No Description

dependabot[bot] 17cccb2a33 chore(deps): bump google-github-actions/auth		1 week ago
.github	17cccb2a33 chore(deps): bump google-github-actions/auth	1 week ago
apis	5d4a8956ee fix: Follow up PR6318 (#6782)	1 week ago
assets	ac70590f68 feat: Show sponsoring of Roche (#6790)	1 week ago
cmd	1244968106 feat: configurable leader election lease timings (#6644)	1 month ago
config	5d4a8956ee fix: Follow up PR6318 (#6782)	1 week ago
deploy	5d4a8956ee fix: Follow up PR6318 (#6782)	1 week ago
design	9c52545124 docs(release): update documentation links from /main to /latest (#6210)	3 months ago
docs	ac70590f68 feat: Show sponsoring of Roche (#6790)	1 week ago
e2e	58fc8a72ce fix(e2e): make the oracle suite runnable (#6770)	1 week ago
generators	35cb348570 chore(deps): controller-runtime dependency update (#6703)	2 weeks ago
hack	ad7c79158e fix: support docs builds from worktrees (#6741)	1 week ago
overrides	5002a57317 fix(docs): hide Scarf tracking pixel to remove page whitespace (#6209)	4 months ago
pkg	c61106863c chore(fix): moved the validation further up the chain (#6735)	2 weeks ago
providers	33de9dba94 fix: omit empty AWS secret replica regions (#6596)	1 week ago
runtime	cee28558b7 feat(cache): add atomic ContainsOrAdd (#6706)	1 week ago
terraform	4c5cb4a44e feat(provider): implement AWS Certificate Manager provider (#6117)	1 month ago
tests	a4726b41fb feat: add environments support to 1Password SDK (#6318)	1 week ago
.clomonitor.yml	8cce1ad284 feat: attach sbom/provenance files to GH release, fix clomonitor (#1656)	3 years ago
.dockerignore	3658afd0a2 ✨Add standalone Dockerfile (#1328)	4 years ago
.editorconfig	987d499241 cleanup: add lint and editorconfig	5 years ago
.gitattributes	5c22447c13 Add support for Vault kvv1 (#3790)	1 year ago
.gitignore	504426d3a2 feat(e2e): implement fan-out matrix validation and credential scoping (#6660)	2 weeks ago
.golangci.yaml	f555418645 chore: rip out sprig dependency (#6170)	4 months ago
.licenserc.yaml	f555418645 chore: rip out sprig dependency (#6170)	4 months ago
.sonarcloud.properties	6f411f5569 chore(linter): fix linter issue in `api` and `cmd` package (#5413)	9 months ago
ADOPTERS.md	e8b46652cd docs: add Rootline to ADOPTERS.md (#6342)	3 months ago
AGENTS.md	34087e65dd docs(aws): restore dropped access section and document missing fields (#6517)	1 month ago
CLAUDE.md	e153797229 docs: add AGENTS.md and AI setup guide for ESO (#6141)	2 months ago
CNAME	90286f37a4 Create CNAME	5 years ago
CODEOWNERS.md	a15be5dff5 feat: ovh provider implementation (#6101)	4 months ago
CONTRIBUTING.md	14fb8597db Add CONTRIBUTING.md file (#2925)	2 years ago
CONTRIBUTOR_LADDER.md	636ce0578d doc: update the ladder with two new tracks: documentation and community (#5298)	11 months ago
DEPRECATING.md	53dcb5e15c Update CyberArk branding from Conjur to CyberArk Secrets Manager (#5359)	10 months ago
Dockerfile	9fd57da69b chore(deps): bump distroless/static from `d5f030c` to `9197324` (#6662)	3 weeks ago
Dockerfile.standalone	9fd57da69b chore(deps): bump distroless/static from `d5f030c` to `9197324` (#6662)	3 weeks ago
Dockerfile.ubi	1d849c7bb1 chore(deps): bump ubi9/ubi from `8bf0e8f` to `2a6bd69` (#6661)	3 weeks ago
GOVERNANCE.md	53dcb5e15c Update CyberArk branding from Conjur to CyberArk Secrets Manager (#5359)	10 months ago
LICENSE	59a364e04d initial commit	5 years ago
MAINTAINERS.md	5e1d2c02a7 feat: add contributor ladder (#5150)	11 months ago
Makefile	f3cb9531ba fix(makefile): harden clean worktree check (#6702)	1 week ago
OWNERS.md	5e1d2c02a7 feat: add contributor ladder (#5150)	11 months ago
PROJECT	d1747266da fix: restore 0.16.0 (#4659)	1 year ago
README.md	ac70590f68 feat: Show sponsoring of Roche (#6790)	1 week ago
SECURITY.md	86ce74a6c0 chore(docs): update helm charts (#5203)	11 months ago
SECURITY_RESPONSE.md	fd62f96e9f chore: fixup security response suggestions (#3056)	2 years ago
Tiltfile	923658310f fix: pin all dependencies (#6727)	2 weeks ago
changelog.json	771334dee9 feat: helm release workflow	5 years ago
codecov.yml	f32ea9f91d Configure codecov (#2995)	2 years ago
go.mod	a4726b41fb feat: add environments support to 1Password SDK (#6318)	1 week ago
go.sum	a4726b41fb feat: add environments support to 1Password SDK (#6318)	1 week ago
main.go	3b3cf7ae76 chore(templating): Remove years in license and their checks (#5955)	5 months ago
tilt.debug.dockerfile	923658310f fix: pin all dependencies (#6727)	2 weeks ago
tilt.dockerfile	2838c486f6 chore(deps): bump alpine from `a2d49ea` to `28bd5fe` (#6499)	1 month ago
tools.go	3b3cf7ae76 chore(templating): Remove years in license and their checks (#5955)	5 months ago
ubi-build-files-amd64.txt	e5c5a0f390 chore(build): Update ubi Docker builds to UBI9 (#5465)	9 months ago
ubi-build-files-arm64.txt	e5c5a0f390 chore(build): Update ubi Docker builds to UBI9 (#5465)	9 months ago
ubi-build-files-ppc64le.txt	e5c5a0f390 chore(build): Update ubi Docker builds to UBI9 (#5465)	9 months ago
ubi-build-files-s390x.txt	e5c5a0f390 chore(build): Update ubi Docker builds to UBI9 (#5465)	9 months ago

External Secrets

External Secrets Operator is a Kubernetes operator that integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager, Akeyless, CyberArk Secrets Manager, Pulumi ESC and many more. The operator reads information from external APIs and automatically injects the values into a Kubernetes Secret.

Multiple people and organizations are joining efforts to create a single External Secrets solution based on existing projects. If you are curious about the origins of this project, check out this issue and this PR.

Documentation

External Secrets Operator guides and reference documentation is available at external-secrets.io. Also see our stability and support policy.

Contributing

We welcome and encourage contributions to this project! Please read the Developer and Contribution process guides. Also make sure to check the Code of Conduct and adhere to its guidelines.

Also, please take a look our Contribution Ladder for a very detailed explanation of what roles and tracks are available for people to try and help this project.

Sponsoring

Please consider sponsoring this project, there are many ways you can help us with: engineering time, providing infrastructure, donating money, etc. We are open to cooperations, feel free to approach as and we discuss how this could look like. We can keep your contribution anonymized if that's required (depending on the type of contribution), and anonymous donations are possible inside Opencollective.

Bi-weekly Development Meeting

We host our development meeting every odd wednesday on Zoom. We run the meeting with alternating times 8:00 PM Berlin Time and 1:00 PM Berlin Time. Be sure to check the CNCF Calendar to see when the next meeting is scheduled, we'll also announce the time in our Kubernetes Slack channel. Meeting notes are recorded on this google document.

Anyone is welcome to join. Feel free to ask questions, request feedback, raise awareness for an issue, or just say hi. ;)

Security

Please report vulnerabilities by email to cncf-ExternalSecretsOp-maintainers@lists.cncf.io. Also see our SECURITY.md file for details.

Software bill of materials

We attach SBOM and provenance file to our GitHub release. Also, they are attached to container images.

Adopters

Please create a PR and add your company or project to our ADOPTERS.md file if you are using our project!

Roadmap

You can find the roadmap in our documentation: https://external-secrets.io/latest/contributing/roadmap/

README.md