mirror of
https://github.com/helmfile/helmfile.git
synced 2026-10-01 02:01:21 +02:00
Aditya Menon
4f275b3667
This commit adds comprehensive support for Helm 4 while maintaining full backward compatibility with Helm 3. The implementation includes: - Updated helm version detection to support both Helm 3 and Helm 4 - Added HELMFILE_HELM4 environment variable to control Helm version - Modified helm execution paths to handle version-specific binaries - Updated helm plugin installation to support split architecture - Helm 4: Uses split plugin architecture (3 separate .tgz files) - helm-secrets.tgz - helm-secrets-getter.tgz - helm-secrets-post-renderer.tgz - Helm 3: Continues using single plugin installation - Updated Dockerfiles, CI workflows, and core installation code - Helm 4 requires post-renderers to be plugins, not executable scripts - Created Helm plugin structure for integration tests - Updated helmfile.yaml templates to dynamically select renderer type - Added test plugins: add-cm, add-cm1, add-cm2 - Updated integration tests for Helm 3/4 compatibility - Created Helm 4 variant expected output files - Fixed test determinism issues (repo cleanup between iterations) - Added version-specific output filtering for warnings/messages - Updated workflows to test both Helm 3 and Helm 4 - Matrix testing across Helm versions - Updated helm-diff to v3.14.0 for compatibility - Updated README and docs with Helm 4 information - Added migration guidance - Updated version requirements All changes are backward compatible - existing Helm 3 users will see no behavior changes. fix: update Helm 4 lint expected output to match filtered output The grep filter removes the semver warning, so the expected output should not include it. Updated lint-helm4 files to match the filtered output (warning removed, no extra blank line). Signed-off-by: Aditya Menon <amenon@canarytechnologies.com>
69 lines
2.6 KiB
Makefile
69 lines
2.6 KiB
Makefile
HELM_VERSION ?= v4.0.0
|
|
KUSTOMIZE_VERSION ?= v5.8.0
|
|
K8S_VERSION ?= v1.34.0
|
|
MINIKUBE_VERSION ?= v1.37.0
|
|
SOPS_VERSION ?= v3.10.2
|
|
|
|
# ---
|
|
CHANGE_MINIKUBE_NONE_USER ?= true
|
|
MINIKUBE_WANTUPDATENOTIFICATION ?= false
|
|
MINIKUBE_WANTREPORTERRORPROMPT ?= false
|
|
|
|
VAULT_ADDR := http://127.0.0.1:8200
|
|
VAULT_TOKEN := toor
|
|
|
|
tmp := $(shell mktemp -d)
|
|
HELM_FILENAME := helm-${HELM_VERSION}-linux-amd64.tar.gz
|
|
KUSTOMIZE_FILENAME := kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz
|
|
|
|
|
|
all: vault sops helm kustomize minikube/destroy minikube
|
|
|
|
helm:
|
|
curl -sSLo $(tmp)/${HELM_FILENAME} "https://get.helm.sh/${HELM_FILENAME}"
|
|
tar zxf $(tmp)/${HELM_FILENAME} --directory ${tmp} linux-amd64/helm
|
|
chmod +x ${tmp}/linux-amd64/helm
|
|
sudo mv ${tmp}/linux-amd64/helm /usr/local/bin/
|
|
.PHONY: helm
|
|
|
|
kustomize:
|
|
curl -sSLo $(tmp)/${KUSTOMIZE_FILENAME} "https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2F${KUSTOMIZE_VERSION}/${KUSTOMIZE_FILENAME}"
|
|
tar zxf $(tmp)/${KUSTOMIZE_FILENAME} --directory ${tmp} kustomize
|
|
chmod +x ${tmp}/kustomize
|
|
sudo mv ${tmp}/kustomize /usr/local/bin/
|
|
.PHONY: kustomize
|
|
|
|
minikube/destroy:
|
|
sudo -E minikube delete || true
|
|
sudo -E rm -rf /etc/kubernetes || true
|
|
sudo -E rm -rf $$HOME/.minikube/* || true
|
|
.PHONY: minikube/destroy
|
|
.EXPORT_ALL_VARIABLES: minikube/destroy
|
|
|
|
minikube:
|
|
curl -sSLo ${tmp}/kubectl https://dl.k8s.io/release/${K8S_VERSION}/bin/linux/amd64/kubectl
|
|
chmod +x ${tmp}/kubectl && sudo mv ${tmp}/kubectl /usr/local/bin/
|
|
curl -sSLo ${tmp}/minikube https://storage.googleapis.com/minikube/releases/${MINIKUBE_VERSION}/minikube-linux-amd64
|
|
chmod +x ${tmp}/minikube && sudo mv ${tmp}/minikube /usr/local/bin/
|
|
sudo -E minikube delete || true
|
|
sudo -E rm -rf /etc/kubernetes || true
|
|
sudo -E rm -rf $$HOME/.minikube/* || true
|
|
sudo -E minikube start --vm-driver=none --kubernetes-version=${K8S_VERSION}
|
|
sudo -E minikube update-context
|
|
kubectl wait node/minikube --for=condition=Ready
|
|
.PHONY: minikube
|
|
.EXPORT_ALL_VARIABLES: minikube
|
|
|
|
vault:
|
|
docker kill $$(docker ps -a --filter "name=vault" -q) || true
|
|
docker run -d -p8200:8200 --rm --name vault vault:1.2.0 server -dev -dev-root-token-id=toor
|
|
docker run --rm --network="host" --cap-add IPC_LOCK -e VAULT_ADDR=$$VAULT_ADDR -e VAULT_TOKEN=$$VAULT_TOKEN vault:1.2.0 secrets enable -path=sops transit
|
|
docker run --rm --network="host" --cap-add IPC_LOCK -e VAULT_ADDR=$$VAULT_ADDR -e VAULT_TOKEN=$$VAULT_TOKEN vault:1.2.0 write sops/keys/key type=rsa-4096
|
|
.PHONY: vault
|
|
|
|
sops:
|
|
curl -sSLo $(tmp)/sops "https://github.com/getsops/sops/releases/download/${SOPS_VERSION}/sops-${SOPS_VERSION}.linux.amd64"
|
|
chmod +x $(tmp)/sops
|
|
sudo mv ${tmp}/sops /usr/local/bin/
|
|
.PHONY: sops
|