Helm

helm/helm last check 175 releases recent
Notes
no notes yet
Release notes
view on github
3.3.2 · Helm 3.3.2 · 1y+

Helm v3.3.2 is a security (patch) release. Users are strongly recommended to update to this release. It fixes a variety of minor security issues, as well as four notable security issues for which we have opened security advisories. More information on the security advisory can be found on the security advisory page.

Most of the issues were discovered by Trail of Bits during their CNCF-sponsored audit of the Helm codebase. We are grateful for Trail of Bits' detailed and thorough analysis of the Helm codebase. In addition, a Helm core maintainer identified one more issue.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: GitHub/helm/charts

Notable Changes

One breaking change was made: The default behavior of helm repo add was changed: It no longer overwrites repositories by default. The flag --force-update was added to helm repo add to allow a repo to be overwritten. The flag --no-update still exists, but does nothing. This change accords with the Helm policy for allowing minor breaking changes in the name of security.

The main security issues are:

Seven other minor changes were made in an effort to improve our security posture.

Installation and Upgrading

Download Helm v3.3.2. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with `bash`.

What's Next

  • 3.3.3 will contain only bug fixes.
  • 3.4.0 is the next feature release.

Changelog

  • fix(cmd/helm): add build tags for architecture 45d230fcc95c1c4d2e055b7451a988441f038509 (Adam Reese)
  • switched to stricter YAML parsing on plugin metadata files 6eeec4a00241b7da1acaddcbf3278355de1f216e (Matthew Fisher)
  • Merge pull request from GHSA-m54r-vrmv-hw33 809e2d999e2c33e20e77f6bff30652d79c287542 (Matt Butcher)
  • Merge pull request from GHSA-jm56-5h66-w453 055dd41cbe53ce131ab0357524a7f6729e6e40dc (Matt Butcher)
  • Merge pull request from GHSA-9vp5-m38w-j776 59d5b94d35b24a500e30839a7c69f05d9ff077e2 (Matt Butcher)
  • go fmt 2a74204508f005d89fe51b0e2824dae4f30b3252 (Matthew Fisher)
  • improve the HTTP detection for tar archives e2da16f5146e2709211f116cb81dd8f9c9a62fd5 (Matt Butcher)
  • replace --no-update with --force-update and invert default. BREAKING. 882eeac7271858124a3cecbe22c5d7d61560714f (Matt Butcher)
  • handle case where dependency name collisions break dependency resolution 40b78002873d525a31c5dec75c8607be67327360 (Matt Butcher)
  • fixed bug that caused helm create to not overwrite modified files 106f1fb45c93fe862ac86d9b774e2de8b1dd314c (Matt Butcher)
  • refactor the release name validation to be consistent across Helm ed5fba5142fa5a2366df143616e9161ff866a53d (Matt Butcher)
  • validate the name passed in during helm create c4ef82be13a0a3b6b42ce92bdd0357f4f6ac9e62 (Matt Butcher)
  • fix: check mode bits on kubeconfig file 82398667dfe208407be9fe499ac96240aa8ce54b (Matt Butcher)