Skip to content

Releases: helm/helm

Helm v3.13.0

27 Sep 20:51
@mattfarina mattfarina
v3.13.0
This tag was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
825e86f
This commit was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
Compare
Choose a tag to compare
Helm v3.13.0 Latest
Latest

Helm v3.13.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • The --dry-run flag now has multiple options which can enable Helm to connect to a Kubernetes instance. The default, when --dry-run is used, is unchanged.
  • Values handling had numerous issues fixed and now consistently has a priority of (1) User specified values (e.g CLI), (2) imported values, (3) parent chart values, and (4) subchart values. Additionally, null can now consistently be used to remove values.
  • Can work with OCI registries over HTTP using the --plain-http flag
  • Helm now adds the OCI creation annotation
  • New helm get metadata command
  • The SQL driver now only needs write on the first run or when the schema is updated
  • Added labels support for install and upgrade commands

Installation and Upgrading

Download Helm v3.13.0. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.13.1 is the next bug fix release and will be on October 11, 2023.
  • 3.14.0 is the next feature release and be on January 17, 2024.

Changelog

  • bump version to v3.13.0 825e86f (Matt Farina)
  • Fix leaking goroutines in Install 169561a (Michał Słapek)
  • chore(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.6 417040d (dependabot[bot])
  • chore(deps): bump github/codeql-action from 2.21.5 to 2.21.7 610217f (dependabot[bot])
  • Update Helm to use k8s 1.28.2 libraries c2ab954 (Matt Farina)
  • chore(deps): bump github.com/cyphar/filepath-securejoin b9fd7f5 (dependabot[bot])
  • make the dependabot k8s.io group explicit ca3a05e (Joe Julian)
  • use dependabot's group support for k8s.io dependencies 04ec71a (Joe Julian)
  • chore(deps): bump transparencylog/github-releases-asset-transparency-verify-action ebb3168 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 2.21.4 to 2.21.5 fa45978 (dependabot[bot])
  • doc:Executing helm rollback release 0 will roll back to the previous release e01731d (ithrael)
  • fix conflict 4944acb (Maxim Trofimov)
  • add big tests 6138e10 (Maxim Trofimov)
  • fix conflict 199784f (Maxim Trofimov)
  • fix b786cb4 (Maxim Trofimov)
  • add check if all migrations already applied df5904d (Maxim Trofimov)
  • chore(deps): bump github.com/moby/term fa89665 (dependabot[bot])
  • chore(deps): bump actions/checkout from 3.5.3 to 3.6.0 4283b2c (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.10.0 to 0.11.0 d82cc90 (dependabot[bot])
  • Use labels instead of selectorLabels for pod labels 479be0c (Tim Chaplin)
  • fix(helm): fix GetPodLogs, the hooks should be sorted before get the logs of each hook 4e5e68d (Bingtan Lu)
  • chore(deps): bump github.com/rubenv/sql-migrate from 1.5.1 to 1.5.2 3c26d65 (dependabot[bot])
  • remove blank ee1cbed (ithrael)
  • add blank 0eb3df6 (ithrael)
  • add rollback unit test 0688046 (ithrael)
  • fix: helm rollback err tips db9460c (ithrael)
  • chore(deps): bump github.com/containerd/containerd from 1.7.0 to 1.7.3 817e646 (dependabot[bot])
  • Add Ian Zink (z4ce) as triage maintainer 758dc01 (Ian Zink)
  • chore(deps): bump github/codeql-action from 2.21.3 to 2.21.4 04850dc (dependabot[bot])
  • chore: HTTPGetter add default timeout 2011a31 (0xff-dev)
  • fix: precedence typo bf543d9 (guoguangwu)
  • Avoid nil dereference if passing a nil resolver 3607cd7 (Antonio Gamez Diaz)
  • Add required changes after merge 197d1de (Antonio Gamez Diaz)
  • goimports 5b08985 (satoru)
  • Fix #3352, add support for --ignore-not-found just like kubectl delete 48dbda2 (suzaku)
  • chore(deps): bump github/codeql-action from 2.21.2 to 2.21.3 aab4c45 (dependabot[bot])
  • chore(deps): bump actions/setup-go from 4.0.1 to 4.1.0 c3a4122 (dependabot[bot])
  • Fix helm may identify achieve of the application/x-gzip as application/vnd.ms-fontobject 5c7a631 (MR ZHAO)
  • Restore helm get metadata command 0b5e9d3 (Mikhail Kopylov)
  • Revert "Add helm get metadata command" e8e6da2 (Joe Julian)
  • Update pkg/action/install.go 735ff8f (Dmitry Chepurovskiy)
  • test: replace ensure.TempDir with t.TempDir 2ceebff (Eng Zer Jun)
  • chore(deps): bump github/codeql-action from 2.21.0 to 2.21.2 95ba0c6 (dependabot[bot])
  • use json api url + report curl/wget error on fail 9d038a2 (shoce)
  • Added error in case try to supply custom label with name of system label during install/upgrade 7b13ac9 (Dmitry Chepurovskiy)
  • Updated per feedback from gjenkins8 e8a748d (Matt Farina)
  • fix(main): fix basic auth for helm pull or push 4a27baa (cuisongliu)
  • chore(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 48cf02b (dependabot[bot])
  • cmd: support generating index in JSON format 2544aa2 (Hidde Beydals)
  • repo: detect JSON and unmarshal efficiently e21c9cf (Hidde Beydals)
  • Tweaking new dry-run internal handling 96e33e2 (Matt Farina)
  • chore(deps): bump github/codeql-action from 2.20.3 to 2.21.0 2e22395 (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.4 7d0deb3 (dependabot[bot])
  • chore(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 f11e2da (dependabot[bot])
  • chore(deps): bump github.com/opencontainers/image-spec ef0f3e5 (dependabot[bot])
  • bump kubernetes modules to v0.27.3 9c4f733...

