Skip to content

Changelog

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[2.10.0-bb.0] (2026-08-30)

Added

  • bigbang.dev/upstreamReleaseNotesMarkdown annotation linking upstream release notes

Changed

  • external-secrets 2.9.0 -> 2.10.0
  • registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets v2.9.0 -> v2.10.0

[2.9.0-bb.0] (2026-08-25)

Changed

  • bb-common updated from 1.3.1 to 1.5.0
  • external-secrets updated from 2.8.0 to 2.9.0
  • gluon updated from 1.1.3 to 1.1.6
  • registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets updated from v2.8.0 to v2.9.0

Removed

  • Removed the waitJob, which functioned more as a test; the package tests already exercise that functionality.

[2.8.0-bb.0] - 2026-07-30

Updated

  • Updated external-secrets chart 2.7.0 -> 2.8.0
  • Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets v2.7.0 -> v2.8.0
  • Updated bb-common 1.0.2 -> 1.3.1
  • Updated gluon 1.1.2 -> 1.1.3
  • Updated registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal 9.5 -> 9.8
  • Updated External Secrets CRDs to helm-chart-2.8.0

Added

  • Added the Big Bang test images to helm.sh/images release metadata and Renovate coverage

[2.7.0-bb.2] - 2026-07-16

Added

  • removed duplicate default values from values file
  • moved refreshInterval value under correct key
  • updated README.md to reflect changes

[2.7.0-bb.1] - 2026-07-09

Added

  • Added bb-common integration to replace network policies and istio-related resources
  • Added mTLS PeerAuthentication to exclude port 10250 for webhook from being set to STRICT

[2.7.0-bb.0] - 2026-07-06

Updated

  • Updated external-secrets chart 1.3.1 -> 2.7.0
  • Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets v1.3.1 -> v2.7.0
  • Updated gluon 0.9.7 -> 1.1.2
  • Updated registry1.dso.mil/ironbank/opensource/kubernetes/kubectl v1.34 -> v1.35
  • Updated External Secrets CRDs to helm-chart-2.7.0

Fixed

  • Fixed namespace helper output so upstream webhook cert-manager annotations render valid YAML

Removed

  • Removed the deprecated bigbang.dev/applicationVersions annotation from Chart.yaml

[1.3.1-bb.2] - 2026-07-06

Fixed

  • Fixed duplicate Gluon script test resources that caused Flux post-render failures when bbtests.enabled is true
  • Added a regression test to verify the script test resources render as a single resource set
  • remove stale values.schema.json from embedded ESO chart
  • remove stale license
  • remove stale readme.md.gotmpl

[1.3.1-bb.1] - 2026-02-20

Added

  • Added Vault provider support for ClusterSecretStore (token and kubernetes auth)
  • Added network policy for Vault egress

[1.3.1-bb.0] - 2026-01-30

Updated

  • Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets 1.2.1 -> 1.3.1
  • Updated chart https://charts.external-secrets.io 1.2.1 -> 1.3.1

[1.2.1-bb.0] - 2026-01-21

Updated

  • Updated gluon 0.9.6 -> 0.9.7
  • Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets 0.20.4 -> 1.2.1
  • Updated registry1.dso.mil/ironbank/opensource/kubernetes/kubectl v1.33 -> v1.34

[0.20.4-bb.5] - 2026-01-13

Changed

  • Removed duplicate default values

[0.20.4-bb.4] - 2026-01-07

Updated

  • Moved rbac and serviceAccount values under upstream

[0.20.4-bb.3] - 2026-01-06

Updated

  • Commented out example values for externalSecret configuration.

[0.20.4-bb.2] - 2025-12-23

Updated

  • Updated logic to data and dataFrom block to fetch single or multiple key and extract entire secret respectively.

[0.20.4-bb.1] - 2025-12-17

Updated

  • Updated values to support multiple secrets fetch

[0.20.4-bb.0] - 2025-11-04

Updated

  • Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets v0.20.3 -> v0.20.4
  • Updated gluon 0.9.5 -> 0.9.6

[0.20.3-bb.2] - 2025-10-30

Updated

  • Removed waitJob image from values.yaml

[0.20.3-bb.1] - 2025-10-22

Updated

  • Updated waitJob values and format

[0.20.3-bb.0] - 2025-10-20

Updated

  • registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets (source) v0.20.2 -> v0.20.3
  • Updated gluon 0.9.3 -> 0.9.5

[0.20.2-bb.1] - 2025-10-15

Changed

  • Set the namespace value to accessKeyIDSecretRef/secretAccessKeySecretRef per spec

[0.20.2-bb.0] - 2025-10-7

Changed

  • Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets (source) 0.20.1 -> 0.20.2

[0.20.1-bb.1] - 2025-10-1

Changed

  • Updated gluon 0.9.1 -> 0.9.2
  • Updated registry1.dso.mil/ironbank/opensource/kubernetes/kubectl (source) v1.32.9 -> v1.33.5

