Commit Graph

1127 Commits

Author SHA1 Message Date
Yusuke Kuoka 173767d2c5
Create SECURITY.md (#135)
Probably this is the best we can currently offer. Any suggestions are welcomed though.

Ref https://github.com/roboll/helmfile/issues/2147

Signed-off-by: Yusuke Kuoka <ykuoka@gmail.com>
2022-06-05 17:11:54 +09:00
Yusuke Kuoka 83a7245d0f
Enhance the bug report form (#134)
It turned out we lack some important information that is necessary to make it a real bug without guesswork.

Signed-off-by: Yusuke Kuoka <ykuoka@gmail.com>
2022-06-05 16:16:17 +09:00
Yusuke Kuoka 58721ab1fc
Add yxxhero as a maintainer (#132)
I've asked a few times by @yxxhero if he deserves a seat as a maintainer of the Helmfile project.
Seeing the amount and the number of his recent contributions, and the nature of his contributions (add tests and fix bugs and CI issues, review PRs), I think he is in a relatively unique position compared to existing maintainers, and we can work better together!

Signed-off-by: Yusuke Kuoka <ykuoka@gmail.com>
2022-06-05 16:04:36 +09:00
yxxhero 6e5a726ae5
fix ci issue (#131)
Signed-off-by: yxxhero <aiopsclub@163.com>
2022-06-05 15:31:36 +09:00
Sergio Morales 414db47428
chore(state): Append Api Versions flags to helm-diff (#107)
* chore(state): Append Api Versions flags to helm-diff

Signed-off-by: Sergio Morales <sergio@cornershopapp.com>

* chore(state): Added unit test to state.flagsForDiff

Signed-off-by: Sergio Morales <sergio@cornershopapp.com>

* chore(state): Check Helmstate values if ReleaseSpec values aren't set

Signed-off-by: Sergio Morales <sergio@cornershopapp.com>
2022-06-05 15:18:54 +09:00
Quan TRAN 577f54af7a
Introduce DISABLE_INSECURE_FEATURES to disable insecure command executions (#1)
* introduce DISABLE_INSECURE_FEATURES to disable insecure executions

Signed-off-by: Quan TRAN <account@itscaro.me>

* disable remote sources when DISABLE_INSECURE_FEATURES is set to "true"

Signed-off-by: Quan TRAN <account@itscaro.me>

* refactor envvar package

Signed-off-by: Quan TRAN <account@itscaro.me>

* (test) fix test fixtures

Signed-off-by: Quan TRAN <account@itscaro.me>

* use absolute path to avoid unit test failure

Signed-off-by: Quan TRAN <account@itscaro.me>

* Fix conflicts

Co-authored-by: Yusuke Kuoka <ykuoka@gmail.com>
2022-06-05 15:15:06 +09:00
Dominic 789af92c09
Adds feature to fetch release values and secret values from remote (#47)
* Adds feature to fetch environment values from remote

The releases and environment section allow for values files on the local
disk.
This enhancement allows for referencing remote (go-getter) files to be
fetched, cached and referenced.

In addition when fetching a remote git source with a ssh key the ssh key
will not be part of the caching folder name. This avoids two problems:
1. Don't leak sensitive information in the name of the caching folder
2. Base64 encoded SSH keys are very long. On some file systems the max
lenght of the directory name is hit when using the full base64
information in the path name.

The sshkey informations are reducted. Because of this fixed string
there is a change of colloding cache names. The likelihood of this
collision is very low. The git repo and git reference need to be the
same, but the sshkey can change. This will result in the same source to
be checkout out and referenced.

Signed-off-by: Lüchinger Dominic <dev@snowgarden.ch>

* Update pkg/state/storage.go

Co-authored-by: Yusuke Kuoka <ykuoka@gmail.com>
2022-06-05 15:08:38 +09:00
Yusuke Kuoka b6f3972381
Merge pull request #130 from yxxhero/little_code_opt
little code optimize
2022-06-05 14:46:55 +09:00
yxxhero aaf2126f91 little code optimize
Signed-off-by: yxxhero <aiopsclub@163.com>
2022-06-05 12:58:55 +08:00
Yusuke Kuoka 7c34e2e1b7
Merge pull request #83 from yxxhero/refactor_main
reconstruct main function
2022-06-05 13:27:04 +09:00
Yusuke Kuoka b986b3de9f
Merge pull request #99 from yxxhero/add_e2e_tmpl_test
add e2e tmpl test
2022-06-05 13:23:08 +09:00
yxxhero 871f2a9ed3 refactor cmd dir
Signed-off-by: yxxhero <aiopsclub@163.com>
2022-06-01 07:32:36 +08:00
yxxhero 8024949d48 reconstruct_main_function
Signed-off-by: yxxhero <aiopsclub@163.com>
2022-06-01 07:32:36 +08:00
Quan TRAN e73fb21a84
Merge pull request #114 from helmfile/dependabot/go_modules/github.com/imdario/mergo-0.3.13
Bump github.com/imdario/mergo from 0.3.12 to 0.3.13
2022-05-31 15:37:36 +02:00
dependabot[bot] f8597c564e Bump github.com/imdario/mergo from 0.3.12 to 0.3.13
Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo) from 0.3.12 to 0.3.13.
- [Release notes](https://github.com/imdario/mergo/releases)
- [Commits](https://github.com/imdario/mergo/compare/0.3.12...v0.3.13)

