Uploaded image for project: 'Helm'
  1. Helm
  2. HELM-343

Support TLS authentication for project helm chart repositories

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Undefined
    • 4.12
    • None
    • Helm
    • False
    • None
    • False
    • Hide
      Before this update, if you created an instance of `ProjectHelmChartRepository` custom resource (CR) that uses TLS verification, you cannot list the repositories and perform Helm-related operations. With this update, the user can create a TLS-supported `ProjectHelmChartRepository`. To do so the user must create the TLS secrets and certificate authority (CA) config map in the same namespace where the repository is getting instantiated.
      Show
      Before this update, if you created an instance of `ProjectHelmChartRepository` custom resource (CR) that uses TLS verification, you cannot list the repositories and perform Helm-related operations. With this update, the user can create a TLS-supported `ProjectHelmChartRepository`. To do so the user must create the TLS secrets and certificate authority (CA) config map in the same namespace where the repository is getting instantiated.
    • AppSvc Sprint 219, AppSvc Sprint 220, AppSvc Sprint 221, AppSvc Sprint 222, AppSvc Sprint 223

    Description

      Wrapper for bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=2071792

      This bug actually is a bit more complex as it needs to update the https://github.com/openshift/api/blob/master/helm/v1beta1/0000_10-project-helm-chart-repository.crd.yaml with a namespace field to be able to read the secret and config maps from a namespace of choice from the user with the right permissions. Right now we hardcode a namespace for the Cluster scoped HelmChartRepository CR however doing the same form namespace scoped ProjectHelmChartRepository does not allow for the more relaxed, project level permissions that we want with the feature.

      Attachments

        Issue Links

          blocks

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. HELM-341 Extend ProjectHelmChartRepository API to allow for basic auth credentials

          • Undefined - Priority not specified.
          • Closed
          relates to

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. RHDEVDOCS-4386 [H] Review of the Kartikey's content for the Release Notes Text of issue HELM-343

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Task - Represents a small unit of work that is not end-user facing. RHDEVDOCS-4221 Tracker for Bug 2071792 - Docs for user to access openshift-config ns to pull secret/CM for adding private HCR in a namespace

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed
          links to

          GitHub openshift/api#1202: Changes to project helm repository so as to read secret from namespace

          GitHub openshift/console#11571: Bug 2071792: Support namespace of choice for the user that wants to use TLS verification

          Activity

            People

              kmamgain@redhat.com Kartikey Mamgain
              dperaza@redhat.com David Peraza
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: