From 7acb7eaa8c8632d647195f27f725a9b31f6ac067 Mon Sep 17 00:00:00 2001 From: Ruben Hensen Date: Thu, 22 Oct 2026 21:41:28 +0200 Subject: [PATCH] Move every ExternalSecret and the ClusterSecretStore to external-secrets.io/v1 ESO 0.16.2 is the one release that serves both v1beta1 and v1. 0.17 stops serving v1beta1, so manifests still on v1beta1 would fail to sync from the next hop on. For these resources the schemas are name-identical (conversion strategy None); only the apiVersion changes. --- actual-budget/external-secret.yaml | 2 +- argocd/oidc-secret.yaml | 2 +- argocd/webhook-es.yaml | 2 +- authentik/external-secret.yaml | 14 +++++++------- bolletjestrui/external-secret.yaml | 2 +- dns/external-secret.yaml | 2 +- freshrss/external-secret.yaml | 2 +- gatus/external-secret.yaml | 2 +- mbgwp/default-pw-es.yaml | 2 +- mbgwp/mariadb-operator-credentials-es.yaml | 2 +- ntfy/external-secret.yaml | 2 +- serpbear/external-secret.yaml | 2 +- vault/configure-oidc.yaml | 2 +- vault/secret-store.yaml | 2 +- 14 files changed, 20 insertions(+), 20 deletions(-) diff --git a/actual-budget/external-secret.yaml b/actual-budget/external-secret.yaml index 597fba5..754ef05 100644 --- a/actual-budget/external-secret.yaml +++ b/actual-budget/external-secret.yaml @@ -1,4 +1,4 @@ -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: actualbudget-oidc-client-secret diff --git a/argocd/oidc-secret.yaml b/argocd/oidc-secret.yaml index 9710bf6..2c12a19 100644 --- a/argocd/oidc-secret.yaml +++ b/argocd/oidc-secret.yaml @@ -1,4 +1,4 @@ -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: argocd-oidc-secret diff --git a/argocd/webhook-es.yaml b/argocd/webhook-es.yaml index f05e6e1..364b005 100644 --- a/argocd/webhook-es.yaml +++ b/argocd/webhook-es.yaml @@ -1,4 +1,4 @@ -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: webhook-es diff --git a/authentik/external-secret.yaml b/authentik/external-secret.yaml index cb65e54..996edde 100644 --- a/authentik/external-secret.yaml +++ b/authentik/external-secret.yaml @@ -1,4 +1,4 @@ -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: authentik-secrets @@ -24,7 +24,7 @@ spec: key: kv/authentik property: bootstrap_token --- -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: authentik-postgres-credentials @@ -46,7 +46,7 @@ spec: key: kv/authentik property: postgres_password --- -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: vault-oidc-client-secret @@ -64,7 +64,7 @@ spec: key: kv/vault-oidc property: client_secret --- -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: stalwart-oidc-client-secret @@ -82,7 +82,7 @@ spec: key: kv/stalwart-oidc property: client_secret --- -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: argocd-oidc-client-secret @@ -100,7 +100,7 @@ spec: key: kv/argocd-oidc property: client_secret --- -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: freshrss-oidc-client-secret @@ -118,7 +118,7 @@ spec: key: kv/freshrss-oidc property: client_secret --- -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: actualbudget-oidc-client-secret diff --git a/bolletjestrui/external-secret.yaml b/bolletjestrui/external-secret.yaml index d64f5df..423adf0 100644 --- a/bolletjestrui/external-secret.yaml +++ b/bolletjestrui/external-secret.yaml @@ -1,4 +1,4 @@ -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: bolletjestrui-secrets diff --git a/dns/external-secret.yaml b/dns/external-secret.yaml index 28bbad8..b41ccee 100644 --- a/dns/external-secret.yaml +++ b/dns/external-secret.yaml @@ -1,4 +1,4 @@ -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: transip-credentials diff --git a/freshrss/external-secret.yaml b/freshrss/external-secret.yaml index d1d0057..787bb29 100644 --- a/freshrss/external-secret.yaml +++ b/freshrss/external-secret.yaml @@ -1,4 +1,4 @@ -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: freshrss-oidc-client-secret diff --git a/gatus/external-secret.yaml b/gatus/external-secret.yaml index a184dce..42dfa2f 100644 --- a/gatus/external-secret.yaml +++ b/gatus/external-secret.yaml @@ -1,4 +1,4 @@ -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: gatus-ntfy diff --git a/mbgwp/default-pw-es.yaml b/mbgwp/default-pw-es.yaml index 67601b4..8d9ec17 100644 --- a/mbgwp/default-pw-es.yaml +++ b/mbgwp/default-pw-es.yaml @@ -1,4 +1,4 @@ -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: wordpress-secrets diff --git a/mbgwp/mariadb-operator-credentials-es.yaml b/mbgwp/mariadb-operator-credentials-es.yaml index e99d4cf..1d95b6c 100644 --- a/mbgwp/mariadb-operator-credentials-es.yaml +++ b/mbgwp/mariadb-operator-credentials-es.yaml @@ -1,4 +1,4 @@ -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: mbgwp-mariadb-credentials diff --git a/ntfy/external-secret.yaml b/ntfy/external-secret.yaml index 2b441f7..bdcdd21 100644 --- a/ntfy/external-secret.yaml +++ b/ntfy/external-secret.yaml @@ -1,4 +1,4 @@ -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: ntfy-auth diff --git a/serpbear/external-secret.yaml b/serpbear/external-secret.yaml index 0a6ebe7..7d977a6 100644 --- a/serpbear/external-secret.yaml +++ b/serpbear/external-secret.yaml @@ -1,4 +1,4 @@ -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: serpbear-secrets diff --git a/vault/configure-oidc.yaml b/vault/configure-oidc.yaml index 32b0e22..70eb159 100644 --- a/vault/configure-oidc.yaml +++ b/vault/configure-oidc.yaml @@ -1,4 +1,4 @@ -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: vault-oidc-config diff --git a/vault/secret-store.yaml b/vault/secret-store.yaml index e2deb5a..f2a15cb 100644 --- a/vault/secret-store.yaml +++ b/vault/secret-store.yaml @@ -1,4 +1,4 @@ -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ClusterSecretStore metadata: name: vault-backend