Skip to content

feat(container): update external-secrets ( 2.9.0 → 2.10.0 ) - #511

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/external-secrets-2.x
Open

feat(container): update external-secrets ( 2.9.0 → 2.10.0 )#511
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/external-secrets-2.x

Conversation

@renovate

@renovate renovate Bot commented Sep 5, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
external-secrets minor 2.9.02.10.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

external-secrets/external-secrets (external-secrets)

v2.10.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.10.0
Image: ghcr.io/external-secrets/external-secrets:v2.10.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.10.0-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: external-secrets/external-secrets@v2.9.0...v2.10.0


Configuration

📅 Schedule: (in timezone Europe/Lisbon)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented Sep 5, 2026

Copy link
Copy Markdown
--- HelmRelease: storage/openebs Deployment: storage/openebs-localpv-provisioner

+++ HelmRelease: storage/openebs Deployment: storage/openebs-localpv-provisioner

@@ -32,13 +32,13 @@

         openebs.io/logging: 'true'
     spec:
       serviceAccountName: openebs-localpv-provisioner
       securityContext: {}
       containers:
       - name: openebs-localpv-provisioner
-        image: quay.io/openebs/provisioner-localpv:4.6.0
+        image: quay.io/openebs/provisioner-localpv:4.5.1
         imagePullPolicy: IfNotPresent
         resources: null
         env:
         - name: OPENEBS_NAMESPACE
           valueFrom:
             fieldRef:
@@ -56,46 +56,30 @@

         - name: OPENEBS_IO_ANALYTICS_STATE_CM
           value: openebs-localpv-provisioner-analytics-state
         - name: OPENEBS_IO_BASE_PATH
           value: /var/openebs/local
         - name: OPENEBS_IO_WORKER_THREADS
           value: '4'
-        - name: OPENEBS_IO_IMAGE_PULL_POLICY
-          value: IfNotPresent
         - name: OPENEBS_IO_HELPER_IMAGE
-          value: docker.io/openebs/linux-utils:4.6.0
+          value: docker.io/openebs/linux-utils:4.5.0
         - name: OPENEBS_IO_HELPER_POD_HOST_NETWORK
           value: 'false'
         - name: OPENEBS_IO_INSTALLER_TYPE
           value: localpv-charts-helm-helperpod
         - name: OPENEBS_IO_HELPER_POD_TIMEOUT_SECS
           value: '120'
         - name: LEADER_ELECTION_ENABLED
           value: 'true'
-        - name: OPENEBS_IO_HEALTH_PROBE_BIND_ADDRESS
-          value: :8081
-        ports:
-        - name: healthz
-          containerPort: 8081
-          protocol: TCP
         livenessProbe:
-          httpGet:
-            path: /healthz
-            port: healthz
-          initialDelaySeconds: 1
-          periodSeconds: 30
-          timeoutSeconds: 5
-          failureThreshold: 3
-        readinessProbe:
-          httpGet:
-            path: /readyz
-            port: healthz
-          initialDelaySeconds: 1
-          periodSeconds: 20
-          timeoutSeconds: 5
-          failureThreshold: 3
+          exec:
+            command:
+            - sh
+            - -c
+            - test `pgrep -c "^provisioner-loc.*"` = 1
+          initialDelaySeconds: 30
+          periodSeconds: 60
       tolerations:
       - effect: NoExecute
         key: node.kubernetes.io/unreachable
         operator: Exists
         tolerationSeconds: 5
       - effect: NoExecute
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v2.9.0
+        image: ghcr.io/external-secrets/external-secrets:v2.10.0
         imagePullPolicy: IfNotPresent
         args:
         - certcontroller
         - --crd-requeue-interval=5m
         - --service-name=external-secrets-webhook
         - --service-namespace=external-secrets
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v2.9.0
+        image: ghcr.io/external-secrets/external-secrets:v2.10.0
         imagePullPolicy: IfNotPresent
         args:
         - --concurrent=1
         - --metrics-addr=:8080
         - --loglevel=info
         - --zap-time-encoding=epoch
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v2.9.0
+        image: ghcr.io/external-secrets/external-secrets:v2.10.0
         imagePullPolicy: IfNotPresent
         args:
         - webhook
         - --port=10250
         - --dns-name=external-secrets-webhook.external-secrets.svc
         - --cert-dir=/tmp/certs

@github-actions

github-actions Bot commented Sep 5, 2026

Copy link
Copy Markdown
--- kubernetes/apps/external-secrets/external-secrets/app Kustomization: flux-system/external-secrets HelmRelease: external-secrets/external-secrets

+++ kubernetes/apps/external-secrets/external-secrets/app Kustomization: flux-system/external-secrets HelmRelease: external-secrets/external-secrets

@@ -13,13 +13,13 @@

       chart: external-secrets
       interval: 5m
       sourceRef:
         kind: HelmRepository
         name: external-secrets
         namespace: flux-system
-      version: 2.9.0
+      version: 2.10.0
   install:
     remediation:
       retries: 3
   interval: 30m
   upgrade:
     cleanupOnFail: true
--- kubernetes/apps/storage/openebs/app Kustomization: flux-system/openebs HelmRelease: storage/openebs

+++ kubernetes/apps/storage/openebs/app Kustomization: flux-system/openebs HelmRelease: storage/openebs

@@ -12,13 +12,13 @@

     spec:
       chart: openebs
       sourceRef:
         kind: HelmRepository
         name: openebs
         namespace: flux-system
-      version: 4.6.0
+      version: 4.5.1
   install:
     remediation:
       retries: 3
   interval: 30m
   upgrade:
     cleanupOnFail: true

@renovate
renovate Bot force-pushed the renovate/external-secrets-2.x branch from c7d9f84 to 8b949ce Compare September 5, 2026 17:44
@renovate
renovate Bot force-pushed the renovate/external-secrets-2.x branch from 8b949ce to 771d431 Compare September 5, 2026 17:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants