From 4e7ae9d48c60324637346bb7dd595626c6158ec0 Mon Sep 17 00:00:00 2001 From: OAharoni-RedHat Date: Tue, 29 Sep 2026 12:07:06 -0400 Subject: [PATCH 1/5] Add singleArgoCD: true to values-global.yaml Co-authored-by: Cursor --- values-global.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/values-global.yaml b/values-global.yaml index 5dd58179..0d29d8f0 100644 --- a/values-global.yaml +++ b/values-global.yaml @@ -2,6 +2,8 @@ global: pattern: quarkus-coffeeshop + singleArgoCD: true + options: useCSV: false syncPolicy: Automatic From 2be513000b2e29fea57d5a53fc4b73379e78afea Mon Sep 17 00:00:00 2001 From: OAharoni-RedHat Date: Tue, 29 Sep 2026 13:52:05 -0400 Subject: [PATCH 2/5] Update expected test snapshots for singleArgoCD: true Co-authored-by: Cursor --- ...roup-industrial-edge-factory.expected.yaml | 1 + ...tergroup-industrial-edge-hub.expected.yaml | 1 + ...rgroup-medical-diagnosis-hub.expected.yaml | 1 + .../common-clustergroup-normal.expected.yaml | 1 + ...rets-industrial-edge-factory.expected.yaml | 62 +++++++++---------- ...-secrets-industrial-edge-hub.expected.yaml | 62 +++++++++---------- ...ecrets-medical-diagnosis-hub.expected.yaml | 62 +++++++++---------- ...olang-external-secrets-naked.expected.yaml | 62 +++++++++---------- ...lang-external-secrets-normal.expected.yaml | 62 +++++++++---------- 9 files changed, 159 insertions(+), 155 deletions(-) diff --git a/tests/common-clustergroup-industrial-edge-factory.expected.yaml b/tests/common-clustergroup-industrial-edge-factory.expected.yaml index fea8ddac..edad1ba1 100644 --- a/tests/common-clustergroup-industrial-edge-factory.expected.yaml +++ b/tests/common-clustergroup-industrial-edge-factory.expected.yaml @@ -252,6 +252,7 @@ data: repoURL: https://github.com/pattern-clone/mypattern secretStore: backend: vault + singleArgoCD: true targetRevision: main main: clusterGroupName: hub diff --git a/tests/common-clustergroup-industrial-edge-hub.expected.yaml b/tests/common-clustergroup-industrial-edge-hub.expected.yaml index 0c615f54..0ef3c3e6 100644 --- a/tests/common-clustergroup-industrial-edge-hub.expected.yaml +++ b/tests/common-clustergroup-industrial-edge-hub.expected.yaml @@ -413,6 +413,7 @@ data: repoURL: https://github.com/pattern-clone/mypattern secretStore: backend: vault + singleArgoCD: true targetRevision: main main: clusterGroupName: hub diff --git a/tests/common-clustergroup-medical-diagnosis-hub.expected.yaml b/tests/common-clustergroup-medical-diagnosis-hub.expected.yaml index cf435f56..1138f0f7 100644 --- a/tests/common-clustergroup-medical-diagnosis-hub.expected.yaml +++ b/tests/common-clustergroup-medical-diagnosis-hub.expected.yaml @@ -372,6 +372,7 @@ data: repoURL: https://github.com/pattern-clone/mypattern secretStore: backend: vault + singleArgoCD: true targetRevision: main main: clusterGroupName: hub diff --git a/tests/common-clustergroup-normal.expected.yaml b/tests/common-clustergroup-normal.expected.yaml index 07e3a157..b8b0cb68 100644 --- a/tests/common-clustergroup-normal.expected.yaml +++ b/tests/common-clustergroup-normal.expected.yaml @@ -362,6 +362,7 @@ data: repoURL: https://github.com/pattern-clone/mypattern secretStore: backend: vault + singleArgoCD: true targetRevision: main main: clusterGroupName: hub diff --git a/tests/common-golang-external-secrets-industrial-edge-factory.expected.yaml b/tests/common-golang-external-secrets-industrial-edge-factory.expected.yaml index 19c1f8c0..13f1d62b 100644 --- a/tests/common-golang-external-secrets-industrial-edge-factory.expected.yaml +++ b/tests/common-golang-external-secrets-industrial-edge-factory.expected.yaml @@ -13046,37 +13046,6 @@ spec: secret: secretName: common-golang-external-secrets-webhook --- -# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml -apiVersion: external-secrets.io/v1beta1 -kind: ClusterSecretStore -metadata: - name: vault-backend - namespace: golang-external-secrets -spec: - provider: - vault: - server: https://vault-vault.apps.hub.example.com - path: secret - # Version of KV backend - version: v2 - - caProvider: - type: Secret - name: hub-ca - key: hub-kube-root-ca.crt - namespace: golang-external-secrets - - auth: - kubernetes: - - mountPath: region.example.com - role: region.example.com-role - - secretRef: - name: golang-external-secrets - namespace: golang-external-secrets - key: "token" ---- # Source: golang-external-secrets/charts/external-secrets/templates/validatingwebhook.