Skip to content

WIP: Add optional SOPS support for HelmRelease values#1474

Closed
SebTardif wants to merge 2 commits intofluxcd:mainfrom
SebTardif:copilot/implement-sops-handling-for-helmrelease
Closed

WIP: Add optional SOPS support for HelmRelease values#1474
SebTardif wants to merge 2 commits intofluxcd:mainfrom
SebTardif:copilot/implement-sops-handling-for-helmrelease

Conversation

@SebTardif
Copy link
Copy Markdown

@SebTardif SebTardif commented Apr 27, 2026

Context

This tracks the helm-controller side needed to fully address the use case discussed in fluxcd/flux2#4075.

Intended outcome

  • Allow opt-in SOPS handling for HelmRelease manifests containing top-level .sops metadata and encrypted ENC[...] values.
  • Ensure .sops metadata is not persisted to Kubernetes API objects.
  • Keep behavior backward-compatible and disabled by default.

Notes

  • Source branch is maintained in SebTardif/helm-controller: copilot/implement-sops-handling-for-helmrelease.
  • Implementation commits are being produced by a running GitHub Copilot coding-agent job and will update this PR automatically.

Acceptance criteria

  • Feature-gated/opt-in behavior implemented.
  • Unit and reconciliation tests for enabled and disabled paths.
  • Docs updated with configuration and security caveats.
  • No sensitive material in logs/output.

Copilot AI and others added 2 commits April 27, 2026 13:56
@SebTardif SebTardif closed this Apr 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants