chore(deps): update ghcr.io/external-secrets/charts/external-secrets docker tag to v2

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/external-secrets/charts/external-secrets	major	1.3.2 → 2.0.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

external-secrets/external-secrets (ghcr.io/external-secrets/charts/external-secrets)

v2.0.0

Compare Source

BREAKING CHANGE

Please note that this release removed two of the unsupported and unmaintained providers Alibaba and Device42.

Image: ghcr.io/external-secrets/external-secrets:v2.0.0
Image: ghcr.io/external-secrets/external-secrets:v2.0.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.0.0-ubi-boringssl

What's Changed

General

• chore: bump charts to 1.3.2 by @​gusfcarvalho in #​5923
• feat(charts): add hostAliases support by @​janlauber in #​5866
• chore: remove unmaintained secret stores by @​Skarlso in #​5918
• docs(infisical): document al provider auth methods by @​varonix0 in #​5929
• chore: Get validating webhook failurePolicy for Secretstore dynamically by @​LochanRn in #​5605

New Contributors

• @​LochanRn made their first contribution in #​5605

Full Changelog: external-secrets/external-secrets@v1.3.2...v2.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[lucadevbot]

--- apps/secrets/external-secrets/app Kustomization: flux-system/external-secrets OCIRepository: secrets/external-secrets

+++ apps/secrets/external-secrets/app Kustomization: flux-system/external-secrets OCIRepository: secrets/external-secrets

@@ -10,13 +10,13 @@

 spec:
   interval: 30m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 1.3.2
+    tag: 2.0.0
   url: oci://ghcr.io/external-secrets/charts/external-secrets
   verify:
     matchOIDCIdentity:
     - issuer: ^https://token.actions.githubusercontent.com$
       subject: ^https://github.com/external-secrets/external-secrets.*$
     provider: cosign

[lucadevbot]

--- HelmRelease: secrets/external-secrets Deployment: secrets/external-secrets-cert-controller

+++ HelmRelease: secrets/external-secrets Deployment: secrets/external-secrets-cert-controller

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v1.3.2
+        image: ghcr.io/external-secrets/external-secrets:v2.0.0
         imagePullPolicy: IfNotPresent
         args:
         - certcontroller
         - --crd-requeue-interval=5m
         - --service-name=external-secrets-webhook
         - --service-namespace=secrets
--- HelmRelease: secrets/external-secrets Deployment: secrets/external-secrets

+++ HelmRelease: secrets/external-secrets Deployment: secrets/external-secrets

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v1.3.2
+        image: ghcr.io/external-secrets/external-secrets:v2.0.0
         imagePullPolicy: IfNotPresent
         args:
         - --concurrent=1
         - --metrics-addr=:8080
         - --loglevel=info
         - --zap-time-encoding=epoch
--- HelmRelease: secrets/external-secrets Deployment: secrets/external-secrets-webhook

+++ HelmRelease: secrets/external-secrets Deployment: secrets/external-secrets-webhook

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v1.3.2
+        image: ghcr.io/external-secrets/external-secrets:v2.0.0
         imagePullPolicy: IfNotPresent
         args:
         - webhook
         - --port=10250
         - --dns-name=external-secrets-webhook.secrets.svc
         - --cert-dir=/tmp/certs
--- HelmRelease: secrets/external-secrets ValidatingWebhookConfiguration: secrets/secretstore-validate

+++ HelmRelease: secrets/external-secrets ValidatingWebhookConfiguration: secrets/secretstore-validate

@@ -29,12 +29,13 @@

       path: /validate-external-secrets-io-v1-secretstore
   admissionReviewVersions:
   - v1
   - v1beta1
   sideEffects: None
   timeoutSeconds: 5
+  failurePolicy: Fail
 - name: validate.clustersecretstore.external-secrets.io
   rules:
   - apiGroups:
     - external-secrets.io
     apiVersions:
     - v1