fix: Remove fromToml dependency for Helm 3.12+ compatibility

This commit fixes issue #7775 by removing the fromToml function which
is only available in Helm 3.14+. The changes ensure compatibility with
Helm 3.12 and later versions.

Changes:
- Removed fromToml function from security-configmap.yaml
- Simplified JWT key generation to use randAlphaNum directly
- Updated Chart.yaml to specify minimum kubeVersion (1.25.0-0)
- Added Prerequisites section to README.md documenting version requirements
- Enhanced helm_ci.yml with additional security configuration tests

Fixes #7775
This commit is contained in:
Chris Lu committed 2026-01-16 11:42:21 -08:00
1 parent ee3813787e
commit f67c5aa07f
4 files changed
+38 -7

No files matched your search

+23
View File
@@ -66,8 +66,31 @@ jobs:
echo "=== Testing with security enabled ==="
helm template test $CHART_DIR --set global.enableSecurity=true > /tmp/security.yaml
grep -q "security-config" /tmp/security.yaml
# Validate JWT signing keys are generated
grep -q "jwt.signing" /tmp/security.yaml
grep -q 'key = "' /tmp/security.yaml
echo "✓ Security configuration renders correctly"
echo "=== Testing with all security features enabled ==="
helm template test $CHART_DIR \
--set global.enableSecurity=true \
--set global.securityConfig.jwtSigning.volumeWrite=true \
--set global.securityConfig.jwtSigning.volumeRead=true \
--set global.securityConfig.jwtSigning.filerWrite=true \
--set global.securityConfig.jwtSigning.filerRead=true > /tmp/security-full.yaml
# Validate all JWT keys are present
grep -q "jwt.signing" /tmp/security-full.yaml
grep -q "jwt.signing.read" /tmp/security-full.yaml
grep -q "jwt.filer_signing" /tmp/security-full.yaml
grep -q "jwt.filer_signing.read" /tmp/security-full.yaml
# Count that we have 4 JWT keys generated
KEY_COUNT=$(grep -c 'key = "' /tmp/security-full.yaml)
if [ "$KEY_COUNT" -ne 4 ]; then
echo "❌ Expected 4 JWT keys, found $KEY_COUNT"
exit 1
fi
echo "✓ All security features render correctly with 4 JWT keys"
echo "=== Testing with monitoring enabled ==="
helm template test $CHART_DIR \
--set global.monitoring.enabled=true \