Operating system

macos 26.4.1

Helmfile Version

v1.4.4

Helm Version

v4.1.4

Bug description

Hello, helmfile team!

I am using helmfile + vals looking for Yandex Lockbox to decrypt secrets in values.yaml. My env variable YC_TOKEN using json-string, like:

YC_TOKEN={   "id"... }

In earlier versions of vals there is a bug with incorrect processing of json-string in YC_TOKEN. This bug 100% fixed in version v0.44.0.

Please, update vals using in helmfile to the newest version.

Example helmfile.yaml

repositories:

• name: gitlab
  url: https://charts.gitlab.io/

environments:
dev-cluster:
values:
- chartVersion: "9.11.2"
- namespace: gitlab

releases:

Origin https://gitlab.com/gitlab-org/charts/gitlab

• name: gitlab
  namespace: {{ .Values.namespace }}
  createNamespace: false
  chart: gitlab/gitlab
  installed: true
  version: {{ .Values.chartVersion }}
  timeout: 900
  wait: true
  values:
  • values-{{ .Environment.Name }}.yaml

Error message you've seen (if any)

Example in values.yaml:
user_name: "ref+yclockbox://randomid#smtp-username"

My YC_TOKEN like:

YC_TOKEN={   "id"... }

Error:

in helmfile/helmfile.yaml.gotmpl: failed to render values files "values-dev-cluster.yaml": expand yclockbox://randomid#smtp-username: rpc error: code = Unauthenticated desc = Token encoding violates RFC 6750. Token contains an illegal character '{' in position 1.

Direct call vals works correct:

vals get ref+yclockbox://random-id#smtp-username

Steps to reproduce

Working Helmfile Version

v1.4.4

Relevant discussion

No response