Laurent Philippart

Just confirmed that with the proper environment `helm pull` works fine in the `hydration-controller`: `export HELM_CONFIG_HOME=/tmp/kustomize-helm-723481838/helm` `export HELM_CACHE_HOME=/tmp/kustomize-helm-723481838/helm/.cache` `export HELM_DATA_HOME=/tmp/kustomize-helm-723481838/helm/.data` `export HTTPS_PROXY=` `helm pull --untar --untardir /repo/source/358e7d8ecf8a79d1f70b1a561f744f96a2894474/cert-manager/base/charts --repo https://charts.jetstack.io cert-manager...

yes and alternatively I don't see how I would be able to customize the configmap to inject an environment variable in the reconciler container.

Currently we are using a S3 bucket policy to grant read-only access from a specific VPC where crossplane is running. Ideally we would want to use IRSA like provider-aws to...

Concretely we are proposing to configure the IAM Role ARN into a secret that can be referenced in the ProviderConfig as follows: ```yaml apiVersion: helm.crossplane.io/v1beta1 kind: ProviderConfig metadata: name: helm-provider...

I wish to amend the above proposal: the role ARN should be configured in a secret referenced by the **Release** object (`spec.forProvider.chart.pullSecretRef`) rather than the **ProviderConfig**. This is a clearer...

@joelanford thank you for the quick feedback. I'll definitely have a look at these projects!

OK, I'll test again. I am using crossplane v1.11.2 but maybe the kubectl plugin wasn't updated (in case it matters).

That's a pity. I'm pretty sure everyone will need this.