external-secrets helm release

external-secrets helm

No introduction found. Create it?

Install

Install with:

helm repo add external-secrets https://charts.external-secrets.io/ helm install external-secrets external-secrets/external-secrets -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (5 out of 124)

Name	Repo	Stars	Version	Timestamp
external-secrets	ishioni/homelab-ops	118	0.12.1	2 hours ago
external-secrets	joryirving/home-ops	150	0.12.1	8 hours ago
external-secrets	joryirving/home-ops	150	0.12.1	8 hours ago
external-secrets	onedr0p/home-ops	2149	0.12.1	9 hours ago
external-secrets	bjw-s-labs/home-ops	619	0.12.1	3 days ago

Name

Repo

Stars

Version

Timestamp

external-secrets

ishioni/homelab-ops

118

0.12.1

2 hours ago

external-secrets

joryirving/home-ops

150

0.12.1

8 hours ago

external-secrets

joryirving/home-ops

150

0.12.1

8 hours ago

external-secrets

onedr0p/home-ops

2149

0.12.1

9 hours ago

external-secrets

bjw-s-labs/home-ops

619

0.12.1

3 days ago

Values

See the most popular values for this chart:

Key	Types
installCRDs (104) `true`	boolean
serviceMonitor.enabled (104) `true`	boolean
serviceMonitor.interval (95) `1m`	string
serviceMonitor.metricRelabelings[].action (1)	string
serviceMonitor.metricRelabelings[].regex (1)	string
serviceMonitor.metricRelabelings[].sourceLabels[] (1)	string
certController.serviceMonitor.enabled (90) `true`	boolean
certController.serviceMonitor.interval (86) `1m`	string
certController.image.repository (28) `ghcr.io/external-secrets/external-secrets`	string
certController.resources.requests.cpu (5) `10m`	string
certController.resources.requests.memory (4)	string
certController.resources.limits.memory (4)	string
certController.resources.limits.cpu (2)	string
certController.create (1)	boolean
certController.extraVolumeMounts[].mountPath (1)	string
certController.extraVolumeMounts[].name (1)	string
certController.extraVolumeMounts[].readOnly (1)	boolean
certController.extraVolumes[].name (1)	string
certController.extraVolumes[].projected.defaultMode (1)	number
certController.extraVolumes[].projected.sources[].configMap.items[].key (1)	string
certController.extraVolumes[].projected.sources[].configMap.items[].path (1)	string
certController.extraVolumes[].projected.sources[].configMap.name (1)	string
certController.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)	string
certController.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)	string
certController.extraVolumes[].projected.sources[].downwardAPI.items[].path (1)	string
certController.extraVolumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)	number
certController.extraVolumes[].projected.sources[].serviceAccountToken.path (1)	string
certController.log.level (1)	string
certController.log.timeEncoding (1)	string
certController.podDisruptionBudget.enabled (1)	boolean
certController.podDisruptionBudget.minAvailable (1)	number
certController.podLabels."egress.home.arpa/apiserver" (1)	string
certController.podLabels."prom.home.arpa/kps" (1)	string
certController.replicaCount (1)	number
certController.requeueInterval (1)	string
certController.revisionHistoryLimit (1)	number
certController.serviceAccount.automount (1)	boolean
certController.serviceAccount.create (1)	boolean
webhook.serviceMonitor.enabled (89) `true`	boolean
webhook.serviceMonitor.interval (85) `1m`	string
webhook.image.repository (28) `ghcr.io/external-secrets/external-secrets`	string
webhook.resources.requests.cpu (5) `10m`	string
webhook.resources.requests.memory (4)	string
webhook.resources.limits.memory (4)	string
webhook.resources.limits.cpu (2)	string
webhook.certManager.enabled (4)	boolean
webhook.certManager.cert.issuerRef.kind (3)	string
webhook.certManager.cert.issuerRef.name (3)	string
webhook.certManager.cert.issuerRef.group (2)	string
webhook.certManager.cert.duration (2)	string
webhook.certManager.cert.create (1)	boolean
webhook.certManager.cert.renewBefore (1)	string
webhook.certManager.addInjectorAnnotations (1)	boolean
webhook.certManager.log.level (1)	string
webhook.lookaheadInterval (2)	string
webhook.replicaCount (2)	number
webhook.certCheckInterval (1)	string
webhook.create (1)	boolean
webhook.extraVolumeMounts[].mountPath (1)	string
webhook.extraVolumeMounts[].name (1)	string
webhook.extraVolumeMounts[].readOnly (1)	boolean
webhook.extraVolumes[].name (1)	string
webhook.extraVolumes[].projected.defaultMode (1)	number
webhook.extraVolumes[].projected.sources[].configMap.items[].key (1)	string
webhook.extraVolumes[].projected.sources[].configMap.items[].path (1)	string
webhook.extraVolumes[].projected.sources[].configMap.name (1)	string
webhook.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)	string
webhook.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)	string
webhook.extraVolumes[].projected.sources[].downwardAPI.items[].path (1)	string
webhook.extraVolumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)	number
webhook.extraVolumes[].projected.sources[].serviceAccountToken.path (1)	string
webhook.log.level (1)	string
webhook.log.timeEncoding (1)	string
webhook.podDisruptionBudget.enabled (1)	boolean
webhook.podDisruptionBudget.minAvailable (1)	number
webhook.podLabels."ingress.home.arpa/apiserver" (1)	string
webhook.podLabels."prom.home.arpa/kps" (1)	string
webhook.revisionHistoryLimit (1)	number
