kubecfg VS helm-diff

kubecfg does add some features, like https:// imports, oci:// imports (oci bundles in OCI registries, transitively bundling all imported files with jsonnet-deps).

But yes, I strive to keep the "one file, one target, import whatever you need but explicitly" as much as possible.

I'm pouring some more time into the project and trying to implement some ideas I had for a long time but never managed to get them out. For example "Flags From Files" (https://github.com/kubecfg/kubecfg/blob/flagspec/docs/rfcs/r...) or "Caching + optional vendoring of immutable external deps".

You shouldn't write those manifests by hand in any non-hobby project. https://github.com/kubecfg/kubecfg

Should kubecfg be used instead (having active development)?

We use kubecfg and it is what I would recommend to anyone looking to create a sustainable GitOps workflow at work.

#!/usr/bin/env bash set -euo pipefail cd "$(dirname "$0")/.." source scripts/common.sh green "Installing Kubectl" install_kubectl green "Installing helm version => ${HELM_VERSION}" install_helm green "Setting up Kong Helm Repo" helm repo add kong https://charts.konghq.com helm repo update green "Installing Helm Diff Plugin" helm plugin install https://github.com/databus23/helm-diff || true green "Setting up AWS Auth" setup_aws_auth green "Set the current namespace" kubectl config set-context --current --namespace=${KONG_NAME}-kong green "Validating VPA Config => ${KONG_NAME}-kong-vpa" kubectl diff -f ${KONG_NAME}/vpa.yaml || true if [[ "${KONG_NAME}" == prd ]]; then green "Validating Ingress => ${KONG_NAME}-kong-ingress" kubectl diff -f ${KONG_NAME}/ingress.yaml || true fi green "Validating Kong => ${KONG_NAME}" helm diff upgrade \ --install \ "${KONG_NAME}" \ kong/kong \ --namespace "${NAMESPACE}" \ -f ${KONG_NAME}/kong.yaml \ --set-file dblessConfig.config=${KONG_NAME}/declarative.yaml \ --version 2.6.3

helm plugin install https://github.com/databus23/helm-diff helm plugin install https://github.com/aslafy-z/helm-git helm plugin install https://github.com/jkroepke/helm-secrets

helm-diff plugin to see differences about what will be deployed.

There's Helm plugin (https://github.com/databus23/helm-diff) that show diff results for you, for example

    helm diff upgrade   --namespace 

So helm secrets is a helm plugin, not quite native. It requires the helm diff plugin as well.