A Helm plugin for testing Helm charts with Open Policy Agent, using conftest.
Install the plugin using the built-in plugin manager.
helm plugin install https://github.com/skillshare/helm-conftest
Assuming you have policy defined in the policy
folder, you can point the plugin at your chart.
NOTE: Helm takes over the -n
or --namespace
option used by
confest
. Use --policy-namespace
instead.
$ helm conftest .
FAIL - release-name-mysql must include Kubernetes recommended labels: https://kubernetes.io/docs/concepts/overview/working-with-objects/common-labels/#labels
Error: plugin "conftest" exited with error
Conftest has a number of flags which can alter it's behaviour, from changing the output formatting to
specifying where to find the policy files. Conftest options are automatically passed to Conftest,
with any other options being passed to Helm in the same way as helm template
. This means you
could set values before validating the chart. eg.
helm conftest charts/stable/nginx-ingress --set controller.image.tag=latest