helm private repos aren't working

[Brightside56]

With fresh versions of kargo-render (which started to use ArgoCD repo server for rendering helm) - helm private repos aren't working anymore (kargo credentials same as ArgoCD credentials borrowing). To make it working with repo server - kargo-render should most probably pass credentials and allowed sources here

kargo-render/internal/argocd/render.go

Line 114 in 1bdf2f6

res, err := repository.GenerateManifests(

as part of ManifestRequest object, otherwise repo server doesn't know which credentials to use or where to get them

[krancour]

@Brightside56 the changes from #201 were released today in v0.1.0-rc.34.

Did those improvements somehow fix this for you in a way I wasn't anticipating?

[Brightside56]

@krancour oops, sorry, I'll re-open it, those changes make helm working again generally, but not private repos

[krancour]

Thanks @Brightside56. I sensed this may have been closed in error. Glad I checked.

[krancour]

Kargo proper recently did something about this in akuity/kargo#1977

It does a helm login for each repo referenced in a subchart (if matching credentials are found) prior to doing things like helm chart build.

We could take a similar approach here and do helm login for each of n provided chart repo credentials before delegating rendering to the repo server.

This leaves the main question as one of how to pass multiple helm chart repo credentials to kargo render securely without it being a terrible UX.