webhook.serviceAccount.automount (1)	boolean
webhook.serviceAccount.create (1)	boolean
webhook.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)	string
webhook.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)	string
webhook.topologySpreadConstraints[].maxSkew (1)	number
webhook.topologySpreadConstraints[].topologyKey (1)	string
webhook.topologySpreadConstraints[].whenUnsatisfiable (1)	string
replicaCount (48) `1`	number
leaderElect (30) `true`	boolean
image.repository (28) `ghcr.io/external-secrets/external-secrets`	string
grafana.enabled (11) `true`	boolean
reportsController.serviceMonitor.enabled (11) `true`	boolean
reportsController.serviceMonitor.interval (11) `1m`	string
backgroundController.serviceMonitor.enabled (10) `true`	boolean
backgroundController.serviceMonitor.interval (10) `1m`	string
cleanupController.serviceMonitor.enabled (10) `true`	boolean
cleanupController.serviceMonitor.interval (10) `1m`	string
bitwarden-sdk-server.enabled (7) `true`	boolean
bitwarden-sdk-server.podAnnotations."secret.reloader.stakater.com/reload" (5) `bitwarden-css-certs,bitwarden-secrets-manager,bitwarden-tls-certs`	string
bitwarden-sdk-server.serviceMonitor.enabled (3) `true`	boolean
bitwarden-sdk-server.serviceMonitor.interval (3) `1m`	string
resources.requests.cpu (6)	string
resources.requests.memory (5)	string
resources.limits.memory (5)	string
resources.limits.cpu (2)	string
resources.cpu (1)	string
resources.memory (1)	string
global.tolerations[].effect (3) `NoSchedule`	string
global.tolerations[].key (3) `node-role.kubernetes.io/control-plane`	string
global.tolerations[].operator (1)	string
global.nodeSelector."node-role.kubernetes.io/control-plane" (2)	string
global.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)	string
global.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)	string
global.topologySpreadConstraints[].labelSelector.matchLabels.app (1)	string
global.topologySpreadConstraints[].maxSkew (1)	number
global.topologySpreadConstraints[].topologyKey (1)	string
global.topologySpreadConstraints[].whenUnsatisfiable (1)	string
extendedMetricLabels (2)	boolean
extraArgs.loglevel (2)	string
extraVolumes[].name (2)	string
extraVolumes[].emptyDir.medium (1)	string
extraVolumes[].projected.defaultMode (1)	number
extraVolumes[].projected.sources[].configMap.items[].key (1)	string
extraVolumes[].projected.sources[].configMap.items[].path (1)	string
extraVolumes[].projected.sources[].configMap.name (1)	string
extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)	string
extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)	string
extraVolumes[].projected.sources[].downwardAPI.items[].path (1)	string
extraVolumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)	number
extraVolumes[].projected.sources[].serviceAccountToken.path (1)	string
extraVolumes[].secret.defaultMode (1)	number
extraVolumes[].secret.secretName (1)	string
log.level (2)	string
log.timeEncoding (1)	string
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (2)	string
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)	string
topologySpreadConstraints[].maxSkew (2)	number
topologySpreadConstraints[].topologyKey (2)	string
topologySpreadConstraints[].whenUnsatisfiable (2)	string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)	string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)	string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)	string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)	number
concurrent (1)	number
controllerClass (1)	string
crds.createClusterExternalSecret (1)	boolean
crds.createClusterSecretStore (1)	boolean
extraContainers[].env[].name (1)	string
extraContainers[].env[].value (1)	string
extraContainers[].image (1)	string
extraContainers[].imagePullPolicy (1)	string
extraContainers[].name (1)	string
extraContainers[].resources.limits.cpu (1)	string
extraContainers[].resources.limits.memory (1)	string
extraContainers[].resources.requests.cpu (1)	string
extraContainers[].securityContext.allowPrivilegeEscalation (1)	boolean
extraContainers[].securityContext.capabilities.drop[] (1)	string
extraContainers[].securityContext.readOnlyRootFilesystem (1)	boolean
extraContainers[].securityContext.runAsNonRoot (1)	boolean
extraContainers[].securityContext.runAsUser (1)	number
extraContainers[].securityContext.seccompProfile.type (1)	string
extraContainers[].volumeMounts[].mountPath (1)	string
extraContainers[].volumeMounts[].name (1)	string
extraContainers[].volumeMounts[].readOnly (1)	boolean
extraEnv[].name (1)	string
extraEnv[].value (1)	string
extraVolumeMounts[].mountPath (1)	string
extraVolumeMounts[].name (1)	string
extraVolumeMounts[].readOnly (1)	boolean
installCRDS (1)	boolean
podDisruptionBudget.enabled (1)	boolean
podDisruptionBudget.minAvailable (1)	number
podLabels."egress.home.arpa/apiserver" (1)	string
podLabels."egress.home.arpa/onepassword-connect" (1)	string
podLabels."prom.home.arpa/kps" (1)	string
podSecurityContext.fsGroup (1)	number
podSecurityContext.fsGroupChangePolicy (1)	string
processClusterExternalSecret (1)	boolean
processClusterStore (1)	boolean
rbac.create (1)	boolean
rbac.servicebindings.create (1)	boolean
revisionHistoryLimit (1)	number
service.ipFamilyPolicy (1)	string
serviceAccount.automount (1)	boolean
serviceAccount.create (1)	boolean

Key

Types

installCRDs (104)

true

boolean

serviceMonitor.enabled (104)

true

boolean

serviceMonitor.interval (95)

1m

string

serviceMonitor.metricRelabelings[].action (1)

string

serviceMonitor.metricRelabelings[].regex (1)

string

serviceMonitor.metricRelabelings[].sourceLabels[] (1)

string

certController.serviceMonitor.enabled (90)

true

boolean

certController.serviceMonitor.interval (86)

1m

string

certController.image.repository (28)

ghcr.io/external-secrets/external-secrets

string

certController.resources.requests.cpu (5)

10m

string

certController.resources.requests.memory (4)

string

certController.resources.limits.memory (4)

string

certController.resources.limits.cpu (2)

string

certController.create (1)

boolean

certController.extraVolumeMounts[].mountPath (1)

string

certController.extraVolumeMounts[].name (1)

string

certController.extraVolumeMounts[].readOnly (1)

boolean

certController.extraVolumes[].name (1)

string

certController.extraVolumes[].projected.defaultMode (1)

number

certController.extraVolumes[].projected.sources[].configMap.items[].key (1)

string

certController.extraVolumes[].projected.sources[].configMap.items[].path (1)

string

certController.extraVolumes[].projected.sources[].configMap.name (1)

string

certController.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)

string

certController.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)

string

certController.extraVolumes[].projected.sources[].downwardAPI.items[].path (1)

string

certController.extraVolumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)

