fix, changelog (#504)

changelog/v0.34.6/gme-12164_fix-platform-helm-install.yaml

@@ -0,0 +1,5 @@
+changelog:
+- type: FIX
+  issueLink: https://github.com/solo-io/gloo-mesh-enterprise/issues/12164
+  resolvesIssue: false
+  description: Prefix some lines declaring new vars with '#' in helm templates to avoid printing variable values in yaml. See issue description for more context. 

codegen/templates/chart/operator-rbac.yamltmpl

@@ -81,10 +81,11 @@ We need the following variables:
   1. map of namespace -> list of resources
   2. list of resources to be namespace restricted
   3. list of namespaced resources that the operator supports
+Prefixed with '#' to avoid printing variable values in yaml, per https://github.com/solo-io/gloo-mesh-enterprise/issues/12164
 */ -]]
-{{- $[[ $operatorVar ]]NsToResources := dict }}
-{{- $[[ $operatorVar ]]NamespacedResources := list }}
-{{- $[[ $operatorVar ]]SupportedResources := list }}
+#{{- $[[ $operatorVar ]]NsToResources := dict }}
+#{{- $[[ $operatorVar ]]NamespacedResources := list }}
+#{{- $[[ $operatorVar ]]SupportedResources := list }}
 [[- range $resource, $_ := $operator.NamespaceRbac ]]
 {{- $[[ $operatorVar ]]SupportedResources = append $[[ $operatorVar ]]SupportedResources [[ quote $resource ]] }}
 [[- end ]]

codegen/test/chart/templates/rbac.yaml

@@ -36,9 +36,9 @@ roleRef:
   name: painter-{{ default .Release.Namespace $painter.namespace }}
   apiGroup: rbac.authorization.k8s.io
 
-{{- $painterNsToResources := dict }}
-{{- $painterNamespacedResources := list }}
-{{- $painterSupportedResources := list }}
+#{{- $painterNsToResources := dict }}
+#{{- $painterNamespacedResources := list }}
+#{{- $painterSupportedResources := list }}
 {{- $painterSupportedResources = append $painterSupportedResources "secrets" }}
 
 {{- range $entry := $painter.namespacedRbac }}