chore(deps): update vendir vmware-tanzu/carvel-secretgen-controller t…

…o v0.18.0
cloudfoundry · Apr 29, 2024 · f50efd9 · f50efd9
1 parent e705ebe
commit f50efd9
Show file tree

Hide file tree

Showing 3 changed files with 61 additions and 15 deletions.
diff --git a/terraform-modules/concourse/backend/files/config/carvel-secretgen-controller/release.yml b/terraform-modules/concourse/backend/files/config/carvel-secretgen-controller/release.yml
@@ -44,6 +44,32 @@ spec:
             type: object
           spec:
             properties:
+              dangerousToNamespacesSelector:
+                items:
+                  properties:
+                    key:
+                      description: Property to target the resource for the match.
+                        It supports dot notation.
+                      type: string
+                    operator:
+                      description: Type of comparison.
+                      enum:
+                      - In
+                      - NotIn
+                      - Exists
+                      - DoesNotExist
+                      type: string
+                    values:
+                      description: Values to match on the resource key using the comparison
+                        operator.
+                      items:
+                        type: string
+                      type: array
+                  required:
+                  - key
+                  - operator
+                  type: object
+                type: array
               toNamespace:
                 type: string
               toNamespaces:
@@ -262,8 +288,8 @@ spec:
                     description: 'Data key and value. Where key is the Secret Key
                       and the value is a jsonpath surrounded by $( ). The fetched
                       data MUST be base64 encoded. All InputResources are available
-                      via their identifying name. For example:   key1: $(.secretinput1.data.value1)   key2:
-                      $(.secretinput2.data.value2)'
+                      via their identifying name. For example: key1: $(.secretinput1.data.value1)
+                      key2: $(.secretinput2.data.value2)'
                     type: object
                   metadata:
                     description: Metadata contains metadata for the Secret
@@ -285,8 +311,8 @@ spec:
                     description: 'StringData key and value. Where key is the Secret
                       Key and the value can contain a JSONPATH syntax surrounded by
                       $( ). All InputResources are available via their identifying
-                      name. For example:   key1: static-text   key2: $(.input1.spec.value1)   key3:
-                      combined-$(.input2.status.value2)-$(.input2.status.value3)'
+                      name. For example: key1: static-text key2: $(.input1.spec.value1)
+                      key3: combined-$(.input2.status.value2)-$(.input2.status.value3)'
                     type: object
                   type:
                     description: Type is the type of Kubernetes Secret
@@ -333,6 +359,7 @@ spec:
                       TODO: Add other useful fields. apiVersion, kind, uid?'
                     type: string
                 type: object
+                x-kubernetes-map-type: atomic
             type: object
         required:
         - spec
@@ -395,6 +422,7 @@ spec:
                       TODO: Add other useful fields. apiVersion, kind, uid?'
                     type: string
                 type: object
+                x-kubernetes-map-type: atomic
               commonName:
                 type: string
               duration:
@@ -502,7 +530,14 @@ spec:
             type: object
           spec:
             properties:
+              digits:
+                default: 0
+                type: integer
               length:
+                default: 40
+                type: integer
+              lowercaseLetters:
+                default: 0
                 type: integer
               secretTemplate:
                 properties:
@@ -524,6 +559,15 @@ spec:
                   type:
                     type: string
                 type: object
+              symbolCharSet:
+                default: '!@#$%&*;.:'
+                type: string
+              symbols:
+                default: 0
+                type: integer
+              uppercaseLetters:
+                default: 0
+                type: integer
             type: object
           status:
             properties:
@@ -753,15 +797,15 @@ metadata:
     kbld.k14s.io/images: |
       - origins:
         - local:
-            path: /home/runner/work/carvel-secretgen-controller/carvel-secretgen-controller
+            path: /home/runner/work/secretgen-controller/secretgen-controller
         - git:
             dirty: true
-            remoteURL: https://github.com/vmware-tanzu/carvel-secretgen-controller
-            sha: 7cf938231129673564646d851015d08630307efe
+            remoteURL: https://github.com/carvel-dev/secretgen-controller
+            sha: 0dc3c44ea5c32b766140fa0d85e80b61d19e9029
             tags:
-            - v0.10.3
-        url: ghcr.io/vmware-tanzu/carvel-secretgen-controller@sha256:00466d6beb98fdd8aed61642013ea0ba538bb496e84745c8c2e1871fdc54b1a9
-    secretgen-controller.carvel.dev/version: v0.10.3
+            - v0.18.0
+        url: ghcr.io/carvel-dev/secretgen-controller@sha256:35060c30363c1806c137bd137edda0d1dd07442cf1372f1951b194b3b11f5b59
+    secretgen-controller.carvel.dev/version: v0.18.0
   name: secretgen-controller
   namespace: secretgen-controller
 spec:
@@ -776,7 +820,7 @@ spec:
         app: secretgen-controller
     spec:
       containers:
-      - image: ghcr.io/vmware-tanzu/carvel-secretgen-controller@sha256:00466d6beb98fdd8aed61642013ea0ba538bb496e84745c8c2e1871fdc54b1a9
+      - image: ghcr.io/carvel-dev/secretgen-controller@sha256:35060c30363c1806c137bd137edda0d1dd07442cf1372f1951b194b3b11f5b59
         name: secretgen-controller
         resources:
           requests:
@@ -786,9 +830,11 @@ spec:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
-            - all
+            - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
       serviceAccount: secretgen-controller-sa
 ---
 apiVersion: v1

diff --git a/terraform-modules/concourse/backend/files/vendir.lock.yml b/terraform-modules/concourse/backend/files/vendir.lock.yml
@@ -2,8 +2,8 @@ apiVersion: vendir.k14s.io/v1alpha1
 directories:
 - contents:
   - githubRelease:
-      tag: v0.10.3
-      url: https://api.github.com/repos/carvel-dev/secretgen-controller/releases/71524101
+      tag: v0.18.0
+      url: https://api.github.com/repos/carvel-dev/secretgen-controller/releases/153293085
     path: .
   path: config/carvel-secretgen-controller
 kind: LockConfig
diff --git a/terraform-modules/concourse/backend/files/vendir.yml b/terraform-modules/concourse/backend/files/vendir.yml
@@ -8,7 +8,7 @@ directories:
   - path: .
     githubRelease:
       slug: vmware-tanzu/carvel-secretgen-controller
-      tag: v0.10.3
+      tag: v0.18.0
       assetNames: ["release.yml"]
     includePaths:
     - release.yml