The latest release of Helm, a popular package manager for Kubernetes, is buzzing in the tech community, bringing exciting enhancements and fixes that promise to boost efficiency and security. Version 3.7.1, released in April 2022, introduces several notable features that every DevOps engineer and Kubernetes aficionado should be aware of.
Helm 3.7.1 beefs up the security quotient by adding support for Mutual TLS authentication. This feature enhances the security of communication between Tiller (Helm's server-side component) and the users' client, ensuring your deployments are safer than ever.
Enhanced Secrets Management
One of Helm 3.7.1's standout features is its improved secrets management. The new release embraces Bitnami's Sealed Secrets, enabling secure secret storage and distribution. Now, sensitive data is encrypted twice - at rest and in transit - ensuring an extra layer of security for your critical information.
To leverage Sealed Secrets, you'll need to create a Sealed Secret of your sensitive data, typically a password or API key. Helm then decrypts and uses this data when needed, keeping everything secure and under your control.
Sealed Secret Creation
To create a Sealed Secret, use the Bitnami Sealed Secrets controller. Here's a simple example:
kubectl create secret generalized --name <SECRET_NAME>
This command generates a sealed secret that you can safely store until needed.
Sealed Secret Usage with Helm
Now, to use this Sealed Secret with Helm, you'll need to supply it via the `--set` flag when installing or upgrading your chart. Here's an example:
helm upgrade <RELEASE_NAME> my-repository/my-chart --set <SECRET_KEY>=<SEALED_SECRET_VALUE>
Improved Chart Testing
Version 3.7.1 takes progressive steps towards simplifying chart development with improved testing capabilities. It introduces a new `helm India test` command, which validates your chart against a list of pre-defined criteria, ensuring it meets best practices and is ready for release.
The `helm India test` command checks your chart for common issues, such as syntax errors, missing files, and broken dependencies. Pass this test with confidence to ensure your charts are ready to deploy in production.
Basic Chart Test
To run a basic chart test, use the following command:
helm test my-release --namespace <NAMESPACE>
Advanced Chart Test
For more advanced tests, you can use the following command to generate a report of all detected issues:
helm insights generate <CHART_PACKAGE)> <REPORT_PATH>
The latest Helm release packs a punch with its robust enhancements, keeping pace with the ever-evolving Kubernetes landscape. With its commitment to security, improved secrets management, and better chart testing, Helm 3.7.1 is a natural electricity in your Kubernetes tool belt, ready to power your next deployment. Embrace the change and upgrade today!