Properly lock chart dependencies #326
Merged
luhahn
merged 2 commits from justusbunsi/helm-chart:dependency-hardening
into master
2 months ago
Loading…
Reference in new issue
There is no content yet.
Delete Branch 'justusbunsi/helm-chart:dependency-hardening'
Deleting a branch is permanent. It CANNOT be undone. Continue?
As mentioned in the Bitnami chart issue, they've created a git tag to
represent the latest full content
index.yaml
. This should be usedinstead of a commit that could be changed.
https://github.com/bitnami/charts/issues/10539#issuecomment-1152641771
I've also removed the
Chart.lock
file from the ignore list. This fileensures correct dependency retrieval when using
helm dependency build
.https://helm.sh/docs/helm/helm_dependency_build/#helm-dependency-build
Signed-off-by: justusbunsi sk.bunsenbrenner@gmail.com
LGTM
0172a59889
into master 2 months agoReviewers
0172a59889
.