From 105a2c8c08d7e0fd4062bf3fec69ac27f8e5c69d Mon Sep 17 00:00:00 2001 From: Erich Blume Date: Tue, 17 Feb 2026 10:43:21 -0800 Subject: [PATCH] =?UTF-8?q?Update=20External=20Secrets=20Helm=20chart=201.?= =?UTF-8?q?3.1=20=E2=86=92=202.0.0=20(#203)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ## Summary - Bump External Secrets Operator Helm chart from `helm-chart-1.3.1` to `helm-chart-2.0.0` (operator v1.3.2) - Updates both the operator app and CRDs app `targetRevision` - No Helm values changes needed — `installCRDs`, `resources`, `webhook`, `certController` keys are unchanged ## Breaking changes in chart 2.0.0 - **Removed providers:** Alibaba and Device42 (unmaintained) — does not affect our 1Password setup - **Templating engine v1 deprecated** — our ExternalSecrets don't set `engineVersion`, so they use the default (v2) - **Webhook `failurePolicy`** for SecretStore is now dynamic ## Deployment 1. Sync CRDs first: `argocd app set external-secrets-crds --revision update/external-secrets-helm-2.0.0 && argocd app sync external-secrets-crds` 2. Sync operator: `argocd app set external-secrets --revision update/external-secrets-helm-2.0.0 && argocd app sync external-secrets` 3. Verify: `kubectl --context=minikube-indri -n external-secrets get pods` 4. After merge, set both apps back to `--revision main` 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/203 --- argocd/apps/external-secrets-crds.yaml | 2 +- argocd/apps/external-secrets.yaml | 2 +- docs/changelog.d/update-external-secrets-helm-2.0.0.infra.md | 1 + 3 files changed, 3 insertions(+), 2 deletions(-) create mode 100644 docs/changelog.d/update-external-secrets-helm-2.0.0.infra.md diff --git a/argocd/apps/external-secrets-crds.yaml b/argocd/apps/external-secrets-crds.yaml index 6f06954..985ff24 100644 --- a/argocd/apps/external-secrets-crds.yaml +++ b/argocd/apps/external-secrets-crds.yaml @@ -16,7 +16,7 @@ spec: project: default source: repoURL: ssh://forgejo@forge.ops.eblu.me:2222/eblume/external-secrets.git - targetRevision: helm-chart-1.3.1 + targetRevision: helm-chart-2.0.0 path: config/crds/bases directory: exclude: 'kustomization.yaml' diff --git a/argocd/apps/external-secrets.yaml b/argocd/apps/external-secrets.yaml index ecb7cb7..91bc1bd 100644 --- a/argocd/apps/external-secrets.yaml +++ b/argocd/apps/external-secrets.yaml @@ -15,7 +15,7 @@ spec: project: default sources: - repoURL: ssh://forgejo@forge.ops.eblu.me:2222/eblume/external-secrets.git - targetRevision: helm-chart-1.3.1 + targetRevision: helm-chart-2.0.0 path: deploy/charts/external-secrets helm: releaseName: external-secrets diff --git a/docs/changelog.d/update-external-secrets-helm-2.0.0.infra.md b/docs/changelog.d/update-external-secrets-helm-2.0.0.infra.md new file mode 100644 index 0000000..e04dfeb --- /dev/null +++ b/docs/changelog.d/update-external-secrets-helm-2.0.0.infra.md @@ -0,0 +1 @@ +Update External Secrets Operator Helm chart from 1.3.1 to 2.0.0 (operator v1.3.2)