惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

C
Cisco Blogs
Schneier on Security
Schneier on Security
T
Tor Project blog
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
T
Tenable Blog
C
Cyber Attacks, Cyber Crime and Cyber Security
T
Threat Research - Cisco Blogs
C
CERT Recently Published Vulnerability Notes
Security Latest
Security Latest
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
NISL@THU
NISL@THU
L
Lohrmann on Cybersecurity
Scott Helme
Scott Helme
Webroot Blog
Webroot Blog
Project Zero
Project Zero
Google Online Security Blog
Google Online Security Blog
The Last Watchdog
The Last Watchdog
Spread Privacy
Spread Privacy
Hacker News: Ask HN
Hacker News: Ask HN
PCI Perspectives
PCI Perspectives
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
W
WeLiveSecurity
Attack and Defense Labs
Attack and Defense Labs
D
Darknet – Hacking Tools, Hacker News & Cyber Security
N
News | PayPal Newsroom
Help Net Security
Help Net Security
The Hacker News
The Hacker News
H
Heimdal Security Blog
O
OpenAI News
S
Security @ Cisco Blogs
N
News and Events Feed by Topic
Cyberwarzone
Cyberwarzone
Simon Willison's Weblog
Simon Willison's Weblog
G
GRAHAM CLULEY
www.infosecurity-magazine.com
www.infosecurity-magazine.com
博客园 - 叶小钗
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
Hacker News - Newest:
Hacker News - Newest: "LLM"
T
Tailwind CSS Blog
大猫的无限游戏
大猫的无限游戏
A
Arctic Wolf
I
Intezer
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
S
Security Affairs
P
Proofpoint News Feed
S
Secure Thoughts
腾讯CDC
Google DeepMind News
Google DeepMind News
量子位
罗磊的独立博客

Helm Blog

Helm 3 End of Life Security Notice: Former Helm APT Mirror Domain `baltocdn.com` Statement Helm 4 Released Helm @ KubeCon + CloudNativeCon NA '25 Helm Turns 10 Path To Releasing Helm v4 Debian/Ubuntu Helm Apt Repository Move Helm @ KubeCon + CloudNativeCon EU '25 Experience a Helm Release: Live at KubeCon + CloudNativeCon North America 2024! Helm at KubeCon/CloudNativeCon SLC Helm 2to3 is Now Unsupported The Road to Helm 4 Response To CVE-2019-25210 The Helm OCI MediaTypes Helm Completes Fuzzing Security Audit Helm welcomes yxxhero as our newest helm-www repo maintainer Helm @ KubeCon + CloudNativeCon NA '22 Tools You Can Use To Manage Your Helm Releases Declaratively Storing Helm Charts in OCI Registries Karen Chu Joins Helm Org Maintainers Martin Hickey Joins Helm Org Maintainers
Helm 3.13
Matt Farina · 2023-09-29 · via Helm Blog

Helm 3.13 brings some significant and useful changes for Helm users. This ranges from longtime bugs being fixed to some new features that can have an impact on performance.

Dry-run & Template Can Connect To Servers

The dry-run feature on install and upgrade, and Helm template has not been able to communicate with Kubernetes servers. This is for security and because Helm template was designed for template rendering alone.

With Helm 3.13, there is now an opt-in option to communicate with Kubernetes by setting --dry-run=server. This tells Helm to communicate with the server for gathering information but not to perform updates. This flag also works on helm template. If you use --dry-run without setting a value it works as it did before.

Helm SDK users will find a new property, named DryRunOption, that allows you to tell the SDK to communicate with the server.

Values Handling Improvements

Values handling has had a number of bugs filed about it. For example, importing values was inconsistent. Some of the handling even depended on ordering. Using null to remove properties was inconsistent, too. It worked in some cases but not others. That's fixed in Helm 3.13.

The order you can expect for a value to be used is:

  1. User specified values (e.g CLI)
  2. Imported values from dependencies
  3. Parent chart values
  4. Sub-chart values

JSON Indexes

Helm repositories have an index in YAML containing details about the charts and versions of charts it contains. When this file grows large it can be expensive (e.g., processing time and memory) to parse. This is in part because YAML has anchors and aliases which are handy but cause more work to deal with.

Those index.yaml files can now contain JSON instead of YAML. Helm will generate them when the --json flag is set. The index.yaml file is used so the same file location can continue to be used for backwards compatibility. The structure for the data is the same. Helm going all the way back to 3.0.0 can handle parsing index.yaml files with JSON instead of YAML.

Tests were run on very large indexes to look at the perform difference. The results found that:

  • Helm 3 versions before 3.13:
    • Parsed JSON in ~80% the time of parsing YAML
    • Used ~93% the memory parsing JSON compared to YAML
  • Helm 3.13+, with special case handling to detect and handle JSON:
    • Parsed JSON in ~13% the time of parsing YAML
    • Used ~5% the memory parsing JSON compared to YAML

helm get provides the ability to get information about a release in a cluster. It has been able to get values, notes, hooks, and the generated manifests. In addition to those it can now get information about the metadata of the chart the release is based on.

To illustrate this, I installed WordPress and retrieved the metadata:

$ helm get metadata wp

NAME: wp

CHART: wordpress

VERSION: 17.1.13

APP_VERSION: 6.3.1

NAMESPACE: default

REVISION: 1

STATUS: deployed

DEPLOYED_AT: 2023-09-28T16:28:30-04:00

And More...

These are just some of the highlights. Helm 3.13 includes even more features. You can read the details in the release notes.