https://cloudposse.com logo
Join Slack
Powered by
Hey All, after upgrading to the latest helmfile f...
# helmfile
j
Hey All, after upgrading to the latest helmfile from v0.163.0 I am seeing the following error as helmfile attempts to decrypt secrets files with sops loaded from my environments.yaml:
Copy code
$ helmfile -e mgmt-eng diff
Decrypting secret /home/user/.workspaces/z/argoCD-factory-ops/secrets/mgmt-eng/argocd.yaml
Decrypting secret /home/user/.workspaces/z/argoCD-factory-ops/secrets/mgmt-eng/secret1484928982.yaml
command "/usr/local/bin/helm" exited with non-zero status:

PATH:
  /usr/local/bin/helm

ARGS:
  0: helm (4 bytes)
  1: secrets (7 bytes)
  2: decrypt (7 bytes)
  3: /home/user/.workspaces/z/argoCD-factory-ops/secrets/mgmt-eng/secret1484928982.yaml (94 bytes)

ERROR:
  exit status 1

EXIT STATUS
  1

STDERR:
  [helm-secrets] File does not exist: /home/user/.workspaces/z/argoCD-factory-ops/secrets/mgmt-eng/secret1484928982.yaml
  Error: plugin "secrets" exited with error

COMBINED OUTPUT:
  [helm-secrets] File does not exist: /home/user/.workspaces/z/argoCD-factory-ops/secrets/mgmt-eng/secret1484928982.yaml
  Error: plugin "secrets" exited with error
I have the latest version of sops, helm-secrets, and helm 3.x installed. Is this a known issue? I have tried renaming the secrets file to end in 
.gotmpl
with no success. I've searched github and this slack but don't see anyone talking about it. The decryption seems to be working but then helm-secrets apparently can't find the file?
using 
helmfile --debug
in the command i can see it decrypts the file. after decrypting and moving to a tmp file , which is does a lot of times presumably because i have a file helmfiles it's executing over in a helmfile.d/ directory, it then proceeds to say file not found.
Doing some more testing... it looks like either these decrypted secrets files get created so fast i can't capture their existance or they are not being created at all... Based on the fact that the helmfile debug sees the contents of the decryption ... I'm not sure what to think
it's even weirder.... the command thats failing, as seen above, is 
helm secrets decrypt
on the temp file.... but somehow we're getting the values into debug output..
looks like i needed to add --sequential flag
y
try to use the latest version.
2 Views
Open in Slack
PreviousNext
Powered by