Localize external-secrets container (native container.py build) #367

Merged
eblume merged 2 commits from local-external-secrets into main 2026-06-04 14:55:59 -07:00

2 commits

Author SHA1 Message Date
adc24358f4 Deploy external-secrets from local registry image
Swap the controller/webhook/cert-controller image from ghcr.io to the locally
built registry.ops.eblu.me/blumeops/external-secrets:v2.2.0-2985007. Like-for-like
(v2.2.0); mark service reviewed.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-04 14:48:08 -07:00
2985007430 Add native Dagger build for external-secrets (container.py)
Localizes external-secrets off ghcr.io: clones the forge mirror at v2.2.0
and builds the single all_providers static Go binary, faithful to upstream's
`make build`. ENTRYPOINT is the binary so the controller/webhook/cert-controller
Deployments can select their role via args.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-04 14:37:52 -07:00