This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [external-secrets](https://github.com/external-secrets/external-secrets) | HelmChart | patch | `2.4.0` → `2.4.1` | --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets)</summary> ### [`v2.4.1`](https://github.com/external-secrets/external-secrets/releases/tag/v2.4.1) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.4.0...v2.4.1) Image: `ghcr.io/external-secrets/external-secrets:v2.4.1` Image: `ghcr.io/external-secrets/external-secrets:v2.4.1-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.4.1-ubi-boringssl` <!-- Release notes generated using configuration in .github/release.yml at main --> #### What's Changed ##### General - chore: release chart for v2.4.0 by [@​Skarlso](https://github.com/Skarlso) in [#​6277](https://github.com/external-secrets/external-secrets/pull/6277) - feat(gcp): support multiple replicationLocations on PushSecret by [@​alliasgher](https://github.com/alliasgher) in [#​6225](https://github.com/external-secrets/external-secrets/pull/6225) - feat(passbolt): add custom CA bundle / CA provider support by [@​alliasgher](https://github.com/alliasgher) in [#​6224](https://github.com/external-secrets/external-secrets/pull/6224) - feat(azure): add contentType support for PushSecret by [@​ppatel1604](https://github.com/ppatel1604) in [#​6249](https://github.com/external-secrets/external-secrets/pull/6249) - feat(charts): add liveness probes to cert-controller and webhook by [@​mattcarp12](https://github.com/mattcarp12) in [#​6147](https://github.com/external-secrets/external-secrets/pull/6147) - fix: prevent creation of specific type of secrets by [@​Skarlso](https://github.com/Skarlso) in [#​6280](https://github.com/external-secrets/external-secrets/pull/6280) ##### Dependencies - chore(deps): bump golang from `f853308` to `f853308` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6282](https://github.com/external-secrets/external-secrets/pull/6282) - chore(deps): bump alpine from `2510918` to `5b10f43` in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6285](https://github.com/external-secrets/external-secrets/pull/6285) - chore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6283](https://github.com/external-secrets/external-secrets/pull/6283) - chore(deps): bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6284](https://github.com/external-secrets/external-secrets/pull/6284) - chore(deps): bump ubi9/ubi from `cf13fe2` to `fd3612e` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6281](https://github.com/external-secrets/external-secrets/pull/6281) **Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.4.0...v2.4.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE0MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #267 Co-authored-by: Renovate Bot <renovate@unbound.se> Co-committed-by: Renovate Bot <renovate@unbound.se>
Run Unbound environment in local K8S
This is a setup for running the Unbound environment in K8S using KinD
Prerequisites
Tools
- KinD
- kubectl
- Buildtools
- Lastpass CLI
- GNU Base64
- Bash 4.4+
- direnv to manage environment variables per directory
Setup
Create a Gitlab Personal Access Token with (at least) read_registry access and set it as environment variable GITLAB_TOKEN. Can be done with a .envrc-file in a parent directory:
source_up .envrc
export GITLAB_TOKEN=<xyz>
Create a .buildtools.yaml-file in the parent directory with the following content:
targets:
local:
context: kind-unbound
namespace: default
staging:
context: k8s.unbound.se
namespace: staging
prod:
context: k8s.unbound.se
namespace: default
Creating the cluster
Just run the following:
./setup
Wait for the cluster to be ready. The K8S context should be set automatically. Check what's been deployed by running:
kubectl get pod -A
Stopping/starting the cluster
If you need to stop the cluster to be able to use the exposed ports for other things, run:
docker stop unbound-control-plane
To start it again:
docker start unbound-control-plane
Removing the cluster
To remove the cluster completely, run:
kind delete cluster --name unbound
Cleaning up retained data
The setup stores data for containers in the data-directory. To start from scratch, stop the cluster, empty the directory
and start the cluster again.