Registry Secret causes changes on every apply

[darend]

issue

Every time helm diff or helm sync is run changes are shown even if no config changes we made

background

The registry secret generates a random password inline:

harbor-helm/templates/registry/registry-secret.yaml

Line 9 in b5b422f

REGISTRY_HTTP_SECRET: {{ randAlphaNum 16 | b64enc | quote }}

Similarly with the notary certificates:

harbor-helm/templates/notary/notary-cm.yaml

Line 11 in b5b422f

{{ $cert := genSignedCert (include "harbor.notary-signer" .) nil nil 365 $ca }}

[ywk253100]

Yes, the secret and certificate are used to secure the communication between the internal components, they are both generated automatically.

[ywk253100]

Any side effect do you get with them?

[darend]

Any side effect do you get with them?

We use helm diff to show changes that would be applied and have automation to roll things out. It just makes the diff a little harder to parse as you need to know to ignore these changes.

As a feature request, perhaps allow these to be provided when installing the chart