ArgoCD has an environmental variable which controls the ability for helm to traverse paths containing dots ( "/../" ). For security reasons this is disabled by default but we should like to enable it in our environments as our helm values configuration is a large shared tree. The fix is in the ArgoCD repo server deployment and is in the environmental variables which should be configured as so:
- name: HELM_SECRETS_BACKEND
value: sops
- name: HELM_SECRETS_VALUES_ALLOW_SYMLINKS
value: "true"
- name: HELM_SECRETS_VALUES_ALLOW_ABSOLUTE_PATH
value: "true"
- name: HELM_SECRETS_VALUES_ALLOW_PATH_TRAVERSAL
value: "true"
Thanks!