external-secrets helm release

external-secrets helm

No introduction found. Create it?

Install

Install with:

helm repo add external-secrets https://charts.external-secrets.io/ helm install external-secrets external-secrets/external-secrets -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (5 out of 123)

Name	Repo	Stars	Version	Timestamp
external-secrets	szinn/k8s-homelab	191	0.10.6	an hour ago
external-secrets	szinn/k8s-homelab	191	0.10.6	an hour ago
external-secrets	buroa/k8s-gitops	184	0.10.6	an hour ago
external-secrets	h3mmy/bloopySphere	62	0.10.6	2 hours ago
external-secrets	joryirving/home-ops	141	0.10.6	3 hours ago

Name

Repo

Stars

Version

Timestamp

external-secrets

szinn/k8s-homelab

191

0.10.6

an hour ago

external-secrets

szinn/k8s-homelab

191

0.10.6

an hour ago

external-secrets

buroa/k8s-gitops

184

0.10.6

an hour ago

external-secrets

h3mmy/bloopySphere

0.10.6

2 hours ago

external-secrets

joryirving/home-ops

141

0.10.6

3 hours ago

Values

See the most popular values for this chart:

Key	Types
installCRDs (114) `true`	boolean
serviceMonitor.enabled (112) `true`	boolean
serviceMonitor.interval (103) `1m`	string
serviceMonitor.metricRelabelings[].action (1)	string
serviceMonitor.metricRelabelings[].regex (1)	string
serviceMonitor.metricRelabelings[].sourceLabels[] (1)	string
certController.serviceMonitor.enabled (97) `true`	boolean
certController.serviceMonitor.interval (92) `1m`	string
certController.image.repository (28) `ghcr.io/external-secrets/external-secrets`	string
certController.resources.requests.cpu (5) `10m`	string
certController.resources.requests.memory (4)	string
certController.resources.limits.memory (4)	string
certController.resources.limits.cpu (1)	string
certController.create (1)	boolean
certController.extraVolumeMounts[].mountPath (1)	string
certController.extraVolumeMounts[].name (1)	string
certController.extraVolumeMounts[].readOnly (1)	boolean
certController.extraVolumes[].name (1)	string
certController.extraVolumes[].projected.defaultMode (1)	number
certController.extraVolumes[].projected.sources[].configMap.items[].key (1)	string
certController.extraVolumes[].projected.sources[].configMap.items[].path (1)	string
certController.extraVolumes[].projected.sources[].configMap.name (1)	string
certController.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)	string
certController.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)	string
certController.extraVolumes[].projected.sources[].downwardAPI.items[].path (1)	string
certController.extraVolumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)	number
certController.extraVolumes[].projected.sources[].serviceAccountToken.path (1)	string
certController.log.level (1)	string
certController.log.timeEncoding (1)	string
certController.podDisruptionBudget.enabled (1)	boolean
certController.podDisruptionBudget.minAvailable (1)	number
certController.podLabels."egress.home.arpa/apiserver" (1)	string
certController.podLabels."prom.home.arpa/kps" (1)	string
certController.replicaCount (1)	number
certController.requeueInterval (1)	string
certController.revisionHistoryLimit (1)	number
certController.serviceAccount.automount (1)	boolean
certController.serviceAccount.create (1)	boolean
webhook.serviceMonitor.enabled (96) `true`	boolean
webhook.serviceMonitor.interval (91) `1m`	string
webhook.image.repository (28) `ghcr.io/external-secrets/external-secrets`	string
webhook.resources.requests.cpu (5) `10m`	string
webhook.resources.requests.memory (4)	string
webhook.resources.limits.memory (4)	string
webhook.resources.limits.cpu (1)	string
webhook.certManager.enabled (4)	boolean
webhook.certManager.cert.issuerRef.kind (3)	string
webhook.certManager.cert.issuerRef.name (3)	string
webhook.certManager.cert.issuerRef.group (2)	string
webhook.certManager.cert.duration (2)	string
webhook.certManager.cert.create (1)	boolean
webhook.certManager.cert.renewBefore (1)	string
webhook.certManager.addInjectorAnnotations (1)	boolean
webhook.lookaheadInterval (2)	string
webhook.replicaCount (2)	number
webhook.certCheckInterval (1)	string
webhook.create (1)	boolean
webhook.extraVolumeMounts[].mountPath (1)	string
webhook.extraVolumeMounts[].name (1)	string
webhook.extraVolumeMounts[].readOnly (1)	boolean
webhook.extraVolumes[].name (1)	string
webhook.extraVolumes[].projected.defaultMode (1)	number
webhook.extraVolumes[].projected.sources[].configMap.items[].key (1)	string
webhook.extraVolumes[].projected.sources[].configMap.items[].path (1)	string
webhook.extraVolumes[].projected.sources[].configMap.name (1)	string
webhook.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)	string
webhook.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)	string
webhook.extraVolumes[].projected.sources[].downwardAPI.items[].path (1)	string
webhook.extraVolumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)	number
webhook.extraVolumes[].projected.sources[].serviceAccountToken.path (1)	string
webhook.log.level (1)	string
webhook.log.timeEncoding (1)	string
webhook.podDisruptionBudget.enabled (1)	boolean
webhook.podDisruptionBudget.minAvailable (1)	number
