Adnan Abdulhussein

Support for AWS MSK IAM authorization

40

Hi! We are looking at using Strimzi to deploy Kafka Connect clusters using Kafka brokers deployed using Amazon MSK. We'd like to use MSK's IAM feature for access control within...

Support configuring values.toml values using arguments to helm install or generate

1

We feel there are currently a lot of steps in current workflow: fetching a chart, editing `values.toml`, generating and installing. A potential idea to improve this could be to allow...

Error if repo source missing

1

``` Subscriber.js:227 Uncaught TypeError: Cannot read property 'match' of undefined at t.maintainerUrl (chart-details-info.component.ts:53) at e.detectChangesInternal (chart-details-info.component.ngfactory.ts:313) at e.t.detectChanges (view.js:425) at t.detectChangesInNestedViews (view_container.js:67) at e.detectChangesInternal (chart-details-info.component.ngfactory.ts:607) at e.t.detectChanges (view.js:425) at e.t.internalDetectChanges...

chart-repo: panics when there are no charts to import

1

First reported on Slack (https://kubernetes.slack.com/archives/C9D3TSUG4/p1550784319000900), it looks like if https://github.com/helm/monocular/blob/v1.2.0/cmd/chart-repo/utils.go#L100 comes back with an empty list (if there are no entries in the index.yaml, or all charts are deprecated), then...

Some chart repositories might contain duplicate charts that exist in other repositories. One example of this is the Bitnami charts repository, which syncs several charts from the Helm stable repository....

See https://github.com/kubernetes/kubernetes/issues/61297, the solution is to use https://github.com/cyphar/filepath-securejoin to ensure the path is within context. Issue is in https://github.com/kubernetes-helm/monocular/blob/8c4657befc836badf3a717c4cb215768b0671e28/src/api/data/cache/charthelper/chart_package_helper.go#L205 See fix in Helm: https://github.com/kubernetes/helm/pull/3898

Make API server stateless: move chart data to MongoDB

3

Currently chart data is stored in memory and fetched via a goroutine at some interval. This is problematic because: - data is not shared between replicas of the Monocular API...

This function manages a chart repository using a Minio bucket, it automatically indexes the charts when chart packages are uploaded to the bucket.

Next steps

2

After talking with @technosophos on Slack, it became clear to us that what we're trying to do here leads to some awkward configurations for more complex charts (e.g. see the...

CI builds are failing currently, likely due to dependency tooling changes