What's Changed
External Secrets - OpenBao
You can now specify the namespace to get secrets or certs from OpenBao by specifying it as the first element of the reference syntax.
By default, the root namespace is used (root), but you can specify a different namespace by adding it as the first part of the reference.
A valid key-value secret reference should use the syntax: kv:<namespace(optional)>:<secretEngine>:<secretName>:<key>
A valid PKI certificate reference should use the syntax: pki:<namespace(optional)>:<secretEngine>:<commonName>
Example:
kv:prod-secrets:db-prod:username → Fetches the username key from the db-prod key-value secret in the prod-secrets secret engine in the root namespace.
kv:root:prod-secrets:db-prod:username → Same as above, explicitly specifying the root namespace.
See also the wiki: https://github.com/kimdre/doco-cd/wiki/External-Secrets#openbao
🐛 Bug Fixes and Security
🌟 Improvements
📦 Dependencies
- chore(deps): update golang:1.25.4 docker digest to 6981837 by @renovate[bot] in #806
- fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in #807
Full Changelog: v0.51.0...v0.51.1