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration @@ -13141,3 +13110,34 @@ webhooks: sideEffects: None timeoutSeconds: 5 failurePolicy: Fail +--- +# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml +apiVersion: external-secrets.io/v1beta1 +kind: ClusterSecretStore +metadata: + name: vault-backend + namespace: golang-external-secrets +spec: + provider: + vault: + server: https://vault-vault.apps.hub.example.com + path: secret + # Version of KV backend + version: v2 + + caProvider: + type: Secret + name: hub-ca + key: hub-kube-root-ca.crt + namespace: golang-external-secrets + + auth: + kubernetes: + + mountPath: region.example.com + role: region.example.com-role + + secretRef: + name: golang-external-secrets + namespace: golang-external-secrets + key: "token" diff --git a/tests/common-golang-external-secrets-industrial-edge-hub.expected.yaml b/tests/common-golang-external-secrets-industrial-edge-hub.expected.yaml index 056054ba..6fb1915e 100644 --- a/tests/common-golang-external-secrets-industrial-edge-hub.expected.yaml +++ b/tests/common-golang-external-secrets-industrial-edge-hub.expected.yaml @@ -13046,37 +13046,6 @@ spec: secret: secretName: common-golang-external-secrets-webhook --- -# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml -apiVersion: external-secrets.io/v1beta1 -kind: ClusterSecretStore -metadata: - name: vault-backend - namespace: golang-external-secrets -spec: - provider: - vault: - server: https://vault-vault.apps.hub.example.com - path: secret - # Version of KV backend - version: v2 - - caProvider: - type: ConfigMap - name: kube-root-ca.crt - key: ca.crt - namespace: golang-external-secrets - - auth: - kubernetes: - - mountPath: hub - role: hub-role - - secretRef: - name: golang-external-secrets - namespace: golang-external-secrets - key: "token" ---- # Source: golang-external-secrets/charts/external-secrets/templates/validatingwebhook.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration @@ -13141,3 +13110,34 @@ webhooks: sideEffects: None timeoutSeconds: 5 failurePolicy: Fail +--- +# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml +apiVersion: external-secrets.io/v1beta1 +kind: ClusterSecretStore +metadata: + name: vault-backend + namespace: golang-external-secrets +spec: + provider: + vault: + server: https://vault-vault.apps.hub.example.com + path: secret + # Version of KV backend + version: v2 + + caProvider: + type: ConfigMap + name: kube-root-ca.crt + key: ca.crt + namespace: golang-external-secrets + + auth: + kubernetes: + + mountPath: hub + role: hub-role + + secretRef: + name: golang-external-secrets + namespace: golang-external-secrets + key: "token" diff --git a/tests/common-golang-external-secrets-medical-diagnosis-hub.expected.yaml b/tests/common-golang-external-secrets-medical-diagnosis-hub.expected.yaml index 056054ba..6fb1915e 100644 --- a/tests/common-golang-external-secrets-medical-diagnosis-hub.expected.yaml +++ b/tests/common-golang-external-secrets-medical-diagnosis-hub.expected.yaml @@ -13046,37 +13046,6 @@ spec: secret: secretName: common-golang-external-secrets-webhook --- -# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml -apiVersion: external-secrets.io/v1beta1 -kind: ClusterSecretStore -metadata: - name: vault-backend - namespace: golang-external-secrets -spec: - provider: - vault: - server: https://vault-vault.apps.hub.example.com - path: secret - # Version of KV backend - version: v2 - - caProvider: - type: ConfigMap - name: kube-root-ca.crt - key: ca.crt - namespace: golang-external-secrets - - auth: - kubernetes: - - mountPath: hub - role: hub-role - - secretRef: - name: golang-external-secrets - namespace: golang-external-secrets - key: "token" ---- # Source: golang-external-secrets/charts/external-secrets/templates/validatingwebhook.