search

carvel-dev / kapp-controller

Continuous delivery and package management for Kubernetes.
https://carvel.dev/kapp-controller
Apache License 2.0
267 stars 103 forks source link

Support `lookup` functions in the helm template calls #1558

Open voor opened 5 months ago

voor commented 5 months ago

Describe the problem/challenge you have More charts are starting to implement the helm lookup function which will check existing secrets for certain values and populate them -- this provides a convenience and form of error checking in certain charts to make sure values are populated and correct. This creates problems for kapp which expects the helm template calls to not interact with existing cluster data.

Describe the solution you'd like Allow the helm template call to use the service account that exists for the App CR to potentially get some data off the cluster. This would require adding --dry-run=server to the helm template command and providing a kubeconfig that would be accessible to the client.

Anything else you would like to add: I don't like this, but helm chart authors are starting to implement this function in a way that breaks certain functionality if it's not used.

Vote on this request

This is an invitation to the community to vote on issues, to help us prioritize our backlog. Use the "smiley face" up to the right of this comment to vote.

👍 "I would like to see this addressed as soon as possible" 👎 "There are other more important things to focus on right now"

We are also happy to receive and review Pull Requests if you want to help working on this issue.

voor commented 5 months ago

Example: the Bitnami Redis chart won't let you use an existing secret anymore as a values, since if you want to use an existing secret it will lookup the value in that secret and then use it in the rendering instead of just letting you put in the reference to the secret. See here: Bitnami Redis chart template