Stability and Support
This page lists the status, timeline and policy for currently supported ESO releases and its providers. Please also see our deprecation policy that describes API versioning, deprecation and API surface.
Supported Versions
external-secrets only supports the most-up-to date, current minor version. Any other minor version releases are automatically deprecated as soon as a new minor version comes.
During a minor version support time, we cover: - regular image rebuilds to update OS dependencies - regular go dependency updates
We do not do test coverage for any other kubernetes version than the ones running on our test suites. As of version 0.14.x , this is the only kubernetes version that we will guarantee support for.
| ESO Version | Kubernetes Version | Release Date | End of Life |
|---|---|---|---|
| 0.19.x | 1.33 | August 2, 2025 | Release of 0.20 |
| 0.18.x | 1.33 | July 17, 2025 | August 2, 2025 |
| 0.17.x | 1.33 | May 14, 2025 | July 17, 2025 |
| 0.16.x | 1.32 | Apr 14, 2025 | May 14, 2025 |
| 0.15.x | 1.32 | Mar 19, 2025 | Apr 14, 2025 |
| 0.14.x | 1.32 | Feb 4, 2025 | Mar 19, 2025 |
| 0.13.x | 1.19 → 1.31 | Jan 21, 2025 | Feb 4, 2025 |
| 0.12.x | 1.19 → 1.31 | Dec 24, 2024 | Jan 21, 2025 |
| 0.11.x | 1.19 → 1.31 | Dec 2, 2024 | Dec 24, 2024 |
| 0.10.x | 1.19 → 1.31 | Aug 3, 2024 | Dec 24, 2024 |
| 0.9.x | 1.19 → 1.30 | Jun 22, 2023 | Dec 2, 2024 |
| 0.8.x | 1.19 → 1.28 | Mar 16, 2023 | Aug 3, 2024 |
| 0.7.x | 1.19 → 1.26 | Dec 11, 2022 | Jun 22, 2023 |
| 0.6.x | 1.19 → 1.24 | Oct 9, 2022 | Mar 16, 2023 |
| 0.5.x | 1.19 → 1.24 | Apr 6, 2022 | Dec 11, 2022 |
| 0.4.x | 1.16 → 1.24 | Feb 2, 2022 | Oct 9, 2022 |
| 0.3.x | 1.16 → 1.24 | Jul 25, 2021 | Apr 6, 2022 |
Upgrading
External Secrets Operator has not reached stable 1.0 yet. This means that we treat each minor version bump as a potentially breaking change. Breaking changes may include:
- API schema changes
- Default behavior modifications
- Deprecated feature removals
- Provider authentication changes
- Configuration format updates
Important upgrade recommendations:
- Plan your upgrades carefully - Always review release notes before upgrading, it could contain breaking changes information
- Upgrade version by version - We strongly recommend upgrading one minor version at a time (e.g., 0.18.x → 0.19.x → 0.20.x) rather than skipping versions
- Test in non-production first - Always validate upgrades in development/staging environments
Until we reach v1.0, please treat minor version upgrades with the same caution you would give to major version upgrades in other projects.
Provider Stability and Support Level
The following table describes the stability level of each provider and who's responsible.
Provider Feature Support
The following table show the support for features across different providers.
| Provider | find by name | find by tags | metadataPolicy Fetch | referent authentication | store validation | push secret | DeletionPolicy Merge/Delete |
|---|---|---|---|---|---|---|---|
| AWS Secrets Manager | x | x | x | x | x | x | x |
| AWS Parameter Store | x | x | x | x | x | x | x |
| Hashicorp Vault | x | x | x | x | x | x | x |
| GCP Secret Manager | x | x | x | x | x | x | x |
| Azure Keyvault | x | x | x | x | x | x | x |
| Kubernetes | x | x | x | x | x | x | x |
| IBM Cloud Secrets Manager | x | x | x | ||||
| Yandex Lockbox | x | ||||||
| GitLab Variables | x | x | x | ||||
| Alibaba Cloud KMS | x | ||||||
| Oracle Vault | x | ||||||
| Akeyless | x | x | x | x | x | x | |
| 1Password | x | x | x | x | x | ||
| 1Password SDK | x | x | x | ||||
| Generic Webhook | x | ||||||
| senhasegura DSM | x | ||||||
| Doppler | x | x | |||||
| Keeper Security | x | x | x | ||||
| Scaleway | x | x | x | x | x | ||
| Conjur | x | x | x | ||||
| Delinea | x | x | |||||
| Beyondtrust | x | x | |||||
| SecretServer | x | x | |||||
| Pulumi ESC | x | x | |||||
| Passbolt | x | x | |||||
| Infisical | x | x | x | ||||
| Device42 | x | ||||||
| Bitwarden Secrets Manager | x | x | x | x | |||
| Previder | x | x | |||||
| Cloud.ru | x | x | x | x | x |
Support Policy
We provide technical support and security / bug fixes for the above listed versions.
Technical support
We provide assistance for deploying/upgrading etc. on a best-effort basis. You can request support through the following channels:
- Kubernetes Slack #external-secrets
- GitHub Issues
- GitHub Discussions
Even though we have active maintainers and people assigned to this project, we kindly ask for patience when asking for support. We will try to get to priority issues as fast as possible, but there may be some delays.
Helm Charts
The Helm charts provided by this project are offered "as-is" and are primarily focused on providing a good user experience and ease of use. Hardened Helm charts are not a deliverable of this project. We encourage users to review the default chart values and customize them to meet their own security requirements and best practices.