number

certController.extraVolumes[].projected.sources[].serviceAccountToken.path (1)

string

certController.log.level (1)

string

certController.log.timeEncoding (1)

string

certController.podDisruptionBudget.enabled (1)

boolean

certController.podDisruptionBudget.minAvailable (1)

number

certController.podLabels."egress.home.arpa/apiserver" (1)

string

certController.podLabels."prom.home.arpa/kps" (1)

string

certController.replicaCount (1)

number

certController.requeueInterval (1)

string

certController.revisionHistoryLimit (1)

number

certController.serviceAccount.automount (1)

boolean

certController.serviceAccount.create (1)

boolean

webhook.serviceMonitor.enabled (89)

true

boolean

webhook.serviceMonitor.interval (85)

1m

string

webhook.image.repository (28)

ghcr.io/external-secrets/external-secrets

string

webhook.resources.requests.cpu (5)

10m

string

webhook.resources.requests.memory (4)

string

webhook.resources.limits.memory (4)

string

webhook.resources.limits.cpu (2)

string

webhook.certManager.enabled (4)

boolean

webhook.certManager.cert.issuerRef.kind (3)

string

webhook.certManager.cert.issuerRef.name (3)

string

webhook.certManager.cert.issuerRef.group (2)

string

webhook.certManager.cert.duration (2)

string

webhook.certManager.cert.create (1)

boolean

webhook.certManager.cert.renewBefore (1)

string

webhook.certManager.addInjectorAnnotations (1)

boolean

webhook.certManager.log.level (1)

string

webhook.lookaheadInterval (2)

string

webhook.replicaCount (2)

number

webhook.certCheckInterval (1)

string

webhook.create (1)

boolean

webhook.extraVolumeMounts[].mountPath (1)

string

webhook.extraVolumeMounts[].name (1)

string

webhook.extraVolumeMounts[].readOnly (1)

boolean

webhook.extraVolumes[].name (1)

string

webhook.extraVolumes[].projected.defaultMode (1)

number

webhook.extraVolumes[].projected.sources[].configMap.items[].key (1)

string

webhook.extraVolumes[].projected.sources[].configMap.items[].path (1)

string

webhook.extraVolumes[].projected.sources[].configMap.name (1)

string

webhook.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)

string

webhook.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)

string

webhook.extraVolumes[].projected.sources[].downwardAPI.items[].path (1)

string

webhook.extraVolumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)

number

webhook.extraVolumes[].projected.sources[].serviceAccountToken.path (1)

string

webhook.log.level (1)

string

webhook.log.timeEncoding (1)

string

webhook.podDisruptionBudget.enabled (1)

boolean

webhook.podDisruptionBudget.minAvailable (1)

number

webhook.podLabels."ingress.home.arpa/apiserver" (1)

string

webhook.podLabels."prom.home.arpa/kps" (1)

string

webhook.revisionHistoryLimit (1)

number

webhook.serviceAccount.automount (1)

boolean

webhook.serviceAccount.create (1)

boolean

webhook.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)

string

webhook.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)

string

webhook.topologySpreadConstraints[].maxSkew (1)

number

webhook.topologySpreadConstraints[].topologyKey (1)

string

webhook.topologySpreadConstraints[].whenUnsatisfiable (1)

string

replicaCount (48)

number

leaderElect (30)

true

boolean

image.repository (28)

ghcr.io/external-secrets/external-secrets

string

grafana.enabled (11)

true

boolean

reportsController.serviceMonitor.enabled (11)

true

boolean

reportsController.serviceMonitor.interval (11)

1m

string

backgroundController.serviceMonitor.enabled (10)

true

boolean

backgroundController.serviceMonitor.interval (10)

1m

string

cleanupController.serviceMonitor.enabled (10)

true

boolean

cleanupController.serviceMonitor.interval (10)

1m

string

bitwarden-sdk-server.enabled (7)

true

boolean

bitwarden-sdk-server.podAnnotations."secret.reloader.stakater.com/reload" (5)

bitwarden-css-certs,bitwarden-secrets-manager,bitwarden-tls-certs

string

bitwarden-sdk-server.serviceMonitor.enabled (3)

true

boolean

bitwarden-sdk-server.serviceMonitor.interval (3)

1m

string

resources.requests.cpu (6)

string

resources.requests.memory (5)

string

resources.limits.memory (5)

string

resources.limits.cpu (2)

string

resources.cpu (1)

string

resources.memory (1)

string

global.tolerations[].effect (3)

NoSchedule

string

global.tolerations[].key (3)

node-role.kubernetes.io/control-plane

string

global.tolerations[].operator (1)

string

global.nodeSelector."node-role.kubernetes.io/control-plane" (2)

string

global.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)

string

global.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)

string

global.topologySpreadConstraints[].labelSelector.matchLabels.app (1)

string

global.topologySpreadConstraints[].maxSkew (1)

number

global.topologySpreadConstraints[].topologyKey (1)

string

global.topologySpreadConstraints[].whenUnsatisfiable (1)

string

extendedMetricLabels (2)

boolean

extraArgs.loglevel (2)

string

extraVolumes[].name (2)

string

extraVolumes[].emptyDir.medium (1)

string

extraVolumes[].projected.defaultMode (1)

number

extraVolumes[].projected.sources[].configMap.items[].key (1)

string

extraVolumes[].projected.sources[].configMap.items[].path (1)

string

extraVolumes[].projected.sources[].configMap.name (1)

string

extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)

string

extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)

string

extraVolumes[].projected.sources[].downwardAPI.items[].path (1)

string

extraVolumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)

number

extraVolumes[].projected.sources[].serviceAccountToken.path (1)

string

extraVolumes[].secret.defaultMode (1)

number

extraVolumes[].secret.secretName (1)

string

log.level (2)

string

log.timeEncoding (1)

string

topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (2)

string

topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)

string

topologySpreadConstraints[].maxSkew (2)

number

topologySpreadConstraints[].topologyKey (2)

string

topologySpreadConstraints[].whenUnsatisfiable (2)

string

affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)

string

affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)

string

affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)

string

affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)

number

concurrent (1)

number

controllerClass (1)

string

crds.createClusterExternalSecret (1)

boolean

crds.createClusterSecretStore (1)

boolean

extraContainers[].env[].name (1)

string

extraContainers[].env[].value (1)

string

extraContainers[].image (1)

string

extraContainers[].imagePullPolicy (1)

string

extraContainers[].name (1)

string

extraContainers[].resources.limits.cpu (1)

string

extraContainers[].resources.limits.memory (1)

string

extraContainers[].resources.requests.cpu (1)

string

extraContainers[].securityContext.allowPrivilegeEscalation (1)

boolean

extraContainers[].securityContext.capabilities.drop[] (1)

string

extraContainers[].securityContext.readOnlyRootFilesystem (1)

boolean

extraContainers[].securityContext.runAsNonRoot (1)

boolean

extraContainers[].securityContext.runAsUser (1)

number

extraContainers[].securityContext.seccompProfile.type (1)

string

extraContainers[].volumeMounts[].mountPath (1)

string

extraContainers[].volumeMounts[].name (1)

string

extraContainers[].volumeMounts[].readOnly (1)

boolean

extraEnv[].name (1)

string

extraEnv[].value (1)

string

extraVolumeMounts[].mountPath (1)

string

extraVolumeMounts[].name (1)

string

extraVolumeMounts[].readOnly (1)

boolean

installCRDS (1)

boolean

podDisruptionBudget.enabled (1)

boolean

podDisruptionBudget.minAvailable (1)

number

podLabels."egress.home.arpa/apiserver" (1)

string

podLabels."egress.home.arpa/onepassword-connect" (1)

string

podLabels."prom.home.arpa/kps" (1)

string

podSecurityContext.fsGroup (1)

number

podSecurityContext.fsGroupChangePolicy (1)

string

processClusterExternalSecret (1)

boolean

processClusterStore (1)

boolean

rbac.create (1)

boolean

rbac.servicebindings.create (1)

boolean

revisionHistoryLimit (1)

number

service.ipFamilyPolicy (1)

string

serviceAccount.automount (1)

boolean

serviceAccount.create (1)

boolean