No Description

varonix 0755b0af7d fix: provider/infisical provider sub-folder references in remoteRef.key (#6338)		2 weeks ago
.github	4df385a8c6 chore(deps): bump actions/labeler from 6.0.1 to 6.1.0 (#6326)	3 weeks ago
apis	6e13565ee6 feat: inject kube context as STS session tags (#6311)	2 weeks ago
assets	e96b15ba39 chore: update docs sponsors & broken links (#3877)	1 year ago
cmd	e12d858a09 feat(security): Enable Authentication and Authorization for Metrics Endpoint using FilterProvider (#5574)	2 weeks ago
config	6e13565ee6 feat: inject kube context as STS session tags (#6311)	2 weeks ago
deploy	626207b3aa fix(charts): remove stale args guard in controller deployment (#6347)	2 weeks ago
design	9c52545124 docs(release): update documentation links from /main to /latest (#6210)	1 month ago
docs	6e13565ee6 feat: inject kube context as STS session tags (#6311)	2 weeks ago
e2e	1b6e9081ce chore: bump go version 1.26.3 (#6339)	2 weeks ago
generators	1b6e9081ce chore: bump go version 1.26.3 (#6339)	2 weeks ago
hack	19aa203512 chore(deps): bump regex from 2026.4.4 to 2026.5.9 in /hack/api-docs (#6330)	2 weeks ago
overrides	5002a57317 fix(docs): hide Scarf tracking pixel to remove page whitespace (#6209)	1 month ago
pkg	6e13565ee6 feat: inject kube context as STS session tags (#6311)	2 weeks ago
providers	0755b0af7d fix: provider/infisical provider sub-folder references in remoteRef.key (#6338)	2 weeks ago
runtime	1b6e9081ce chore: bump go version 1.26.3 (#6339)	2 weeks ago
terraform	49debe8ceb feat: re-implement e2e managed tests (#5444)	7 months ago
tests	6e13565ee6 feat: inject kube context as STS session tags (#6311)	2 weeks ago
.clomonitor.yml	8cce1ad284 feat: attach sbom/provenance files to GH release, fix clomonitor (#1656)	3 years ago
.dockerignore	3658afd0a2 ✨Add standalone Dockerfile (#1328)	3 years ago
.editorconfig	987d499241 cleanup: add lint and editorconfig	5 years ago
.gitattributes	5c22447c13 Add support for Vault kvv1 (#3790)	1 year ago
.gitignore	194955a10e fix: lint (#5536)	7 months ago
.golangci.yaml	f555418645 chore: rip out sprig dependency (#6170)	1 month ago
.licenserc.yaml	f555418645 chore: rip out sprig dependency (#6170)	1 month ago
.sonarcloud.properties	6f411f5569 chore(linter): fix linter issue in `api` and `cmd` package (#5413)	7 months ago
ADOPTERS.md	e8b46652cd docs: add Rootline to ADOPTERS.md (#6342)	2 weeks ago
CNAME	90286f37a4 Create CNAME	5 years ago
CODEOWNERS.md	a15be5dff5 feat: ovh provider implementation (#6101)	2 months ago
CONTRIBUTING.md	14fb8597db Add CONTRIBUTING.md file (#2925)	2 years ago
CONTRIBUTOR_LADDER.md	636ce0578d doc: update the ladder with two new tracks: documentation and community (#5298)	8 months ago
DEPRECATING.md	53dcb5e15c Update CyberArk branding from Conjur to CyberArk Secrets Manager (#5359)	8 months ago
Dockerfile	49319531cb chore(deps): bump distroless/static from `28efbe9` to `47b2d72` (#6088)	2 months ago
Dockerfile.standalone	6b1e104fa4 chore(deps): bump golang from 1.26.2 to 1.26.3 (#6320)	3 weeks ago
Dockerfile.ubi	5429189286 chore(deps): bump ubi9/ubi from `fd3612e` to `2323fcf` (#6321)	3 weeks ago
GOVERNANCE.md	53dcb5e15c Update CyberArk branding from Conjur to CyberArk Secrets Manager (#5359)	8 months ago
LICENSE	59a364e04d initial commit	5 years ago
MAINTAINERS.md	5e1d2c02a7 feat: add contributor ladder (#5150)	9 months ago
Makefile	2f6db6c5b7 fix(release): remove docs.check and all relative calls (#6146)	2 months ago
OWNERS.md	5e1d2c02a7 feat: add contributor ladder (#5150)	9 months ago
PROJECT	d1747266da fix: restore 0.16.0 (#4659)	1 year ago
README.md	9c52545124 docs(release): update documentation links from /main to /latest (#6210)	1 month ago
SECURITY.md	86ce74a6c0 chore(docs): update helm charts (#5203)	9 months ago
SECURITY_RESPONSE.md	fd62f96e9f chore: fixup security response suggestions (#3056)	2 years ago
Tiltfile	349d793b96 fix: Include all providers in default dev build (#5851)	4 months ago
changelog.json	771334dee9 feat: helm release workflow	5 years ago
codecov.yml	f32ea9f91d Configure codecov (#2995)	2 years ago
go.mod	e12d858a09 feat(security): Enable Authentication and Authorization for Metrics Endpoint using FilterProvider (#5574)	2 weeks ago
go.sum	e12d858a09 feat(security): Enable Authentication and Authorization for Metrics Endpoint using FilterProvider (#5574)	2 weeks ago
main.go	3b3cf7ae76 chore(templating): Remove years in license and their checks (#5955)	2 months ago
tilt.debug.dockerfile	6b1e104fa4 chore(deps): bump golang from 1.26.2 to 1.26.3 (#6320)	3 weeks ago
tilt.dockerfile	dcd8e624de chore(deps): bump alpine from `2510918` to `5b10f43` (#6251)	1 month ago
tools.go	3b3cf7ae76 chore(templating): Remove years in license and their checks (#5955)	2 months ago
ubi-build-files-amd64.txt	e5c5a0f390 chore(build): Update ubi Docker builds to UBI9 (#5465)	7 months ago
ubi-build-files-arm64.txt	e5c5a0f390 chore(build): Update ubi Docker builds to UBI9 (#5465)	7 months ago
ubi-build-files-ppc64le.txt	e5c5a0f390 chore(build): Update ubi Docker builds to UBI9 (#5465)	7 months ago
ubi-build-files-s390x.txt	e5c5a0f390 chore(build): Update ubi Docker builds to UBI9 (#5465)	7 months ago

