No Description

Erik Westra c4485a19bd docs: update community meeting section (#5364) 6 months ago
.github 0eaf966be6 chore: update codeql action to also run for actions (#5360) 6 months ago
apis 50af88eab2 feat: introduce priorityPolicy in merge rewrite (#5329) 6 months ago
assets e96b15ba39 chore: update docs sponsors & broken links (#3877) 1 year ago
cmd 472acbb530 chore(license): add automated license header checking using Apache SkyWalking Eyes GitHub Action (#5290) 7 months ago
config 50af88eab2 feat: introduce priorityPolicy in merge rewrite (#5329) 6 months ago
deploy 50af88eab2 feat: introduce priorityPolicy in merge rewrite (#5329) 6 months ago
design f38bccd3ef chore: Fix Markdown spelling issues found by codespell (#5139) 8 months ago
docs 50af88eab2 feat: introduce priorityPolicy in merge rewrite (#5329) 6 months ago
e2e d8878ec9b6 update dependencies (#5349) 6 months ago
hack 8b6dfb3b0b chore(deps): bump regex from 2025.9.1 to 2025.9.18 in /hack/api-docs (#5346) 6 months ago
overrides 05a1814b1b feat: fix a bunch of Sonar issues (#4208) 1 year ago
pkg 50af88eab2 feat: introduce priorityPolicy in merge rewrite (#5329) 6 months ago
terraform b4e7802a09 Updates to AAD and date update (#4512) 1 year ago
tests 29141ffe9e chore: update helm charts v0.20.1 (#5352) 6 months ago
.clomonitor.yml 8cce1ad284 feat: attach sbom/provenance files to GH release, fix clomonitor (#1656) 3 years ago
.dockerignore 3658afd0a2 ✨Add standalone Dockerfile (#1328) 3 years ago
.editorconfig 987d499241 cleanup: add lint and editorconfig 5 years ago
.gitattributes 5c22447c13 Add support for Vault kvv1 (#3790) 1 year ago
.gitignore 9dbecd6333 fix(akeyless): Upgrade Akeyless Provider Go SDK to v4 (#5263) 7 months ago
.golangci.yaml 84fd748a0d chore(deps): bump golangci/golangci-lint-action from 6.5.2 to 8.0.0 (#4734) 11 months ago
.licenserc.yaml 472acbb530 chore(license): add automated license header checking using Apache SkyWalking Eyes GitHub Action (#5290) 7 months ago
.sonarcloud.properties 13d5c98198 fix: sonar configs (#4334) 1 year ago
ADOPTERS.md a0a992455a chore(docs): update `ADOPTERS.md` to include SAP (#5165) 7 months ago
CNAME 90286f37a4 Create CNAME 5 years ago
CODEOWNERS.md 5e1d2c02a7 feat: add contributor ladder (#5150) 7 months ago
CONTRIBUTING.md 14fb8597db Add CONTRIBUTING.md file (#2925) 2 years ago
CONTRIBUTOR_LADDER.md 636ce0578d doc: update the ladder with two new tracks: documentation and community (#5298) 7 months ago
DEPRECATING.md f38bccd3ef chore: Fix Markdown spelling issues found by codespell (#5139) 8 months ago
Dockerfile a70c8508e8 chore(deps): bump distroless/static from `f2ff10a` to `87bce11` (#5320) 7 months ago
Dockerfile.standalone a70c8508e8 chore(deps): bump distroless/static from `f2ff10a` to `87bce11` (#5320) 7 months ago
Dockerfile.ubi 6b80de16e5 chore(deps): bump ubi8/ubi from `7010e70` to `534c2c0` (#5237) 7 months ago
GOVERNANCE.md 5e1d2c02a7 feat: add contributor ladder (#5150) 7 months ago
LICENSE 59a364e04d initial commit 5 years ago
MAINTAINERS.md 5e1d2c02a7 feat: add contributor ladder (#5150) 7 months ago
Makefile 23573e0363 ci: Add licence.check make target (#5335) 6 months ago
OWNERS.md 5e1d2c02a7 feat: add contributor ladder (#5150) 7 months ago
PROJECT d1747266da fix: restore 0.16.0 (#4659) 1 year ago
README.md c4485a19bd docs: update community meeting section (#5364) 6 months ago
SECURITY.md 86ce74a6c0 chore(docs): update helm charts (#5203) 7 months ago
SECURITY_RESPONSE.md fd62f96e9f chore: fixup security response suggestions (#3056) 2 years ago
Tiltfile ede6a4372c fix: tilt build was failing to rebuild (#5225) 7 months ago
changelog.json 771334dee9 feat: helm release workflow 5 years ago
codecov.yml f32ea9f91d Configure codecov (#2995) 2 years ago
go.mod d8878ec9b6 update dependencies (#5349) 6 months ago
go.sum d8878ec9b6 update dependencies (#5349) 6 months ago
main.go 472acbb530 chore(license): add automated license header checking using Apache SkyWalking Eyes GitHub Action (#5290) 7 months ago
tilt.debug.dockerfile c39afd4387 chore(deps): bump golang from `b6ed3fd` to `b6ed3fd` (#5318) 7 months ago
tilt.dockerfile 6dacba7024 chore(deps): bump alpine from `8a1f59f` to `4bcff63` (#5051) 8 months ago
tools.go 472acbb530 chore(license): add automated license header checking using Apache SkyWalking Eyes GitHub Action (#5290) 7 months ago
ubi-build-files-amd64.txt cb528e8c00 Fix: Remove root/buildinfo from ubi build files (#5037) 9 months ago
ubi-build-files-arm64.txt cb528e8c00 Fix: Remove root/buildinfo from ubi build files (#5037) 9 months ago
ubi-build-files-ppc64le.txt cb528e8c00 Fix: Remove root/buildinfo from ubi build files (#5037) 9 months ago
ubi-build-files-s390x.txt cb528e8c00 Fix: Remove root/buildinfo from ubi build files (#5037) 9 months ago

