arkade icon indicating copy to clipboard operation
arkade copied to clipboard

Notice: the stable Helm charts have been deprecated, new alternatives are required

Open alexellis opened this issue 3 years ago • 21 comments

What happened

This is a notice that the stable Helm chart repo has been deprecated and the maintainers have deleted all artifacts for helm charts.

Impact

If you are relying on any charts in the stable repository, you can no longer build new systems or use your applications.

This means you will have to responsibly source an alternative, or fork the stable repository and maintain it yourself. When I say "responsibly source" that means do not just trust a third-party fork of a component you need, it's very easy for someone to deploy malicious code to your cluster that way.

Workarounds

As per https://helm.sh/docs/faq/#i-am-getting-a-warning-about-unable-to-get-an-update-from-the-stable-chart-repository

The stable repo can be used as read-only with previously published versions:

$ helm repo add stable https://charts.helm.sh/stable --force-update 
$ helm install stable/docker-registry

Affected apps

Various Arkade apps used the stable helm chart repo to deploy software to your cluster, where possible third-party projects have already moved to their own chart repositories such as Ingress-Nginx. OpenFaaS for instance has always used its own repository and is not affected.

The following charts will have to be removed as apps, or re-sourced from upstream trusted publishers:

  • grafana
  • jenkins
  • kube-state-metrics
  • minio
  • mongodb
  • nfs-client-provisioner
  • postgres
  • docker-registry #273
  • sealed-secrets

All other apps either use: a manifest or a CLI to install, and will not be affected.

If you are a user of arkade and need help, feel free to pitch in.

If you are the maintainer of the stable helm repo, perhaps this could have been communicated better? It was not clear that all artifacts were going to be immediately deleted. The mirror that was put up is also giving 404 errors, so that may need investigating too.

alexellis avatar Nov 15 '20 11:11 alexellis

To be clear, the artifacts have not been deleted, they are hosted indefinitely, sponsored by GitHub. There was a short blip where paths had a typo only for the most recent version. This has been fixed in https://github.com/helm/charts/pull/24424

The chart’s repo is read only, but artifacts are evergreen.

Please join the ongoing initiative to move continuing development of chart source code to new repos: https://github.com/helm/charts/issues/21103

scottrigby avatar Nov 16 '20 03:11 scottrigby

Thank you for the fix, that's appreciated and takes off some immediate pressure for us.

Jenkins has moved here -> https://github.com/jenkinsci/helm-charts

Folks, feel free to post links to the above charts and where they have moved to.

alexellis avatar Nov 16 '20 13:11 alexellis

Grafana is available here -> https://github.com/grafana/helm-charts

alexellis avatar Nov 16 '20 13:11 alexellis

@nitishkumar71 and @yankeexe would you be able to help with this?

alexellis avatar Nov 19 '20 11:11 alexellis

Minio is available here -> https://github.com/minio/charts

nitishkumar71 avatar Nov 19 '20 13:11 nitishkumar71

@alexellis Do you think, we can use https://github.com/bitnami/charts/tree/master/bitnami for mongo, postgres, sealed secrets(in future) and few other applications in future. As this chart repo will guarantee stability in future.

No upstream found for mongo(found for operator) and postgres.

nitishkumar71 avatar Nov 19 '20 14:11 nitishkumar71

I've linked to upstream. We should always prefer upstream to Bitnami where available

alexellis avatar Nov 19 '20 15:11 alexellis

@alexellis I could not find any upstream repo for the remaining apps.

nitishkumar71 avatar Nov 21 '20 11:11 nitishkumar71

I sent links for Grafana and Jenkins, and you found a link for Minio. Can you start with those?

alexellis avatar Nov 23 '20 09:11 alexellis

should we also upgrade them to new app style?

nitishkumar71 avatar Nov 24 '20 02:11 nitishkumar71

Yes go ahead please

alexellis avatar Nov 24 '20 09:11 alexellis

@alexellis would you mind changing the title of this issue? It's still concerning to people who see it but don't read the comments. If you don't mind. thank you!

scottrigby avatar Nov 24 '20 13:11 scottrigby

@scottrigby if that's the case, can you confirm why we're still seeing this error being reported by users?

 arkade install docker-registry
Using kubeconfig: 
Using Kubeconfig: /home/alex/.kube/config
Client: x86_64, Linux
2020/12/04 14:26:16 User dir established as: /home/alex/.arkade/
"stable" has been added to your repositories

Error: failed to fetch https://charts.helm.sh/stable/docker-registry-1.9.6.tgz : 404 Not Found
Error: exit code 1

alexellis avatar Dec 04 '20 14:12 alexellis

Hi @alexellis I just answered this at https://github.com/helm/charts/pull/24424#issuecomment-739008540

scottrigby avatar Dec 04 '20 20:12 scottrigby

/set title: Notice: the stable Helm charts have been deprecated, new alternatives are required

alexellis avatar Dec 04 '20 21:12 alexellis

Thank you so much @scottrigby - I've updated the title.

alexellis avatar Dec 04 '20 21:12 alexellis

Only need 1 more to go: Mongodb, I think the bitnami chart should be fine there, because Mongodb now uses operators as their offical chart, so it is nowhere close to 1:1 feature parity.

Shikachuu avatar Jul 08 '22 16:07 Shikachuu

Thank you @Shikachuu for taking these on.

Since this is really about apps for local development, I think that the Bitnami chart would be fine.

alexellis avatar Jul 12 '22 08:07 alexellis

Bitnami images doesn't support ARM arch and they don't have any plan to fix this. https://github.com/bitnami/charts/issues/7305

saggiyogesh avatar Jan 02 '23 11:01 saggiyogesh

I was already aware of that.

Which chart does that affect that needs to be updated @saggiyogesh ?

Do you have an alternative that you prefer?

alexellis avatar Jan 18 '23 16:01 alexellis

@nitishkumar71 the new minio link you added is not available, new issue submitted to fix the repo chart #1012

elyesbenamor avatar Jan 08 '24 10:01 elyesbenamor