#helmfile (2021-11)
Questions and discussion around helmfile https://github.com/roboll/helmfile and https://github.com/cloudposse/helmfiles
Archive: https://archive.sweetops.com/helmfile/
2021-11-02
Back to my earlier question, helmfiles are not used anymore by sweetops? Terraform is now used? or anchor helm chart?
We’re still maintaining helmfiles for customers, but we’re consolidating on terraform for most of the use-cases we had for backing services.
The primary driver for this is we can almost never deploy a helm release without some other infrastructure level dependencies.
Some of the common examples are:
• IAM roles (to manage route53, read from SSM, upload or pull from ECR)
• RDS, Redis, S3 (for stateful backends)
• Route53 zones (for use with external-dns)
• KMS keys (for use with sops-operator)
• ACM certificates (for use with alb-controller)
We’re trying to mitigate what @Erik Osterman (Cloud Posse) mentioned by using K8s objects for cloud services. Therefore we can bake them into the app charts or create standalone charts. Since GCP is our main platform we’re leveraging Config Connector for this purpose. Probably Crossplane is another option here, however, they have an abstraction that makes helm charts redundant. We are not yet convinced to switch to it - too much effort was put on helm-related stuff)).
2021-11-04
Hi, I’m trying to exclude a “test” file from rendering in helmfile when running helmfile template ex.
metadata:
name: my-test-pod
annotations:
"helm.sh/hook": test
Is there a way to exclude tests from rendering during helm template or exclude the path via a .helmignore (or another way)?
You can use the --show-only feature of helm (https://helm.sh/docs/helm/helm_template/) in combination with the helmdefault->args feature of helmfile:
helmDefaults:
args:
- "--show-only=templates/service.yaml"
Note that this would be applied to all releases of the corresponding helmfile. Afaik there’s no way how you can specify custom helm arguments per helmfile-release.
You might be able to work around that by putting the affected release(s) in a separate sub-helmfile, but I never tried that.
Well, but there is --skip-tests flag