Promote External Secret Stores to Beta

[turkenh]

What problem are you facing?

We released initial support for External Secret Stores in the v1.7.0 milestone. As a follow-up, we have made them pluggable to enable out-of-tree development and extension with v1.12.0 and released the first out-of-tree external secret store plugin under https://github.com/crossplane-contrib/ess-plugin-vault.

We want to continue to invest in this feature to evolve it to a Beta level of maturity.

How could Crossplane help solve your problem?

This issue will serve as a tracking epic of the known issues we want to address before moving this feature to Beta.

ESS Beta checklist

Beta Give feedback

1. Support for Consuming Input Secrets from External Secret Stores #2985
   enhancement secret-stores +2
2. Can crossplane support reading provider credentials only when making calls with cloud providers? #4018
   enhancement secret-stores security stale +4
3. Track usage of Secret StoreConfig and Prevent deletion while it is in use #2998
   enhancement secret-stores stale +3
4. Compositions should not contain spec for where/how to write XR credentials #2774
   composition enhancement +2
5. At least 1 more ESS plugin has been developed and published in the ecosystem.
6. XR referencing wrong StoreConfig? #4171
   bug secret-stores +2
7. MR/XR/XRC Connection Details multi-tenant isolation not possible #4185
   bug docs secret-stores +3
8. Deprecate fromConnectionSecretKey in Composition? #3361
   enhancement secret-stores stale +3
9. Support tenant isolation of XR connection details #4277
   composition enhancement secret-stores +3
10. Alpha: Add E2E for External Secret Store #4725
    e2e secret-stores stale +3

[turkenh]

Removing deprecated Vault API from ESS API crossplane/crossplane-runtime#513

[mmassenzio]

We've been using the publishConnectionDetailsTo feature to our corp Vault instance for several months now and it has proved pretty solid and really reliable, so my vote goes for promoting it
💯

[EricDotz]

Hi, do know about a new version of the ess-plugin-vault (https://github.com/crossplane-contrib/ess-plugin-vault) with Kubernetes AuthMethod?

I saw this functionality in the code and would like to use it.

The code is already on the main branch.

[ezgidemirel]

Hi @EricDotz, just released ess-plugin-vault:0.2.0.

[EricDotz]

Thank you @ezgidemirel

[github-actions]

Crossplane does not currently have enough maintainers to address every issue and pull request. This issue has been automatically marked as stale because it has had no activity in the last 90 days. It will be closed in 14 days if no further activity occurs. Leaving a comment starting with /fresh will mark this issue as not stale.

[github-actions]

Crossplane does not currently have enough maintainers to address every issue and pull request. This issue has been automatically marked as stale because it has had no activity in the last 90 days. It will be closed in 14 days if no further activity occurs. Leaving a comment starting with /fresh will mark this issue as not stale.