Helm lookups are not executed

[gmemstr]

While doing some work on the Piped Helm Chart, I realised that it relies on the lookup Helm function, which by default does not run when helm template is executed. This requires the --dry-run=server flag to be passed to Helm when executing.

Ideally, we are able to activate this flag only when necessary, maybe with a dryRunServer or enableServer(?) parameter in https://github.com/hall/kubenix/blob/main/lib/helm/chart2json.nix.

I don't super love the idea of using this since it could break the reproducibility Nix offers, but some charts do rely on this and are incompatible with Kubenix.

[adrian-gierakowski]

You’d have to disable the sandbox and the process of generating manifests would no longer be pure and reproducible.

[zarelit]

I feel that it will be hard to fix because runCommand runs in a nix builder which may or may not connect to internet and the credentials to the cluster can't be passed easily, too.

The only way to make this "declarative" would be to provide state from outside to helm, like in "fetch all the resources info from the cluster in a user ran script, then feed this file to kubenix and then helm". I don't think it is something supported by helm itself