2026-03-20 21:55:19 +00:00
26 changed files with 71 additions and 47 deletions
--- a/clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-cert-controller.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-cert-controller.yaml
@@ -3,10 +3,10 @@ kind: ClusterRole
 metadata:
  name: external-secrets-cert-controller
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets-cert-controller
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
 rules:
  - apiGroups:
--- a/clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-controller.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-controller.yaml
@@ -3,10 +3,10 @@ kind: ClusterRole
 metadata:
  name: external-secrets-controller
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
 rules:
  - apiGroups:
--- a/clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-edit.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-edit.yaml
@@ -3,10 +3,10 @@ kind: ClusterRole
 metadata:
  name: external-secrets-edit
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
    rbac.authorization.k8s.io/aggregate-to-edit: "true"
    rbac.authorization.k8s.io/aggregate-to-admin: "true"
--- a/clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-servicebindings.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-servicebindings.yaml
@@ -4,10 +4,10 @@ metadata:
  name: external-secrets-servicebindings
  labels:
    servicebinding.io/controller: "true"
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
 rules:
  - apiGroups:
--- a/clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-view.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-view.yaml
@@ -3,10 +3,10 @@ kind: ClusterRole
 metadata:
  name: external-secrets-view
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
    rbac.authorization.k8s.io/aggregate-to-view: "true"
    rbac.authorization.k8s.io/aggregate-to-edit: "true"
--- a/clusters/cl01tl/manifests/external-secrets/ClusterRoleBinding-external-secrets-cert-controller.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/ClusterRoleBinding-external-secrets-cert-controller.yaml
@@ -3,10 +3,10 @@ kind: ClusterRoleBinding
 metadata:
  name: external-secrets-cert-controller
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets-cert-controller
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
 roleRef:
  apiGroup: rbac.authorization.k8s.io
--- a/clusters/cl01tl/manifests/external-secrets/ClusterRoleBinding-external-secrets-controller.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/ClusterRoleBinding-external-secrets-controller.yaml
@@ -3,10 +3,10 @@ kind: ClusterRoleBinding
 metadata:
  name: external-secrets-controller
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
 roleRef:
  apiGroup: rbac.authorization.k8s.io
--- a/clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-clusterexternalsecrets.external-secrets.io.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-clusterexternalsecrets.external-secrets.io.yaml
@@ -665,6 +665,7 @@ spec:
                namespaceSelector:
                  description: |-
                    The labels to select by to find the Namespaces to create the ExternalSecrets in.
+
                    Deprecated: Use NamespaceSelectors instead.
                  properties:
                    matchExpressions:
@@ -761,6 +762,7 @@ spec:
                namespaces:
                  description: |-
                    Choose namespaces by name. This field is ORed with anything that NamespaceSelectors ends up choosing.
+
                    Deprecated: Use NamespaceSelectors instead.
                  items:
                    maxLength: 63
@@ -1494,6 +1496,7 @@ spec:
                namespaces:
                  description: |-
                    Choose namespaces by name. This field is ORed with anything that NamespaceSelectors ends up choosing.
+
                    Deprecated: Use NamespaceSelectors instead.
                  items:
                    maxLength: 63
--- a/clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-clustergenerators.generators.external-secrets.io.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-clustergenerators.generators.external-secrets.io.yaml
@@ -1545,6 +1545,7 @@ spec:
                                            Optional audiences field that will be used to request a temporary Kubernetes service
                                            account token for the service account referenced by `serviceAccountRef`.
                                            Defaults to a single audience `vault` it not specified.
+
                                            Deprecated: use serviceAccountRef.Audiences instead
                                          items:
                                            type: string
@@ -1554,6 +1555,7 @@ spec:
                                            Optional expiration time in seconds that will be used to request a temporary
                                            Kubernetes service account token for the service account referenced by
                                            `serviceAccountRef`.
+
                                            Deprecated: this will be removed in the future.
                                            Defaults to 10 minutes.