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration @@ -13141,3 +13110,34 @@ webhooks: sideEffects: None timeoutSeconds: 5 failurePolicy: Fail +--- +# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml +apiVersion: external-secrets.io/v1beta1 +kind: ClusterSecretStore +metadata: + name: vault-backend + namespace: golang-external-secrets +spec: + provider: + vault: + server: https://vault-vault.apps.hub.example.com + path: secret + # Version of KV backend + version: v2 + + caProvider: + type: ConfigMap + name: kube-root-ca.crt + key: ca.crt + namespace: golang-external-secrets + + auth: + kubernetes: + + mountPath: hub + role: hub-role + + secretRef: + name: golang-external-secrets + namespace: golang-external-secrets + key: "token" diff --git a/tests/common-golang-external-secrets-naked.expected.yaml b/tests/common-golang-external-secrets-naked.expected.yaml index 3d12586b..347c3ab0 100644 --- a/tests/common-golang-external-secrets-naked.expected.yaml +++ b/tests/common-golang-external-secrets-naked.expected.yaml @@ -13046,37 +13046,6 @@ spec: secret: secretName: common-golang-external-secrets-webhook --- -# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml -apiVersion: external-secrets.io/v1beta1 -kind: ClusterSecretStore -metadata: - name: vault-backend - namespace: golang-external-secrets -spec: - provider: - vault: - server: https://vault-vault.hub.example.com - path: secret - # Version of KV backend - version: v2 - - caProvider: - type: ConfigMap - name: kube-root-ca.crt - key: ca.crt - namespace: golang-external-secrets - - auth: - kubernetes: - - mountPath: hub - role: hub-role - - secretRef: - name: golang-external-secrets - namespace: golang-external-secrets - key: "token" ---- # Source: golang-external-secrets/charts/external-secrets/templates/validatingwebhook.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration @@ -13141,3 +13110,34 @@ webhooks: sideEffects: None timeoutSeconds: 5 failurePolicy: Fail +--- +# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml +apiVersion: external-secrets.io/v1beta1 +kind: ClusterSecretStore +metadata: + name: vault-backend + namespace: golang-external-secrets +spec: + provider: + vault: + server: https://vault-vault.hub.example.com + path: secret + # Version of KV backend + version: v2 + + caProvider: + type: ConfigMap + name: kube-root-ca.crt + key: ca.crt + namespace: golang-external-secrets + + auth: + kubernetes: + + mountPath: hub + role: hub-role + + secretRef: + name: golang-external-secrets + namespace: golang-external-secrets + key: "token" diff --git a/tests/common-golang-external-secrets-normal.expected.yaml b/tests/common-golang-external-secrets-normal.expected.yaml index 056054ba..6fb1915e 100644 --- a/tests/common-golang-external-secrets-normal.expected.yaml +++ b/tests/common-golang-external-secrets-normal.expected.yaml @@ -13046,37 +13046,6 @@ spec: secret: secretName: common-golang-external-secrets-webhook --- -# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml -apiVersion: external-secrets.io/v1beta1 -kind: ClusterSecretStore -metadata: - name: vault-backend - namespace: golang-external-secrets -spec: - provider: - vault: - server: https://vault-vault.apps.hub.example.com - path: secret - # Version of KV backend - version: v2 - - caProvider: - type: ConfigMap - name: kube-root-ca.crt - key: ca.crt - namespace: golang-external-secrets - - auth: - kubernetes: - - mountPath: hub - role: hub-role - - secretRef: - name: golang-external-secrets - namespace: golang-external-secrets - key: "token" ---- # Source: golang-external-secrets/charts/external-secrets/templates/validatingwebhook.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration @@ -13141,3 +13110,34 @@ webhooks: sideEffects: None timeoutSeconds: 5 failurePolicy: Fail +--- +# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml +apiVersion: external-secrets.io/v1beta1 +kind: ClusterSecretStore +metadata: + name: vault-backend + namespace: golang-external-secrets +spec: + provider: + vault: + server: https://vault-vault.apps.hub.example.com + path: secret + # Version of KV backend + version: v2 + + caProvider: + type: ConfigMap + name: kube-root-ca.crt + key: ca.crt + namespace: golang-external-secrets + + auth: + kubernetes: + + mountPath: hub + role: hub-role + + secretRef: + name: golang-external-secrets + namespace: golang-external-secrets + key: "token" From 7759e499c2c9b0c88371fc68c3ded68e383b02ca Mon Sep 17 00:00:00 2001 From: OAharoni-RedHat Date: Tue, 29 Sep 2026 14:00:22 -0400 Subject: [PATCH 3/5] Revert "Update expected test snapshots for singleArgoCD: true" This reverts commit 2be513000b2e29fea57d5a53fc4b73379e78afea. --- ...roup-industrial-edge-factory.expected.yaml | 1 - ...tergroup-industrial-edge-hub.expected.yaml | 1 - ...rgroup-medical-diagnosis-hub.expected.yaml | 1 - .../common-clustergroup-normal.expected.yaml | 1 - ...rets-industrial-edge-factory.expected.yaml | 62 +++++++++---------- ...-secrets-industrial-edge-hub.expected.yaml | 62 +++++++++---------- ...ecrets-medical-diagnosis-hub.expected.yaml | 62 +++++++++---------- ...olang-external-secrets-naked.expected.yaml | 62 +++++++++---------- ...lang-external-secrets-normal.expected.yaml | 62 +++++++++---------- 9 files changed, 155 insertions(+), 159 deletions(-) diff --git a/tests/common-clustergroup-industrial-edge-factory.expected.yaml b/tests/common-clustergroup-industrial-edge-factory.expected.yaml index edad1ba1..fea8ddac 100644 --- a/tests/common-clustergroup-industrial-edge-factory.expected.yaml +++ b/tests/common-clustergroup-industrial-edge-factory.expected.yaml @@ -252,7 +252,6 @@ data: repoURL: https://github.com/pattern-clone/mypattern secretStore: backend: vault - singleArgoCD: true targetRevision: main main: clusterGroupName: hub diff --git a/tests/common-clustergroup-industrial-edge-hub.expected.yaml b/tests/common-clustergroup-industrial-edge-hub.expected.yaml index 0ef3c3e6..0c615f54 100644 --- a/tests/common-clustergroup-industrial-edge-hub.expected.yaml +++ b/tests/common-clustergroup-industrial-edge-hub.expected.yaml @@ -413,7 +413,6 @@ data: repoURL: https://github.com/pattern-clone/mypattern secretStore: backend: vault - singleArgoCD: true targetRevision: main main: clusterGroupName: hub diff --git a/tests/common-clustergroup-medical-diagnosis-hub.expected.yaml b/tests/common-clustergroup-medical-diagnosis-hub.expected.yaml index 1138f0f7..cf435f56 100644 --- a/tests/common-clustergroup-medical-diagnosis-hub.expected.yaml +++ b/tests/common-clustergroup-medical-diagnosis-hub.expected.yaml @@ -372,7 +372,6 @@ data: repoURL: https://github.com/pattern-clone/mypattern secretStore: backend: vault - singleArgoCD: true targetRevision: main main: clusterGroupName: hub diff --git a/tests/common-clustergroup-normal.expected.yaml b/tests/common-clustergroup-normal.expected.yaml index b8b0cb68..07e3a157 100644 --- a/tests/common-clustergroup-normal.expected.yaml +++ b/tests/common-clustergroup-normal.expected.yaml @@ -362,7 +362,6 @@ data: repoURL: https://github.com/pattern-clone/mypattern secretStore: backend: vault - singleArgoCD: true targetRevision: main main: clusterGroupName: hub diff --git a/tests/common-golang-external-secrets-industrial-edge-factory.expected.yaml b/tests/common-golang-external-secrets-industrial-edge-factory.expected.yaml index 13f1d62b..19c1f8c0 100644 --- a/tests/common-golang-external-secrets-industrial-edge-factory.expected.yaml +++ b/tests/common-golang-external-secrets-industrial-edge-factory.expected.yaml @@ -13046,6 +13046,37 @@ spec: secret: secretName: common-golang-external-secrets-webhook --- +# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml +apiVersion: external-secrets.io/v1beta1 +kind: ClusterSecretStore +metadata: + name: vault-backend + namespace: golang-external-secrets +spec: + provider: + vault: + server: https://vault-vault.apps.hub.example.com + path: secret + # Version of KV backend + version: v2 + + caProvider: + type: Secret + name: hub-ca + key: hub-kube-root-ca.crt + namespace: golang-external-secrets + + auth: + kubernetes: + + mountPath: region.example.com + role: region.example.com-role + + secretRef: + name: golang-external-secrets + namespace: golang-external-secrets + key: "token" +--- # Source: golang-external-secrets/charts/external-secrets/templates/validatingwebhook.