useHelmSecrets not decrypting on render

[panbanda]

Expected behavior

skaffold render should produce the same output as skaffold up for secrets that are used with useHelmSecrets: true

Actual behavior

skaffold render does not decrypt the secret, skaffold up does decrypt the secret

Information

Demo repo here:

https://github.com/panbanda/skaffold-helm-secrets-issue

Steps to reproduce the behavior

# Install SOPS sample gpg key
gpg --import pgp/sops_test_key.asc

# Encrypted with 
sops -e -i secrets.yaml

# Decrypted with 
sops -d -i secrets.yaml

# Skaffold dev puts the secret in container decrypted
# ie: test
skaffold dev

# Skaffold render creates a kube secret manifest with encrypted string
# ie: ENC[AES256_GCM,data:SyyH6w==,iv:CbNC...
skaffold render

[tejal29]

Thanks @panbanda. I am not aware or skaffold up do yo mean skaffold dev?

[anthonyalayo]

I have the same issue. Skaffold render shows all the secrets as encrypted. Can this be fixed? Ideally useHelmSecrets would have had them decrypted.

[anthonyalayo]

Can anyone from the skaffold team chime in?

[anthonyalayo]

@aaron-prindle @tejal29 If someone could point me to where the change needs to happen, I could also give it a shot. Is there anyone around that would know?

[anthonyalayo]

Thanks @ericzzzzzzz !