otty / dotfiles

All tools/Helm

Helm

helm

The package manager for Kubernetes.

Detected by helm | macOS, Linux, Windows |helm.sh

Sync it helm.toml

Sync rules

What travels, what stays, what never leaves

Helm in your home directory Every rule on this page, by file

repositories.*.certFilerepositories.*.keyFilerepositories.*.caFile

Each machine keeps its own copy of these.

repositories.*.password

Lifted into your secret store; the rest of the file syncs.

· registry/config.json Never synced

repositories.*.certFilerepositories.*.keyFilerepositories.*.caFile

Each machine keeps its own copy of these.

repositories.*.password

Lifted into your secret store; the rest of the file syncs.

· registry/config.json Never synced

· ~/Library/Caches/helm/ Exclude

· ~/.local/share/helm/ Exclude

· ~/Library/helm/ Exclude

Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.

apps/helm.tomlThe file this page is generated from

id = "helm"

name = "Helm"

homepage = "https://helm.sh"

description = "The package manager for Kubernetes."

icon = "SimpleIcons:helm"

detect = ["helm"]

# https://helm.sh/docs/helm/helm/ — $HELM_CONFIG_HOME, else the XDG variables,

# else a per-OS default: $HOME/.config/helm on Linux,

# $HOME/Library/Preferences/helm on macOS, %APPDATA%\helm on Windows. The XDG

# variable and the Windows default together are [configHome]; the macOS default

# is [preferences], which is a different base directory rather than another

# spelling of the same one. $HELM_REPOSITORY_CONFIG is repositories.yaml inside

# it and $HELM_REGISTRY_CONFIG is registry/config.json.

paths = [

"[configHome]/helm/repositories.yaml",

"[preferences]/helm/repositories.yaml",

]

# Cache and data from the same table: downloaded chart archives, repository

# indexes, plugins and starters. The cache is [cacheHome]; the macOS data

# default is $HOME/Library/helm rather than Application Support, so the data

# directories keep their literal spellings. The Windows cache is under %TEMP%,

# which this catalog has no spelling for; a consumer never syncs it anyway.

exclude = [

"[cacheHome]/helm/",

"~/.local/share/helm/",

"~/Library/helm/",

]

# registry/config.json is a Docker-style auth file: every registry

# `helm registry login` touched, with the credential base64 encoded in `auth`.

secret = [

"[configHome]/helm/registry/config.json",

"[preferences]/helm/registry/config.json",

]

# `helm repo add --username --password` writes the password straight into

# repositories.yaml (pkg/repo/chartrepo.go, `Entry.Password`). Both base

# directories, or the password is lifted out on Linux and Windows and syncs in

# the clear from a macOS machine.

[[secret_paths]]

file = [

"[configHome]/helm/repositories.yaml",

"[preferences]/helm/repositories.yaml",

]

match = { key_path = ["repositories.*.password"] }

# certFile / keyFile / caFile are absolute paths to TLS material sitting on

# this machine's disk (same struct). The repository list itself is worth

# syncing; the paths into a local ~/.certs are not — but where this machine

# keeps the client certificate for a repository is something the user has to

# put back after a rebuild, so it is kept: backup.

[[machine_lines]]

file = [

"[configHome]/helm/repositories.yaml",

"[preferences]/helm/repositories.yaml",

]

match = { key_path = [

"repositories.*.certFile",

"repositories.*.keyFile",

"repositories.*.caFile",

] }

scope = "backup"

Use it with your dotfile manager

Same data, in the shape your tool already reads

Opens Otty and adds this tool to what it syncs

Opens otty://sync/add/helm. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.

Every one of these keeps all credential files out. None of them splits repositories.*.certFile and repositories.*.keyFile for you — that part is Otty’s own sync, or a template you write by hand.