Contributors

mattfarina
Assets 29

v3.13.0-rc.1

18 Sep 20:43
@mattfarina mattfarina
v3.13.0-rc.1
This tag was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
825e86f
This commit was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
Compare
Choose a tag to compare
v3.13.0-rc.1 Pre-release
Pre-release

Helm v3.13.0-rc.1 is a pre-release. It is to help gather feedback from the community as well as give users a chance to test Helm in staging environments before v3.13.0 is officially released.

The official changelog will come out with the v3.13.0 release. For now, you can see the commit changes from v3.12.3 here.

Installation and Upgrading

Download Helm v3.13.0-rc.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

Contributors

mattfarina
Assets 29

Helm v3.12.3

10 Aug 20:41
@mattfarina mattfarina
v3.12.3
This tag was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
3a31588
This commit was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
Compare
Choose a tag to compare
Helm v3.12.3

Helm v3.12.3 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.12.3. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.13.0 is the next feature release and be on September 13, 2023.

Changelog

  • bump kubernetes modules to v0.27.3 3a31588 (Joe Julian)
  • Add priority class to kind sorter fb74155 (Stepan Dohnal)

Contributors

mattfarina
Assets 29

Helm v3.12.2

13 Jul 18:48
@mattfarina mattfarina
v3.12.2
This tag was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
1e210a2
This commit was signed with the committer’s verified signature.
joejulian Joe Julian
GPG key ID: FAB12BE0575D999B
Learn about vigilant mode.
Compare
Choose a tag to compare
Helm v3.12.2

Helm v3.12.2 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.12.2. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.12.3 is the next patch/bug fix release and will be on August 9, 2023.
  • 3.13.0 is the next feature release and be on September 13, 2023.

Changelog

  • add GetRegistryClient method 1e210a2 (wujunwei)
  • chore(deps): bump oras.land/oras-go from 1.2.2 to 1.2.3 cfa7bc6 (dependabot[bot])

Contributors

mattfarina
Assets 29

Helm v3.12.1

14 Jun 20:52
@mattfarina mattfarina
v3.12.1
This tag was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
f32a527
This commit was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
Compare
Choose a tag to compare
Helm v3.12.1

Helm v3.12.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.12.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.12.2 is the next patch/bug fix release and will be on July 12, 2023.
  • 3.13.0 is the next feature release and be on September 13, 2023.

Changelog

  • add some test case f32a527 (wujunwei)
  • fix comment grammar error. 91bb1e3 (wujunwei)
  • bugfix:(#11391) helm lint infinite loop when malformed template object 5217482 (wujunwei)
  • chore(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 524a0e7 (dependabot[bot])
  • chore(deps): bump github.com/docker/distribution c60cdf6 (dependabot[bot])
  • update autoscaling/v2beta1 to autoscaling/v2 in skeleton chart 321f71a (Dmitry Kamenskikh)
  • test(search): add mixedCase test case aca1e44 (Höhl, Lukas)
  • chore(deps): bump github.com/lib/pq from 1.10.7 to 1.10.9 c09e93f (dependabot[bot])
  • chore(deps): bump github.com/Masterminds/squirrel from 1.5.3 to 1.5.4 8eab82b (dependabot[bot])
  • chore(deps): bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1 aa6b8aa (dependabot[bot])
  • fix(search): print repo search result in original case 5b19d8e (Höhl, Lukas)
  • strict file permissions of repository.yaml dee1fde (shankeerthan-kasilingam)
  • update kubernetes dependencies from v0.27.0 to v0.27.1 4f32150 (Joe Julian)

