I m trying to keep secrets out of my `values yml` and set th

Question

I m trying to keep secrets out of my `values yml` and set the extraManifests value using the ` set file` option but I m hitting an error when installing the chart Not sure what I m doing wrong Details in thread point right

Ted Conbeer · Answer

Values file `helm values local yml` ```global dagster user deployments enabled true deployments envSecrets name local secret runLauncher postgresql enabled true dagsterDaemon serviceAccount create true We ll use the set file option at runtime to add secrets as an extraManifest to this chart extraManifests ```

Ted Conbeer · Answer

file containing the extra manifests `helm secrets local yml` ``` apiVersion v1 kind Secret metadata name local secret type Opaque stringData AWS ACCESS KEY ID mysecretvalue```

Ted Conbeer · Answer

helm install command and error ```helm upgrade install dagster dagster dagster version $DAGSTER VERSION values helm values local yml set file extraManifests= secrets helm secrets local yml Error UPGRADE FAILED template dagster templates extra manifests yaml 1 17 executing dagster templates extra manifests yaml at lt Values extraManifests gt range can t iterate over apiVersion v1 kind Secret metadata name local secret type Opaque stringData ```

Ted Conbeer · Answer

I ve also tried adding the `extraManifests ` key to the `helm secrets local yml` file and removing the ` ` and outdenting the secret definition but none of those things work

Ted Conbeer · Answer

This is the template <https github com dagster io dagster blob master helm dagster templates extra manifests yaml> Any tips appreciated

Noah K · Answer

< Ted Conbeer> What you probably want is to use a second values file

Noah K · Answer

```extraManifests whatever```

Noah K · Answer

Helm will merge all your ` values` data together

Ted Conbeer · Answer

got it didn t realize that let me try

Noah K · Answer

` set file` just sets the value as the whole string not a parsed version

Ted Conbeer · Answer

oh that makes sense

Ted Conbeer · Answer

it worked Thanks Noah

Noah K · Answer

Just remember for security modeling it all ends up in the saved cluster side manifest

Noah K · Answer

though at least those default to using Secrets these days

Ted Conbeer · Answer

yep this is just for a local dev cluster