Support Sprig htpasswd function

[alice-sawatzky]

Sprig has an htpasswd template function that would be really useful for configuring basic auth.

[mattfarina]

Can you share what version of Helm you are using? Helm v2 uses Sprig v2 which goes not have the htpasswd function. Helm v3 uses Sprig v3 which does include that function.

Speaking as a Sprig maintainer, I would be willing to merge a backport of that function to Sprig v2 if someone wants to work on it.

[alice-sawatzky]

So, I made a simple chart with a single template:

{{ htpasswd "example" "password" }}

% helm-2.16.1 template .
Error: parse error in "test/templates/NOTES.txt": template: test/templates/NOTES.txt:1: function "htpasswd" not defined
% helm-3.0.3 template . 
Error: parse error at (test/templates/NOTES.txt:1): function "htpasswd" not defined

I'd love to have htpasswd backported to v2, but it is probably worth pointing out that htpasswd doesn't appear to be available in helm v3 either

[bacongobbler]

It looks like Masterminds/sprig#225 was merged only 2 weeks ago, so it's not yet in a sprig release.

Helm 3.0.3 currently relies on Sprig 3.0.2.

https://github.com/helm/helm/blob/v3.0.3/go.mod#L9

Once a new release of sprig is available, we can bump Helm to the latest version aand htpasswd should become available.

[alice-sawatzky]

i think this would be better labelled as a feature request, rather than question/support

[mattfarina]

Oh, @technosophos merged that. Let's see about bringing this into Helm 3.2.0. I can make that happen.

[technosophos]

Friendly reminder that 3.2 is right around the bend.

[nezed]

{{ htpasswd "user" "password" }}

works since 3.2.0 🎉

[bonpapajosie]

Hello everyone,

Can someone help me, pls?

i got a ingress with basic auth on my K8S:
here is the yaml:
apiVersion: v1
kind: Secret
type: Opaque
metadata:
name: basic-auth
namespace: t
data:
auth: >-
{{ .Values.basicAuth.authString | b64enc }}

---

value.yaml

basicAuth:
authString: |
htpwd1:b7NRGSot585DjHtXjlqusep
htpwd2:fpzefczfzz585DjHtXjlquver

But I want to do that with helm: like

apiVersion: v1
kind: Secret
type: Opaque
metadata:
name: basic-auth
namespace: t
data:
auth: >-
{{ htpasswd .Values.basicAuth.auth1.username .Values.basicAuth.auth1.password | b64enc | quote }}
{{ htpasswd .Values.basicAuth.auth2.username .Values.basicAuth.auth2.password | b64enc | quote }}

---

value.yaml

basicAuth:
auth1:
username
password
auth2:
username
password

Can someone help, please?

[arthtux]

Hello @bonpapajosie

For use the multi user/password you can use this sample.

On your ingress annotation:

    nginx.ingress.kubernetes.io/auth-type: "basic"
    nginx.ingress.kubernetes.io/auth-secret: "htpasswd-secret"
    nginx.ingress.kubernetes.io/auth-secret-type: "auth-map"
    nginx.ingress.kubernetes.io/auth-realm: "Authentication required!"

For the secret:

---
apiVersion: v1
kind: Secret
metadata:
  name: "htpasswd-secret"
type: Opaque
data:
  {{- range $user, $password := .Values.ingress.users }}
  {{ $user }}: {{ htpasswd $user $password | trimPrefix (print $user ":") | b64enc }}
  {{- end }}

And for your values:

ingress:
  users:
    user1: password1
    user2: password2
    ...: ...