Contributors

mattfarina
Assets 29

Helm v3.12.0

10 May 18:22
@mattfarina mattfarina
v3.12.0
This tag was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
c9f554d
This commit was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
Compare
Choose a tag to compare
Helm v3.12.0

Helm v3.12.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • When charts are pushed to OCI registries, annotations are attached using standard names that other tools can introspect (e.g. version)
  • --set-literal command line flag to set a specific string with no escaping
  • --cascade flag to specify deletion policy on uninstall

Installation and Upgrading

Download Helm v3.12.0. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.12.1 is the next patch/bug fix release and will be on June 14, 2023.
  • 3.13.0 is the next feature release and be on September 13, 2023.

Changelog

  • bump version to v3.12.0 c9f554d (Matt Farina)
  • Attach annotations to OCI artifacts f900e9f (Andrew Block)
  • chore: bump k8s.io dependencies to v0.27.1 bdd5656 (Yann Soubeyrand)
  • Bump k8s.io deps from v0.26.0 to v0.27.0 b936140 (Tom Wieczorek)
  • Only run tests once 3232493 (Matt Farina)
  • chore(deps): bump golang.org/x/text from 0.7.0 to 0.9.0 be14682 (dependabot[bot])
  • Fix goroutine leak in action install 7c9d636 (Matt Farina)
  • fix quiet lint does not fail on non-linting errors 853c180 (Joe Julian)
  • create failing test for quietly linting a chart that doesn't exist f13fa07 (Joe Julian)
  • chore(deps): bump github.com/docker/docker aba9bd6 (dependabot[bot])
  • Fixes Readiness Check for statefulsets using partitioned rolling update. (#11774) eea2f27 (Aman Nijhawan)
  • fix: failed testcase on windows 878e962 (wujunwei)
  • Fix 32bit-x86 typo in testsuite 1fc8369 (Dirk Müller)
  • chore(deps): bump github.com/containerd/containerd from 1.6.15 to 1.7.0 3994329 (dependabot[bot])
  • Handle failed DNS case for Go 1.20+ 046646c (Matt Farina)
  • Updating the Go version in go.mod 4e7e939 (Matt Farina)
  • Bump the Go version 50c22ed (Matt Farina)
  • Fix goroutine leak in perform 11150cd (willzgli)
  • Properly invalidate client after CRD install 68f7b1f (Hidde Beydals)
  • Provide a helper to set the registryClient in cmd 11738dd (Soule BA)
  • Reimplemented change in httpgetter for insecure TLS option c94306f (Andrew Block)
  • Removed conditional ec5e29e (Andrew Block)
  • Added insecure option to login subcommand 154f37e (Andrew Block)
  • Added support for insecure OCI registries 08593c8 (Andrew Block)
  • Enable custom certificates option for OCI b0ecb21 (Soule BA)
  • Add testing to default and release branches 1f26385 (Matt Farina)
  • Added back CircleCI config.yaml e6f7b5a (Andrew Block)
  • Updates based on feedback 2f1dffa (Andrew Block)
  • Removed remaining CircleCI artifacts 07821c8 (Andrew Block)
  • Remove job dependency. Should have done when I moved job to new file b696464 (Scott Rigby)
  • Remove check to run only in helm org c8efe20 (Scott Rigby)
  • Add why comments c5dda09 (Scott Rigby)
  • Convert remaining CircleCI config to GitHub Actions 131f6f3 (Scott Rigby)
  • Changed how the setup-go action sets go version 35e77cc (Andrew Block)
  • CircleCI Migration 6ba17f1 (Andrew Block)
  • chore:Use http constants as http.request parameters 8a310c5 (xin.li)
  • update k8s registry domain 006bc0f (cpanato)
  • don't mark issues as stale where a PR is in progress 209d44c (Joe Julian)
  • chore(deps): bump github.com/rubenv/sql-migrate from 1.2.0 to 1.3.1 a071378 (dependabot[bot])
  • Update to func handling 863bc74 (Matt Farina)
  • Add option to support cascade deletion options 830d4a9 (MichaelMorris)
  • the linter varcheck and deadcode are deprecated (since v1.49.0) c110817 (Fish-pro)
  • Check status code before retrying request 442d594 (Cenk Alti)
  • Fix improper use of Table request/response to k8s API 36e18fa (Matt Farina)
  • bump version to v3.11.0 6facbad (Matt Farina)
  • fix template --output-dir issue 1c25a1f (yxxhero)
  • Add protection for stack-overflows for nested keys c1a65d5 (Patrick Scheid)
  • Fixing indentation 50ec3d4 (Matt Farina)
  • feature(helm): add --set-literal flag for literal string interpretation 4516039 (Patrick Scheid)

Contributors

mattfarina
Assets 29

v3.12.0-rc.1

01 May 18:51
@mattfarina mattfarina
v3.12.0-rc.1
This tag was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
c9f554d
This commit was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
Compare
Choose a tag to compare
v3.12.0-rc.1 Pre-release
Pre-release

Helm v3.12.0-rc.1 is a pre-release. It is to help gather feedback from the community as well as give users a chance to test Helm in staging environments before v3.12.0 is officially released.

The official changelog will come out with the v3.12.0 release. For now, you can see the commit changes from v3.11.3 here.

Installation and Upgrading

Download Helm v3.12.0-rc.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

Contributors

mattfarina
Assets 29

Helm v3.11.3

12 Apr 18:38
@mattfarina mattfarina
v3.11.3
This tag was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
66a969e
This commit was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
Compare
Choose a tag to compare
Helm v3.11.3

Helm v3.11.2 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.11.3. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.12.0 is the next feature release and be on May 10, 2023.

Changelog

  • chore(deps): bump golang.org/x/text from 0.7.0 to 0.9.0 66a969e (dependabot[bot])
  • Fix goroutine leak in perform 548366c (willzgli)
  • Fix goroutine leak in action install 4a3a268 (Matt Farina)
  • Fix 32bit-x86 typo in testsuite 272f6b9 (Dirk Müller)
  • chore(deps): bump github.com/docker/docker 88b2db4 (dependabot[bot])
  • chore(deps): bump github.com/containerd/containerd from 1.6.15 to 1.7.0 b6a8417 (dependabot[bot])
  • Fixes Readiness Check for statefulsets using partitioned rolling update. (#11774) 7994bb4 (Aman Nijhawan)

Contributors

mattfarina
Assets 29

Helm v3.11.2

08 Mar 21:43
@mattfarina mattfarina
v3.11.2
This tag was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
912ebc1
This commit was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
Compare
Choose a tag to compare
Helm v3.11.2

Helm v3.11.2 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.11.2. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.11.3 is the next patch/bug fix release and will be on April 12, 2023.
  • 3.12.0 is the next feature release and be on May 10, 2023.

Changelog

  • chore(deps): bump github.com/rubenv/sql-migrate from 1.2.0 to 1.3.1 912ebc1 (dependabot[bot])
  • the linter varcheck and deadcode are deprecated (since v1.49.0) 321d3f3 (Fish-pro)
  • fix template --output-dir issue d44881d (yxxhero)

Contributors

mattfarina
Assets 29

Helm v3.11.1

08 Feb 18:02
@mattfarina mattfarina
v3.11.1
This tag was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
293b50c
This commit was signed with the committer’s verified signature.
mattfarina Matt Farina
GPG key ID: 92C44A3D421FF7F9
Learn about vigilant mode.
Compare
Choose a tag to compare
Helm v3.11.1

Helm v3.11.1 is a security (patch) release. Users are strongly recommended to update to this release.

The template function getHostByName can be used to disclose information. More details are available in the CVE.

This release introduces a breaking changes to Helm:

  • When using the helm client for the template, install, and upgrade commands there is a new flag. --enable-dns needs to be set for the getHostByName template function to attempt to lookup an IP address for a given hostname. If the flag is not set the template function will return an empty string and skip looping up an IP address for the host.
  • The Helm SDK has added the EnableDNS property to the install action, the upgrade action, and the Engine. This property must be set to true for the in order for the getHostByName template function to attempt to lookup an IP address.

The default for both of these cases is false.

Philipp Stehle at SAP disclosed the vulnerability to the Helm project.

Installation and Upgrading

Download Helm v3.11.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.11.2 is the next patch/bug fix release and will be on March 08, 2023.
  • 3.12.0 is the next feature release and be on May 10, 2023.

Contributors

mattfarina
Assets 29