Merge pull request #335 from mbaldessari/fix-eso

Upgrade ESO to v0.8.5

golang-external-secrets/Chart.yaml

@@ -6,6 +6,6 @@ name: golang-external-secrets
 version: 0.0.1
 dependencies:
   - name: external-secrets
-    version: "0.8.3"
+    version: "0.8.5"
     repository: "https://charts.external-secrets.io"
     #"https://external-secrets.github.io/kubernetes-external-secrets"

golang-external-secrets/local-patches/0001-runasuser-comment-out.patch

@@ -1,30 +1,48 @@
-diff --color -urN external-secrets.orig/values.yaml external-secrets/values.yaml
---- external-secrets.orig/values.yaml	2023-05-22 12:42:54.000000000 +0200
-+++ external-secrets/values.yaml	2023-05-22 16:20:02.748621794 +0200
-@@ -117,7 +117,7 @@
+diff -up external-secrets/values.yaml.orig external-secrets/values.yaml
+--- external-secrets/values.yaml.orig	2023-07-31 15:12:18.815909938 +0200
++++ external-secrets/values.yaml	2023-07-31 15:32:59.905360226 +0200
+@@ -117,9 +117,11 @@ securityContext:
        - ALL
    readOnlyRootFilesystem: true
    runAsNonRoot: true
 -  runAsUser: 1000
+-  seccompProfile:
+-    type: RuntimeDefault
 +  # runAsUser: 1000
-   seccompProfile:
-     type: RuntimeDefault
++  # Uncomment this once 4.10 is out of scope
++  # seccompProfile:
++  #   type: RuntimeDefault
++  seccompProfile: null
 
-@@ -331,7 +331,7 @@
+ resources: {}
+   # requests:
+@@ -331,9 +333,11 @@ webhook:
          - ALL
      readOnlyRootFilesystem: true
      runAsNonRoot: true
 -    runAsUser: 1000
+-    seccompProfile:
+-      type: RuntimeDefault
 +    # runAsUser: 1000
-     seccompProfile:
-       type: RuntimeDefault
++    seccompProfile: null
++    # Uncomment this once 4.10 is out of scope
++    # seccompProfile:
++    #   type: RuntimeDefault
 
-@@ -453,7 +453,7 @@
+   resources: {}
+       # requests:
+@@ -453,9 +457,11 @@ certController:
          - ALL
      readOnlyRootFilesystem: true
      runAsNonRoot: true
 -    runAsUser: 1000
+-    seccompProfile:
+-      type: RuntimeDefault
 +    # runAsUser: 1000
-     seccompProfile:
-       type: RuntimeDefault
++    seccompProfile: null
++    # Uncomment this once 4.10 is out of scope
++    # seccompProfile:
++    #   type: RuntimeDefault
 
+   resources: {}
+       # requests:

golang-external-secrets/values.yaml

@@ -11,10 +11,10 @@ clusterGroup:
 
 external-secrets:
   image:
-    tag: v0.8.3-ubi
+    tag: v0.8.5-ubi
   webhook:
     image:
-      tag: v0.8.3-ubi
+      tag: v0.8.5-ubi
   certController:
     image:
-      tag: v0.8.3-ubi
+      tag: v0.8.5-ubi

