useHelmSecrets not decrypting on render
panbanda opened this issue · comments
Expected behavior
skaffold render
should produce the same output as skaffold up
for secrets that are used with useHelmSecrets: true
Actual behavior
skaffold render
does not decrypt the secret, skaffold up
does decrypt the secret
Information
Demo repo here:
https://github.com/panbanda/skaffold-helm-secrets-issue
Steps to reproduce the behavior
# Install SOPS sample gpg key
gpg --import pgp/sops_test_key.asc
# Encrypted with
sops -e -i secrets.yaml
# Decrypted with
sops -d -i secrets.yaml
# Skaffold dev puts the secret in container decrypted
# ie: test
skaffold dev
# Skaffold render creates a kube secret manifest with encrypted string
# ie: ENC[AES256_GCM,data:SyyH6w==,iv:CbNC...
skaffold render
Thanks @panbanda. I am not aware or skaffold up
do yo mean skaffold dev
?
I have the same issue. Skaffold render shows all the secrets as encrypted. Can this be fixed? Ideally useHelmSecrets
would have had them decrypted.
Can anyone from the skaffold team chime in?
@aaron-prindle @tejal29 If someone could point me to where the change needs to happen, I could also give it a shot. Is there anyone around that would know?
Thanks @ericzzzzzzz !