webhook.podLabels."ingress.home.arpa/apiserver" (1)	string
webhook.podLabels."prom.home.arpa/kps" (1)	string
webhook.revisionHistoryLimit (1)	number
webhook.serviceAccount.automount (1)	boolean
webhook.serviceAccount.create (1)	boolean
webhook.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)	string
webhook.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)	string
webhook.topologySpreadConstraints[].maxSkew (1)	number
webhook.topologySpreadConstraints[].topologyKey (1)	string
webhook.topologySpreadConstraints[].whenUnsatisfiable (1)	string
replicaCount (43) `1`	number
image.repository (28) `ghcr.io/external-secrets/external-secrets`	string
leaderElect (24) `true`	boolean
grafana.enabled (12) `true`	boolean
backgroundController.serviceMonitor.enabled (11) `true`	boolean
backgroundController.serviceMonitor.interval (11) `1m`	string
cleanupController.serviceMonitor.enabled (11) `true`	boolean
cleanupController.serviceMonitor.interval (11) `1m`	string
reportsController.serviceMonitor.enabled (11) `true`	boolean
reportsController.serviceMonitor.interval (11) `1m`	string
bitwarden-sdk-server.enabled (9) `true`	boolean
bitwarden-sdk-server.podAnnotations."secret.reloader.stakater.com/reload" (3)	string
resources.requests.cpu (6)	string
resources.requests.memory (5)	string
resources.limits.memory (5)	string
resources.limits.cpu (1)	string
resources.cpu (1)	string
resources.memory (1)	string
extendedMetricLabels (2)	boolean
extraVolumes[].name (2)	string
extraVolumes[].emptyDir.medium (1)	string
extraVolumes[].projected.defaultMode (1)	number
extraVolumes[].projected.sources[].configMap.items[].key (1)	string
extraVolumes[].projected.sources[].configMap.items[].path (1)	string
extraVolumes[].projected.sources[].configMap.name (1)	string
extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)	string
extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)	string
extraVolumes[].projected.sources[].downwardAPI.items[].path (1)	string
extraVolumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)	number
extraVolumes[].projected.sources[].serviceAccountToken.path (1)	string
extraVolumes[].secret.defaultMode (1)	number
extraVolumes[].secret.secretName (1)	string
global.tolerations[].effect (2)	string
global.tolerations[].key (2)	string
global.tolerations[].operator (1)	string
global.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)	string
global.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)	string
global.nodeSelector."node-role.kubernetes.io/control-plane" (1)	string
global.topologySpreadConstraints[].labelSelector.matchLabels.app (1)	string
global.topologySpreadConstraints[].maxSkew (1)	number
global.topologySpreadConstraints[].topologyKey (1)	string
global.topologySpreadConstraints[].whenUnsatisfiable (1)	string
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (2)	string
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)	string
topologySpreadConstraints[].maxSkew (2)	number
topologySpreadConstraints[].topologyKey (2)	string
topologySpreadConstraints[].whenUnsatisfiable (2)	string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)	string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)	string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)	string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)	number
concurrent (1)	number
controllerClass (1)	string
extraArgs.loglevel (1)	string
extraContainers[].env[].name (1)	string
extraContainers[].env[].value (1)	string
extraContainers[].image (1)	string
extraContainers[].imagePullPolicy (1)	string
extraContainers[].name (1)	string
extraContainers[].resources.limits.cpu (1)	string
extraContainers[].resources.limits.memory (1)	string
extraContainers[].resources.requests.cpu (1)	string
extraContainers[].securityContext.allowPrivilegeEscalation (1)	boolean
extraContainers[].securityContext.capabilities.drop[] (1)	string
extraContainers[].securityContext.readOnlyRootFilesystem (1)	boolean
extraContainers[].securityContext.runAsNonRoot (1)	boolean
extraContainers[].securityContext.runAsUser (1)	number
extraContainers[].securityContext.seccompProfile.type (1)	string
extraContainers[].volumeMounts[].mountPath (1)	string
extraContainers[].volumeMounts[].name (1)	string
extraContainers[].volumeMounts[].readOnly (1)	boolean
extraEnv[].name (1)	string
extraEnv[].value (1)	string
extraVolumeMounts[].mountPath (1)	string
extraVolumeMounts[].name (1)	string
extraVolumeMounts[].readOnly (1)	boolean
installCRDS (1)	boolean
log.level (1)	string
log.timeEncoding (1)	string
podDisruptionBudget.enabled (1)	boolean
podDisruptionBudget.minAvailable (1)	number
podLabels."egress.home.arpa/apiserver" (1)	string
podLabels."egress.home.arpa/onepassword-connect" (1)	string
podLabels."prom.home.arpa/kps" (1)	string
podSecurityContext.fsGroup (1)	number
podSecurityContext.fsGroupChangePolicy (1)	string
rbac.create (1)	boolean
rbac.servicebindings.create (1)	boolean
reportscontroller.serviceMonitor.enabled (1)	boolean
reportscontroller.serviceMonitor.interval (1)	string
revisionHistoryLimit (1)	number
service.ipFamilyPolicy (1)	string
serviceAccount.automount (1)	boolean
serviceAccount.create (1)	boolean

Key

Types

installCRDs (114)

true

boolean

serviceMonitor.enabled (112)

true

boolean

serviceMonitor.interval (103)

1m

string

serviceMonitor.metricRelabelings[].action (1)

string

serviceMonitor.metricRelabelings[].regex (1)

string

serviceMonitor.metricRelabelings[].sourceLabels[] (1)

string

certController.serviceMonitor.enabled (97)

true

boolean

certController.serviceMonitor.interval (92)

1m

string

certController.image.repository (28)

ghcr.io/external-secrets/external-secrets

string

certController.resources.requests.cpu (5)

10m

string

certController.resources.requests.memory (4)

string

certController.resources.limits.memory (4)

string

certController.resources.limits.cpu (1)

string

certController.create (1)

boolean

certController.extraVolumeMounts[].mountPath (1)

string

certController.extraVolumeMounts[].name (1)

string

certController.extraVolumeMounts[].readOnly (1)

boolean

certController.extraVolumes[].name (1)

string

certController.extraVolumes[].projected.defaultMode (1)

number

certController.extraVolumes[].projected.sources[].configMap.items[].key (1)

string

certController.extraVolumes[].projected.sources[].configMap.items[].path (1)

string

certController.extraVolumes[].projected.sources[].configMap.name (1)

string

certController.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)

string

certController.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)

string

certController.extraVolumes[].projected.sources[].downwardAPI.items[].path (1)

string

certController.extraVolumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)

number

certController.extraVolumes[].projected.sources[].serviceAccountToken.path (1)

string

certController.log.level (1)

string

certController.log.timeEncoding (1)

string

certController.podDisruptionBudget.enabled (1)

boolean

certController.podDisruptionBudget.minAvailable (1)

number

certController.podLabels."egress.home.arpa/apiserver" (1)

string

certController.podLabels."prom.home.arpa/kps" (1)

string

certController.replicaCount (1)

number

certController.requeueInterval (1)

string

certController.revisionHistoryLimit (1)

number

certController.serviceAccount.automount (1)

boolean

certController.serviceAccount.create (1)

boolean

webhook.serviceMonitor.enabled (96)

true

boolean

webhook.serviceMonitor.interval (91)

1m

string

webhook.image.repository (28)

ghcr.io/external-secrets/external-secrets

string

webhook.resources.requests.cpu (5)

10m

string

webhook.resources.requests.memory (4)

string

webhook.resources.limits.memory (4)

string

webhook.resources.limits.cpu (1)

string

webhook.certManager.enabled (4)

boolean

webhook.certManager.cert.issuerRef.kind (3)

string

webhook.certManager.cert.issuerRef.name (3)

string

webhook.certManager.cert.issuerRef.group (2)

string

webhook.certManager.cert.duration (2)

string

webhook.certManager.cert.create (1)

boolean

webhook.certManager.cert.renewBefore (1)

string

webhook.certManager.addInjectorAnnotations (1)

boolean

webhook.lookaheadInterval (2)

string

webhook.replicaCount (2)

number

webhook.certCheckInterval (1)

string

webhook.create (1)

boolean

webhook.extraVolumeMounts[].mountPath (1)

string

webhook.extraVolumeMounts[].name (1)

string

webhook.extraVolumeMounts[].readOnly (1)

boolean

webhook.extraVolumes[].name (1)

string

webhook.extraVolumes[].projected.defaultMode (1)

number

webhook.extraVolumes[].projected.sources[].configMap.items[].key (1)

string

webhook.extraVolumes[].projected.sources[].configMap.items[].path (1)

string

webhook.extraVolumes[].projected.sources[].configMap.name (1)

string

webhook.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)

string

webhook.extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)

string

webhook.extraVolumes[].projected.sources[].downwardAPI.items[].path (1)

string

webhook.extraVolumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)

number

webhook.extraVolumes[].projected.sources[].serviceAccountToken.path (1)

string

webhook.log.level (1)

string

webhook.log.timeEncoding (1)

string

webhook.podDisruptionBudget.enabled (1)

boolean

webhook.podDisruptionBudget.minAvailable (1)

number

webhook.podLabels."ingress.home.arpa/apiserver" (1)

string

webhook.podLabels."prom.home.arpa/kps" (1)

string

webhook.revisionHistoryLimit (1)

number

webhook.serviceAccount.automount (1)

boolean

webhook.serviceAccount.create (1)

boolean

webhook.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)

string

webhook.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)

string

webhook.topologySpreadConstraints[].maxSkew (1)

number

webhook.topologySpreadConstraints[].topologyKey (1)

string

webhook.topologySpreadConstraints[].whenUnsatisfiable (1)

string

replicaCount (43)

number

image.repository (28)

ghcr.io/external-secrets/external-secrets

string

leaderElect (24)

true

boolean

grafana.enabled (12)

true

boolean

backgroundController.serviceMonitor.enabled (11)

true

boolean

backgroundController.serviceMonitor.interval (11)

1m

string

cleanupController.serviceMonitor.enabled (11)

true

boolean

cleanupController.serviceMonitor.interval (11)

1m

string

reportsController.serviceMonitor.enabled (11)

true

boolean

reportsController.serviceMonitor.interval (11)

