-
Notifications
You must be signed in to change notification settings - Fork 408
Description
Feature: Helm diff data source / resource
Motivation
In GitOps / IaC workflows it is important to preview Helm change impact before apply.
Current helm provider does not provide diff information, while helm diff plugin is widely adopted.
When using the external data source approach, we need to package the helm-diff binary and invoke it via command-line rather than leveraging the Helm SDK. This introduces additional operational overhead: every time a security vulnerability is discovered in the binary, we must rebuild and redistribute the image that contains the patched version. This makes vulnerability remediation significantly more cumbersome and inefficient compared to a native provider implementation.
Example Usage:
data "helm_diff" "preview" {
name = "my-app"
namespace = "default"
chart = "./charts/my-app"
values = [file("values.yaml")]
}
output "diff" {
value = data.helm_diff.preview.diff
}
Expected outcome
- Get helm diff result during terraform plan
- Useful for CI pipelines and review gates