Conftest Helm plugin

A Helm plugin for testing Helm charts with Open Policy Agent, using conftest.

Installation

Install the plugin using the built-in plugin manager.

helm plugin install https://github.com/instrumenta/helm-conftest

Usage

Assuming you have policy defined in the policy folder, you can point the plugin at your chart.

$ helm conftest .
FAIL - release-name-mysql must include Kubernetes recommended labels: https://kubernetes.io/docs/concepts/overview/working-with-objects/common-labels/#labels
Error: plugin "conftest" exited with error

Conftest has a number of flags which can alter it's behaviour, from changing the output formatting to specifying where to find the policy files. Conftest options are automatically passed to Conftest, with any other options being passed to Helm in the same way as helm template. This means you could set values before validating the chart. eg.

helm conftest charts/stable/nginx-ingress --set controller.image.tag=latest

Docker

The Helm Conftest plugin is also available as a standalone Docker image. Simply mount your Chart source code at /chart and include the policy dirctory along with your chart and run:

docker run --rm -it -v $(pwd)/snyky:/chart instrumenta/helm-conftest