0.3.2

[tomthorogood]

• Support external secrets operator (consuming applications no longer need to declare full secret specs):

spec:
  values:
    vaultSecrets:
      tenant: iam
      secrets:
        - name: my-reference-name
          source: dev/secret/name

• Support image automation policies (consuming applications no longer need to supply these:

spec:
  values:
    image: 
      name: gcr.io/uwit-mci-iam/example-flask-app # {"$imagePolicy": "default:app-name-policy:name"}
      tag: latest # {"$imagePolicy": "default:app-name-policy:tag"}
  automation:
    enabled: true
    stage: dev

Given the above example, once the requisite policies, etc. are created, updates will automatically be published of a deployment tag matches something like:

gcr.io/uwit-mci-iam/example-flask-app:deploy-dev.2022.11.16.10.39.v1.2.3

The target tag needs three things:

• deploy-{{ stage }} (in this case, dev)
• A dot-delimited timestamp (2022.11.16.10.39)
• A semver version: v1.2.3

Each piece is separated by a ..

This allows you to re-deploy any version, as the timestamp in the tag dictates what is deployed.