tests/golang-external-secrets-industrial-edge-factory.expected.yaml

@@ -6,10 +6,10 @@ metadata:
   name: external-secrets-cert-controller
   namespace: "default"
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets-cert-controller
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
 ---
 # Source: golang-external-secrets/charts/external-secrets/templates/serviceaccount.yaml
@@ -19,10 +19,10 @@ metadata:
   name: golang-external-secrets
   namespace: "default"
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
 ---
 # Source: golang-external-secrets/charts/external-secrets/templates/webhook-serviceaccount.yaml
@@ -32,10 +32,10 @@ metadata:
   name: external-secrets-webhook
   namespace: "default"
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets-webhook
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
 ---
 # Source: golang-external-secrets/charts/external-secrets/templates/webhook-secret.yaml
@@ -45,10 +45,10 @@ metadata:
   name: golang-external-secrets-webhook
   namespace: "default"
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets-webhook
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
     external-secrets.io/component: webhook
 ---
@@ -7771,10 +7771,10 @@ kind: ClusterRole
 metadata:
   name: golang-external-secrets-cert-controller
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets-cert-controller
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups:
@@ -7838,10 +7838,10 @@ kind: ClusterRole
 metadata:
   name: golang-external-secrets-controller
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups:
@@ -7947,10 +7947,10 @@ kind: ClusterRole
 metadata:
   name: golang-external-secrets-view
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
     rbac.authorization.k8s.io/aggregate-to-view: "true"
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
@@ -7987,10 +7987,10 @@ kind: ClusterRole
 metadata:
   name: golang-external-secrets-edit
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
@@ -8031,10 +8031,10 @@ metadata:
   name: golang-external-secrets-servicebindings
   labels:
     servicebinding.io/controller: "true"
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups:
@@ -8052,10 +8052,10 @@ kind: ClusterRoleBinding
 metadata:
   name: golang-external-secrets-cert-controller
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets-cert-controller
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -8072,10 +8072,10 @@ kind: ClusterRoleBinding
 metadata:
   name: golang-external-secrets-controller
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -8108,10 +8108,10 @@ metadata:
   name: golang-external-secrets-leaderelection
   namespace: "default"
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups:
@@ -8147,10 +8147,10 @@ metadata:
   name: golang-external-secrets-leaderelection
   namespace: "default"
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -8168,10 +8168,10 @@ metadata:
   name: golang-external-secrets-webhook
   namespace: "default"
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets-webhook
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
     external-secrets.io/component: webhook
 spec:
@@ -8192,10 +8192,10 @@ metadata:
   name: golang-external-secrets-cert-controller
   namespace: "default"
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets-cert-controller
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
@@ -8222,9 +8222,7 @@ spec:
               - ALL
             readOnlyRootFilesystem: true
             runAsNonRoot: true
-            seccompProfile:
-              type: RuntimeDefault
-          image: "ghcr.io/external-secrets/external-secrets:v0.8.3-ubi"
+          image: "ghcr.io/external-secrets/external-secrets:v0.8.5-ubi"
           imagePullPolicy: IfNotPresent
           args:
           - certcontroller
@@ -8252,10 +8250,10 @@ metadata:
   name: golang-external-secrets
   namespace: "default"
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
@@ -8282,9 +8280,7 @@ spec:
               - ALL
             readOnlyRootFilesystem: true
             runAsNonRoot: true
-            seccompProfile:
-              type: RuntimeDefault
-          image: "ghcr.io/external-secrets/external-secrets:v0.8.3-ubi"
+          image: "ghcr.io/external-secrets/external-secrets:v0.8.5-ubi"
           imagePullPolicy: IfNotPresent
           args:
           - --concurrent=1
@@ -8300,10 +8296,10 @@ metadata:
   name: golang-external-secrets-webhook
   namespace: "default"
   labels:
-    helm.sh/chart: external-secrets-0.8.3
+    helm.sh/chart: external-secrets-0.8.5
     app.kubernetes.io/name: external-secrets-webhook
     app.kubernetes.io/instance: golang-external-secrets
-    app.kubernetes.io/version: "v0.8.3"
+    app.kubernetes.io/version: "v0.8.5"
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
@@ -8330,9 +8326,7 @@ spec:
               - ALL
             readOnlyRootFilesystem: true
             runAsNonRoot: true
-            seccompProfile:
-              type: RuntimeDefault
-          image: "ghcr.io/external-secrets/external-secrets:v0.8.3-ubi"
+          image: "ghcr.io/external-secrets/external-secrets:v0.8.5-ubi"
           imagePullPolicy: IfNotPresent
           args:
           - webhook