chartify.go

package chartify

import (
	"bytes"
	"fmt"
	"os"
	"path/filepath"
	"regexp"
	"strings"
	"text/template"

	"github.com/Masterminds/semver/v3"
	"github.com/otiai10/copy"
	registryv3 "helm.sh/helm/v3/pkg/registry"
	registryv4 "helm.sh/helm/v4/pkg/registry"
)

var (
	ContentDirs = []string{"templates", "charts", "crds"}
)

type ChartifyOpts struct {
	// ID is the ID of the temporary chart being generated.
	// The ID is used in e.g. the directory name of the temporary local chart
	// genereated by chartify.
	// If it's empty, chartify generates one from the release namd, the chart name, and the hash of chartify options.
	ID string

	// Debug when set to true passes `--debug` flag to `helm` in order to enable debug logging
	Debug bool

	//ReleaseName string

	// ValuesFiles are a list of Helm chart values files
	ValuesFiles []string

	// DEPRECATED: Use SetFlags instead.
	// SetValues is a list of adhoc Helm chart values being passed via helm's `--set` flags
	SetValues []string

	// SetFlags is the list of set flags like --set k=v, --set-file k=path, --set-string k=str
	// used while rendering the chart.
	SetFlags []string

	// Namespace is the default namespace in which the K8s manifests rendered by the chart are associated
	Namespace string

	// ChartVersion is the semver of the Helm chart being used to render the original K8s manifests before various tweaks applied by helm-x,
	// or the chart version to be filled in the Chart.yaml of the temporary chart generated from K8s manifests or kustomize project.
	// In the latter case, this defaults to "1.0.0" if empty.
	ChartVersion string

	// AppVersion is the optional appVersion of the temporary chart.
	AppVersion string

	// EnableKustomizAlphaPlugins will add the `--enable_alpha_plugins` flag when running `kustomize build`
	EnableKustomizeAlphaPlugins bool

	// KustomizeBuildArgs are extra arguments to pass to `kustomize build` command
	// For example, ["--enable-exec"] for plugins like ksops
	KustomizeBuildArgs []string

	Injectors []string
	Injects   []string

	AdhocChartDependencies           []ChartDependency
	DeprecatedAdhocChartDependencies []string

	JsonPatches           []string
	StrategicMergePatches []string

	// Patches is the list of YAML files each defining one or more kustomize "patches" entries.
	// Each file may contain either a single patch document or a list of patch documents.
	// This leverages kustomize's unified "patches" field which auto-detects whether each
	// patch is a Strategic Merge Patch or a JSON Patch, and supports both inline patch
	// content (via the "patch:" field) and external file references (via the "path:" field).
	// See https://github.com/kubernetes-sigs/kustomize/blob/master/examples/inlinePatch.md
	Patches []string

	// Transformers is the list of YAML files each defines a Kustomize transformer
	// See https://github.com/kubernetes-sigs/kustomize/blob/master/examples/configureBuiltinPlugin.md#configuring-the-builtin-plugins-instead for more information.
	Transformers []string

	// WorkaroundOutputDirIssue prevents chartify from using `helm template --output-dir` and let it use `helm template > some.yaml` instead to
	// workaround the potential helm issue
	// See https://github.com/roboll/helmfile/issues/1279#issuecomment-636839395
	WorkaroundOutputDirIssue bool

	// OverrideNamespace modifies namespace of every resource after rendering and patching,
	// as a workaround to fix a broken chart.
	// For kustomization, `Namespace` should just work and this won't be needed.
	// For helm chart, as long as the chart has "correct" resource templates with `namespace: {{ .Namespace }}`s this isn't needed.
	OverrideNamespace string

	// SkipDeps skips running `helm dep up` on the chart.
	// Useful for cases when the chart has a broken dependencies definition like seen in
	// https://github.com/roboll/helmfile/issues/1547
	SkipDeps bool

	// OCIPlainHTTP uses plain HTTP for OCI registries when running helm dependency commands.
	// Required for local/insecure OCI registries in Helm 4.
	OCIPlainHTTP bool

	// IncludeCRDs is a Helm 3 only option. When it is true, chartify passes a `--include-crds` flag
	// to helm-template.
	IncludeCRDs bool

	// Validate is a Helm 3 only option. When it is true, chartify passes --validate while running helm-template
	// It is required when your chart contains any template that relies on Capabilities.APIVersions
	// for rendering resourecs depending on the API resources and versions available on a live cluster.
	// In other words, setting this to true means that you need access to a Kubernetes cluster,
	// even if you aren't trying to install the generated chart onto the cluster.
	Validate bool

	// KubeVersion specifies the Kubernetes version used for Capabilities.KubeVersion
	// when running `helm template` to produce the temporary chart to apply various customizations.
	// If the upstream command that calls chartify was going to pass `kube-version` while rendering the original chart,
	// you must also pass the same value to this field.
	// Otherwise the temporary chart rendered by chartify lacks `kube-version` at helm-template time
	// and it my produce output unexpected to you.
	KubeVersion string

	// SortOptions configures kustomize's sortOptions for resource ordering.
	// Use &SortOptions{Order: "fifo"} to preserve resource order and minimize diff noise.
	// See https://kubectl.docs.kubernetes.io/references/kustomize/kustomization/sortoptions/
	SortOptions *SortOptions

	// ApiVersions is a string of kubernetes APIVersions and passed to helm template via --api-versions
	// It is required if your chart contains any template that relies on Capabilities.APIVersion for rendering
	// resources depending on the API resources and versions available in a target cluster.
	// Setting this value defines a set of static capabilities and avoids the need for access to a live cluster during
	// templating in contrast to --validate
	ApiVersions []string

	// TemplateFuncs is the FuncMap used while rendering .gotmpl files in the target directory
	TemplateFuncs template.FuncMap
	// TemplateData is the data available via {{ . }} within .gotmpl files
	TemplateData interface{}

	// TemplateArgs to pass Flags to helm template
	TemplateArgs string
}

type ChartifyOption interface {
	SetChartifyOption(opts *ChartifyOpts) error
}

type chartifyOptsSetter struct {
	o *ChartifyOpts
}

func (s *chartifyOptsSetter) SetChartifyOption(opts *ChartifyOpts) error {
	*opts = *s.o
	return nil
}

func (s *ChartifyOpts) SetChartifyOption(opts *ChartifyOpts) error {
	*opts = *s
	return nil
}

func WithChartifyOpts(opts *ChartifyOpts) ChartifyOption {
	return &chartifyOptsSetter{
		o: opts,
	}
}

// Chartify creates a temporary Helm chart from a directory or a remote chart, and applies various transformations.
// Returns the full path to the temporary directory containing the generated chart if succeeded.
//
// Parameters:
// * `release` is the name of Helm release being installed
// nolint
func (r *Runner) Chartify(release, dirOrChart string, opts ...ChartifyOption) (string, error) {
	u := &ChartifyOpts{}

	for i := range opts {
		if err := opts[i].SetChartifyOption(u); err != nil {
			return "", err
		}
	}

	if u.SortOptions != nil {
		if err := u.SortOptions.validate(); err != nil {
			return "", err
		}
	}

	isLocal, _ := r.Exists(dirOrChart)

	var isKustomization bool

	if isLocal {
		if stat, err := os.Stat(dirOrChart); err != nil {
			return "", fmt.Errorf("unable to stat %s: %w", dirOrChart, err)
		} else if stat.IsDir() {
			var err error
			isKustomization, err = r.Exists(filepath.Join(dirOrChart, "kustomization.yaml"))
			if err != nil {
				return "", err
			}
		}
	}

	var tempDir string
	if !isKustomization {
		tempDir = r.MakeTempDir(release, dirOrChart, u)

		if filepath.Ext(dirOrChart) == ".tgz" {
			tgzReader, err := os.Open(dirOrChart)
			if err != nil {
				return "", fmt.Errorf("unable to open %s: %w", dirOrChart, err)
			}

			tempDir, err = ExtractFilesFromChartTGZ(tgzReader, tempDir)
			if err != nil {
				return "", fmt.Errorf("unable to extract files out of %s: %w", dirOrChart, err)
			}
		} else {
			var err error
			tempDir, err = r.copyToTempDir(dirOrChart, tempDir, u.ChartVersion)
			if err != nil {
				return "", err
			}
		}
	} else {
		tempDir = r.MakeTempDir(release, dirOrChart, u)
	}

	chartYamlPath := filepath.Join(tempDir, "Chart.yaml")

	isChart, err := r.Exists(chartYamlPath)
	if err != nil {
		return "", err
	}

	templatesDir := filepath.Join(tempDir, "templates")
	dirExists, err := r.Exists(templatesDir)
	if err != nil {
		return "", err
	}
	if !dirExists {
		if err := os.Mkdir(templatesDir, 0755); err != nil {
			return "", err
		}
	}

	overrideNamespace := u.OverrideNamespace

	if !isChart && len(u.TemplateFuncs) > 0 {
		templateFiles, err := r.SearchFiles(SearchFileOpts{
			basePath: tempDir,
			fileType: []string{"gotmpl"},
		})
		if err != nil {
			return "", err
		}

		for _, absPath := range templateFiles {
			tmpl := template.New(filepath.Base(absPath))
			body, err := r.ReadFile(absPath)
			if err != nil {
				return "", err
			}

			tmpl, err = tmpl.Funcs(u.TemplateFuncs).Parse(string(body))
			if err != nil {
				return "", err
			}

			var buf bytes.Buffer

			if err := tmpl.Execute(&buf, u.TemplateData); err != nil {
				return "", err
			}

			if err := r.WriteFile(strings.TrimSuffix(absPath, filepath.Ext(absPath)), buf.Bytes(), 0644); err != nil {
				return "", err
			}
		}
	}

	generatedManifestsUnderTemplatesDir := []string{}

	if isKustomization {
		kustomizeOpts := &KustomizeBuildOpts{
			ValuesFiles:        u.ValuesFiles,
			SetValues:          u.SetValues,
			SetFlags:           u.SetFlags,
			EnableAlphaPlugins: u.EnableKustomizeAlphaPlugins,
			Namespace:          u.Namespace,
			HelmBinary:         r.helmBin(),
			SortOptions:        u.SortOptions,
			ExtraArgs:          u.KustomizeBuildArgs,
		}
		kustomizeFile, err := r.KustomizeBuild(dirOrChart, tempDir, kustomizeOpts)
		if err != nil {
			return "", err
		}

		generatedManifestsUnderTemplatesDir = append(generatedManifestsUnderTemplatesDir, kustomizeFile)
	} else if !isChart {
		manifestFileOptions := SearchFileOpts{
			basePath: tempDir,
			fileType: []string{"yaml", "yml"},
		}
		manifestFiles, err := r.SearchFiles(manifestFileOptions)
		if err != nil {
			return "", err
		}

		var usedDirs []string

		for _, absPath := range manifestFiles {
			relPath, err := filepath.Rel(tempDir, absPath)
			if err != nil {
				return "", err
			}

			dst := filepath.Join(templatesDir, relPath)

			dstDir := filepath.Dir(dst)
			if _, err := os.Lstat(dstDir); err != nil && os.IsNotExist(err) {
				if err := os.MkdirAll(dstDir, 0755); err != nil {
					return "", err
				}

				usedDirs = append(usedDirs, filepath.Dir(absPath))
			}

			if err := os.Rename(absPath, dst); err != nil {
				return "", err
			}

			generatedManifestsUnderTemplatesDir = append(generatedManifestsUnderTemplatesDir, dst)
		}

		for _, d := range usedDirs {
			if err := os.RemoveAll(d); err != nil {
				return "", err
			}
		}

		// Do set namespace if and only if the manifest has no `metadata.namespace` set
		if overrideNamespace == "" && u.Namespace != "" {
			overrideNamespace = u.Namespace
		}
	}

	chartName := filepath.Base(filepath.Clean(dirOrChart))
	if !isChart {
		ver := u.ChartVersion
		if u.ChartVersion == "" {
			ver = "1.0.0"
			r.Logf("using the default chart version 1.0.0 due to that no ChartVersion is specified")
		}
		chartYamlContent := fmt.Sprintf("name: %q\nversion: %s\napiVersion: v2\n", chartName, ver)
		if u.AppVersion != "" {
			chartYamlContent += fmt.Sprintf("appVersion: %q\n", u.AppVersion)
		}

		r.Logf("Writing %s", chartYamlPath)

		if err := r.WriteFile(chartYamlPath, []byte(chartYamlContent), 0644); err != nil {
			return "", err
		}

		filesDir, err := r.EnsureFilesDir(tempDir)
		if err != nil {
			return "", err
		}

		if err := r.RewriteChartToPreventDoubleRendering(tempDir, filesDir); err != nil {
			return "", err
		}
	}

	deps, err := r.ReadAdhocDependencies(u)
	if err != nil {
		return "", fmt.Errorf("failed reading adhoc dependencies: %w", err)
	}

	// We need to modify the original Chart.yaml dependencies or requirements.yaml dependencies to only include
	// adhoc dependencies, so that it can be rendered and patched, along with the original chart and its subcharts.
	// Note that we need to replace whole the deps when it's a remote chart,
	// and add deps when it's a local chart. That's why we specify `!isLocal` as the first argument(replace).
	all, err := r.UpdateRequirements(!isLocal, chartYamlPath, tempDir, deps)
	if err != nil {
		return "", fmt.Errorf("release %s: updating requirements: %w", release, err)
	}

	var generatedManifestFiles []string

	// If the chart is a local chart, or a temporary chart being generated from K8s manifests or Kustomize,
	// there's no `helm fetch` before.
	// For a remote chart, `helm fetch` seems to download the dependencies altogether, but
	// as we didn't run `helm fetch` in this scenario we have to download dependencies here.
	if isLocal {
		// Note on `len(u.AdhocChartDependencies) == 0`:
		// This special handling is required because adding adhoc chart dependencies
		// means that you MUST run `helm dep up` and `helm dep build` to download the dependencies into the ./charts directory.
		// Otherwise you end up getting:
		//   Error: found in Chart.yaml, but missing in charts/ directory: $DEP_CHART_1, $DEP_CHART_2, ...`
		// ...which effectively making this useless when used in e.g. helmfile
		if u.SkipDeps && len(u.AdhocChartDependencies) == 0 {
			r.Logf("Skipping `helm dependency up` on release %s's chart due to that you've set SkipDeps=true.\n"+
				"This may result in outdated chart dependencies.", release)
		} else {
			// Flatten the chart by fetching dependent chart archives and merging their K8s manifests into the temporary local chart
			// so that we can uniformly patch them with JSON patch, Strategic-Merge patch, or with injectors.
			//
			// Use `helm dependency build` (honors Chart.lock) when a lock exists and no adhoc deps
			// were injected; otherwise fall back to `helm dependency up` (re-resolves from Chart.yaml).
			hasAdhocDeps := len(u.AdhocChartDependencies) > 0 || len(u.DeprecatedAdhocChartDependencies) > 0
			useBuild := !hasAdhocDeps && hasChartLock(tempDir)
			depCmd := "up"
			if useBuild {
				depCmd = "build"
			}
			depArgs := []string{"dependency", depCmd, tempDir}
			// Helm 4 requires --plain-http for HTTP-only OCI registries
			if u.OCIPlainHTTP && r.IsHelm4() {
				depArgs = append(depArgs, "--plain-http")
			}
			_, err := r.run(nil, r.helmBin(), depArgs...)
			if err != nil && useBuild && isLockOutOfSyncErr(err) {
				// `helm dependency build` errors when Chart.lock is out of sync with Chart.yaml.
				// Only fall back to `up` for this specific case — other errors (network, auth,
				// missing artifacts) should surface to the caller rather than silently re-resolving.
				r.Logf("`helm dependency build` failed for release %s (lock out of sync), falling back to `helm dependency up`: %v", release, err)
				depArgs[1] = "up"
				_, err = r.run(nil, r.helmBin(), depArgs...)
			}
			if err != nil {
				return "", err
			}
		}
	} else if len(u.AdhocChartDependencies) > 0 {
		// The chart is a remote chart so we should have already run `helm fetch` that downloads both the chart
		// and its dependencies. But ovbiously, previous `helm fetch` run doesn't download the adhoc dependencies we added
		// after running `helm fetch`.
		// We need to download adhoc dependencies on our own by running helmfile dependency up.
		depArgs := []string{"dependency", "up", tempDir}
		// Helm 4 requires --plain-http for HTTP-only OCI registries
		if u.OCIPlainHTTP && r.IsHelm4() {
			depArgs = append(depArgs, "--plain-http")
		}
		_, err := r.run(nil, r.helmBin(), depArgs...)
		if err != nil {
			return "", err
		}
	}

	templateOptions := ReplaceWithRenderedOpts{
		Debug:        u.Debug,
		Namespace:    u.Namespace,
		SetValues:    u.SetValues,
		SetFlags:     u.SetFlags,
		ValuesFiles:  u.ValuesFiles,
		ChartVersion: u.ChartVersion,
		IncludeCRDs:  u.IncludeCRDs,
		Validate:     u.Validate,
		KubeVersion:  u.KubeVersion,
		ApiVersions:  u.ApiVersions,
		TemplateArgs: u.TemplateArgs,

		WorkaroundOutputDirIssue: u.WorkaroundOutputDirIssue,
	}

	if _, err := r.UpdateRequirements(true, chartYamlPath, tempDir, all); err != nil {
		return "", fmt.Errorf("release %s: replacing requirements: %w", release, err)
	}

	var (
		needsNamespaceOverride = overrideNamespace != ""
		needsKustomizeBuild    = len(u.JsonPatches) > 0 || len(u.StrategicMergePatches) > 0 || len(u.Patches) > 0 || len(u.Transformers) > 0
		needsInjections        = len(u.Injectors) > 0 || len(u.Injects) > 0
	)

	// This is required to support charts depend on `{{ .Release.Revision }}`,
	// in case we don't need to run helm-template to generate the intermediate chart.
	// See https://github.com/helmfile/helmfile/issues/430
	if !needsNamespaceOverride && !needsKustomizeBuild && !needsInjections && isChart {
		return tempDir, nil
	}

	generated, err := r.ReplaceWithRendered(release, chartName, tempDir, templateOptions)
	if err != nil {
		return "", err
	}

	generatedManifestFiles = generated

	// We've already rendered resources from the chart and its subcharts to the helmx.1.rendered directory
	// No need to double-render them by leaving requirements.yaml/lock and downloaded sub-charts
	_ = os.Remove(filepath.Join(tempDir, "requirements.yaml"))
	_ = os.Remove(filepath.Join(tempDir, "requirements.lock"))

	if needsNamespaceOverride {
		if err := r.SetNamespace(tempDir, overrideNamespace); err != nil {
			return "", err
		}
	}

	// When the chart rendered no resources, there is nothing for kustomize to build or
	// patch. Skip the kustomize step entirely so an empty render is treated as a no-op
	// success even when JsonPatches/StrategicMergePatches/Transformers are configured
	// (the patches simply have no resources to apply to). See issue #206.
	if needsKustomizeBuild && len(generatedManifestFiles) > 0 {
		patchOpts := &PatchOpts{
			JsonPatches:           u.JsonPatches,
			StrategicMergePatches: u.StrategicMergePatches,
			Patches:               u.Patches,
			Transformers:          u.Transformers,
			EnableAlphaPlugins:    u.EnableKustomizeAlphaPlugins,
			SortOptions:           u.SortOptions,
			ExtraArgs:             u.KustomizeBuildArgs,
		}
		if err := r.Patch(tempDir, generatedManifestFiles, patchOpts); err != nil {
			return "", err
		}
	}

	//
	// Apply injectors to all the files rendered under `templates` and `crds`
	//

	injectOptions := InjectOpts{
		injectors: u.Injectors,
		injects:   u.Injects,
	}
	if err := r.Inject(generatedManifestFiles, injectOptions); err != nil {
		return "", err
	}

	//
	// Move all the resulting files under `templates` and `crds` to `files/templates` and `files/crds` and
	// create replacement template files in their original locations to avoid double rendering.
	//

	filesDir, err := r.EnsureFilesDir(tempDir)
	if err != nil {
		return "", err
	}

	if err := r.RewriteChartToPreventDoubleRendering(tempDir, filesDir); err != nil {
		return "", err
	}

	return tempDir, nil
}

func (r *Runner) ReadAdhocDependencies(u *ChartifyOpts) ([]Dependency, error) {
	var deps []Dependency
	var adhocChartDependencies []ChartDependency

	for _, d := range u.DeprecatedAdhocChartDependencies {
		aliasChartVer := strings.Split(d, "=")
		chartAndVer := strings.Split(aliasChartVer[len(aliasChartVer)-1], ":")
		var ver string
		if len(chartAndVer) == 1 {
			ver = "*"
		} else {
			ver = chartAndVer[1]
		}
		var alias string
		if len(aliasChartVer) > 1 {
			alias = aliasChartVer[0]
		}

		adhocChartDependencies = append(adhocChartDependencies, ChartDependency{
			Alias:   alias,
			Chart:   chartAndVer[0],
			Version: ver,
		})
	}

	adhocChartDependencies = append(adhocChartDependencies, u.AdhocChartDependencies...)

	for _, d := range adhocChartDependencies {
		isLocalChart, _ := r.Exists(d.Chart)

		var name, repoUrl string

		if isLocalChart {
			name = filepath.Base(d.Chart)
			repoUrl = fmt.Sprintf("file://%s", d.Chart)
		} else if (r.IsHelm3() && registryv3.IsOCI(d.Chart)) || (r.IsHelm4() && registryv4.IsOCI(d.Chart)) {
			name = filepath.Base(d.Chart)
			// Trim trailing slash to avoid invalid repository error due to duplicate slash in oci registry url
			// while running helm dependency up
			repoUrl = strings.TrimSuffix(d.Chart, "/"+name)
		} else {
			repoAndChart := strings.Split(d.Chart, "/")
			repo := repoAndChart[0]
			name = repoAndChart[1]

			out, err := r.run(nil, r.helmBin(), "repo", "list")
			if err != nil {
				return nil, err
			}
			lines := strings.Split(out, "\n")
			re := regexp.MustCompile(`\s+`)
			for lineNum, line := range lines {
				if lineNum == 0 || line == "" {
					continue
				}
				tokens := re.Split(line, -1)
				if len(tokens) < 2 {
					return nil, fmt.Errorf("unexpected format of `helm repo list` at line %d \"%s\" in:\n%s", lineNum, line, out)
				}
				if tokens[0] == repo {
					repoUrl = tokens[1]
					break
				}
			}
			if repoUrl == "" {
				return nil, fmt.Errorf("no helm list entry found for repository \"%s\". please `helm repo add` it!", repo)
			}
		}

		condName := d.Alias
		if condName == "" {
			condName = name
		}

		deps = append(deps, Dependency{
			Name:       name,
			Repository: repoUrl,
			Condition:  fmt.Sprintf("%s.enabled", condName),
			Alias:      d.Alias,
			Version:    d.Version,
		})
	}

	return deps, nil
}

func (r *Runner) EnsureFilesDir(tempDir string) (string, error) {
	// Files are written to somewhere else than "templates/` to avoid double-rendering
	// which will break go templates embedded in YAML(e.g. PrometheusRule)
	filesDir := filepath.Join(tempDir, "files")

	if err := os.MkdirAll(filesDir, 0755); err != nil {
		return "", err
	}

	return filesDir, nil
}

// RewriteChartToPreventDoubleRendering rewrites templates/*.yaml files with
// template files containing:
//
//	{{ .Files.Get "path/to/the/yaml/file" }}
//
// So that re-running helm-template on chartify's final output doesn't result in double-rendering.
// Double-rendering accidentally renders e.g. go template expressions embedded in prometheus rules manifests,
// which is not what the user wants.
func (r *Runner) RewriteChartToPreventDoubleRendering(tempDir, filesDir string) error {
	for _, d := range ContentDirs {
		if d == "crds" {
			// Do not rewrite crds/*.yaml, as `helm template --includec-crds` seem to
			// render CRD yaml files as-is, without processing go template.
			// Also see https://github.com/helm/helm/pull/7138/files
			continue
		}

		srcDir := filepath.Join(tempDir, d)
		dstDir := filepath.Join(filesDir, d)

		if _, err := os.Lstat(srcDir); err == nil {
			if err := os.Rename(srcDir, dstDir); err != nil {
				return err
			}
		} else {
			continue
		}

		if err := filepath.Walk(dstDir, func(path string, info os.FileInfo, err error) error {
			if err != nil {
				return err
			}

			if info.IsDir() {
				return nil
			}

			rel, err := filepath.Rel(filesDir, path)
			if err != nil {
				return fmt.Errorf("calculating relative path to %s from %s: %v", path, filesDir, err)
			}

			content := []byte(fmt.Sprintf(`{{ .Files.Get "files/%s" }}`, filepath.ToSlash(rel)))

			f := filepath.Join(tempDir, rel)

			if err := createDirForFile(f); err != nil {
				return err
			}

			if err := r.WriteFile(f, content, 0644); err != nil {
				return err
			}

			return nil
		}); err != nil {
			return err
		}

		// Without this, any sub-sequent helm command on the generated local chart result in
		// an error due to missing Chart.yaml for every `charts/SUBCHART`
		if d == "charts" {
			chartsDir := filepath.Join(tempDir, "charts")
			templatesDir := filepath.Join(tempDir, "templates")
			templateChartsDir := filepath.Join(templatesDir, "charts")

			// Otherwise the below Rename fail due to missing destination `templates` directory when
			// the original chart had no `templates` directory. Yes, that's a valid chart.
			if err := os.MkdirAll(templatesDir, 0755); err != nil {
				return err
			}

			if err := os.Rename(chartsDir, templateChartsDir); err != nil {
				return err
			}
		}
	}

	return nil
}

// hasChartLock reports whether a Chart.lock or requirements.lock file exists in the
// given chart directory. Helm uses Chart.lock for apiVersion v2 charts and the legacy
// requirements.lock for v1 charts; either is sufficient for `helm dependency build`.
func hasChartLock(chartDir string) bool {
	for _, name := range []string{"Chart.lock", "requirements.lock"} {
		if _, err := os.Stat(filepath.Join(chartDir, name)); err == nil {
			return true
		}
	}
	return false
}

// isLockOutOfSyncErr returns true when the error from `helm dependency build` indicates
// that the lock file is out of sync with Chart.yaml. Only this specific failure is safe
// to recover from by falling back to `helm dependency up`.
// Matches messages from Helm 3.x ("out of sync") and Helm 2.x ("lock file is out of date").
func isLockOutOfSyncErr(err error) bool {
	msg := err.Error()
	return strings.Contains(msg, "out of sync") || strings.Contains(msg, "lock file is out of date")
}

func createDirForFile(f string) error {
	dstFileDir := filepath.Dir(f)
	if _, err := os.Lstat(dstFileDir); err == nil {

	} else if os.IsNotExist(err) {
		if err := os.MkdirAll(dstFileDir, 0755); err != nil {
			return fmt.Errorf("creating directory %s: %v", dstFileDir, err)
		}
	} else {
		return fmt.Errorf("checking directory %s: %v", dstFileDir, err)
	}

	return nil
}

// copyToTempDir checks if the path is local or a repo (in this order) and copies it to a temp directory
// It will perform a `helm fetch` if required
func (r *Runner) copyToTempDir(path, tempDir, chartVersion string) (string, error) {
	exists, err := r.Exists(path)
	if err != nil {
		return "", err
	}
	if !exists {
		return r.fetchAndUntarUnderDir(path, tempDir, chartVersion)
	}
	err = copy.Copy(path, tempDir)
	if err != nil {
		return "", err
	}
	return tempDir, nil
}

func (r *Runner) fetchAndUntarUnderDir(chart, tempDir, chartVersion string) (string, error) {
	helmVersionConstraint, _ := semver.NewConstraint(">= 3.7.0")
	helmVersion, err := r.DetectHelmVersion()
	if err != nil {
		return "", err
	}
	var helmPullCommand []string
	if helmVersionConstraint.Check(helmVersion) {
		helmPullCommand = []string{"pull", chart, "--untar", "-d", tempDir}

		if chartVersion != "" {
			helmPullCommand = append(helmPullCommand, "--version", chartVersion)
		}
	} else {
		helmPullCommand = []string{"chart", "pull", chart}
	}

	if _, err := r.run(map[string]string{}, r.helmBin(), helmPullCommand...); err != nil {
		return "", err
	}

	if !helmVersionConstraint.Check(helmVersion) {
		helmExportCommand := []string{"chart", "export", chart, "--destination", tempDir}
		if _, err := r.run(map[string]string{}, r.helmBin(), helmExportCommand...); err != nil {
			return "", err
		}
	}

	files, err := r.ReadDir(tempDir)
	if err != nil {
		return "", err
	}

	if len(files) != 1 {
		return "", fmt.Errorf("%d additional files found in temp directory. This is very strange", len(files)-1)
	}

	return filepath.Join(tempDir, files[0].Name()), nil
}