Skip to content

feat: update external-secrets to 1.2.1 #765

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
eyarz merged 1 commit into from
Jan 11, 2026
Merged

feat: update external-secrets to 1.2.1 #765

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
48 changes: 39 additions & 9 deletions external-secrets.io/externalsecret_v1.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
{
"description": "ExternalSecret is the Schema for the external-secrets API.",
"description": "ExternalSecret is the Schema for the external-secrets API.\nIt defines how to fetch data from external APIs and make it available as Kubernetes Secrets.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
Expand Down Expand Up @@ -167,6 +167,7 @@
"dataFrom": {
"description": "DataFrom is used to fetch all properties from a specific Provider data\nIf multiple entries are specified, the Secret keys are merged in the specified order",
"items": {
"description": "ExternalSecretDataFromRemoteRef defines the connection between the Kubernetes Secret keys and the Provider data\nwhen using DataFrom to fetch multiple values from a Provider.",
"properties": {
"extract": {
"description": "Used to extract multiple key/value pairs from one secret\nNote: Extract does not support sourceRef.Generator or sourceRef.GeneratorRef.",
Expand Down Expand Up @@ -271,6 +272,7 @@
"rewrite": {
"description": "Used to rewrite secret Keys after getting them from the secret Provider\nMultiple Rewrite operations can be provided. They are applied in a layered order (first to last)",
"items": {
"description": "ExternalSecretRewrite defines how to rewrite secret data values before they are written to the Secret.",
"maxProperties": 1,
"minProperties": 1,
"properties": {
Expand Down Expand Up @@ -442,8 +444,8 @@
"type": "array"
},
"refreshInterval": {
"default": "1h",
"description": "RefreshInterval is the amount of time before the values are read again from the SecretStore provider,\nspecified as Golang Duration strings.\nValid time units are \"ns\", \"us\" (or \"\u00b5s\"), \"ms\", \"s\", \"m\", \"h\"\nExample values: \"1h\", \"2h30m\", \"10s\"\nMay be set to zero to fetch and create it once. Defaults to 1h.",
"default": "1h0m0s",
"description": "RefreshInterval is the amount of time before the values are read again from the SecretStore provider,\nspecified as Golang Duration strings.\nValid time units are \"ns\", \"us\" (or \"\u00b5s\"), \"ms\", \"s\", \"m\", \"h\"\nExample values: \"1h0m0s\", \"2h30m0s\", \"10m0s\"\nMay be set to \"0s\" to fetch and create it once. Defaults to 1h0m0s.",
"type": "string"
},
"refreshPolicy": {
Expand Down Expand Up @@ -482,7 +484,7 @@
"creationPolicy": "Owner",
"deletionPolicy": "Retain"
},
"description": "ExternalSecretTarget defines the Kubernetes Secret to be created\nThere can be only one target per ExternalSecret.",
"description": "ExternalSecretTarget defines the Kubernetes Secret to be created,\nthere can be only one target per ExternalSecret.",
"properties": {
"creationPolicy": {
"default": "Owner",
Expand All @@ -509,6 +511,27 @@
"description": "Immutable defines if the final secret will be immutable",
"type": "boolean"
},
"manifest": {
"description": "Manifest defines a custom Kubernetes resource to create instead of a Secret.\nWhen specified, ExternalSecret will create the resource type defined here\n(e.g., ConfigMap, Custom Resource) instead of a Secret.\nWarning: Using Generic target. Make sure access policies and encryption are properly configured.",
"properties": {
"apiVersion": {
"description": "APIVersion of the target resource (e.g., \"v1\" for ConfigMap, \"argoproj.io/v1alpha1\" for ArgoCD Application)",
"minLength": 1,
"type": "string"
},
"kind": {
"description": "Kind of the target resource (e.g., \"ConfigMap\", \"Application\")",
"minLength": 1,
"type": "string"
}
},
"required": [
"apiVersion",
"kind"
],
"type": "object",
"additionalProperties": false
},
