Skip to content

Lifecycle management for ExternalSecrets#16

Open
sabre1041 wants to merge 1 commit into
validatedpatterns:mainfrom
sabre1041:externalsecrets-lifecycle
Open

Lifecycle management for ExternalSecrets#16
sabre1041 wants to merge 1 commit into
validatedpatterns:mainfrom
sabre1041:externalsecrets-lifecycle

Conversation

@sabre1041

Copy link
Copy Markdown
Contributor

Lifecycle management for ExternalSecrets

@sabre1041 sabre1041 requested a review from minmzzhang May 29, 2026 14:10
@sabre1041 sabre1041 marked this pull request as draft May 29, 2026 14:11
@sabre1041 sabre1041 force-pushed the externalsecrets-lifecycle branch from d10c38f to ed6ffb9 Compare May 29, 2026 14:25
@sabre1041 sabre1041 marked this pull request as ready for review May 29, 2026 14:43
@sabre1041 sabre1041 force-pushed the externalsecrets-lifecycle branch from ed6ffb9 to ad39ae0 Compare May 29, 2026 15:09

@minmzzhang minmzzhang left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overall I like this lifecycle management implementation. Just one thing to consider, shall we use a _helper.tpl to extract the repetitive blocks for each template?

Comment thread values.yaml
refreshPolicy: Periodic
annotations: {}
labels: {}
adminUser:

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is it keycloak admin user? is it possible to add comments here referencing back to the templates?

Comment thread values.yaml Outdated
adminUser:
creationPolicy: Owner
deletionPolicy: Retain
refreshPolicy: Periodic

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

since we specified the refreshPolicy as Periodic, do we want to add the refreshInterval as configurable?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added

@sabre1041 sabre1041 force-pushed the externalsecrets-lifecycle branch 2 times, most recently from 2227aa6 to c3fc675 Compare May 30, 2026 15:59
@sabre1041

Copy link
Copy Markdown
Contributor Author

Overall I like this lifecycle management implementation. Just one thing to consider, shall we use a _helper.tpl to extract the repetitive blocks for each template?

Added as per suggestion

@minmzzhang

Copy link
Copy Markdown
Contributor

LGTM!

@sabre1041

Copy link
Copy Markdown
Contributor Author

@minmzzhang found an issue with this PR. Will request another review soon

@sabre1041 sabre1041 marked this pull request as draft May 30, 2026 18:19
@sabre1041 sabre1041 force-pushed the externalsecrets-lifecycle branch from c3fc675 to 425b602 Compare May 30, 2026 21:50
Signed-off-by: Andrew Block <andy.block@gmail.com>
@sabre1041 sabre1041 force-pushed the externalsecrets-lifecycle branch from 425b602 to ba8576f Compare June 9, 2026 20:56
@sabre1041 sabre1041 marked this pull request as ready for review June 10, 2026 07:03
@sabre1041

Copy link
Copy Markdown
Contributor Author

@minmzzhang This is once again ready for review. My latest tests were performed using the RH ESO as part of validatedpatterns/layered-zero-trust#123. The functionality that we have been desiring was achieved

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants