Please provide an option to enable path traversal in ArgoCD
long-term
Q
Quick Crawdad
ArgoCD has an environmental variable which controls the ability for helm to traverse paths containing dots ( "/../" ). For security reasons this is disabled by default but we should like to enable it in our environments as our helm values configuration is a large shared tree. The fix is in the ArgoCD repo server deployment and is in the environmental variables which should be configured as so:
- name: HELM_SECRETS_BACKEND
value: sops
- name: HELM_SECRETS_VALUES_ALLOW_SYMLINKS
value: "true"
- name: HELM_SECRETS_VALUES_ALLOW_ABSOLUTE_PATH
value: "true"
- name: HELM_SECRETS_VALUES_ALLOW_PATH_TRAVERSAL
value: "true"
Thanks!
Log In
Rohan Gupta
long-term