Can't scan private Helm registries and it completely fails about nova

[sudermanjr]

Have you tried using the --url parameter of the nova configuration to pass in your specific private registry URL?

[sudermanjr]

Since this is coming up frequently, I have opened #222 for clearer documentation.

[sudermanjr]

Oh, and lastly, can you please update to the latest patch version - 3.6.4 - there are some bug fixes to how we handle artifact hub

[rbren]

More issues with private repos:

We try to download index.yaml from the repo here:

nova/pkg/helm/chartrepo.go

Line 97 in ace9df2

response, err := http.Get(fmt.Sprintf("%s/index.yaml", r.URL))

We're not using any auth when we do that.

Possible fixes here:

• use the helm golang client to get a list of repos (equivalent of helm repo list) to check against, and maybe filter out public ones. That way users don't have to specify --url if their env is already set up
• use the helm client to just get auth for what's been specified in --url
• use the helm client to retrieve the list of charts in the repo, instead of manually downloading index.yaml

[sudermanjr]

The only helm command I know of to list all the charts in a repo would be helm search. Essentially a helm search repo fairwinds-stable would list all the latest chart versions. That might be sufficient, but it's a bit odd.

[carlosjgp]

We have multiple repositories. Some private, some not on Artifacthub but most on ArtifactHub

It's too complicated to cover everything with Nova and we have opted to use just a script to detect out of data charts from our terminals

Thanks for the this project and the others you are supporting they are all great