All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
Allow override sops version on installation
3.10.0 - 2021-11-05
- Add age support for downloader plugin syntax.
- Improvements to the ArgoCD integration documentation.
3.9.1 - 2021-10-09
- Wrong format on CHANGELOG.md
3.9.0 - 2021-10-09
- A better ArgoCD Integration. helm-secrets can load now gpg keys for you by using the uri
secrets+gpg-import://path/key.asc?path/secrets.yaml
as value file. As alternative, you can usesecrets+gpg-import-kubernetes://
to import a gpg key from an existing kubernetes secret, but it requires the kubectl command. Checkout the docs/ARGOCD.md for more information. - vals driver. vals supporting Vault, AWS SSM, GCP, sops, terraform states or other files.
3.8.3 - 2021-08-06
- Allow dot, asterisk and underscore for vault path
3.8.2 - 2021-07-14
- Decrypt partially encrypted sops files correctly
3.8.1 - 2021-06-12
- OUTPUT_DECRYPTED_FILE_PATH: parameter not set
3.8.0 - 2021-06-12
- New parameter
--output-decrypt-file-path
(HELM_SECRETS_OUTPUT_DECRYPTED_FILE_PATH
) that outputs the path of decrypted files only. HELM_SECRETS_DEC_PREFIX
variable in addition toHELM_SECRETS_DEC_SUFFIX
- New parameter
--version
- cygwin compatibility
HELM_SECRETS_DEC_SUFFIX
has been changed from.yaml.dec
to.dec
. Additionally, while append the suffix, the file extension.yaml
is not stripped anymore.- The detection of encrypted sops files has been changed. Instead, looking for
sops:
andversion:
, the stringunencrypted_suffix
is used now.
3.7.0 - 2021-05-22
- envsubst driver
- Output errors on stderr
3.6.1 - 2021-03-30
mktemp: too few X's in template
error on Mac OS if gnu coreutils preferred over builtin bsd tools.
3.6.0 - 2021-03-29
The default sops installation is removed, since helm-secrets could use with hashicorp vault which does not require sops.
- Detect ArgoCD environment by
ARGOCD_APP_NAME
environment variable and setHELM_SECRETS_QUIET=true
by default. (#83)
- Cleanup all temporary files.
- Sops installation
3.5.0 - 2021-02-20
- Added
--driver-args
to pass additional argument to underlying commands (#82)
- "grep: Invalid range end" if locale is not C (#81)
3.4.2 - 2021-02-19
- Dev: Rename
master
branch tomain
- "grep: Invalid range end" if locale is not C (#79)
3.4.1 - 2021-01-23
- Handling
--
inside command line arguments - Fix handling errors with remote files
- Strip yaml doc separator if vault driver is used (#70)
- Incompatibilities if sed links to gnu sed on Mac OS (#72)
3.4.0 - 2020-12-26
From this version, the installation on Helm 2 requires additional steps. Check README.md
- Implement alternate syntax (#52)
- Remote values support (supporting http:// and helm downloader plugins) (#54)
- Let downloader plugin supports remote files and all secrets drivers (#55)
- Externalize custom vault driver logic. (#63)
- Dev: Implement code coverage
- Dev: Test zsh compatibility
- Vault driver: If vault command failed, the script execution was not terminated. (#61)
3.3.5 - 2020-10-16
- Better lookup for unix shells on Windows (#42)
3.3.4 - 2020-09-09
- Allow overriding SOPS version on installation (#40)
- Add separat download artefact on github release
3.3.0 - 2020-08-28
- Don't check if file exists on edit (#31)
- Better Windows support (#28)
- Support parameters like --values=secrets.yaml (#34)
- Added CentOS 7 as supported OS system (#35)
3.2.0 - 2020-05-08
- Add Vault support (#22)
- Secret driver to gain secrets from other sources then sops. (#16)
- Remove name restriction (#23)
- Run unit tests on bash, dash and ash (busybox), too.
3.1.0 - 2020-04-27
- completion.yaml for helm shell auto completion
- Tests for all
helm secrets
commands - Added quiet flag for helm secrets (#8)
- Escape special chars in paths correctly (#9)
3.0.0 - 2020-04-26
Started a fork of https://github.com/zendesk/helm-secrets
- POSIX compatibility (#1)
- Optionally decrypt helm secrets in a temporary directory (#5)
- Added CI tests (#2)
- Changed secrets.yaml prefix just to
secrets
. All files likesecrets*
are now decrypted - Remove dependency against gnu-getops
- Remove run as root dependency on helm plugin install
- Verbose output is now on stderr
- Support all helm sub commands and plugins