Skip to content

[VC-48429] Helm chart updates for encrypted secrets#783

Merged
SgtCoDFish merged 4 commits intomasterfrom
chart-update
Mar 5, 2026
Merged

[VC-48429] Helm chart updates for encrypted secrets#783
SgtCoDFish merged 4 commits intomasterfrom
chart-update

Conversation

@SgtCoDFish
Copy link
Contributor

Adds a terms and conditions notice from @achuchev

$ helm template foo ./deploy/charts/disco-agent
Error: execution error at (disco-agent/templates/deployment.yaml:2:6):

=================================================================
                Terms & Conditions Notice
=================================================================

Before installing this application, you must review and accept
the terms and conditions available at:
https://www.cyberark.com/contract-terms/

To proceed with installation, you must indicate acceptance by
setting:

  - In your values file: acceptTerms: true
  or
  - Via the Helm flag: --set acceptTerms=true

By continuing with the next command, you confirm that you have
reviewed and accepted these terms and conditions.

=================================================================

Signed-off-by: Ashley Davis <ashley.davis@cyberark.com>
@SgtCoDFish SgtCoDFish force-pushed the chart-update branch 3 times, most recently from f4d0c2e to 2ed683a Compare March 3, 2026 15:45
Comment on lines +56 to +57
// TODO: When standardised, consider using secret.Do to wrap this call, since it will generate an AES key
// (see https://pkg.go.dev/runtime/secret)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

self-review: this comment update is unrelated but I wanted to clarify it. secret.Do is behind GOEXPERIMENT in 1.26 and I didn't want to open that can of worms.

Copy link
Contributor

@FelixPhipps FelixPhipps left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Mostly comments and small changes, can't find any fault or cause for concern here 👍

@SgtCoDFish SgtCoDFish force-pushed the chart-update branch 2 times, most recently from d3028d2 to e0361aa Compare March 4, 2026 15:17
This adds a new environment variable to skip running live tests unless explicitly opted in

Signed-off-by: Ashley Davis <ashley.davis@cyberark.com>
We're seeing flakes and bugs in the version detection logic
in the backend, which has caused our tests to break a few times.

Instead, let's send an explicit request for sigv4 to avoid the
version logic

Signed-off-by: Ashley Davis <ashley.davis@cyberark.com>
Enables secret sending by default when ToS is accepted.

Also adds acceptTerms validation, which causes the chart to error out if
the value is not set.

The error looks like this:

```console
$ helm template foo ./deploy/charts/disco-agent
Error: execution error at (disco-agent/templates/deployment.yaml:2:6):

=================================================================
                Terms & Conditions Notice
=================================================================

Before installing this application, you must review and accept
the terms and conditions available at:
https://www.cyberark.com/contract-terms/

To proceed with installation, you must indicate acceptance by
setting:

  - In your values file: acceptTerms: true
  or
  - Via the Helm flag: --set acceptTerms=true

By continuing with the next command, you confirm that you have
reviewed and accepted these terms and conditions.

=================================================================
```

Signed-off-by: Ashley Davis <ashley.davis@cyberark.com>
@SgtCoDFish SgtCoDFish merged commit 9c7baf7 into master Mar 5, 2026
4 checks passed
@SgtCoDFish SgtCoDFish deleted the chart-update branch March 5, 2026 09:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants