build(task,helm:gen): make dep tgz reproducible#973
Merged
arpad-csepi merged 2 commits intoagntcy:fix/coverage-e2efrom Feb 20, 2026
Merged
build(task,helm:gen): make dep tgz reproducible#973arpad-csepi merged 2 commits intoagntcy:fix/coverage-e2efrom
arpad-csepi merged 2 commits intoagntcy:fix/coverage-e2efrom
Conversation
**Problem:** `helm dependency update` packages chart source files with their filesystem modification times. Since git does not preserve file timestamps, every checkout gets different mtimes, producing different tar bytes and thus different `.tgz` files -- even when the file contents are identical.
**Fix (two layers of normalization in `helm:gen`):**
1. **Pre-packaging:** `find ... -exec env TZ=UTC touch -t 200001010000.00 {} +` normalizes all chart source file timestamps to a fixed UTC date before Helm packages them.
2. **Post-packaging:** `dd` patches the gzip header MTIME (bytes 4-7) and OS byte (byte 9) to fixed values, eliminating gzip envelope differences.
Signed-off-by: Patrik Egyed <pregnor@cisco.com>
Signed-off-by: Patrik Egyed <pregnor@cisco.com>
pregnor
force-pushed
the
ci/fix-envoy-authz-tgz
branch
from
913fc2e to
44e6f9b
Compare
arpad-csepi
approved these changes
Feb 20, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Scope: development
Complexity: low
What & Why:
task helm:gento make reproducible tar and gzip headers for the generated dependency chart packages (tgz).task gen.