Helm secrets support

[kfirfer]

Helm secrets support

[kfirfer]

Had problems with gpg/pgp , needed to make a lot of changes like gpg_tty, importing the gpg somehow, etc..
Moved to age and everything is much easier and works as intended

ty!

[travisghansen]

I doubt the custom integration would work with helmfile directly. In my case I use age with centrally managed keys which are published throughout the organization (each cluster has numerous keys available to it, a global key, a cluster key, an env key, etc). To make it all work it requires:

# set env on repo server
  - name: SOPS_AGE_KEY_FILE
    value: /sops/age/keys.txt

# volume for repo server
  - name: age-secret-keys
    secret:
      secretName: argocd-age-secret-keys

# volume mount for repo server
  - mountPath: /sops/age
    name: age-secret-keys

# create the secret
apiVersion: v1
kind: Secret
metadata:
  name: argocd-age-secret-keys
  namespace: argocd
stringData:
  keys.txt: |
    # place all keys here

[kfirfer]

I have managed to exec the repo-server pod and import the gpg key
but this error shown:

ERROR: exit status 1 EXIT STATUS 1 STDERR: [helm-secrets] Values filepath '.nucs/dev/us-east/apps/namespaces/homer/helmfile/values-secrets.yaml' is an absolute path. Absolute paths are not allowed. [helm-secrets] File does not exist: .nucs/dev/us-east/apps/namespaces/homer/helmfile/values-secrets.yaml Error: plugin "secrets" exited with error COMBINED OUTPUT: [helm-secrets] Values filepath '.nucs/dev/us-east/apps/namespaces/homer/helmfile/values-secrets.yaml' is an absolute path. Absolute paths are not allowed. [helm-secrets] File does not exist: .nucs/dev/us-east/apps/namespaces/homer/helmfile/values-secrets.yaml Error: plugin "secrets" exited with error

[kfirfer]

btw I have also upgraded the helmfile version, didnt seems to work (tried with the documented version aswell)

          wget -qO /custom-tools/helmfile.tar.gz https://github.com/helmfile/helmfile/releases/download/v0.145.2/helmfile_0.145.2_linux_amd64.tar.gz
          tar -zxvf /custom-tools/helmfile.tar.gz -C /custom-tools
          chmod +x /custom-tools/helmfile

[kfirfer]

Forgot that env var HELM_SECRETS_VALUES_ALLOW_ABSOLUTE_PATH was set to false (by the helm-secrets&argocd integration guide)

Checking if its works

[travisghansen]

Yeah I have gpg functioning as well, but it’s pretty messy to get going.