releases:
  - name: lookup-test
    chart: ../../../charts/raw
    namespace: {{ .Namespace }}
    # forceNamespace triggers chartify
    forceNamespace: {{ .Namespace }}
    values:
      - templates:
          - |
            apiVersion: v1
            kind: Secret
            metadata:
              name: lookup-result
            type: Opaque
            stringData:
              # When lookup can reach the cluster, this resolves to the current live value (init)
              # lookup() returns an empty map when the chart is rendered without a
              # cluster connection (e.g. the helm-diff phase of `helmfile apply`).
              # Guard every index with `default dict` so we never index into nil.
              # With cluster access this resolves to the current live value (init).
              key: {{`{{ default "" (index (default dict (index (default dict (lookup "v1" "Secret" .Release.Namespace "my-secret")) "data")) "key") | b64dec | default "overwritten" }}`}}