[0.20.1-bb.0] - 2025-09-25

Changed

  • Updated gluon 0.9.0 -> 0.9.1
  • Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets (source) minor 0.19.2 -> 0.20.1
  • Updated registry1.dso.mil/ironbank/opensource/kubernetes/kubectl (source) patch v1.33.4 -> v1.33.5

[0.19.2-bb.2] - 2025-09-09

Changed

  • Updated gluon 0.8.4 -> 0.9.0

[0.19.2-bb.1] - 2025-08-26

Changed

  • registry1.dso.mil/ironbank/opensource/kubernetes/kubectl (source) v1.32.8 -> v1.33.4
  • Updated gluon 0.8.0 -> 0.8.4

[0.19.2-bb.0] - 2025-08-19

Changed

  • Updated chart to 0.19.2
  • registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets (source) 0.19.0 -> 0.19.2
  • registry1.dso.mil/ironbank/opensource/kubernetes/kubectl (source) v1.32.7 -> v1.32.8

[0.19.0-bb.0] - 2025-08-11

Changed

  • Updated chart to 0.19.0
  • registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets (source) 0.18.2 -> 0.19.0

[0.18.2-bb.2] - 2025-07-22

Changed

  • Implement pass-through pattern and added external-secrets as dependency

[0.18.2-bb.1] - 2025-07-21

Changed

  • Updated gluon 0.6.3 -> 0.7.0
  • registry1.dso.mil/ironbank/opensource/kubernetes/kubectl (source) v1.32.6 -> v1.32.7

[0.18.2-bb.0] - 2025-07-08

Changed

  • updated gluon 0.6.2 -> 0.6.3
  • updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets (source) v0.18.0 -> v0.18.2
  • updated helm chart to 0.18.2

[0.18.0-bb.0] - 2025-06-20

Changed

  • Updated helm-chart to 0.18.0
  • updated the external secrets image to v0.18.0
  • Updated registry1.dso.mil/ironbank/opensource/kubernetes/kubectl (source) v1.32.5 -> v1.32.6

[0.17.0-bb.2] - 2025-06-23

Changed

  • Updated changelog tag to v0.17.0

[0.17.0-bb.1] - 2025-06-16

Changed

  • Updated gluon from 0.5.19 -> 0.6.2
  • Updated registry1.dso.mil/ironbank/opensource/kubernetes/kubectl (source) v1.32.4 -> v1.32.5

[0.17.0-bb.0] - 2025-05-28

Changed

  • Updated helm-chart-0.17.0
  • Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets (source) v0.16.1 -> v0.17.0

[0.16.2-bb.1] - 2025-05-20

Changed

  • Updated CRDs to match upstream 0.16.2

[0.16.2-bb.0] - 2025-05-06

Changed

  • Updated helm-chart to 0.16.2
  • Updated gluon 0.5.15 -> 0.5.17
  • Updated registry1.dso.mil/ironbank/opensource/kubernetes/kubectl (source) v1.32.3 -> v1.32.4

[0.16.1-bb.1] - 2025-05-06

Changed

  • Removed unneeded files for bbtests scripts

[0.16.1-bb.0] - 2025-04-28

Changed

  • Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets v0.15.1 -> v0.16.1
  • Updated registry1.dso.mil/ironbank/opensource/kubernetes/kubectl v1.31.7 -> v1.32.3

[0.15.1-bb.1] - 2025-04-21

Added

  • Added ESO gluon test scripts in chart/templates/tests/test-script.yaml
  • Added a ESO server test bash script in chart/tests/script/

[0.15.1-bb.0] - 2025-04-15

Changed

  • gluon 0.5.14 -> 0.5.15
  • registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets v0.15.0 -> v0.15.1
  • registry1.dso.mil/ironbank/opensource/kubernetes/kubectl v1.30.11 -> v1.31.7

[0.15.0-bb.1] - 2025-04-09

Changed

  • Updated deployment documentation to reflect changes
  • Split clusterSecretStore and secrets creation in the values file
  • Updated waitJob to mount configmap as environment
  • Removed hardcoded clustersecretstore suffix

[0.15.0-bb.0] - 2025-03-21

Changed

  • registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets v0.14.4 -> v0.15.0
  • registry1.dso.mil/ironbank/opensource/kubernetes/kubectl v1.30.10 -> v1.30.11

[0.14.4-bb.0] - 2025-03-12

Changed

  • registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets v0.14.3 -> v0.14.4

[0.14.3-bb.1] - 2025-03-11

Changed

  • Resolve errors from enabling drift detection for ESO

[0.14.3-bb.0] - 2025-02-28

Changed

  • Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets (source) v0.14.2 -> v0.14.3

[0.14.2-bb.0] - 2025-02-19

Changed

  • Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets (source) v0.14.1 -> v0.14.2
  • Updated registry1.dso.mil/ironbank/opensource/kubernetes/kubectl (source) v1.30.9 -> v1.30.10

[0.14.1-bb.0] - 2025-02-13

Changed

  • Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets (source) v0.14.0 -> v0.14.1

[0.14.0-bb.0] - 2025-02-10

Changed

  • Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets (source) v0.13.0 -> v0.14.0

[0.13.0-bb.2] - 2025-02-05

Changed

  • Removed hardcoded matchLabels

[0.13.0-bb.1] - 2025-02-03

Changed

  • Updated kpt file to reflect new update to v0.13.0

[0.13.0-bb.0] - 2025-01-29

Changed

  • Updated registry1.dso.mil/ironbank/opensource/external-secrets/external-secrets v0.12.1 -> v0.13.0
  • Updated registry1.dso.mil/ironbank/opensource/kubernetes/kubectl -> v1.30.8 -> v1.30.9

[0.12.1-bb.2] - 2024-01-16

Added

  • Updated gluon 0.5.12 -> 0.5.14

[0.12.1-bb.1] - 2024-01-09

Added

  • Added data fetch logic

[0.12.1-bb.0] - 2025-01-07

Changed

  • Updated chart to v0.12.1

[0.11.0-bb.3] - 2024-12-17

Changed

  • Removed hardcoded namespace

[0.11.0-bb.2] - 2024-12-12

Changed

  • Updated kubectl v1.30.7 -> v1.30.8

[0.11.0-bb-1] - 2024-12-11

Changed

  • Added data block in ES for secret versioning

[0.11.0-bb.0] - 2024-12-4

Changed

  • Updated chart to v0.11.0
  • Updated gluon to 0.5.12
  • Updated kubectl to v1.30.7

[0.10.4-bb.1] - 2024-11-14

Changed

  • Removed namespace in the secret-store.yaml template
  • Added ExternalSecret template using secretConfiguration

[0.10.4-bb.0] - 2024-11-12

Added

  • Updated chart to v0.10.4
  • Updated to gluon 0.5.4
  • Added the maintenance track annotation and badge

[0.10.2-bb.5] - 2024-10-31

Added

  • Added a gluon wait script to wait until the validating webhook is functional before completing the helm release
  • Updated the gluon dependency to v0.5.10

[0.10.2-bb.3] - 2024-10-23

Changed

  • Fix resource ordering to correct a hidden test failure that was giving false confidence

[0.10.2-bb.2] - 2024-10-17

Added

  • Create secret store based off of provided user values

[0.10.2-bb.1] - 2024-10-02

Added

  • Added network policy allow-sidecar-scraping

[0.10.2-bb.0] - 2024-08-30

Changed

  • Updated ESO to v0.10.2
  • Updated to gluon 0.5.3

[0.9.20-bb.3] - 2024-08-19

Changed

  • Added label for webhook

[0.9.20-bb.2] - 2024-08-01

Changed

  • Updated to gluon 0.5.2

[0.9.20-bb.1] - 2024-07-26

Changed

  • Updated to gluon 0.5.1

[0.9.20-bb.0] - 2024-07-17

Changed

  • Updated ESO to v0.9.20
  • Updated to gluon 0.5.0

[0.9.18-bb.8] - 2024-07-12

Changed

  • Added integration testing instructions for External Secrets Operator

[0.9.18-bb.7] - 2024-07-03

Changed

  • Fixed kyverno polciy issues with external-secrets-test-secret-mount

[0.9.18-bb.6] - 2024-07-03

Changed

  • Fixed kyvero policy issue setting runAsGroup: 1000

[0.9.18-bb.5] - 2024-06-13

Changed

  • Added istio authorization policies

[0.9.18-bb.4] - 2024-06-10

Added

  • Added istio PeerAuthorization policies

[0.9.18-bb.3] - 2024-06-05

Changed

  • Corrected an issue in the deployment documentation

[0.9.18-bb.2] - 2024-06-02

Added

  • Added helm test to validate that the external secrets operator is functional

[0.9.18-bb.1] - 2024-05-28

Added

  • Add Resource values for every pod to set Guaranteed QoS

[0.9.18-bb.0] - 2024-05-15

Changed

[0.9.16-bb.0] - 2024-05-22

Added

  • Updated chart to v0.9.16
  • Added network policies

[0.9.15-bb.3] - 2024-05-15

Added

  • Added renovate configuration to external-secrets opensource app

[0.9.15-bb.2] - 2024-05-11

Added

  • KPT pull for upstream custom resource definitions bundle
  • kustomizations to deploy custom resources before the helm release

[0.9.15-bb.1] - 2024-05-03

Added

  • Generate README.md

[0.9.15-bb.0] - 2024-04-30

Initial

  • Pull latest chart with kpt