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration @@ -13110,34 +13141,3 @@ webhooks: sideEffects: None timeoutSeconds: 5 failurePolicy: Fail ---- -# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml -apiVersion: external-secrets.io/v1beta1 -kind: ClusterSecretStore -metadata: - name: vault-backend - namespace: golang-external-secrets -spec: - provider: - vault: - server: https://vault-vault.apps.hub.example.com - path: secret - # Version of KV backend - version: v2 - - caProvider: - type: Secret - name: hub-ca - key: hub-kube-root-ca.crt - namespace: golang-external-secrets - - auth: - kubernetes: - - mountPath: region.example.com - role: region.example.com-role - - secretRef: - name: golang-external-secrets - namespace: golang-external-secrets - key: "token" diff --git a/tests/common-golang-external-secrets-industrial-edge-hub.expected.yaml b/tests/common-golang-external-secrets-industrial-edge-hub.expected.yaml index 6fb1915e..056054ba 100644 --- a/tests/common-golang-external-secrets-industrial-edge-hub.expected.yaml +++ b/tests/common-golang-external-secrets-industrial-edge-hub.expected.yaml @@ -13046,6 +13046,37 @@ spec: secret: secretName: common-golang-external-secrets-webhook --- +# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml +apiVersion: external-secrets.io/v1beta1 +kind: ClusterSecretStore +metadata: + name: vault-backend + namespace: golang-external-secrets +spec: + provider: + vault: + server: https://vault-vault.apps.hub.example.com + path: secret + # Version of KV backend + version: v2 + + caProvider: + type: ConfigMap + name: kube-root-ca.crt + key: ca.crt + namespace: golang-external-secrets + + auth: + kubernetes: + + mountPath: hub + role: hub-role + + secretRef: + name: golang-external-secrets + namespace: golang-external-secrets + key: "token" +--- # Source: golang-external-secrets/charts/external-secrets/templates/validatingwebhook.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration @@ -13110,34 +13141,3 @@ webhooks: sideEffects: None timeoutSeconds: 5 failurePolicy: Fail ---- -# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml -apiVersion: external-secrets.io/v1beta1 -kind: ClusterSecretStore -metadata: - name: vault-backend - namespace: golang-external-secrets -spec: - provider: - vault: - server: https://vault-vault.apps.hub.example.com - path: secret - # Version of KV backend - version: v2 - - caProvider: - type: ConfigMap - name: kube-root-ca.crt - key: ca.crt - namespace: golang-external-secrets - - auth: - kubernetes: - - mountPath: hub - role: hub-role - - secretRef: - name: golang-external-secrets - namespace: golang-external-secrets - key: "token" diff --git a/tests/common-golang-external-secrets-medical-diagnosis-hub.expected.yaml b/tests/common-golang-external-secrets-medical-diagnosis-hub.expected.yaml index 6fb1915e..056054ba 100644 --- a/tests/common-golang-external-secrets-medical-diagnosis-hub.expected.yaml +++ b/tests/common-golang-external-secrets-medical-diagnosis-hub.expected.yaml @@ -13046,6 +13046,37 @@ spec: secret: secretName: common-golang-external-secrets-webhook --- +# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml +apiVersion: external-secrets.io/v1beta1 +kind: ClusterSecretStore +metadata: + name: vault-backend + namespace: golang-external-secrets +spec: + provider: + vault: + server: https://vault-vault.apps.hub.example.com + path: secret + # Version of KV backend + version: v2 + + caProvider: + type: ConfigMap + name: kube-root-ca.crt + key: ca.crt + namespace: golang-external-secrets + + auth: + kubernetes: + + mountPath: hub + role: hub-role + + secretRef: + name: golang-external-secrets + namespace: golang-external-secrets + key: "token" +--- # Source: golang-external-secrets/charts/external-secrets/templates/validatingwebhook.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration @@ -13110,34 +13141,3 @@ webhooks: sideEffects: None timeoutSeconds: 5 failurePolicy: Fail ---- -# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml -apiVersion: external-secrets.io/v1beta1 -kind: ClusterSecretStore -metadata: - name: vault-backend - namespace: golang-external-secrets -spec: - provider: - vault: - server: https://vault-vault.apps.hub.example.com - path: secret - # Version of KV backend - version: v2 - - caProvider: - type: ConfigMap - name: kube-root-ca.crt - key: ca.crt - namespace: golang-external-secrets - - auth: - kubernetes: - - mountPath: hub - role: hub-role - - secretRef: - name: golang-external-secrets - namespace: golang-external-secrets - key: "token" diff --git a/tests/common-golang-external-secrets-naked.expected.yaml b/tests/common-golang-external-secrets-naked.expected.yaml index 347c3ab0..3d12586b 100644 --- a/tests/common-golang-external-secrets-naked.expected.yaml +++ b/tests/common-golang-external-secrets-naked.expected.yaml @@ -13046,6 +13046,37 @@ spec: secret: secretName: common-golang-external-secrets-webhook --- +# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml +apiVersion: external-secrets.io/v1beta1 +kind: ClusterSecretStore +metadata: + name: vault-backend + namespace: golang-external-secrets +spec: + provider: + vault: + server: https://vault-vault.hub.example.com + path: secret + # Version of KV backend + version: v2 + + caProvider: + type: ConfigMap + name: kube-root-ca.crt + key: ca.crt + namespace: golang-external-secrets + + auth: + kubernetes: + + mountPath: hub + role: hub-role + + secretRef: + name: golang-external-secrets + namespace: golang-external-secrets + key: "token" +--- # Source: golang-external-secrets/charts/external-secrets/templates/validatingwebhook.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration @@ -13110,34 +13141,3 @@ webhooks: sideEffects: None timeoutSeconds: 5 failurePolicy: Fail ---- -# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml -apiVersion: external-secrets.io/v1beta1 -kind: ClusterSecretStore -metadata: - name: vault-backend - namespace: golang-external-secrets -spec: - provider: - vault: - server: https://vault-vault.hub.example.com - path: secret - # Version of KV backend - version: v2 - - caProvider: - type: ConfigMap - name: kube-root-ca.crt - key: ca.crt - namespace: golang-external-secrets - - auth: - kubernetes: - - mountPath: hub - role: hub-role - - secretRef: - name: golang-external-secrets - namespace: golang-external-secrets - key: "token" diff --git a/tests/common-golang-external-secrets-normal.expected.yaml b/tests/common-golang-external-secrets-normal.expected.yaml index 6fb1915e..056054ba 100644 --- a/tests/common-golang-external-secrets-normal.expected.yaml +++ b/tests/common-golang-external-secrets-normal.expected.yaml @@ -13046,6 +13046,37 @@ spec: secret: secretName: common-golang-external-secrets-webhook --- +# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml +apiVersion: external-secrets.io/v1beta1 +kind: ClusterSecretStore +metadata: + name: vault-backend + namespace: golang-external-secrets +spec: + provider: + vault: + server: https://vault-vault.apps.hub.example.com + path: secret + # Version of KV backend + version: v2 + + caProvider: + type: ConfigMap + name: kube-root-ca.crt + key: ca.crt + namespace: golang-external-secrets + + auth: + kubernetes: + + mountPath: hub + role: hub-role + + secretRef: + name: golang-external-secrets + namespace: golang-external-secrets + key: "token" +--- # Source: golang-external-secrets/charts/external-secrets/templates/validatingwebhook.