                                          format: int64
--- a/clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-clustersecretstores.external-secrets.io.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-clustersecretstores.external-secrets.io.yaml
@@ -4761,6 +4761,7 @@ spec:
                                        Optional audiences field that will be used to request a temporary Kubernetes service
                                        account token for the service account referenced by `serviceAccountRef`.
                                        Defaults to a single audience `vault` it not specified.
+
                                        Deprecated: use serviceAccountRef.Audiences instead
                                      items:
                                        type: string
@@ -4770,6 +4771,7 @@ spec:
                                        Optional expiration time in seconds that will be used to request a temporary
                                        Kubernetes service account token for the service account referenced by
                                        `serviceAccountRef`.
+
                                        Deprecated: this will be removed in the future.
                                        Defaults to 10 minutes.
                                      format: int64
@@ -9105,6 +9107,7 @@ spec:
                                        Optional audiences field that will be used to request a temporary Kubernetes service
                                        account token for the service account referenced by `serviceAccountRef`.
                                        Defaults to a single audience `vault` it not specified.
+
                                        Deprecated: use serviceAccountRef.Audiences instead
                                      items:
                                        type: string
@@ -9114,6 +9117,7 @@ spec:
                                        Optional expiration time in seconds that will be used to request a temporary
                                        Kubernetes service account token for the service account referenced by
                                        `serviceAccountRef`.
+
                                        Deprecated: this will be removed in the future.
                                        Defaults to 10 minutes.
                                      format: int64
--- a/clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-externalsecrets.external-secrets.io.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-externalsecrets.external-secrets.io.yaml
@@ -35,6 +35,9 @@ spec:
        - jsonPath: .status.conditions[?(@.type=="Ready")].status
          name: Ready
          type: string
+        - jsonPath: .status.refreshTime
+          name: Last Sync
+          type: date
      name: v1
      schema:
        openAPIV3Schema:
@@ -725,6 +728,9 @@ spec:
        - jsonPath: .status.conditions[?(@.type=="Ready")].status
          name: Ready
          type: string
+        - jsonPath: .status.refreshTime
+          name: Last Sync
+          type: date
      deprecated: true
      name: v1beta1
      schema:
--- a/clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-pushsecrets.external-secrets.io.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-pushsecrets.external-secrets.io.yaml
@@ -26,6 +26,9 @@ spec:
        - jsonPath: .status.conditions[?(@.type=="Ready")].reason
          name: Status
          type: string
+        - jsonPath: .status.refreshTime
+          name: Last Sync
+          type: date
      name: v1alpha1
      schema:
        openAPIV3Schema:
--- a/clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-secretstores.external-secrets.io.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-secretstores.external-secrets.io.yaml
@@ -4761,6 +4761,7 @@ spec:
                                        Optional audiences field that will be used to request a temporary Kubernetes service
                                        account token for the service account referenced by `serviceAccountRef`.
                                        Defaults to a single audience `vault` it not specified.
+
                                        Deprecated: use serviceAccountRef.Audiences instead
                                      items:
                                        type: string
@@ -4770,6 +4771,7 @@ spec:
                                        Optional expiration time in seconds that will be used to request a temporary
                                        Kubernetes service account token for the service account referenced by
                                        `serviceAccountRef`.
+
                                        Deprecated: this will be removed in the future.
                                        Defaults to 10 minutes.
                                      format: int64
@@ -9105,6 +9107,7 @@ spec:
                                        Optional audiences field that will be used to request a temporary Kubernetes service
                                        account token for the service account referenced by `serviceAccountRef`.
                                        Defaults to a single audience `vault` it not specified.
+
                                        Deprecated: use serviceAccountRef.Audiences instead
                                      items:
                                        type: string
@@ -9114,6 +9117,7 @@ spec:
                                        Optional expiration time in seconds that will be used to request a temporary
                                        Kubernetes service account token for the service account referenced by
                                        `serviceAccountRef`.
