From d3a6252ed55c6eb33e88d194c83da16900df9e42 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Zo=C3=AB?= Date: Sat, 30 May 2026 15:58:07 -0700 Subject: [PATCH] fix: ExternalSecret/ClusterSecretStore apiVersion v1beta1 -> v1 --- k8s/externalsecrets/agent-approles.yaml | 38 ++++++++++----------- k8s/externalsecrets/dispatcher-approle.yaml | 2 +- k8s/manifests/clustersecretstore.yaml | 2 +- 3 files changed, 21 insertions(+), 21 deletions(-) diff --git a/k8s/externalsecrets/agent-approles.yaml b/k8s/externalsecrets/agent-approles.yaml index 752632a..98eebef 100644 --- a/k8s/externalsecrets/agent-approles.yaml +++ b/k8s/externalsecrets/agent-approles.yaml @@ -2,7 +2,7 @@ # ExternalSecret: agent-pm # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-pm-approle @@ -29,7 +29,7 @@ spec: # ExternalSecret: agent-coder # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-coder-approle @@ -56,7 +56,7 @@ spec: # ExternalSecret: agent-code-reviewer # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-code-reviewer-approle @@ -83,7 +83,7 @@ spec: # ExternalSecret: agent-test-engineer # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-test-engineer-approle @@ -110,7 +110,7 @@ spec: # ExternalSecret: agent-devsecops # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-devsecops-approle @@ -137,7 +137,7 @@ spec: # ExternalSecret: agent-secops # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-secops-approle @@ -164,7 +164,7 @@ spec: # ExternalSecret: agent-sre # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-sre-approle @@ -191,7 +191,7 @@ spec: # ExternalSecret: agent-kubernetes-pilot # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-kubernetes-pilot-approle @@ -218,7 +218,7 @@ spec: # ExternalSecret: agent-linux-admin # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-linux-admin-approle @@ -245,7 +245,7 @@ spec: # ExternalSecret: agent-systems-engineer # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-systems-engineer-approle @@ -272,7 +272,7 @@ spec: # ExternalSecret: agent-networking # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-networking-approle @@ -299,7 +299,7 @@ spec: # ExternalSecret: agent-dba # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-dba-approle @@ -326,7 +326,7 @@ spec: # ExternalSecret: agent-prometheus-expert # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-prometheus-expert-approle @@ -353,7 +353,7 @@ spec: # ExternalSecret: agent-tofu-engineer # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-tofu-engineer-approle @@ -380,7 +380,7 @@ spec: # ExternalSecret: agent-release-manager # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-release-manager-approle @@ -407,7 +407,7 @@ spec: # ExternalSecret: agent-doc-updater # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-doc-updater-approle @@ -434,7 +434,7 @@ spec: # ExternalSecret: agent-doc-writer # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-doc-writer-approle @@ -461,7 +461,7 @@ spec: # ExternalSecret: agent-technical-writer # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-technical-writer-approle @@ -488,7 +488,7 @@ spec: # ExternalSecret: agent-cost-optimizer # Pulls AppRole credentials from OpenBao into a k8s Secret # so the Job can authenticate and fetch runtime secrets. -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: agent-cost-optimizer-approle diff --git a/k8s/externalsecrets/dispatcher-approle.yaml b/k8s/externalsecrets/dispatcher-approle.yaml index 1cca628..8e72426 100644 --- a/k8s/externalsecrets/dispatcher-approle.yaml +++ b/k8s/externalsecrets/dispatcher-approle.yaml @@ -1,6 +1,6 @@ --- # ExternalSecret: dispatcher approle -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: dispatcher-approle diff --git a/k8s/manifests/clustersecretstore.yaml b/k8s/manifests/clustersecretstore.yaml index c5b0f9d..4838435 100644 --- a/k8s/manifests/clustersecretstore.yaml +++ b/k8s/manifests/clustersecretstore.yaml @@ -7,7 +7,7 @@ # - external-secrets operator installed # - ClusterSecretStore "openbao" configured pointing to OpenBao in-cluster # -apiVersion: external-secrets.io/v1beta1 +apiVersion: external-secrets.io/v1 kind: ClusterSecretStore metadata: name: openbao