"name": {
"description": "The name of the Secret resource to be managed.\nDefaults to the .metadata.name of the ExternalSecret resource",
"maxLength": 253,
Expand All @@ -535,6 +558,7 @@
},
"mergePolicy": {
"default": "Replace",
"description": "TemplateMergePolicy defines how the rendered template should be merged with the existing Secret data.",
"enum": [
"Replace",
"Merge"
Expand Down Expand Up @@ -568,12 +592,15 @@
},
"templateFrom": {
"items": {
"description": "TemplateFrom specifies a source for templates.\nEach item in the list can either reference a ConfigMap or a Secret resource.",
"properties": {
"configMap": {
"description": "TemplateRef specifies a reference to either a ConfigMap or a Secret resource.",
"properties": {
"items": {
"description": "A list of keys in the ConfigMap/Secret to use as templates for Secret data",
"items": {
"description": "TemplateRefItem specifies a key in the ConfigMap/Secret to use as a template for Secret data.",
"properties": {
"key": {
"description": "A key in the ConfigMap/Secret",
Expand All @@ -584,6 +611,7 @@
},
"templateAs": {
"default": "Values",
"description": "TemplateScope specifies how the template keys should be interpreted.",
"enum": [
"Values",
"KeysAndValues"
Expand Down Expand Up @@ -618,10 +646,12 @@
"type": "string"
},
"secret": {
"description": "TemplateRef specifies a reference to either a ConfigMap or a Secret resource.",
"properties": {
"items": {
"description": "A list of keys in the ConfigMap/Secret to use as templates for Secret data",
"items": {
"description": "TemplateRefItem specifies a key in the ConfigMap/Secret to use as a template for Secret data.",
"properties": {
"key": {
"description": "A key in the ConfigMap/Secret",
Expand All @@ -632,6 +662,7 @@
},
"templateAs": {
"default": "Values",
"description": "TemplateScope specifies how the template keys should be interpreted.",
"enum": [
"Values",
"KeysAndValues"
Expand Down Expand Up @@ -664,11 +695,7 @@
},
"target": {
"default": "Data",
"enum": [
"Data",
"Annotations",
"Labels"
],
"description": "Target specifies where to place the template result.\nFor Secret resources, common values are: \"Data\", \"Annotations\", \"Labels\".\nFor custom resources (when spec.target.manifest is set), this supports\nnested paths like \"spec.database.config\" or \"data\".",
"type": "string"
}
},
Expand All @@ -693,6 +720,7 @@
"additionalProperties": false
},
"status": {
"description": "ExternalSecretStatus defines the observed state of ExternalSecret.",
"properties": {
"binding": {
"description": "Binding represents a servicebinding.io Provisioned Service reference to the secret",
Expand All @@ -709,6 +737,7 @@
},
"conditions": {
"items": {
"description": "ExternalSecretStatusCondition defines a status condition of an ExternalSecret resource.",
"properties": {
"lastTransitionTime": {
"format": "date-time",
Expand All @@ -724,6 +753,7 @@
"type": "string"
},
"type": {
"description": "ExternalSecretConditionType defines a value type for ExternalSecret conditions.",
"enum": [
"Ready",
"Deleted"
Expand Down
20 changes: 17 additions & 3 deletions external-secrets.io/externalsecret_v1beta1.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
{
"description": "ExternalSecret is the Schema for the external-secrets API.",
"description": "ExternalSecret is the schema for the external-secrets API.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
Expand Down Expand Up @@ -165,6 +165,7 @@
"dataFrom": {
"description": "DataFrom is used to fetch all properties from a specific Provider data\nIf multiple entries are specified, the Secret keys are merged in the specified order",
"items": {
"description": "ExternalSecretDataFromRemoteRef defines a reference to multiple secrets in the provider to be fetched using options.",
"properties": {
"extract": {
"description": "Used to extract multiple key/value pairs from one secret\nNote: Extract does not support sourceRef.Generator or sourceRef.GeneratorRef.",
Expand Down Expand Up @@ -269,6 +270,7 @@
"rewrite": {
"description": "Used to rewrite secret Keys after getting them from the secret Provider\nMultiple Rewrite operations can be provided. They are applied in a layered order (first to last)",
"items": {
"description": "ExternalSecretRewrite defines rules on how to rewrite secret keys.",
"maxProperties": 1,
"minProperties": 1,
"properties": {
Expand Down Expand Up @@ -392,8 +394,8 @@
"type": "array"
},
"refreshInterval": {
"default": "1h",
"description": "RefreshInterval is the amount of time before the values are read again from the SecretStore provider,\nspecified as Golang Duration strings.\nValid time units are \"ns\", \"us\" (or \"\u00b5s\"), \"ms\", \"s\", \"m\", \"h\"\nExample values: \"1h\", \"2h30m\", \"10s\"\nMay be set to zero to fetch and create it once. Defaults to 1h.",
"default": "1h0m0s",
"description": "RefreshInterval is the amount of time before the values are read again from the SecretStore provider,\nspecified as Golang Duration strings.\nValid time units are \"ns\", \"us\" (or \"\u00b5s\"), \"ms\", \"s\", \"m\", \"h\"\nExample values: \"1h0m0s\", \"2h30m0s\", \"10m0s\"\nMay be set to \"0s\" to fetch and create it once. Defaults to 1h0m0s.",
"type": "string"
},
"refreshPolicy": {
Expand Down Expand Up @@ -485,6 +487,7 @@
},
"mergePolicy": {
"default": "Replace",
"description": "TemplateMergePolicy defines how template values should be merged when generating a secret.",
"enum": [
"Replace",
"Merge"
Expand Down Expand Up @@ -512,12 +515,15 @@
},
"templateFrom": {
"items": {
"description": "TemplateFrom defines a source for template data.",
"properties": {
"configMap": {
"description": "TemplateRef defines a reference to a template source in a ConfigMap or Secret.",
"properties": {
"items": {
"description": "A list of keys in the ConfigMap/Secret to use as templates for Secret data",
"items": {
"description": "TemplateRefItem defines which key in the referenced ConfigMap or Secret to use as a template.",
"properties": {
"key": {
"description": "A key in the ConfigMap/Secret",
Expand All @@ -528,6 +534,7 @@
},
"templateAs": {
"default": "Values",
"description": "TemplateScope defines the scope of the template when processing template data.",
"enum": [
"Values",
"KeysAndValues"
Expand Down Expand Up @@ -562,10 +569,12 @@
"type": "string"
},
"secret": {
"description": "TemplateRef defines a reference to a template source in a ConfigMap or Secret.",
"properties": {
"items": {
"description": "A list of keys in the ConfigMap/Secret to use as templates for Secret data",
"items": {
"description": "TemplateRefItem defines which key in the referenced ConfigMap or Secret to use as a template.",
"properties": {
"key": {
"description": "A key in the ConfigMap/Secret",
Expand All @@ -576,6 +585,7 @@
},
"templateAs": {
"default": "Values",
"description": "TemplateScope defines the scope of the template when processing template data.",
"enum": [
"Values",
"KeysAndValues"
Expand Down Expand Up @@ -608,6 +618,7 @@
},
"target": {
"default": "Data",
"description": "TemplateTarget defines the target field where the template result will be stored.",
"enum": [
"Data",
"Annotations",
Expand Down Expand Up @@ -637,6 +648,7 @@
"additionalProperties": false
},
"status": {
"description": "ExternalSecretStatus defines the observed state of ExternalSecret.",
"properties": {
"binding": {
"description": "Binding represents a servicebinding.io Provisioned Service reference to the secret",
Expand All @@ -653,6 +665,7 @@
},
"conditions": {
"items": {
"description": "ExternalSecretStatusCondition contains condition information for an ExternalSecret.",
"properties": {
"lastTransitionTime": {
"format": "date-time",
Expand All @@ -668,6 +681,7 @@
"type": "string"
},
"type": {
"description": "ExternalSecretConditionType defines the condition type for an ExternalSecret.",
"type": "string"
}
},
Expand Down
Loading