+
                                        Deprecated: this will be removed in the future.
                                        Defaults to 10 minutes.
                                      format: int64
--- a/clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-vaultdynamicsecrets.generators.external-secrets.io.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-vaultdynamicsecrets.generators.external-secrets.io.yaml
@@ -501,6 +501,7 @@ spec:
                                    Optional audiences field that will be used to request a temporary Kubernetes service
                                    account token for the service account referenced by `serviceAccountRef`.
                                    Defaults to a single audience `vault` it not specified.
+
                                    Deprecated: use serviceAccountRef.Audiences instead
                                  items:
                                    type: string
@@ -510,6 +511,7 @@ spec:
                                    Optional expiration time in seconds that will be used to request a temporary
                                    Kubernetes service account token for the service account referenced by
                                    `serviceAccountRef`.
+
                                    Deprecated: this will be removed in the future.
                                    Defaults to 10 minutes.
                                  format: int64
--- a/clusters/cl01tl/manifests/external-secrets/Deployment-external-secrets-cert-controller.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/Deployment-external-secrets-cert-controller.yaml
@@ -4,10 +4,10 @@ metadata:
  name: external-secrets-cert-controller
  namespace: external-secrets
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets-cert-controller
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
 spec:
  replicas: 1
@@ -19,10 +19,10 @@ spec:
  template:
    metadata:
      labels:
-        helm.sh/chart: external-secrets-2.1.0
+        helm.sh/chart: external-secrets-2.2.0
        app.kubernetes.io/name: external-secrets-cert-controller
        app.kubernetes.io/instance: external-secrets
-        app.kubernetes.io/version: "v2.1.0"
+        app.kubernetes.io/version: "v2.2.0"
        app.kubernetes.io/managed-by: Helm
    spec:
      serviceAccountName: external-secrets-cert-controller
@@ -40,7 +40,7 @@ spec:
            runAsUser: 1000
            seccompProfile:
              type: RuntimeDefault
-          image: ghcr.io/external-secrets/external-secrets:v2.1.0
+          image: ghcr.io/external-secrets/external-secrets:v2.2.0
          imagePullPolicy: IfNotPresent
          args:
            - certcontroller
--- a/clusters/cl01tl/manifests/external-secrets/Deployment-external-secrets-webhook.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/Deployment-external-secrets-webhook.yaml
@@ -4,10 +4,10 @@ metadata:
  name: external-secrets-webhook
  namespace: external-secrets
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets-webhook
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
 spec:
  replicas: 1
@@ -19,10 +19,10 @@ spec:
  template:
    metadata:
      labels:
-        helm.sh/chart: external-secrets-2.1.0
+        helm.sh/chart: external-secrets-2.2.0
        app.kubernetes.io/name: external-secrets-webhook
        app.kubernetes.io/instance: external-secrets
-        app.kubernetes.io/version: "v2.1.0"
+        app.kubernetes.io/version: "v2.2.0"
        app.kubernetes.io/managed-by: Helm
    spec:
      hostNetwork: false
@@ -40,7 +40,7 @@ spec:
            runAsUser: 1000
            seccompProfile:
              type: RuntimeDefault
-          image: ghcr.io/external-secrets/external-secrets:v2.1.0
+          image: ghcr.io/external-secrets/external-secrets:v2.2.0
          imagePullPolicy: IfNotPresent
          args:
            - webhook
--- a/clusters/cl01tl/manifests/external-secrets/Deployment-external-secrets.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/Deployment-external-secrets.yaml
@@ -4,10 +4,10 @@ metadata:
  name: external-secrets
  namespace: external-secrets
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
 spec:
  replicas: 1
@@ -19,10 +19,10 @@ spec:
  template:
    metadata:
      labels:
-        helm.sh/chart: external-secrets-2.1.0
+        helm.sh/chart: external-secrets-2.2.0
        app.kubernetes.io/name: external-secrets
