github.com/external-secrets/external-secrets issues

Scoped RBAC and namespace deployment polutes logs with errors

m1so opened this issue 1 day ago

Any plans for CNCF incubating/graduation phase?

esantoro opened this issue 1 day ago

Add randomized offset to mitigate reconciliation spikes

AleksejsCudovs opened this issue 2 days ago

"Secret does not exist" with Vault SecretStore (using OpenBao)

franz-dalitz opened this issue 3 days ago

External Secret shows status as SecretSynced, however the corresponding k8s secret created is empty.

danielademeso123 opened this issue 4 days ago

Merge on secret managed by externalsecret

tomassatka opened this issue 4 days ago

feat: add iam roles anywhere implementation

moolen opened this pull request 5 days ago

chore: update dependencies

eso-service-account-app[bot] opened this pull request 5 days ago

chore: update dependencies

eso-service-account-app[bot] opened this pull request 5 days ago

Release v0.11.0 external-secrets-helm-operator affected by CVE-2024-41110

mumlawski opened this issue 5 days ago

chore(deps): bump golang from `6c5c959` to `6c5c959`

dependabot[bot] opened this pull request 5 days ago

chore(deps): bump certifi from 2024.8.30 to 2024.12.14 in /hack/api-docs

dependabot[bot] opened this pull request 5 days ago

chore(deps): bump actions/setup-go from 5.1.0 to 5.2.0

dependabot[bot] opened this pull request 5 days ago

chore(deps): bump softprops/action-gh-release from 2.1.0 to 2.2.0

dependabot[bot] opened this pull request 5 days ago

chore(deps): bump actions/attest-build-provenance from 2.0.1 to 2.1.0

dependabot[bot] opened this pull request 5 days ago

chore(deps): bump github/codeql-action from 3.27.6 to 3.27.9

dependabot[bot] opened this pull request 5 days ago

[Question] Why secret will be deleted

yongzhang opened this issue 6 days ago

docs: add raw markdown tags to PushSecret example in Google Secrets Manager documentation

janlauber opened this pull request 6 days ago

fix: typo in the ecrAuthorizationTokenSpec json tag

Skarlso opened this pull request 8 days ago

[Question] AWS SecretsManager Push Whole Secret

eternalyperplxed opened this issue 8 days ago

BREAKING: Standardize GCP Secret Manager PushSecret metadata format and add CMEK support

janlauber opened this pull request 8 days ago

Support Customer-Managed Encryption Keys (CMEK) for GCP Secret Manager

janlauber opened this issue 8 days ago

feat: fix a bunch of Sonar issues

Skarlso opened this pull request 8 days ago

Support for `.namespace` parameter in webhook provider (extension of referent auth)

mofr93 opened this issue 8 days ago

[Question] How can I use aws provider in a different cloud

yongzhang opened this issue 8 days ago

Forcing external-secret synchronization using 1password token secret fails sometimes with `status 403: Authorization: token does not have access to vault`

renepupil opened this issue 9 days ago

Very slow secret retrieval from azure key vault to on-prem k3s (how to troubleshoot?)

AurimasNav opened this issue 9 days ago

feat: introduce state for generator and new grafana SA generator

moolen opened this pull request 10 days ago

fix: increase default QPS/Burst to 50/100

thesuperzapper opened this pull request 10 days ago

fix: error in order of function call UpdateEnvironment

dirien opened this pull request 10 days ago

Add `build_info` metric to ExternalSecrets

jvrplmlmn opened this issue 10 days ago

Commit Request

Setland34 opened this pull request 11 days ago

fix: return not found error when there is no secret for vault provider

Skarlso opened this pull request 12 days ago

fix: handle empty template engine version

thesuperzapper opened this pull request 15 days ago

feat: update to use Batch value get instead of List and Fetch all secrets for AWS provider

Skarlso opened this pull request 15 days ago

Newly added Secrets take anywhere between 5 to 15 minutes to reconcile.

philipp-durrer-jarowa opened this issue 15 days ago

the option "crds.createClusterGenerator" does not work in the helm chart

deshifcodes opened this issue 16 days ago

fix: error handling for gitlab variable fetch

Skarlso opened this pull request 16 days ago

Ignore reconciliation errors caused by namespace termination

agunnerson-elastic opened this pull request 17 days ago

chore: deprecate olm proposal

gusfcarvalho opened this pull request 17 days ago

fix: v1 templates with metadata + always cleanup orphaned secrets

thesuperzapper opened this pull request 18 days ago

feat: 1password add support for tags and configurable PushSecret vault

Dariusch opened this pull request 18 days ago

Template Engine Version v1 does not support labels containing a `/`

joggeli34 opened this issue 18 days ago

Retrieve username field from BeyondTrust Password Safe secret

sarah-soo opened this issue 19 days ago

Gc/fix clusterexternalsecret metrics

gusfcarvalho opened this pull request 19 days ago

chore: update dependencies

eso-service-account-app[bot] opened this pull request 19 days ago

chore: update dependencies

eso-service-account-app[bot] opened this pull request 19 days ago

**BREAKING CHANGE FOR v0.11.0** Problem Thread

Skarlso opened this issue 19 days ago

chore: bump helm chart version v0.11.0

Skarlso opened this pull request 19 days ago

chore(deps): bump mkdocs-material from 9.5.45 to 9.5.47 in /hack/api-docs

dependabot[bot] opened this pull request 19 days ago

chore(deps): bump distroless/static from `f4a57e8` to `5c7e2b4`

dependabot[bot] opened this pull request 19 days ago

fix: issues with generators

thesuperzapper opened this pull request 21 days ago

feat: cluster push secret with pushing all secrets from a namespace

Skarlso opened this pull request 21 days ago

Support for Workload Identity with Kubernetes -> HashicorpVault

bekraupov opened this issue 22 days ago

fix: ensure existing labels are retained for secrets in GCP secrets m…

newtondev opened this pull request 23 days ago

Unable aggregate cluster roles

allanp35 opened this issue 23 days ago

Upgrading to 0.10.x results in "could not get secret data from provider" when using the webhook provider

Farioko opened this issue 23 days ago

fix: e2e test for AWS not setting name and namespace

Skarlso opened this pull request 23 days ago

ExternalSecret Cuts Off Parameters When Using AWS SSM Parameter Store

DanielOved93 opened this issue 24 days ago

chore: deprecation policy and deprecating process

gusfcarvalho opened this pull request 24 days ago

fix: use cache when retrieving generators

thesuperzapper opened this pull request 24 days ago

fix: gitlab empty response

Skarlso opened this pull request 25 days ago

Using extractFrom filter keys by some prefix and strip the prefix

Jonnymcc opened this issue 26 days ago

fix: handle managed identity ClientID or ResourceID in acr generator

bonddim opened this pull request 26 days ago

feat: add ability to push expiration date to secret in azure key vault

deggja opened this pull request 26 days ago

chore: update dependencies

eso-service-account-app[bot] opened this pull request 26 days ago

chore(deps): bump github/codeql-action from 3.27.4 to 3.27.5

dependabot[bot] opened this pull request 26 days ago

chore(deps): bump aquasecurity/trivy-action from 0.28.0 to 0.29.0

dependabot[bot] opened this pull request 26 days ago

chore(deps): bump codecov/codecov-action from 5.0.2 to 5.0.7

dependabot[bot] opened this pull request 26 days ago

chore(deps): bump tornado from 6.4.1 to 6.4.2 in /hack/api-docs

dependabot[bot] opened this pull request 26 days ago

chore(deps): bump mkdocs-material from 9.5.44 to 9.5.45 in /hack/api-docs

dependabot[bot] opened this pull request 26 days ago

Cleanup of the reconcile loop after #4086

Skarlso opened this issue 27 days ago

chore: bump version v0.10.7

Skarlso opened this pull request 28 days ago

feat: implement a cluster-wide generator

Skarlso opened this pull request 29 days ago

Secret store is unable to resolve an endpoint for oidc when using workload identity in azure: status code 404 with 0.10.6

papanito opened this issue about 1 month ago

chore: add blog

gusfcarvalho opened this pull request about 1 month ago

fix(azure-keyvault): remove incorrect suffix from provider URL to fix OpenID discovery call

weisdd opened this pull request about 1 month ago

[azure] [0.10.6] regression in a call to OpenID discovery endpoint causing InvalidProviderConfig

weisdd opened this issue about 1 month ago

fix: permissions on steps is not a thing

Skarlso opened this pull request about 1 month ago

Release v0.10.6 helm chart docs

Skarlso opened this pull request about 1 month ago

chore: bump helm-chart version v0.10.6

Skarlso opened this pull request about 1 month ago

Change wrong YAML TLS keys in documentation

ilovelinux opened this pull request about 1 month ago

SecretStore Example in documentation doesn't match YAML Schema

ilovelinux opened this issue about 1 month ago

fix: further restrict token permissions on helm action steps

Skarlso opened this pull request about 1 month ago

fix: restrict the token permission update to the push chart step

Skarlso opened this pull request about 1 month ago

feat: implement SecretExists function for gcp secretsmanager

Skarlso opened this pull request about 1 month ago

fix: do not import gpg key from forked repo

moolen opened this pull request about 1 month ago

Add "include" template function mirroring the functionality for Helm

longtomjr opened this issue about 1 month ago

feat: enable concurrent reconciling for push secret reconciler

Skarlso opened this pull request about 1 month ago

Concurrency for PushSecret Resource is Limited to 1

framsouza opened this issue about 1 month ago

chore: update dependencies

eso-service-account-app[bot] opened this pull request about 1 month ago

chore: update dependencies

eso-service-account-app[bot] opened this pull request about 1 month ago

chore(deps): bump golang from `0e3377d` to `3f3b9da` in /e2e