Skip to content

feat(helm)!: Update chart external-secrets ( 1.1.1 ➔ 2.4.1 )#291

Open
parsec-renovate[bot] wants to merge 1 commit intomainfrom
renovate/external-secrets-2.x
Open

feat(helm)!: Update chart external-secrets ( 1.1.1 ➔ 2.4.1 )#291
parsec-renovate[bot] wants to merge 1 commit intomainfrom
renovate/external-secrets-2.x

Conversation

@parsec-renovate
Copy link
Copy Markdown
Contributor

@parsec-renovate parsec-renovate Bot commented Feb 6, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
external-secrets major 1.1.12.4.1

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

external-secrets/external-secrets (external-secrets)

v2.4.1

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.4.1
Image: ghcr.io/external-secrets/external-secrets:v2.4.1-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.4.1-ubi-boringssl

What's Changed

General
Dependencies

Full Changelog: external-secrets/external-secrets@v2.4.0...v2.4.1

v2.4.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.4.0
Image: ghcr.io/external-secrets/external-secrets:v2.4.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.4.0-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: external-secrets/external-secrets@v2.3.0...v2.4.0

v2.3.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.3.0
Image: ghcr.io/external-secrets/external-secrets:v2.3.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.3.0-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: external-secrets/external-secrets@v2.2.0...v2.3.0

v2.2.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.2.0
Image: ghcr.io/external-secrets/external-secrets:v2.2.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringssl

Breaking change

If you are using Flux + OCIRepository to fetch External Secrets Operator charts, please update your object to use a Layer selector:

  apiVersion: source.toolkit.fluxcd.io/v1
  kind: OCIRepository
  metadata:
    name: eso-oci
  spec:
    interval: 1m0s
    provider: generic
    ref:
      tag: 2.2.0
    url: oci://ghcr.io/external-secrets/charts/external-secrets
    layerSelector:
      mediaType: "application/vnd.cncf.helm.chart.content.v1.tar+gzip"
      operation: extract

What's Changed

General
Dependencies

New Contributors

Full Changelog: external-secrets/external-secrets@v2.1.0...v2.2.0

v2.1.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.1.0
Image: ghcr.io/external-secrets/external-secrets:v2.1.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.1.0-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: external-secrets/external-secrets@v2.0.1...v2.1.0

v2.0.1

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.0.1
Image: ghcr.io/external-secrets/external-secrets:v2.0.1-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.0.1-ubi-boringssl

BREAKING CHANGE

The sprig update is actually a breaking change. It turns out that some of the functions in templating changed with this update.

Looks like it's just the htpasswd function that was renamed.

What's Changed

General
Dependencies
  • chore(deps): bump golang from 20c8a94 to f6751d8 by [@​depe

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Feb 6, 2026

--- kubernetes/apps/external-secrets/external-secrets/app Kustomization: flux-system/external-secrets HelmRelease: external-secrets/external-secrets

+++ kubernetes/apps/external-secrets/external-secrets/app Kustomization: flux-system/external-secrets HelmRelease: external-secrets/external-secrets

@@ -13,13 +13,13 @@

     spec:
       chart: external-secrets
       sourceRef:
         kind: HelmRepository
         name: external-secrets
         namespace: flux-system
-      version: 1.1.1
+      version: 2.4.1
   install:
     remediation:
       retries: 3
   interval: 30m
   uninstall:
     keepHistory: false

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Feb 6, 2026

--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v1.1.1
+        image: ghcr.io/external-secrets/external-secrets:v2.4.1
         imagePullPolicy: IfNotPresent
         args:
         - certcontroller
         - --crd-requeue-interval=5m
         - --service-name=external-secrets-webhook
         - --service-namespace=external-secrets
@@ -52,13 +52,19 @@

         - --zap-time-encoding=epoch
         - --enable-partial-cache=true
         ports:
         - containerPort: 8080
           protocol: TCP
           name: metrics
+        - containerPort: 8081
+          protocol: TCP
+          name: ready
         readinessProbe:
           httpGet:
-            port: 8081
+            port: ready
             path: /readyz
           initialDelaySeconds: 20
           periodSeconds: 5
+          timeoutSeconds: 5
+          failureThreshold: 3
+          successThreshold: 1
 
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v1.1.1
+        image: ghcr.io/external-secrets/external-secrets:v2.4.1
         imagePullPolicy: IfNotPresent
         args:
         - --concurrent=1
         - --metrics-addr=:8080
         - --loglevel=info
         - --zap-time-encoding=epoch
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v1.1.1
+        image: ghcr.io/external-secrets/external-secrets:v2.4.1
         imagePullPolicy: IfNotPresent
         args:
         - webhook
         - --port=10250
         - --dns-name=external-secrets-webhook.external-secrets.svc
         - --cert-dir=/tmp/certs
@@ -53,18 +53,24 @@

         - containerPort: 8080
           protocol: TCP
           name: metrics
         - containerPort: 10250
           protocol: TCP
           name: webhook
+        - containerPort: 8081
+          protocol: TCP
+          name: ready
         readinessProbe:
           httpGet:
-            port: 8081
+            port: ready
             path: /readyz
           initialDelaySeconds: 20
           periodSeconds: 5
+          timeoutSeconds: 5
+          failureThreshold: 3
+          successThreshold: 1
         volumeMounts:
         - name: certs
           mountPath: /tmp/certs
           readOnly: true
       volumes:
       - name: certs
--- HelmRelease: external-secrets/external-secrets ValidatingWebhookConfiguration: external-secrets/secretstore-validate

+++ HelmRelease: external-secrets/external-secrets ValidatingWebhookConfiguration: external-secrets/secretstore-validate

@@ -29,12 +29,13 @@

       path: /validate-external-secrets-io-v1-secretstore
   admissionReviewVersions:
   - v1
   - v1beta1
   sideEffects: None
   timeoutSeconds: 5
+  failurePolicy: Fail
 - name: validate.clustersecretstore.external-secrets.io
   rules:
   - apiGroups:
     - external-secrets.io
     apiVersions:
     - v1
@@ -52,7 +53,8 @@

       path: /validate-external-secrets-io-v1-clustersecretstore
   admissionReviewVersions:
   - v1
   - v1beta1
   sideEffects: None
   timeoutSeconds: 5
+  failurePolicy: Fail
 

@parsec-renovate parsec-renovate Bot changed the title feat(helm)!: Update chart external-secrets ( 1.1.1 ➔ 2.0.0 ) feat(helm)!: Update chart external-secrets ( 1.1.1 ➔ 2.0.1 ) Feb 20, 2026
@parsec-renovate parsec-renovate Bot force-pushed the renovate/external-secrets-2.x branch from 79c04e6 to 9b62c14 Compare February 20, 2026 13:36
@parsec-renovate parsec-renovate Bot changed the title feat(helm)!: Update chart external-secrets ( 1.1.1 ➔ 2.0.1 ) feat(helm)!: Update chart external-secrets ( 1.1.1 ➔ 2.1.0 ) Mar 7, 2026
@parsec-renovate parsec-renovate Bot force-pushed the renovate/external-secrets-2.x branch from 9b62c14 to 0d7516b Compare March 7, 2026 18:14
@parsec-renovate parsec-renovate Bot changed the title feat(helm)!: Update chart external-secrets ( 1.1.1 ➔ 2.1.0 ) feat(helm)!: Update chart external-secrets ( 1.1.1 ➔ 2.2.0 ) Mar 20, 2026
@parsec-renovate parsec-renovate Bot force-pushed the renovate/external-secrets-2.x branch from 0d7516b to 92fe400 Compare March 20, 2026 17:24
@parsec-renovate parsec-renovate Bot changed the title feat(helm)!: Update chart external-secrets ( 1.1.1 ➔ 2.2.0 ) feat(helm)!: Update chart external-secrets ( 1.1.1 ➔ 2.3.0 ) Apr 10, 2026
@parsec-renovate parsec-renovate Bot force-pushed the renovate/external-secrets-2.x branch from 92fe400 to 7985b14 Compare April 10, 2026 15:28
@parsec-renovate parsec-renovate Bot force-pushed the renovate/external-secrets-2.x branch from 7985b14 to 735b0f5 Compare April 24, 2026 19:30
@parsec-renovate parsec-renovate Bot changed the title feat(helm)!: Update chart external-secrets ( 1.1.1 ➔ 2.3.0 ) feat(helm)!: Update chart external-secrets ( 1.1.1 ➔ 2.4.0 ) Apr 24, 2026
@parsec-renovate parsec-renovate Bot force-pushed the renovate/external-secrets-2.x branch from 735b0f5 to 077057a Compare April 28, 2026 11:45
@parsec-renovate parsec-renovate Bot changed the title feat(helm)!: Update chart external-secrets ( 1.1.1 ➔ 2.4.0 ) feat(helm)!: Update chart external-secrets ( 1.1.1 ➔ 2.4.1 ) Apr 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants