✨ (helm/v2-alpha): add extra volumes support

[camilamacedo86]

Support manager.extraVolumes and manager.extraVolumeMounts: extract from kustomize (excluding webhook-certs/metrics-certs), inject into values when present, and template in manager deployment (including when volumes: []). Document in Helm v2-alpha plugin page.

Closes: #5485

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: camilamacedo86

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [camilamacedo86]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[asergeant01]

To clarify this point, if they are defined in the kustomize output, other than metrics-certs and web hook-certs, the values are extracted and added to the values?

I would have expected them to be added into the chart template and not the values. As any further additions would require the plugin to be run with --force.

[camilamacedo86]

To clarify this point, if they are defined in the kustomize output, other than metrics-certs and web hook-certs, the values are extracted and added to the values?

Yes.

I would have expected them to be added into the chart template and not the values. As any further additions would require the plugin to be run with --force.

Yes, that is how it is. To update the values you need to run the force.
We cannot update the values without force otherwise it would lost the customizations.

[asergeant01]

I think you missed my point or I didn't articulate myself very well.

I think if the volumes are defined in kustomize, they should be added directly to the template and NOT to the values.yaml

The values.yaml should only be for additional volumes IMO.

[camilamacedo86]

I think if the volumes are defined in kustomize,

All should be defined in the kustomize.
They are the source of truth.
The Helm Chart is just a way to package the solution in this format.
It should not deviate from the project config, and we should not add anything in the Helm charts. It only package the project for this format.

[asergeant01]

My example:

# config/manager/manager.yaml (or a kustomize patch)
spec:
  template:
    spec:
      volumes:
        - name: app-secret-1
          secret:
            secretName: app-secret-1

# dist/chart/values.yaml
manager:
  extraVolumes:
    - name: app-secret-1
      secret:
        secretName: app-secret-1

# dist/chart/templates/deployment.yaml (snippet)
spec:
  template:
    spec:
      volumes:
        {{- if .Values.manager.extraVolumes }}
        {{- toYaml .Values.manager.extraVolumes | nindent 8 }}
        {{- end }}

Lets say the maintainer makes modifications to the values.yaml file but also adds another volume to the config....

# config/manager/manager.yaml (or a kustomize patch)
spec:
  template:
    spec:
      volumes:
        - name: app-secret-1
          secret:
            secretName: app-secret-1
        - name: app-secret-2
          secret:
            secretName: app-secret-2

The only way to have that new volume in the chart is either add it manually to the values.yaml or re-run kubebuilder edit --plugins=helm/v2-alpha --force which would overwrite any manual changes.

What I am saying is, I believe the generated template should be:

# dist/chart/templates/deployment.yaml (snippet)
spec:
  template:
    spec:
      volumes:
        - name: app-secret-1
          secret:
            secretName: app-secret-1
        - name: app-secret-2
          secret:
            secretName: app-secret-2
        {{- if .Values.manager.extraVolumes }}
        {{- toYaml .Values.manager.extraVolumes | nindent 8 }}
        {{- end }}

[camilamacedo86]

Hi @asergeant01

Let me know if the changes in place address your request.

[asergeant01]

@camilamacedo86 I didn't test it, but it certainly looks like it addresses the request. Thank you

[Copilot]

Pull request overview

Adds support for manager.extraVolumes and manager.extraVolumeMounts in the Helm v2-alpha plugin, allowing users to mount additional volumes (e.g., secrets) in the manager deployment without modifying chart templates directly.

Changes:

• Extract extra volumes/mounts from kustomize deployment config (excluding webhook-certs/metrics-certs) and inject them into values.yaml
• Template the manager deployment to conditionally render extraVolumes and extraVolumeMounts from values
• Document the feature in the Helm v2-alpha plugin docs

Reviewed changes

Copilot reviewed 8 out of 12 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
pkg/plugins/optional/helm/v2alpha/scaffolds/internal/kustomize/chart_converter.go	Extract extra volumes/mounts from deployment, filtering out webhook/metrics certs
pkg/plugins/optional/helm/v2alpha/scaffolds/internal/kustomize/helm_templater.go	New appendToListFromValues to inject extra volumes/mounts template blocks
pkg/plugins/optional/helm/v2alpha/scaffolds/internal/templates/values_basic.go	Add extraVolumeMounts/extraVolumes sections to values when config has extras
pkg/plugins/optional/helm/v2alpha/scaffolds/internal/kustomize/chart_writer.go	Minor comment removal
pkg/plugins/optional/helm/v2alpha/scaffolds/internal/kustomize/chart_converter_test.go	Tests for volume extraction with filtering
pkg/plugins/optional/helm/v2alpha/scaffolds/internal/kustomize/helm_templater_test.go	Tests for template injection in various scenarios
pkg/plugins/optional/helm/v2alpha/scaffolds/internal/templates/values_basic_test.go	Tests for values generation with extra volumes
docs/book/src/plugins/available/helm-v2-alpha.md	Document extra volumes feature
testdata/project-v4-with-plugins/dist/chart/templates/manager/manager.yaml	Updated testdata template
docs/book/src/*/testdata/project/dist/chart/templates/manager/manager.yaml	Updated tutorial testdata templates

---

You can also share your feedback on Copilot code review. Take the survey.