https://cybertoolchain.io/tools/helm-secrets New releases and features in helm-secrets, tracked by The Cyber Toolchain. en Mon, 11 Mar 2024 00:00:00 GMT https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md Mon, 11 Mar 2024 00:00:00 GMT helm-secrets 4.6.0 adds a custom backend example for the 1Password CLI • Adds `examples/backends/onepassword.sh` as a new custom backend reference for the 1Password CLI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/helm-secrets https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md Sat, 18 Feb 2023 00:00:00 GMT helm-secrets v4.3.0 adds template evaluation with vals, per-value-file backend override, and allowed backends env var • Adds `--evaluate-templates` flag to enable evaluating secret references in Helm templates via the `vals` backend • Allows overriding the secret backend on a per-value-file basis • Adds `HELM_SECRETS_ALLOWED_BACKENDS` environment variable to restrict which backends can be used Full history on Cyber Toolchain: https://cybertoolchain.io/tools/helm-secrets https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md Tue, 08 Nov 2022 00:00:00 GMT helm-secrets 4.2.0 adds --ignore-missing-values flag and ? prefix for silent file-not-found handling • Supports skipping missing value files by prefixing the path with `?`. • Adds scoop support for shell installation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/helm-secrets https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md Tue, 20 Sep 2022 00:00:00 GMT helm-secrets 4.1.0 adds literal vals support via --set-file secrets+literal:// • Adds `secrets+literal://` downloader syntax to support inline secret references in `--set-file` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/helm-secrets https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md Sun, 11 Sep 2022 00:00:00 GMT helm-secrets 4.0 adds --set-file decryption support and renames commands to encrypt/decrypt with stdout output • Adds support for decrypting files defined via `--set-file`. • Changes `decrypt` and `encrypt` commands to write results to stdout by default; adds `-i` flag for in-line encryption/decryption. Breaking changes: • The `helm secrets dec` command is renamed to `helm secrets decrypt`. • The `helm secrets enc` command is renamed to `helm secrets encrypt`. • The `decrypt` and `encrypt` commands now write results to stdout instead of files by default. • Custom integrations using shell functions containing `driver` must rename them to `backend` (e.g., `driver_encrypt_file` to `backend_encrypt_file`). • CLI arguments `--driver`, `-d`, and `--driver-args` are renamed to `--backend`, `-b`, and `--backend-args`. • Environment variables `HELM_SECRETS_DRIVER` and `HELM_SECRETS_DRIVER_ARGS` are renamed to `HELM_SECRETS_BACKEND` and `HELM_SECRETS_BACKEND_ARGS`. • The `helm secret clean` command is removed. • The `helm secret terraform` command is removed; use `helm secret decrypt --terraform` instead. • The `helm secret view` command is removed; use `helm secret decrypt` instead. • The `vault`, `envsubst`, and `droppler` drivers are removed. • The `sops://` protocol handler is removed. • The `secret://` protocol handler is removed. • The parameter `--output-decrypt-file-path` (and its env var `HELM_SECRETS_OUTPUT_DECRYPTED_FILE_PATH`) is removed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/helm-secrets https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md Mon, 06 Jun 2022 00:00:00 GMT helm-secrets v3.14.0 adds Windows support for vals and protocol handling with SOPS_GPG_EXEC env var • Adds `vals` support on Windows, enabling encrypted secret management via Vals expressions in Helm charts • Enables protocol handling on Windows requiring `helm secrets patch windows` command execution Breaking changes: • Defaults now prefer gpg4win over other GPG installations; use `SOPS_GPG_EXEC=gpg` to restore previous GPG binary selection behavior Full history on Cyber Toolchain: https://cybertoolchain.io/tools/helm-secrets https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md Thu, 03 Feb 2022 00:00:00 GMT helm-secrets 3.12.0 adds Terraform integration and new env vars for value file path traversal security controls • Adds `HELM_SECRETS_VALUES_ALLOW_SYMLINKS` environment variable to control whether symlinked value files are followed. • Adds `HELM_SECRETS_VALUES_ALLOW_ABSOLUTE_PATH` environment variable to control whether absolute value file paths are permitted. • Adds `HELM_SECRETS_VALUES_ALLOW_PATH_TRAVERSAL` environment variable to control whether `dot-dot-slash` (path traversal) value file paths are permitted. • Enables parsing of `.netrc` for HTTP-based values, overridable via the `NETRC` environment variable. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/helm-secrets https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md https://github.com/jkroepke/helm-secrets/blob/HEAD/CHANGELOG.md Fri, 05 Nov 2021 00:00:00 GMT helm-secrets 3.10.0 adds age support for downloader plugin syntax • Adds `age` encryption support for the downloader plugin syntax Full history on Cyber Toolchain: https://cybertoolchain.io/tools/helm-secrets