Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Secrets fails to decrypt #365

Closed
diegodambra opened this issue Sep 14, 2022 · 2 comments · Fixed by #360
Closed

Secrets fails to decrypt #365

diegodambra opened this issue Sep 14, 2022 · 2 comments · Fixed by #360
Labels
enhancement New feature or request

Comments

@diegodambra
Copy link

Operating system

Ubuntu 20.04.4 LTS

Helmfile Version

0.145.5

Helm Version

3.9.4

Bug description

helmfile fails to decrypt secrets, with plugin version 4.x, helm secrets no longer support view as argument. Argument decrypt is provided as replacement, see changelog.

# helm secrets --help
Secrets encryption in Helm Charts

This plugin provides ability to encrypt/decrypt secrets files
to store in less secure places, before they are installed using
Helm.

For more information, see the README at github.com/jkroepke/helm-secrets

To decrypt/encrypt/edit you need to initialize/first encrypt secrets with
sops - https://github.com/mozilla/sops

Available Commands:
  encrypt Encrypt secrets file
  decrypt Decrypt secrets file
  edit    Edit secrets file and encrypt afterwards
  dir     Get plugin directory
  patch   Enables windows specific adjustments
  <cmd>   wrapper that decrypts encrypted yaml files before running helm <cmd>

Available Options:
  --quiet                    -q  Suppress info messages (env: $HELM_SECRETS_QUIET)
  --backend                  -b  Secret backend to use for decryption or encryption (env: $HELM_SECRETS_BACKEND)
  --backend-args             -a  Additional args for secret backend (env: $HELM_SECRETS_BACKEND_ARGS)
  --help                     -h  Show help
  --version                  -v  Display version of helm-secrets

Example helmfile.yaml

...

Error message you've seen (if any)

PATH:
  /builder/helmfile/helm

ARGS:
  0: helm (4 bytes)
  1: --kube-context (14 bytes)
  2: gke_xyz_1234_abc (47 bytes)
  3: secrets (7 bytes)
  4: view (4 bytes)
  5: /root/workspace/credentials/helm_vars/ds-hbase-api/secrets-hbase-api.gcp.prod.yaml (82 bytes)
  6: --kube-context (14 bytes)
  7: gke_xyz_1234_abc (47 bytes)

ERROR:
  exit status 1

EXIT STATUS
  1

STDERR:
  Error: unknown command "view" for "helm"
  Run 'helm --help' for usage.
  Error: plugin "secrets" exited with error

COMBINED OUTPUT:
  Error: unknown command "view" for "helm"
  Run 'helm --help' for usage.
  Error: plugin "secrets" exited with error

Steps to reproduce

any helmfile with secrets

Working Helmfile Version

helm secrets version 3.15

Relevant discussion

No response

@yxxhero yxxhero linked a pull request Sep 14, 2022 that will close this issue
@yxxhero
Copy link
Member

yxxhero commented Sep 14, 2022

@diegodambra maybe #360

@yxxhero yxxhero added the enhancement New feature or request label Sep 14, 2022
@diegodambra
Copy link
Author

@diegodambra maybe #360

Yes, absolutely same issue, thanks!

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 18, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants