feat: add external-secrets operator v0.17.0

base/external-secrets/configurations/external-secrets.yaml

@@ -0,0 +1,10 @@
+---
+nameReference:
+- kind: Secret
+  fieldSpecs:
+  - path: spec/target/name
+    kind: ExternalSecret
+- kind: Secret
+  fieldSpecs:
+  - path: spec/selector/secret/name
+    kind: PushSecret

base/external-secrets/kustomization.yaml

@@ -0,0 +1,17 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: external-secrets
+
+resources:
+  - namespace.yaml
+
+configurations:
+- ./configurations/external-secrets.yaml
+
+helmCharts:
+- name: external-secrets
+  repo: https://charts.external-secrets.io
+  namespace: external-secrets
+  version: 0.17.0
+  releaseName: c-kustom

base/external-secrets/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: external-secrets

base/kustomization.yaml

@@ -11,4 +11,5 @@ resources:
 - ./minio
 - ./metrics
 - ./nginx
+- ./external-secrets
 #- ./cloudnative-pg-operator

base/nginx/kustomization.yaml

@@ -1,6 +1,2 @@
 resources:
-  - https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.4.0/deploy/static/provider/cloud/deploy.yaml
+  - https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.4.0/deploy/static/provider/cloud/deploy.yaml
-
-patches:
-- path: patches/ingress-nginx-cm.yaml
-- path: patches/ingress-nginx-deploy.yaml

base/nginx/patches/ingress-nginx-cm.yaml

@@ -1,8 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: ingress-nginx-controller
-  namespace: ingress-nginx
-data:
-  allow-snippet-annotations: "true"
-  http-snippet: "proxy_cache_path /cache levels=1:2 keys_zone=nginx-cache:10m max_size=489m inactive=10m use_temp_path=off;"

base/nginx/patches/ingress-nginx-deploy.yaml

@@ -1,17 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: ingress-nginx-controller
-  namespace: ingress-nginx
-spec:
-  template:
-    spec:
-      containers:
-      - name: controller
-        volumeMounts:
-        - mountPath: /cache
-          name: cache
-      volumes:
-      - name: cache
-        emptyDir:
-          sizeLimit: 500M

base/olm/kustomization.yaml

@@ -2,5 +2,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-- https://github.com/operator-framework/operator-lifecycle-manager/releases/download/v0.27.0/olm.yaml
+- https://github.com/operator-framework/operator-lifecycle-manager/releases/download/v0.31.0/olm.yaml
 - resources/mandatory-operators

crds/kustomization.yaml

@@ -2,5 +2,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-- https://github.com/operator-framework/operator-lifecycle-manager/releases/download/v0.27.0/crds.yaml
+- https://github.com/operator-framework/operator-lifecycle-manager/releases/download/v0.31.0/crds.yaml
-- https://raw.githubusercontent.com/ory/k8s/v0.30.0/helm/charts/hydra-maester/crds/crd-oauth2clients.yaml
+- https://raw.githubusercontent.com/ory/k8s/v0.50.7/helm/charts/hydra-maester/crds/crd-oauth2clients.yaml