External Secrets ConfigHub Proof Transcript

A repository document, rendered for the site. View source markdown.

Generated at: 2026-07-30T12:38:02.000Z UTC · source: committed helm-expt evidence for this rendered repository document.

Run date: 2026-05-27

Receipts:

runs/external-secrets-confighub-proof/latest/confighub-proof-receipt.yaml
runs/external-secrets-confighub-proof/latest/function-scan-receipt.yaml
runs/external-secrets-confighub-proof/latest/safe-ops-receipt.yaml

Commands

New to cub? Install the cub CLI first. You can pull and render public catalog packages without an account. Commands that save or change ConfigHub data require you to sign in.

What this command does. cub installer is a released, open-source plugin for the cub CLI. cub installer setup pulls a catalog package and writes its Kubernetes files locally. It does not apply those files to a cluster; use kubectl, Argo CD, or Flux for delivery. The generated scripts stop before doing any work when the plugin or kustomize is missing.

cub installer doc packages/external-secrets/external-secrets/2.5.0 --json
cub installer setup --pull packages/external-secrets/external-secrets/2.5.0 --base default --work-dir .tmp/confighub-proof/external-secrets-default --non-interactive --namespace external-secrets
cub installer render --work-dir .tmp/confighub-proof/external-secrets-default
cub installer package packages/external-secrets/external-secrets/2.5.0 -o .tmp/confighub-proof/external-secrets-archives/external-secrets-a.tgz
cub installer upload --work-dir .tmp/confighub-proof/external-secrets-default --space helm-external-secrets-confighub-proof --component ExternalSecrets --layer App --environment Demo --owner ConfigHubHelm --variant default --unit-label Component=ExternalSecrets --unit-label HelmChart=external-secrets-external-secrets --unit-label HelmChartVersion=2.5.0 --unit-label Variant=default --unit-label Proof=external-secrets-confighub-proof --retry
cub installer plan --work-dir .tmp/confighub-proof/external-secrets-default
cub variant create staging helm-external-secrets-confighub-proof --environment Staging --region local --namespace external-secrets --space-pattern template:{{.Labels.Component}}-{{.Labels.Variant}} --allow-exists --wait --timeout 10m
cub unit list --space helm-external-secrets-confighub-proof --where "Labels.Proof = 'external-secrets-confighub-proof'"
cub function vet vet-format --space helm-external-secrets-confighub-proof --where "Labels.Proof = 'external-secrets-confighub-proof'"
cub unit apply --space helm-external-secrets-confighub-proof --where "Labels.Proof = 'external-secrets-confighub-proof'" --dry-run

Result

rendered objects: 42
separated secrets: 1
ConfigHub Units: 43
Kubernetes Units: 42
installer record Units: 1
staging clone Units: 43
function scan: pass
safe ops: pass