Helm plugins are add-on tools that integrate seamlessly with Helm. They provide a way to extend the core feature set of Helm. Therefore, Datree's Helm plugin can be accessed through the helm CLI, to provide a seamless experience to Helm users.
You can pass CLI arguments normally. For example:
To pass helm arguments to your template, you will need to add -- before them:
Helm might be installed through other tooling like microk8s. The DATREE_HELM_COMMAND allows specifying a command to run helm (default is helm):
This error occurs when trying to scan Chart.yaml or values.yaml files instead of the chart directory.
Solution: Pass the helm chart directory path to Datree's CLI, instead of to the file itself:
The best way to determine if a false-positive result is a bug or a true misconfiguration, is by rendering the Kubernetes manifest with helm and then checking it manually:
If after eyeballing the rendered manifest you still suspect it's a bug, please open an issue here.
When running the Helm plugin in the CI, you will need to connect the plugin to your configured policy. To do that, you will need to add your account token as an environment variable or include it when calling the Datree CLI.