1m

string

bitwarden-sdk-server.enabled (9)

true

boolean

bitwarden-sdk-server.podAnnotations."secret.reloader.stakater.com/reload" (3)

string

resources.requests.cpu (6)

string

resources.requests.memory (5)

string

resources.limits.memory (5)

string

resources.limits.cpu (1)

string

resources.cpu (1)

string

resources.memory (1)

string

extendedMetricLabels (2)

boolean

extraVolumes[].name (2)

string

extraVolumes[].emptyDir.medium (1)

string

extraVolumes[].projected.defaultMode (1)

number

extraVolumes[].projected.sources[].configMap.items[].key (1)

string

extraVolumes[].projected.sources[].configMap.items[].path (1)

string

extraVolumes[].projected.sources[].configMap.name (1)

string

extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)

string

extraVolumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)

string

extraVolumes[].projected.sources[].downwardAPI.items[].path (1)

string

extraVolumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)

number

extraVolumes[].projected.sources[].serviceAccountToken.path (1)

string

extraVolumes[].secret.defaultMode (1)

number

extraVolumes[].secret.secretName (1)

string

global.tolerations[].effect (2)

string

global.tolerations[].key (2)

string

global.tolerations[].operator (1)

string

global.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)

string

global.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)

string

global.nodeSelector."node-role.kubernetes.io/control-plane" (1)

string

global.topologySpreadConstraints[].labelSelector.matchLabels.app (1)

string

global.topologySpreadConstraints[].maxSkew (1)

number

global.topologySpreadConstraints[].topologyKey (1)

string

global.topologySpreadConstraints[].whenUnsatisfiable (1)

string

topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (2)

string

topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)

string

topologySpreadConstraints[].maxSkew (2)

number

topologySpreadConstraints[].topologyKey (2)

string

topologySpreadConstraints[].whenUnsatisfiable (2)

string

affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)

string

affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)

string

affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)

string

affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)

number

concurrent (1)

number

controllerClass (1)

string

extraArgs.loglevel (1)

string

extraContainers[].env[].name (1)

string

extraContainers[].env[].value (1)

string

extraContainers[].image (1)

string

extraContainers[].imagePullPolicy (1)

string

extraContainers[].name (1)

string

extraContainers[].resources.limits.cpu (1)

string

extraContainers[].resources.limits.memory (1)

string

extraContainers[].resources.requests.cpu (1)

string

extraContainers[].securityContext.allowPrivilegeEscalation (1)

boolean

extraContainers[].securityContext.capabilities.drop[] (1)

string

extraContainers[].securityContext.readOnlyRootFilesystem (1)

boolean

extraContainers[].securityContext.runAsNonRoot (1)

boolean

extraContainers[].securityContext.runAsUser (1)

number

extraContainers[].securityContext.seccompProfile.type (1)

string

extraContainers[].volumeMounts[].mountPath (1)

string

extraContainers[].volumeMounts[].name (1)

string

extraContainers[].volumeMounts[].readOnly (1)

boolean

extraEnv[].name (1)

string

extraEnv[].value (1)

string

extraVolumeMounts[].mountPath (1)

string

extraVolumeMounts[].name (1)

string

extraVolumeMounts[].readOnly (1)

boolean

installCRDS (1)

boolean

log.level (1)

string

log.timeEncoding (1)

string

podDisruptionBudget.enabled (1)

boolean

podDisruptionBudget.minAvailable (1)

number

podLabels."egress.home.arpa/apiserver" (1)

string

podLabels."egress.home.arpa/onepassword-connect" (1)

string

podLabels."prom.home.arpa/kps" (1)

string

podSecurityContext.fsGroup (1)

number

podSecurityContext.fsGroupChangePolicy (1)

string

rbac.create (1)

boolean

rbac.servicebindings.create (1)

boolean

reportscontroller.serviceMonitor.enabled (1)

boolean

reportscontroller.serviceMonitor.interval (1)

string

revisionHistoryLimit (1)

number

service.ipFamilyPolicy (1)

string

serviceAccount.automount (1)

boolean

serviceAccount.create (1)

boolean