External Secrets

External Secrets Operator is a Kubernetes operator that integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager, Akeyless, CyberArk Secrets Manager, Pulumi ESC and many more. The operator reads information from external APIs and automatically injects the values into a Kubernetes Secret.

Multiple people and organizations are joining efforts to create a single External Secrets solution based on existing projects. If you are curious about the origins of this project, check out this issue and this PR.

Documentation

External Secrets Operator guides and reference documentation is available at external-secrets.io. Also see our stability and support policy.

Contributing

We welcome and encourage contributions to this project! Please read the Developer and Contribution process guides. Also make sure to check the Code of Conduct and adhere to its guidelines.

Also, please take a look our Contribution Ladder for a very detailed explanation of what roles and tracks are available for people to try and help this project.

Sponsoring

Please consider sponsoring this project, there are many ways you can help us with: engineering time, providing infrastructure, donating money, etc. We are open to cooperations, feel free to approach as and we discuss how this could look like. We can keep your contribution anonymized if that's required (depending on the type of contribution), and anonymous donations are possible inside Opencollective.

Bi-weekly Development Meeting

We host our development meeting every odd wednesday on Zoom. We run the meeting with alternating times 8:00 PM Berlin Time and 1:00 PM Berlin Time. Be sure to check the CNCF Calendar to see when the next meeting is scheduled, we'll also announce the time in our Kubernetes Slack channel. Meeting notes are recorded on this google document.

Anyone is welcome to join. Feel free to ask questions, request feedback, raise awareness for an issue, or just say hi. ;)

Security

Please report vulnerabilities by email to cncf-ExternalSecretsOp-maintainers@lists.cncf.io. Also see our SECURITY.md file for details.

Software bill of materials

We attach SBOM and provenance file to our GitHub release. Also, they are attached to container images.

Adopters

Please create a PR and add your company or project to our ADOPTERS.md file if you are using our project!

Roadmap

You can find the roadmap in our documentation: https://external-secrets.io/latest/contributing/roadmap/

README.md