinessProbe.port to readinessProbe by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2732](https://togithub.com/external-secrets/external-secrets/pull/2732) - Support PushSecret Property for AWS SM by [@benbertrands](https://togithub.com/benbertrands) in [https://github.com/external-secrets/external-secrets/pull/2623](https://togithub.com/external-secrets/external-secrets/pull/2623) - doc: add more info for clusterLocation parameter in gcp by [@ricosega](https://togithub.com/ricosega) in [https://github.com/external-secrets/external-secrets/pull/2741](https://togithub.com/external-secrets/external-secrets/pull/2741) - Scaleway secret path by [@luxifer](https://togithub.com/luxifer) in [https://github.com/external-secrets/external-secrets/pull/2737](https://togithub.com/external-secrets/external-secrets/pull/2737) - add force flag to bitwarden sync in bitwarden cli deployment documentation by [@garyhodgson](https://togithub.com/garyhodgson) in [https://github.com/external-secrets/external-secrets/pull/2742](https://togithub.com/external-secrets/external-secrets/pull/2742) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2749](https://togithub.com/external-secrets/external-secrets/pull/2749) - chore(deps): bump actions/setup-python from 4.7.0 to 4.7.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2765](https://togithub.com/external-secrets/external-secrets/pull/2765) - chore(deps): bump golang from 1.21.1-alpine to 1.21.2-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2766](https://togithub.com/external-secrets/external-secrets/pull/2766) - \[adopters] Adding Pets at home by [@userbradley](https://togithub.com/userbradley) in [https://github.com/external-secrets/external-secrets/pull/2773](https://togithub.com/external-secrets/external-secrets/pull/2773) - leverage IBM provider's latest API to get the secret by name by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2750](https://togithub.com/external-secrets/external-secrets/pull/2750) - Oracle provider retry by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2762](https://togithub.com/external-secrets/external-secrets/pull/2762) - Updated docum of PushSecret by [@sebagomez](https://togithub.com/sebagomez) in [https://github.com/external-secrets/external-secrets/pull/2391](https://togithub.com/external-secrets/external-secrets/pull/2391) - fix: enable sharedConfigState in AWS auth provider by [@Kevintjeb](https://togithub.com/Kevintjeb) in [https://github.com/external-secrets/external-secrets/pull/2777](https://togithub.com/external-secrets/external-secrets/pull/2777) - Fix the k8s double encoding problem by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2760](https://togithub.com/external-secrets/external-secrets/pull/2760) - docs: mention auth-delegator role in vault provider by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2734](https://togithub.com/external-secrets/external-secrets/pull/2734) - bump chart to 0.9.6 by [@knelasevero](https://togithub.com/knelasevero) in [https://github.com/external-secrets/external-secrets/pull/2786](https://togithub.com/external-secrets/external-secrets/pull/2786) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2788](https://togithub.com/external-secrets/external-secrets/pull/2788) - chore(deps): bump golang from 1.21.2-alpine to 1.21.3-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2787](https://togithub.com/external-secrets/external-secrets/pull/2787) - feat: bump go + deps by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2794](https://togithub.com/external-secrets/external-secrets/pull/2794) - bump 0.9.7 chart by [@knelasevero](https://togithub.com/knelasevero) in [https://github.com/external-secrets/external-secrets/pull/2796](https://togithub.com/external-secrets/external-secrets/pull/2796) - chore(deps): bump fkirc/skip-duplicate-actions from 5.3.0 to 5.3.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2797](https://togithub.com/external-secrets/external-secrets/pull/2797) - fix: do not iterate on the raw response value by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2801](https://togithub.com/external-secrets/external-secrets/pull/2801) - Oracle: Workload Identity authentication by [@anders-swanson](https://togithub.com/anders-swanson) in [https://github.com/external-secrets/external-secrets/pull/2781](https://togithub.com/external-secrets/external-secrets/pull/2781) - fix: update the linter so that it runs latest and disable debguard by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2806](https://togithub.com/external-secrets/external-secrets/pull/2806) - fix: also fix the ci jobs linter version by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2807](https://togithub.com/external-secrets/external-secrets/pull/2807) - add directive to apply template on secret names by [@sonny-semc](https://togithub.com/sonny-semc) in [https://github.com/external-secrets/external-secrets/pull/2802](https://togithub.com/external-secrets/external-secrets/pull/2802) - feat: add namespace list selector to ClusterExternalSecrets by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2803](https://togithub.com/external-secrets/external-secrets/pull/2803) - Add Support for fips regions. by [@tomelliot16](https://togithub.com/tomelliot16) in [https://github.com/external-secrets/external-secrets/pull/2805](https://togithub.com/external-secrets/external-secrets/pull/2805) - Fix skew between refreshInterval and refreshTime that can lead to skipped refresh. by [@vtorikianupgrade](https://togithub.com/vtorikianupgrade) in [https://github.com/external-secrets/external-secrets/pull/2815](https://togithub.com/external-secrets/external-secrets/pull/2815) - add missing commands to the getting started guide by [@Nicolas-Roberto](https://togithub.com/Nicolas-Roberto) in [https://github.com/external-secrets/external-secrets/pull/2751](https://togithub.com/external-secrets/external-secrets/pull/2751) - feat: add AKS e2e managed by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2811](https://togithub.com/external-secrets/external-secrets/pull/2811) - chore: test e2e-managed & fixup docs by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2818](https://togithub.com/external-secrets/external-secrets/pull/2818) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2822](https://togithub.com/external-secrets/external-secrets/pull/2822) - Add validations for the enum values by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2819](https://togithub.com/external-secrets/external-secrets/pull/2819) - feat: give [@Skarlso](https://togithub.com/Skarlso) maintainer permissions by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2823](https://togithub.com/external-secrets/external-secrets/pull/2823) - chore: release 0.9.8 by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2826](https://togithub.com/external-secrets/external-secrets/pull/2826) - Let setup-go handle go related caches by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2828](https://togithub.com/external-secrets/external-secrets/pull/2828) - Error enhancements for data\[] array errors by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2834](https://togithub.com/external-secrets/external-secrets/pull/2834) - feat: k8s provider can handle all types of secret, fix [#2709](https://togithub.com/external-secrets/external-secrets/issues/2709) by [@minhoryang](https://togithub.com/minhoryang) in [https://github.com/external-secrets/external-secrets/pull/2792](https://togithub.com/external-secrets/external-secrets/pull/2792) - feat: Oracle provider service account masquerade by [@anders-swanson](https://togithub.com/anders-swanson) in [https://github.com/external-secrets/external-secrets/pull/2817](https://togithub.com/external-secrets/external-secrets/pull/2817) - ref: cleanup condition handling for objects by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2829](https://togithub.com/external-secrets/external-secrets/pull/2829) - design: PushSecret `updatePolicy` by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2664](https://togithub.com/external-secrets/external-secrets/pull/2664) - fix: remove sourceRef.generatorRef from .data\[] by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2735](https://togithub.com/external-secrets/external-secrets/pull/2735) - Docs - Minor Note to assist future readers by [@CharlKlein](https://togithub.com/CharlKlein) in [https://github.com/external-secrets/external-secrets/pull/2839](https://togithub.com/external-secrets/external-secrets/pull/2839) - Oracle provider implementation by [@anders-swanson](https://togithub.com/anders-swanson) in [https://github.com/external-secrets/external-secrets/pull/2840](https://togithub.com/external-secrets/external-secrets/pull/2840) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2850](https://togithub.com/external-secrets/external-secrets/pull/2850) - chore(deps): bump helm/chart-releaser-action from 1.5.0 to 1.6.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2848](https://togithub.com/external-secrets/external-secrets/pull/2848) - docs: Add Codefresh to list of adopters by [@korenyoni](https://togithub.com/korenyoni) in [https://github.com/external-secrets/external-secrets/pull/2856](https://togithub.com/external-secrets/external-secrets/pull/2856) - chore(deps): bump helm/chart-testing-action from 2.3.1 to 2.6.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2849](https://togithub.com/external-secrets/external-secrets/pull/2849) - fix: add missing omitempty json tags for optional fields by [@uhthomas](https://togithub.com/uhthomas) in [https://github.com/external-secrets/external-secrets/pull/2855](https://togithub.com/external-secrets/external-secrets/pull/2855) - Support GetAllSecrets for the fake provider by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2844](https://togithub.com/external-secrets/external-secrets/pull/2844) - feat: fix cert-controller readiness probe by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2857](https://togithub.com/external-secrets/external-secrets/pull/2857) - Refactor the PushSecret interface by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2859](https://togithub.com/external-secrets/external-secrets/pull/2859) - feat: update dataFrom with use of generator by [@LucasPimentel123](https://togithub.com/LucasPimentel123) in [https://github.com/external-secrets/external-secrets/pull/2793](https://togithub.com/external-secrets/external-secrets/pull/2793) - Validate data or dataFrom existence by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2867](https://togithub.com/external-secrets/external-secrets/pull/2867) - Update PAUL.yaml to include roger by [@knelasevero](https://togithub.com/knelasevero) in [https://github.com/external-secrets/external-secrets/pull/2873](https://togithub.com/external-secrets/external-secrets/pull/2873) - bump 0.9.9 by [@rogertuma](https://togithub.com/rogertuma) in [https://github.com/external-secrets/external-secrets/pull/2872](https://togithub.com/external-secrets/external-secrets/pull/2872) - chore(deps): bump golang from 1.21.3-alpine to 1.21.4-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2870](https://togithub.com/external-secrets/external-secrets/pull/2870) - feat: AWS SecretsManager Config (allow ForceDeleteWithoutRecovery for PushSecret) by [@korenyoni](https://togithub.com/korenyoni) in [https://github.com/external-secrets/external-secrets/pull/2854](https://togithub.com/external-secrets/external-secrets/pull/2854) - docs: remove additional space in dockercreds example that causes the last curly brace to be removed by [@visokoo](https://togithub.com/visokoo) in [https://github.com/external-secrets/external-secrets/pull/2877](https://togithub.com/external-secrets/external-secrets/pull/2877) - docs: fix deprecation policy typo by [@vsantos](https://togithub.com/vsantos) in [https://github.com/external-secrets/external-secrets/pull/2875](https://togithub.com/external-secrets/external-secrets/pull/2875) - add validations for the remaining enum values by [@lakhanjindam](https://togithub.com/lakhanjindam) in [https://github.com/external-secrets/external-secrets/pull/2860](https://togithub.com/external-secrets/external-secrets/pull/2860) - chore(deps): bump actions/github-script from 6 to 7 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2889](https://togithub.com/external-secrets/external-secrets/pull/2889) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2890](https://togithub.com/external-secrets/external-secrets/pull/2890) - feat: allow pushing the whole secret to the provider by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2862](https://togithub.com/external-secrets/external-secrets/pull/2862) - design: PushSecret generator integration by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2665](https://togithub.com/external-secrets/external-secrets/pull/2665) - fix: `webhook` support more types when parsing response by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2899](https://togithub.com/external-secrets/external-secrets/pull/2899) - docs: Recommend use of Workload Identity for Azure Key Vault by [@mloskot](https://togithub.com/mloskot) in [https://github.com/external-secrets/external-secrets/pull/2906](https://togithub.com/external-secrets/external-secrets/pull/2906) - Stop deleting all the Secret metadata by [@shuheiktgw](https://togithub.com/shuheiktgw) in [https://github.com/external-secrets/external-secrets/pull/2900](https://togithub.com/external-secrets/external-secrets/pull/2900) - Docs: Add details on how to use FilterPEM function by [@arnoldrw](https://togithub.com/arnoldrw) in [https://github.com/external-secrets/external-secrets/pull/2893](https://togithub.com/external-secrets/external-secrets/pull/2893) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2903](https://togithub.com/external-secrets/external-secrets/pull/2903) - fix: Small typo in the 'templateFrom' guide by [@pabrahamsson](https://togithub.com/pabrahamsson) in [https://github.com/external-secrets/external-secrets/pull/2912](https://togithub.com/external-secrets/external-secrets/pull/2912) - Remove references to Prometheus in Helm chart by [@sebagomez](https://togithub.com/sebagomez) in [https://github.com/external-secrets/external-secrets/pull/2814](https://togithub.com/external-secrets/external-secrets/pull/2814) - fix: ACR access token generator with Workload Identity by [@moolen](https://togithub.com/moolen) in [https://github.com/external-secrets/external-secrets/pull/2913](https://togithub.com/external-secrets/external-secrets/pull/2913) - Feat/Adding support for PushSecret using HashiCorp Vault KV v1 by [@tal-asulin](https://togithub.com/tal-asulin) in [https://github.com/external-secrets/external-secrets/pull/2879](https://togithub.com/external-secrets/external-secrets/pull/2879) - feat(fake): deprecate ValueMap to use Value instead