goharbor/harbor-helm

Registry Secret causes changes on every apply

darend opened this issue · 3 comments

issue

Every time helm diff or helm sync is run changes are shown even if no config changes we made

background

The registry secret generates a random password inline:

REGISTRY_HTTP_SECRET: {{ randAlphaNum 16 | b64enc | quote }}

Similarly with the notary certificates:

{{ $cert := genSignedCert (include "harbor.notary-signer" .) nil nil 365 $ca }}

Yes, the secret and certificate are used to secure the communication between the internal components, they are both generated automatically.

Any side effect do you get with them?

Any side effect do you get with them?

We use helm diff to show changes that would be applied and have automation to roll things out. It just makes the diff a little harder to parse as you need to know to ignore these changes.

As a feature request, perhaps allow these to be provided when installing the chart