Update External Secrets Helm chart 1.3.1 → 2.0.0 #203

Merged
eblume merged 1 commit from update/external-secrets-helm-2.0.0 into main 2026-02-17 10:43:22 -08:00
Owner

Summary

  • Bump External Secrets Operator Helm chart from helm-chart-1.3.1 to helm-chart-2.0.0 (operator v1.3.2)
  • Updates both the operator app and CRDs app targetRevision
  • No Helm values changes needed — installCRDs, resources, webhook, certController keys are unchanged

Breaking changes in chart 2.0.0

  • Removed providers: Alibaba and Device42 (unmaintained) — does not affect our 1Password setup
  • Templating engine v1 deprecated — our ExternalSecrets don't set engineVersion, so they use the default (v2)
  • Webhook failurePolicy for SecretStore is now dynamic

Deployment

  1. Sync CRDs first: argocd app set external-secrets-crds --revision update/external-secrets-helm-2.0.0 && argocd app sync external-secrets-crds
  2. Sync operator: argocd app set external-secrets --revision update/external-secrets-helm-2.0.0 && argocd app sync external-secrets
  3. Verify: kubectl --context=minikube-indri -n external-secrets get pods
  4. After merge, set both apps back to --revision main

🤖 Generated with Claude Code

## Summary - Bump External Secrets Operator Helm chart from `helm-chart-1.3.1` to `helm-chart-2.0.0` (operator v1.3.2) - Updates both the operator app and CRDs app `targetRevision` - No Helm values changes needed — `installCRDs`, `resources`, `webhook`, `certController` keys are unchanged ## Breaking changes in chart 2.0.0 - **Removed providers:** Alibaba and Device42 (unmaintained) — does not affect our 1Password setup - **Templating engine v1 deprecated** — our ExternalSecrets don't set `engineVersion`, so they use the default (v2) - **Webhook `failurePolicy`** for SecretStore is now dynamic ## Deployment 1. Sync CRDs first: `argocd app set external-secrets-crds --revision update/external-secrets-helm-2.0.0 && argocd app sync external-secrets-crds` 2. Sync operator: `argocd app set external-secrets --revision update/external-secrets-helm-2.0.0 && argocd app sync external-secrets` 3. Verify: `kubectl --context=minikube-indri -n external-secrets get pods` 4. After merge, set both apps back to `--revision main` 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Helm chart 2.0.0 packages operator v1.3.2. Breaking changes
(Alibaba/Device42 provider removal) don't affect our 1Password setup.
Existing values.yaml keys are unchanged.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
eblume merged commit 105a2c8c08 into main 2026-02-17 10:43:22 -08:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eblume/blumeops!203
No description provided.