by [@vsantos](https://togithub.com/vsantos) in [https://github.com/external-secrets/external-secrets/pull/2884](https://togithub.com/external-secrets/external-secrets/pull/2884) - typo: ref:[#2917](https://togithub.com/external-secrets/external-secrets/issues/2917) Fix typo in ExtermalSecretRewriteTransform by [@Kiyo510](https://togithub.com/Kiyo510) in [https://github.com/external-secrets/external-secrets/pull/2919](https://togithub.com/external-secrets/external-secrets/pull/2919) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2922](https://togithub.com/external-secrets/external-secrets/pull/2922) - Add CONTRIBUTING.md file by [@szh](https://togithub.com/szh) in [https://github.com/external-secrets/external-secrets/pull/2925](https://togithub.com/external-secrets/external-secrets/pull/2925) - docs(alibaba): add access key authentication by [@vsantos](https://togithub.com/vsantos) in [https://github.com/external-secrets/external-secrets/pull/2934](https://togithub.com/external-secrets/external-secrets/pull/2934) - Update Helm snapshot by [@leomichalski](https://togithub.com/leomichalski) in [https://github.com/external-secrets/external-secrets/pull/2935](https://togithub.com/external-secrets/external-secrets/pull/2935) - feat: add custom user agent to scaleway provider by [@luxifer](https://togithub.com/luxifer) in [https://github.com/external-secrets/external-secrets/pull/2938](https://togithub.com/external-secrets/external-secrets/pull/2938) - chore(deps): bump actions/setup-go from 4 to 5 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2943](https://togithub.com/external-secrets/external-secrets/pull/2943) - chore(deps): bump actions/stale from 8 to 9 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2942](https://togithub.com/external-secrets/external-secrets/pull/2942) - chore(deps): bump actions/setup-python from 4.7.1 to 5.0.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2941](https://togithub.com/external-secrets/external-secrets/pull/2941) - chore(deps): bump golang from 1.21.4-alpine to 1.21.5-alpine by [@dependabot](https://togithub.com/dependabot) in [https://github.com/external-secrets/external-secrets/pull/2944](https://togithub.com/external-secrets/external-secrets/pull/2944) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2946](https://togithub.com/external-secrets/external-secrets/pull/2946) - Update contact email ([#2948](https://togithub.com/external-secrets/external-secrets/issues/2948)) by [@rrgodhorus](https://togithub.com/rrgodhorus) in [https://github.com/external-secrets/external-secrets/pull/2949](https://togithub.com/external-secrets/external-secrets/pull/2949) - bump 0.9.10 by [@rogertuma](https://togithub.com/rogertuma) in [https://github.com/external-secrets/external-secrets/pull/2958](https://togithub.com/external-secrets/external-secrets/pull/2958) - Helm pod spec extra by [@adrianrobotka](https://togithub.com/adrianrobotka) in [https://github.com/external-secrets/external-secrets/pull/2930](https://togithub.com/external-secrets/external-secrets/pull/2930) - chore: update dependencies by [@eso-service-account-app](https://togithub.com/eso-service-account-app) in [https://github.com/external-secrets/external-secrets/pull/2960](https://togithub.com/external-secrets/external-secrets/pull/2960) - Add support for IBM Cloud Service Credentials secret type by [@nitzann](https://togithub.com/nitzann) in [https://github.com/external-secrets/external-secrets/pull/2950](https://togithub.com/external-secrets/external-secrets/pull/2950) - Minor: extension of PR [#2950](https://togithub.com/external-secrets/external-secrets/issues/2950) Add support for IBM Cloud Service Credentials secret type by [@Shanti-G](https://togithub.com/Shanti-G) in [https://github.com/external-secrets/external-secrets/pull/2967](https://togithub.com/external-secrets/external-secrets/pull/2967) - chore: replace deprecated command with environment file by [@jongwooo](https://togithub.com/jongwooo) in [https://github.com/external-secrets/external-secrets/pull/2970](https://togithub.com/external-secrets/external-secrets/pull/2970) - feat: introduce tilt into the development process by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2966](https://togithub.com/external-secrets/external-secrets/pull/2966) - fix(chart): setting processPushSecret by [@fadecore](https://togithub.com/fadecore) in [https://github.com/external-secrets/external-secrets/pull/2968](https://togithub.com/external-secrets/external-secrets/pull/2968) - feat: add templating to PushSecret by [@Skarlso](https://togithub.com/Skarlso) in [https://github.com/external-secrets/external-secrets/pull/2926](https://togithub.com/external-secrets/external-secrets/pull/2926) - Disable certController when certManager is enabled by webhook by [@kaldorn](https://togithub.com/kaldorn) in [https://github.com/external-secrets/e </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/lambchop4prez/network).

nimaft requested a review from a team as a code owner May 30, 2023 19:01

nimaft requested review from sebagomez and removed request for a team May 30, 2023 19:01

paul-the-alien Bot reviewed May 30, 2023

View reviewed changes

nimaft and others added 5 commits May 30, 2023 12:08

feat: added session tag capability to assume role

4265df8

modified apis/externalsecrets/v1beta1/secretstore_aws_types.go to expect session tags and transitive tags structs modified pkg/provider/aws/auth/auth.go to pass session tags if they exist Signed-off-by: Nima Fotouhi <fotouhi@live.com>

removed unnecessary commented out code

e3b213d

Signed-off-by: Nima Fotouhi <fotouhi@live.com>

📚 Update stability-support.md (external-secrets#2363)

53f4b1a

Staring 0.82, IBM Cloud Secrets Manager supports fetching secrets by name as well as ID. Signed-off-by: Idan Adar <iadar@il.ibm.com> Signed-off-by: Nima Fotouhi <fotouhi@live.com>

nimaft force-pushed the nimaft/awsTags branch from c7cd7b8 to 53f4b1a Compare May 30, 2023 19:09

Merge branch 'main' into nimaft/awsTags

349eaa6

nimaft and others added 3 commits May 31, 2023 05:07

feat: ran make reviewable tasks (except for docs)

d031ff6

Signed-off-by: Nima Fotouhi <fotouhi@live.com>

Merge branch 'main' into nimaft/awsTags

3256113

refractor: made addition of TransitiveTagKeys to setAssumeRoleOptions…

4611bba

… dependant to presence of SessionTags. So if user includes Transitive Tags in SecretStore definition without Session Tags, tags get ignored Signed-off-by: Nima Fotouhi <fotouhi@live.com>

moolen self-requested a review May 31, 2023 17:42

moolen self-assigned this May 31, 2023

moolen approved these changes Jun 1, 2023

View reviewed changes

moolen merged commit e7799e7 into external-secrets:main Jun 1, 2023

moolen mentioned this pull request Jun 2, 2023

feat: add e2e tests for aws/assume-role #2376

Merged

renovate Bot mentioned this pull request May 17, 2024

Update all dependencies nolte/k8s-home-lab#775

Merged

1 task

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Adding session tags & transitive tags to SecretStore definition#2372

Adding session tags & transitive tags to SecretStore definition#2372
moolen merged 9 commits intoexternal-secrets:mainfrom
nimaft:nimaft/awsTags

nimaft commented May 30, 2023

Uh oh!

paul-the-alien Bot left a comment

Uh oh!

nimaft commented May 30, 2023 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented May 31, 2023

Uh oh!

moolen commented Jun 1, 2023

Uh oh!

moolen commented Jun 1, 2023

Uh oh!

moolen left a comment

Uh oh!

nimaft commented Jun 1, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

nimaft commented May 30, 2023

Problem Statement

Related Issue

Proposed Changes

Checklist

Uh oh!

paul-the-alien Bot left a comment

Choose a reason for hiding this comment

Uh oh!

nimaft commented May 30, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

sonarqubecloud Bot commented May 31, 2023

Uh oh!

moolen commented Jun 1, 2023

Uh oh!

moolen commented Jun 1, 2023

Uh oh!

moolen left a comment

Choose a reason for hiding this comment

Uh oh!

nimaft commented Jun 1, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

nimaft commented May 30, 2023 •

edited

Loading