---
updated-dependencies:
- dependency-name: github.com/imdario/mergo
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-31 15:14:45 +02:00
Quan TRAN 736edf89fe
Merge pull request #122 from philippeckel/update-Helm-diff-in-Dockerfile
Update Helm diff plugin to version 3.5.0 in Dockerfile
2022-05-31 15:13:10 +02:00
Quan TRAN 9580c8863d
Merge pull request #123 from rodrigodc07/fix_CVE-2020-26160
Update sops version on dockerfile
2022-05-31 14:38:40 +02:00
Philipp Eckel 73b7243f94
Update Helm diff plugin to version 3.5.0 in Dockerfile
Signed-off-by: Philipp Eckel <philipp.eckel@coyoapp.com>
2022-05-31 11:33:02 +02:00
Rodrigo Dantas 86eff8e2ed Update sops version on Dockerfile.debian and Dockerfile.ubuntu
Signed-off-by: Rodrigo Dantas <rodrigodc07@gmail.com>
2022-05-30 19:03:32 -03:00
Rodrigo Dantas 6ca79ef7f1 Update sops version on dockerfile
Signed-off-by: Rodrigo Dantas <rodrigodc07@gmail.com>
2022-05-30 19:03:32 -03:00
Quan TRAN a92c574a98
Merge pull request #112 from yxxhero/remove_unused_comments
remove unused comments
2022-05-30 23:12:19 +02:00
Quan TRAN 0cfef76f0d
Merge pull request #88 from chubchubsancho/validate_manifest_on_sync
feat: allow --validate on sync command
2022-05-30 10:11:53 +02:00
yxxhero 0c57129aab remove unused comments
Signed-off-by: yxxhero <aiopsclub@163.com>
2022-05-30 10:08:19 +02:00
Quan TRAN f16001e61a
Merge pull request #118 from yxxhero/fix_integration_tests_error
fix intergration test for argo-cd form master to main branch
2022-05-30 10:07:56 +02:00
yxxhero 070ed0dd47 fix intergration test for argo-cd form master to main branch
Signed-off-by: yxxhero <aiopsclub@163.com>
2022-05-30 07:45:01 +08:00
yxxhero 9011d2dd15 fix import path name error
Signed-off-by: yxxhero <aiopsclub@163.com>
2022-05-24 07:50:08 +08:00
yxxhero c34c7c87a1 add get tpl e2e test
Signed-off-by: yxxhero <aiopsclub@163.com>
2022-05-24 07:50:08 +08:00
yxxhero 23b6429f33 add toYaml and fromYaml
Signed-off-by: yxxhero <aiopsclub@163.com>
2022-05-24 07:50:08 +08:00
yxxhero 33c66a6f46 add readfile e2e test
Signed-off-by: yxxhero <aiopsclub@163.com>
2022-05-24 07:50:08 +08:00
yxxhero 70b874a596 add more testcases
Signed-off-by: yxxhero <aiopsclub@163.com>
2022-05-24 07:50:08 +08:00
yxxhero 80457d964c add e2e tmpl test
Signed-off-by: yxxhero <aiopsclub@163.com>
2022-05-24 07:50:08 +08:00
Quan TRAN a993b2af3f
Merge pull request #85 from itscaro/qtran/helm3.9
add helm 3.9 to tests
2022-05-23 11:44:29 +02:00
Quan TRAN c32689e779
Merge pull request #104 from yxxhero/update_envExec_doc
update envExec docs
2022-05-23 10:58:03 +02:00
yxxhero 8a2fe28bbf update envExec docs
Signed-off-by: yxxhero <aiopsclub@163.com>
2022-05-23 16:46:29 +08:00
Quan TRAN 2e58c01ced add helm 3.9 to tests
Signed-off-by: Quan TRAN <account@itscaro.me>
2022-05-23 10:44:57 +02:00
Quan TRAN 26b4be3b5d
Merge pull request #106 from helmfile/dependabot/go_modules/github.com/hashicorp/go-getter-1.6.1
Bump github.com/hashicorp/go-getter from 1.6.0 to 1.6.1
2022-05-23 10:39:59 +02:00
Quan TRAN 30f53b914e
rename stage/job in github actions 2022-05-23 10:15:49 +02:00
Quan TRAN 3b27243ec6
fix typo in github actions 2022-05-23 10:12:47 +02:00
Quan TRAN d9143f55ce
fix image build on tag / main 2022-05-23 10:12:12 +02:00
Yusuke Kuoka 7e2462ed62
Merge pull request #40 from itscaro/qtran/build-tag
build image on tag
2022-05-22 15:25:35 +09:00
Yusuke Kuoka 281fe9bf59
Merge pull request #101 from austince/rename-module
Rename module to github.com/helmfile/helmfile
2022-05-22 15:19:16 +09:00
dependabot[bot] e67203ac9d
Bump github.com/hashicorp/go-getter from 1.6.0 to 1.6.1
Bumps [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) from 1.6.0 to 1.6.1.
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml)
- [Commits](https://github.com/hashicorp/go-getter/compare/v1.6.0...v1.6.1)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-getter
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-20 15:27:40 +00:00
Quan TRAN eddb9eec45
Merge pull request #97 from yxxhero/rename_execEnvs_to_-envExec
rename execEnvs to envExec
2022-05-20 09:52:26 +02:00
Quan TRAN d10a64ccf6
Merge pull request #103 from helmfile/dependabot/go_modules/github.com/hashicorp/go-getter-1.6.0
Bump github.com/hashicorp/go-getter from 1.5.11 to 1.6.0
2022-05-20 09:47:37 +02:00
dependabot[bot] eace00f3db
Bump github.com/hashicorp/go-getter from 1.5.11 to 1.6.0
Bumps [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) from 1.5.11 to 1.6.0.
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml)
- [Commits](https://github.com/hashicorp/go-getter/compare/v1.5.11...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-getter
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-19 15:34:33 +00:00
austin ce eb3484d4a8
Rename module to github.com/helmfile/helmfile
Also updates a few more references to the roboll/helmfile repository,
where possible.

Signed-off-by: austin ce <austin.cawley@gmail.com>
2022-05-18 10:05:07 -04:00
Grégory SANCHEZ dec10eb9d9 fix: fix lint error
Signed-off-by: Grégory SANCHEZ <gregory.sanchez@icloud.com>
2022-05-17 14:03:32 +02:00
Grégory SANCHEZ 3978767ca7 Update main.go
Co-authored-by: Yusuke Kuoka <ykuoka@gmail.com>
Signed-off-by: Grégory SANCHEZ <gregory.sanchez@icloud.com>
2022-05-17 14:00:55 +02:00
Grégory SANCHEZ 62747378ca feat: allow --validate on sync command
This will permit usage of `--validate` options with sync command

Signed-off-by: Grégory SANCHEZ <gregory.sanchez@icloud.com>
2022-05-17 14:00:55 +02:00
yxxhero 10c3eb61a5 fix issue in context_funcs.go
Signed-off-by: yxxhero <aiopsclub@163.com>
2022-05-17 17:37:47 +08:00