Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Helm tool credentials management for private repo charts #922

Closed
mogaika opened this issue Aug 29, 2023 · 0 comments · Fixed by #1017
Closed

Helm tool credentials management for private repo charts #922

mogaika opened this issue Aug 29, 2023 · 0 comments · Fixed by #1017
Assignees

Comments

@mogaika
Copy link

mogaika commented Aug 29, 2023

If I not mistaken, when using tk tool charts vendor you have to pass repo credentials via chartfile.yaml:

repositories:
- name: repo-private
  url: https://registry.___com/chartrepo/___
  username: XXXXXXXXX
  password: XXXXXXXXX

This is not acceptable from security perspective, since different users usually require different credentials and this way this file should be always modified and not commited.

Possible solution:
Add --repository-config (as in helm) to tk tool charts vendor to be able to use local ~/.config/helm/repositories.yaml. This way repositories management will be done by user and chartfile.yaml with tk tool charts vendor will be used only for charts management and there will be no need to pass auth parameters around to tanka. Feels more like workaround, but it's simple and preserves chart management of chartfile.yaml, especially considering that usually repo names and url associations are the same between different users anyways.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants