Overview
This is the first release of the new generic Secrets Webhook that relies on the new secret-init for tool for secret injection. Currently supported secret stores by webhook include Vault and Bao. Backwards-compatibility is preserved between generic secrets-webhook and vault-secrets-webhook.
In the upcoming release, we will be adding support to other secret stores supported by secret-init as well as consolidating the webhook interfaces.
Stay tuned! 🎊
Features 🚀
- feat: Generic Webhook by @csatib02 in #29
- feat(build): add image signing GH action by @ramizpolic in #82
Maintenance 🚧
- fix(ci): typo by @csatib02 in #28
- build(ci): update dependabot config by @csatib02 in #50
- chore: bump go version, update dependencies by @csatib02 in #44
- fix: typos in issue template by @csatib02 in #74
- chore: bump go version 1.22.2 --> 1.22.3 by @csatib02 in #79
- chore: prepare for v0.1.0 release by @ramizpolic in #81
Dependency Updates ⬆️
View all dependency changes
- build(deps): Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #18
- build(deps): Bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 by @dependabot in #17
- build(deps): Bump actions/dependency-review-action from 4.1.0 to 4.2.5 by @dependabot in #31
- build(deps): Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #7
- build(deps): Bump cachix/install-nix-action from 25 to 26 by @dependabot in #11
- build(deps): Bump the k8s group with 3 updates by @dependabot in #22
- build(deps): Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 by @dependabot in #13
- build(deps): Bump docker/login-action from 3.0.0 to 3.1.0 by @dependabot in #5
- build(deps): Bump DeterminateSystems/magic-nix-cache-action from 3 to 4 by @dependabot in #2
- build(deps): Bump golang from 1.22.0-alpine3.18 to 1.22.2-alpine3.18 by @dependabot in #32
- build(deps): Bump actions/cache from 4.0.0 to 4.0.2 by @dependabot in #24
- build(deps): Bump github.com/hashicorp/vault/api from 1.12.0 to 1.12.2 by @dependabot in #26
- build(deps): Bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 by @dependabot in #21
- build(deps): Bump sigs.k8s.io/controller-runtime from 0.16.3 to 0.17.2 by @dependabot in #15
- build(deps): Bump aquasecurity/trivy-action from 0.17.0 to 0.19.0 by @dependabot in #30
- build(deps): Bump github.com/docker/docker from 24.0.7 to 24.0.9 by @dependabot in #23
- build(deps): Bump actions/download-artifact from 4.1.2 to 4.1.4 by @dependabot in #8
- build(deps): Bump docker/build-push-action from 5.1.0 to 5.3.0 by @dependabot in #6
- build(deps): Bump docker/setup-buildx-action from 3.0.0 to 3.2.0 by @dependabot in #3
- build(deps): Bump azure/setup-helm from 3.5 to 4 by @dependabot in #35
- build(deps): Bump docker/setup-buildx-action from 3.2.0 to 3.3.0 by @dependabot in #36
- build(deps): Bump sigs.k8s.io/controller-runtime from 0.17.2 to 0.17.3 by @dependabot in #34
- build(deps): Bump golang.org/x/net from 0.21.0 to 0.23.0 by @dependabot in #37
- build(deps): Bump github.com/hashicorp/vault/api from 1.12.2 to 1.13.0 by @dependabot in #43
- build(deps): Bump azure/setup-helm from 4.1.0 to 4.2.0 by @dependabot in #41
- build(deps): Bump actions/download-artifact from 4.1.4 to 4.1.5 by @dependabot in #40
- build(deps): Bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #38
- build(deps): Bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #39
- build(deps): Bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #46
- build(deps): Bump actions/download-artifact from 4.1.5 to 4.1.7 by @dependabot in #48
- build(deps): Bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #47
- build(deps): Bump actions/dependency-review-action from 4.2.5 to 4.3.2 by @dependabot in #52
- build(deps): Bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 by @dependabot in #57
- build(deps): Bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #55
- build(deps): Bump golang from 1.22.2-alpine3.18 to 1.22.3-alpine3.18 by @dependabot in #53
- build(deps): Bump aquasecurity/trivy-action from 0.19.0 to 0.20.0 by @dependabot in #54
- build(deps): Bump sigs.k8s.io/controller-runtime from 0.17.3 to 0.18.2 in the sigs-k8s-io group by @dependabot in #56
- build(deps): Bump DeterminateSystems/magic-nix-cache-action from 4 to 6 by @dependabot in #58
- build(deps): Bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in #59
- build(deps): Bump golang from
4531927tod1a601bby @dependabot in #63 - build(deps): Bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in #64
- build(deps): Bump github/codeql-action from 2.13.4 to 3.25.5 by @dependabot in #66
- build(deps): Bump the k8s-io group with 3 updates by @dependabot in #67
- build(deps): Bump cachix/install-nix-action from 26 to 27 by @dependabot in #65
- build(deps): Bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in #72
- build(deps): Bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 by @dependabot in #70
- build(deps): Bump alpine from 3.19.1 to 3.20.0 by @dependabot in #73
- build(deps): Bump github/codeql-action from 3.25.6 to 3.25.7 by @dependabot in #75
- build(deps): Bump github.com/spf13/viper from 1.18.2 to 1.19.0 by @dependabot in #78
- build(deps): Bump docker/login-action from 3.1.0 to 3.2.0 by @dependabot in #76
New Contributors
- @dependabot made their first contribution in #18
- @csatib02 made their first contribution in #28
- @ramizpolic made their first contribution in #81
Full Changelog: https://github.com/bank-vaults/secrets-webhook/commits/v0.1.0
Contributors
dependabot, ramizpolic, and csatib02