        app.kubernetes.io/instance: external-secrets
-        app.kubernetes.io/version: "v2.1.0"
+        app.kubernetes.io/version: "v2.2.0"
        app.kubernetes.io/managed-by: Helm
    spec:
      serviceAccountName: external-secrets
@@ -40,7 +40,7 @@ spec:
            runAsUser: 1000
            seccompProfile:
              type: RuntimeDefault
-          image: ghcr.io/external-secrets/external-secrets:v2.1.0
+          image: ghcr.io/external-secrets/external-secrets:v2.2.0
          imagePullPolicy: IfNotPresent
          args:
            - --concurrent=1
--- a/clusters/cl01tl/manifests/external-secrets/Role-external-secrets-leaderelection.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/Role-external-secrets-leaderelection.yaml
@@ -4,10 +4,10 @@ metadata:
  name: external-secrets-leaderelection
  namespace: external-secrets
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
 rules:
  - apiGroups:
--- a/clusters/cl01tl/manifests/external-secrets/RoleBinding-external-secrets-leaderelection.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/RoleBinding-external-secrets-leaderelection.yaml
@@ -4,10 +4,10 @@ metadata:
  name: external-secrets-leaderelection
  namespace: external-secrets
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
 roleRef:
  apiGroup: rbac.authorization.k8s.io
--- a/clusters/cl01tl/manifests/external-secrets/Secret-external-secrets-webhook.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/Secret-external-secrets-webhook.yaml
@@ -4,9 +4,9 @@ metadata:
  name: external-secrets-webhook
  namespace: external-secrets
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets-webhook
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
    external-secrets.io/component: webhook
--- a/clusters/cl01tl/manifests/external-secrets/Service-external-secrets-webhook.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/Service-external-secrets-webhook.yaml
@@ -4,10 +4,10 @@ metadata:
  name: external-secrets-webhook
  namespace: external-secrets
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets-webhook
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
    external-secrets.io/component: webhook
 spec:
--- a/clusters/cl01tl/manifests/external-secrets/ServiceAccount-external-secrets-cert-controller.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/ServiceAccount-external-secrets-cert-controller.yaml
@@ -4,8 +4,8 @@ metadata:
  name: external-secrets-cert-controller
  namespace: external-secrets
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets-cert-controller
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
--- a/clusters/cl01tl/manifests/external-secrets/ServiceAccount-external-secrets-webhook.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/ServiceAccount-external-secrets-webhook.yaml
@@ -4,8 +4,8 @@ metadata:
  name: external-secrets-webhook
  namespace: external-secrets
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets-webhook
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
--- a/clusters/cl01tl/manifests/external-secrets/ServiceAccount-external-secrets.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/ServiceAccount-external-secrets.yaml
@@ -4,8 +4,8 @@ metadata:
  name: external-secrets
  namespace: external-secrets
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
--- a/clusters/cl01tl/manifests/external-secrets/ValidatingWebhookConfiguration-externalsecret-validate.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/ValidatingWebhookConfiguration-externalsecret-validate.yaml
@@ -3,10 +3,10 @@ kind: ValidatingWebhookConfiguration
 metadata:
  name: externalsecret-validate
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets-webhook
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
    external-secrets.io/component: webhook
 webhooks:
--- a/clusters/cl01tl/manifests/external-secrets/ValidatingWebhookConfiguration-secretstore-validate.yaml
+++ b/clusters/cl01tl/manifests/external-secrets/ValidatingWebhookConfiguration-secretstore-validate.yaml
@@ -3,10 +3,10 @@ kind: ValidatingWebhookConfiguration
 metadata:
  name: secretstore-validate
  labels:
-    helm.sh/chart: external-secrets-2.1.0
+    helm.sh/chart: external-secrets-2.2.0
    app.kubernetes.io/name: external-secrets-webhook
    app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.1.0"
+    app.kubernetes.io/version: "v2.2.0"
    app.kubernetes.io/managed-by: Helm
    external-secrets.io/component: webhook
 webhooks: