ESO-168:Upstream bump for v0.18.x and rebase for v1.0.0 release (#51)

* Bump dependencies with upstream external secrets new version changes in go mod and vendor

* Adds replace github.com/external-secrets/external-secrets => github.com/openshift/external-secrets

* Update Makefile & manager.yaml
- replace BUNDLE_VERSION
- replace EXTERNAL_SECRETS_VERSION
- updated skip_range in manager.yaml
- * make update
- * make bundle
- * make update-bindata

* update builder image to Go 1.24 for OCP 4.20

* Changes

* Changes

* Changes in the API versions

* Changes in the rbac for the operand

* Changes the api version in samples

Author: siddhibhor-56

.ci-operator.yaml

@@ -1,4 +1,4 @@
 build_root_image:
   name: builder
   namespace: ocp
-  tag: rhel-9-golang-1.23-openshift-4.19
+  tag: rhel-9-golang-1.24-openshift-4.20

Dockerfile

@@ -1,5 +1,5 @@
 # Build the external-secrets-operator binary
-FROM docker.io/golang:1.23 AS builder
+FROM docker.io/golang:1.24 AS builder
 ARG TARGETOS
 ARG TARGETARCH
 

Makefile

@@ -3,10 +3,10 @@
 # To re-generate a bundle for another specific version without changing the standard setup, you can:
 # - use the VERSION as arg of the bundle target (e.g make bundle VERSION=0.0.2)
 # - use environment variables to overwrite this value (e.g export VERSION=0.0.2)
-VERSION ?= 0.1.0
+VERSION ?= 1.0.0
 
 # EXTERNAL_SECRETS_VERSION defines the external-secrets release version to fetch helm charts.
-EXTERNAL_SECRETS_VERSION ?= v0.14.3
+EXTERNAL_SECRETS_VERSION ?= v0.19.0
 
 # CHANNELS define the bundle channels used in the bundle.
 # Add a new line here if you would like to change its default config. (E.g CHANNELS = "candidate,fast,stable")
@@ -202,7 +202,7 @@ endif
 
 .PHONY: install
 install: manifests kustomize ## Install CRDs into the K8s cluster specified in ~/.kube/config.
-	$(KUSTOMIZE) build config/crd | $(KUBECTL) apply -f -
+	$(KUSTOMIZE) build config/crd | $(KUBECTL) apply --server-side -f -
 
 .PHONY: uninstall
 uninstall: manifests kustomize ## Uninstall CRDs from the K8s cluster specified in ~/.kube/config. Call with ignore-not-found=true to ignore resource not found errors during deletion.
@@ -211,7 +211,7 @@ uninstall: manifests kustomize ## Uninstall CRDs from the K8s cluster specified
 .PHONY: deploy
 deploy: manifests kustomize ## Deploy controller to the K8s cluster specified in ~/.kube/config.
 	cd config/manager && $(KUSTOMIZE) edit set image controller=${IMG}
-	$(KUSTOMIZE) build config/default | $(KUBECTL) apply -f -
+	$(KUSTOMIZE) build config/default | $(KUBECTL) apply --server-side -f -
 
 .PHONY: undeploy
 undeploy: kustomize ## Undeploy controller from the K8s cluster specified in ~/.kube/config. Call with ignore-not-found=true to ignore resource not found errors during deletion.

bindata/external-secrets/certificate_bitwarden-tls-certs.yml

@@ -6,7 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/name: bitwarden-tls-certs
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v0.14.0"
+    app.kubernetes.io/version: "v0.19.0"
     app.kubernetes.io/managed-by: external-secrets-operator
 spec:
   secretName: bitwarden-tls-certs

bindata/external-secrets/resources/certificate_external-secrets-webhook.yml

@@ -7,7 +7,7 @@ metadata:
   labels:
     app.kubernetes.io/name: external-secrets-webhook
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v0.14.3"
+    app.kubernetes.io/version: "v0.19.0"
     app.kubernetes.io/managed-by: external-secrets-operator
     external-secrets.io/component: webhook
 spec:

bindata/external-secrets/resources/clusterrole_external-secrets-cert-controller.yml

@@ -6,7 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/name: external-secrets-cert-controller
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v0.14.3"
+    app.kubernetes.io/version: "v0.19.0"
     app.kubernetes.io/managed-by: external-secrets-operator
 rules:
   - apiGroups:

bindata/external-secrets/resources/clusterrole_external-secrets-controller.yml

@@ -6,7 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v0.14.3"
+    app.kubernetes.io/version: "v0.19.0"
     app.kubernetes.io/managed-by: external-secrets-operator
 rules:
   - apiGroups:
@@ -17,6 +17,7 @@ rules:
       - "externalsecrets"
       - "clusterexternalsecrets"
       - "pushsecrets"
+      - "clusterpushsecrets"
     verbs:
       - "get"
       - "list"
@@ -39,6 +40,9 @@ rules:
       - "pushsecrets"
       - "pushsecrets/status"
       - "pushsecrets/finalizers"
+      - "clusterpushsecrets"
+      - "clusterpushsecrets/status"
+      - "clusterpushsecrets/finalizers"
     verbs:
       - "get"
       - "update"
@@ -67,11 +71,13 @@ rules:
       - "githubaccesstokens"
       - "quayaccesstokens"
       - "passwords"
+      - "sshkeys"
       - "stssessiontokens"
       - "uuids"
       - "vaultdynamicsecrets"
       - "webhooks"
       - "grafanas"
+      - "mfas"
     verbs:
       - "get"
       - "list"
@@ -126,3 +132,11 @@ rules:
       - "create"
       - "update"
       - "delete"
+  - apiGroups:
+      - "external-secrets.io"
+    resources:
+      - "pushsecrets"
+    verbs:
+      - "create"
+      - "update"
+      - "delete"

bindata/external-secrets/resources/clusterrole_external-secrets-edit.yml

@@ -6,7 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v0.14.3"
+    app.kubernetes.io/version: "v0.19.0"
     app.kubernetes.io/managed-by: external-secrets-operator
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
@@ -18,6 +18,7 @@ rules:
       - "secretstores"
       - "clustersecretstores"
       - "pushsecrets"
+      - "clusterpushsecrets"
     verbs:
       - "create"
       - "delete"
@@ -35,10 +36,13 @@ rules:
       - "githubaccesstokens"
       - "quayaccesstokens"
       - "passwords"
+      - "sshkeys"
       - "vaultdynamicsecrets"
       - "webhooks"
       - "grafanas"
       - "generatorstates"
+      - "mfas"
+      - "uuids"
     verbs:
       - "create"
       - "delete"

bindata/external-secrets/resources/clusterrole_external-secrets-servicebindings.yml

@@ -7,13 +7,14 @@ metadata:
     servicebinding.io/controller: "true"
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v0.14.3"
+    app.kubernetes.io/version: "v0.19.0"
     app.kubernetes.io/managed-by: external-secrets-operator
 rules:
   - apiGroups:
       - "external-secrets.io"
     resources:
       - "externalsecrets"
+      - "pushsecrets"
     verbs:
       - "get"
       - "list"

bindata/external-secrets/resources/clusterrole_external-secrets-view.yml

@@ -6,7 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v0.14.3"
+    app.kubernetes.io/version: "v0.19.0"
     app.kubernetes.io/managed-by: external-secrets-operator
     rbac.authorization.k8s.io/aggregate-to-view: "true"
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
@@ -19,6 +19,7 @@ rules:
       - "secretstores"
       - "clustersecretstores"
       - "pushsecrets"
+      - "clusterpushsecrets"
     verbs:
       - "get"
       - "watch"
@@ -34,10 +35,13 @@ rules:
       - "githubaccesstokens"
       - "quayaccesstokens"
       - "passwords"
+      - "sshkeys"
       - "vaultdynamicsecrets"
       - "webhooks"
       - "grafanas"
       - "generatorstates"
+      - "mfas"
+      - "uuids"
     verbs:
       - "get"
       - "watch"