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration @@ -13110,34 +13141,3 @@ webhooks: sideEffects: None timeoutSeconds: 5 failurePolicy: Fail ---- -# Source: golang-external-secrets/templates/vault/golang-external-secrets-hub-secretstore.yaml -apiVersion: external-secrets.io/v1beta1 -kind: ClusterSecretStore -metadata: - name: vault-backend - namespace: golang-external-secrets -spec: - provider: - vault: - server: https://vault-vault.apps.hub.example.com - path: secret - # Version of KV backend - version: v2 - - caProvider: - type: ConfigMap - name: kube-root-ca.crt - key: ca.crt - namespace: golang-external-secrets - - auth: - kubernetes: - - mountPath: hub - role: hub-role - - secretRef: - name: golang-external-secrets - namespace: golang-external-secrets - key: "token" From 54e68baf6a6cfe65461ab3c7283c8270c0ed6de8 Mon Sep 17 00:00:00 2001 From: OAharoni-RedHat Date: Tue, 29 Sep 2026 15:11:38 -0400 Subject: [PATCH 4/5] Update expected test snapshots for singleArgoCD: true Co-authored-by: Cursor --- tests/common-clustergroup-industrial-edge-factory.expected.yaml | 1 + tests/common-clustergroup-industrial-edge-hub.expected.yaml | 1 + tests/common-clustergroup-medical-diagnosis-hub.expected.yaml | 1 + tests/common-clustergroup-naked.expected.yaml | 1 + tests/common-clustergroup-normal.expected.yaml | 1 + 5 files changed, 5 insertions(+) diff --git a/tests/common-clustergroup-industrial-edge-factory.expected.yaml b/tests/common-clustergroup-industrial-edge-factory.expected.yaml index fea8ddac..edad1ba1 100644 --- a/tests/common-clustergroup-industrial-edge-factory.expected.yaml +++ b/tests/common-clustergroup-industrial-edge-factory.expected.yaml @@ -252,6 +252,7 @@ data: repoURL: https://github.com/pattern-clone/mypattern secretStore: backend: vault + singleArgoCD: true targetRevision: main main: clusterGroupName: hub diff --git a/tests/common-clustergroup-industrial-edge-hub.expected.yaml b/tests/common-clustergroup-industrial-edge-hub.expected.yaml index 0c615f54..0ef3c3e6 100644 --- a/tests/common-clustergroup-industrial-edge-hub.expected.yaml +++ b/tests/common-clustergroup-industrial-edge-hub.expected.yaml @@ -413,6 +413,7 @@ data: repoURL: https://github.com/pattern-clone/mypattern secretStore: backend: vault + singleArgoCD: true targetRevision: main main: clusterGroupName: hub diff --git a/tests/common-clustergroup-medical-diagnosis-hub.expected.yaml b/tests/common-clustergroup-medical-diagnosis-hub.expected.yaml index cf435f56..1138f0f7 100644 --- a/tests/common-clustergroup-medical-diagnosis-hub.expected.yaml +++ b/tests/common-clustergroup-medical-diagnosis-hub.expected.yaml @@ -372,6 +372,7 @@ data: repoURL: https://github.com/pattern-clone/mypattern secretStore: backend: vault + singleArgoCD: true targetRevision: main main: clusterGroupName: hub diff --git a/tests/common-clustergroup-naked.expected.yaml b/tests/common-clustergroup-naked.expected.yaml index 7a9f94b2..42c2355d 100644 --- a/tests/common-clustergroup-naked.expected.yaml +++ b/tests/common-clustergroup-naked.expected.yaml @@ -116,6 +116,7 @@ data: pattern: common secretStore: backend: vault + singleArgoCD: true targetRevision: main secretStore: kind: ClusterSecretStore diff --git a/tests/common-clustergroup-normal.expected.yaml b/tests/common-clustergroup-normal.expected.yaml index 07e3a157..b8b0cb68 100644 --- a/tests/common-clustergroup-normal.expected.yaml +++ b/tests/common-clustergroup-normal.expected.yaml @@ -362,6 +362,7 @@ data: repoURL: https://github.com/pattern-clone/mypattern secretStore: backend: vault + singleArgoCD: true targetRevision: main main: clusterGroupName: hub From 34e3c20cbeff68cb03c00c02f9c9e983c44d563b Mon Sep 17 00:00:00 2001 From: OAharoni-RedHat Date: Tue, 29 Sep 2026 15:14:10 -0400 Subject: [PATCH 5/5] Remove singleArgoCD from naked test snapshot (no values-global.yaml in naked variant) Co-authored-by: Cursor --- tests/common-clustergroup-naked.expected.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/tests/common-clustergroup-naked.expected.yaml b/tests/common-clustergroup-naked.expected.yaml index 42c2355d..7a9f94b2 100644 --- a/tests/common-clustergroup-naked.expected.yaml +++ b/tests/common-clustergroup-naked.expected.yaml @@ -116,7 +116,6 @@ data: pattern: common secretStore: backend: vault - singleArgoCD: true targetRevision: main secretStore: kind: ClusterSecretStore