The GitOps Toolkit Helm reconciler, for declarative Helming
Go to file
Stefan Prodan 0173eaa0df
Allow setting a default service account for impersonation
Introduce the flag `--default-service-account` for allowing cluster admins to enforce impersonation for resources reconciliation.

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-01-31 12:09:39 +02:00
.github/workflows build: set --load as BUILD_ARGS default 2022-01-28 18:59:37 +01:00
api Refactor fuzzing 2022-01-17 20:45:16 +00:00
config Fix the missing protocol for the first port in manager config 2022-01-25 00:49:26 +02:00
controllers Allow setting a default service account for impersonation 2022-01-31 12:09:39 +02:00
docs Allow setting a default service account for impersonation 2022-01-31 12:09:39 +02:00
hack Depend on the Kustomize API from `fluxcd/pkg` 2021-02-03 20:02:19 +01:00
internal Allow setting a default service account for impersonation 2022-01-31 12:09:39 +02:00
tests/fuzz Refactor fuzzing 2022-01-17 20:45:16 +00:00
.gitignore Refactor fuzzing 2022-01-17 20:45:16 +00:00
.goreleaser.yaml Publish SBOM and sign release artifacts 2022-01-26 09:23:38 +02:00
CHANGELOG.md Release v0.15.0 2022-01-10 10:35:53 +02:00
CODE_OF_CONDUCT.md Add DCO and code of conduct 2020-07-10 09:18:34 +03:00
DCO Add DCO and code of conduct 2020-07-10 09:18:34 +03:00
DEVELOPMENT.md Update dev docs 2022-01-19 10:06:12 +00:00
Dockerfile Enforce runAsNonRoot 2022-01-20 08:26:31 +00:00
LICENSE Support Helm install action 2020-07-08 16:23:38 +02:00
MAINTAINERS Share flux2 maintainers 2020-11-30 13:23:26 +00:00
Makefile build: set --load as BUILD_ARGS default 2022-01-28 18:59:37 +01:00
PROJECT Promote API to v2beta1 2020-09-30 19:37:23 +02:00
README.md add CII badge 2021-04-08 13:08:58 +02:00
go.mod Allow setting a default service account for impersonation 2022-01-31 12:09:39 +02:00
go.sum Allow setting a default service account for impersonation 2022-01-31 12:09:39 +02:00
main.go Allow setting a default service account for impersonation 2022-01-31 12:09:39 +02:00

README.md

helm-controller

CII Best Practices e2e report license release

The helm-controller is a Kubernetes operator, allowing one to declaratively manage Helm chart releases. It is part of a composable GitOps toolkit and depends on source-controller to acquire the Helm charts from Helm repositories.

The desired state of a Helm release is described through a Kubernetes Custom Resource named HelmRelease. Based on the creation, mutation or removal of a HelmRelease resource in the cluster, Helm actions are performed by the operator.

overview

Features

  • Watches for HelmRelease objects and generates HelmChart objects
  • Supports HelmChart artifacts produced from HelmRepository, GitRepository and Bucket sources
  • Fetches artifacts produced by source-controller from HelmChart objects
  • Watches HelmChart objects for revision changes (including semver ranges for charts from HelmRepository sources)
  • Performs automated Helm actions, including Helm tests, rollbacks and uninstalls
  • Offers extensive configuration options for automated remediation (rollback, uninstall, retry) on failed Helm install, upgrade or test actions
  • Runs Helm install/upgrade in a specific order, taking into account the depends-on relationship defined in a set of HelmRelease objects
  • Reports Helm release statuses (alerting provided by notification-controller)
  • Built-in Kustomize compatible Helm post renderer, providing support for strategic merge, JSON 6902 and images patches

Guides

Specifications