Our workflow is somewhat paranoid for security-related reasons. In addition to seeing/diffing every change to every helm chart we depend on (from one place), we also require this workflow approach for offline k8s & platform development.
As such, we prefer to vend helm charts from our local repository. We use Tanzu/Carvel's tool vendir to locally sync all manifests, crds, and helm charts from their origins/remote repositories.
So, I have a fully cloned local copy of the argocd helm chart (from argoproj, not bitnami) that I want to use, as opposed to referencing a potentially mutative remote chart.
When I helmfile sync this way, helmfile does not disable dex server & redis-ha.
When I use the following helmfile config, it does disable redis-ha & dex server. It requires that I set skipDeps to true and that I also reference the locally synced helm chart directly from the helmfile.yaml.
Could someone please tell me if this is expected behavior? I'm new to helmfile, so I'm already guessing I'm probably misunderstanding or misusing helmfile + helm.
Thank you for your incredible work on this amazing tool! :)
For reference, here's a simplified overview of our directory layout as well:
Our workflow is somewhat paranoid for security-related reasons. In addition to seeing/diffing every change to every helm chart we depend on (from one place), we also require this workflow approach for offline k8s & platform development.
As such, we prefer to vend helm charts from our local repository. We use Tanzu/Carvel's tool
vendir
to locally sync all manifests, crds, and helm charts from their origins/remote repositories.So, I have a fully cloned local copy of the argocd helm chart (from argoproj, not bitnami) that I want to use, as opposed to referencing a potentially mutative remote chart.
I have a helmfile that looks like this:
helmfile.yaml
Chart.yaml
values.yaml
When I
helmfile sync
this way, helmfile does not disable dex server & redis-ha.When I use the following helmfile config, it does disable redis-ha & dex server. It requires that I set
skipDeps
totrue
and that I also reference the locally synced helm chart directly from thehelmfile.yaml
.Could someone please tell me if this is expected behavior? I'm new to
helmfile
, so I'm already guessing I'm probably misunderstanding or misusing helmfile + helm.Thank you for your incredible work on this amazing tool! :)
For reference, here's a simplified overview of our directory layout as well: