terraform helm 释放和 kyverno

Question

我无法让

version

在

helm_release

中工作，以针对

kyverno

进行地形改造，我已经尝试过“v1.7.4”和“1.74”，当我将其关闭时，它会部署

v1.7.4

，没问题。它期望输入什么，所以我使用的版本被锁定？ https://github.com/kyverno/kyverno/tree/v1.7.4

错误：

chart "kyverno" version "v1.7.4" not found in https://kyverno.github.io/kyverno/ repository, same for "1.7.0"

resource "helm_release" "kyverno" {
  name       = "kyverno"
  chart      = "kyverno"
  repository = "https://kyverno.github.io/kyverno/"
  **# version          = "v1.7.4"**
  namespace        = "kyverno"
  create_namespace = true
  values = [
    file("./manifests/kyverno/helm/values.yaml")
  ]
  set {
    name  = "replicaCount"
    value = 1
  }
  set {
    name  = "namespace"
    value = "kyverno"
  }
}

Answer 1

您需要使用官方的Helm图表版本，而不是应用程序版本。验证这一点的方法是首先在本地安装 Helm 存储库：

helm repo add kyverno https://kyverno.github.io/kyverno/

然后搜索存储库：

> helm search repo kyverno
NAME                        CHART VERSION   APP VERSION DESCRIPTION                                       
kyverno/kyverno             v2.5.4          v1.7.4      Kubernetes Native Policy Management               
kyverno/kyverno-crds        v2.0.3          v1.4.3      Kubernetes Native Policy Management CRDs          
kyverno/kyverno-policies    v2.5.5          v1.7.3      Kubernetes Pod Security Standards implemented a...

如您所见，您实际上正在寻找图表版本

v2.5.4

。引用图表版本的正确方法是不带

v

，因此您需要：

resource "helm_release" "kyverno" {
  name             = "kyverno"
  chart            = "kyverno"
  repository       = "https://kyverno.github.io/kyverno/"
  version          = "2.5.4"
  namespace        = "kyverno"
  create_namespace = true
  values = [
    file("./manifests/kyverno/helm/values.yaml")
  ]
  set {
    name  = "replicaCount"
    value = 1
  }
  set {
    name  = "namespace"
    value = "kyverno"
  }
}