README.md

external-secrets

External Secrets

ci CII Best Practices OpenSSF Scorecard Go Report Card FOSSA Status Artifact Hub operatorhub.io

External Secrets Operator is a Kubernetes operator that integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager, Akeyless, CyberArk Conjur, Pulumi ESC and many more. The operator reads information from external APIs and automatically injects the values into a Kubernetes Secret.

Multiple people and organizations are joining efforts to create a single External Secrets solution based on existing projects. If you are curious about the origins of this project, check out this issue and this PR.

Documentation

External Secrets Operator guides and reference documentation is available at external-secrets.io. Also see our stability and support policy.

Contributing

We welcome and encourage contributions to this project! Please read the Developer and Contribution process guides. Also make sure to check the Code of Conduct and adhere to its guidelines.

Also, please take a look our Contribution Ladder for a very detailed explanation of what roles and tracks are available for people to try and help this project.

Sponsoring

Please consider sponsoring this project, there are many ways you can help us with: engineering time, providing infrastructure, donating money, etc. We are open to cooperations, feel free to approach as and we discuss how this could look like. We can keep your contribution anonymized if that's required (depending on the type of contribution), and anonymous donations are possible inside Opencollective.

Bi-weekly Development Meeting

We host our development meeting every odd wednesday on Zoom. We run the meeting with alternating times 8:00 PM Berlin Time and 1:00 PM Berlin Time. Be sure to check the CNCF Calendar to see when the next meeting is scheduled, we'll also announce the time in our Kubernetes Slack channel. Meeting notes are recorded on this google document.

Anyone is welcome to join. Feel free to ask questions, request feedback, raise awareness for an issue, or just say hi. ;)

Security

Please report vulnerabilities by email to cncf-ExternalSecretsOp-maintainers@lists.cncf.io. Also see our SECURITY.md file for details.

Software bill of materials

We attach SBOM and provenance file to our GitHub release. Also, they are attached to container images.

Adopters

Please create a PR and add your company or project to our ADOPTERS.md file if you are using our project!

Roadmap

You can find the roadmap in our documentation: https://external-secrets.io/main/contributing/roadmap/

Kicked off by

Sponsored by

External Secrets Inc. Container Solutions Form 3 Pento

License

FOSSA Status