Files
renovate/lib/modules/datasource/helm
RahulGautamSingh c6578a476b feat(datasource/helm): support aws s3 as helm charts repository (#45584)
* support AWS S3 as a chart repository

* support creds via hostRules

* apply suggestions

* fix(datasource/helm): classify s3 lookup errors

* test: use await expect().resolves
2026-09-07 14:04:08 +00:00
..

This datasource reads index.yaml from a Helm chart repository.

Amazon S3 repositories

In addition to HTTP(S) repositories, an s3:// registry URL is supported, so charts hosted in an Amazon S3 bucket (or an S3-compatible backend) can be looked up:

dependencies:
  - name: my-chart
    version: 1.0.0
    repository: s3://my-bucket/charts

Renovate then reads s3://my-bucket/charts/index.yaml with the AWS SDK, which signs the request with AWS Signature Version 4. See Calling AWS Services from Renovate for how to configure your credentials.

For S3-compatible backends, set the self-hosted s3Endpoint and s3PathStyle configuration options.

You can also provide credentials specifically for a bucket with a hostRules entry. Set hostType to helm, matchHost to the bucket name, username to the access key ID, password to the secret access key, and optionally token to the session token:

{
  "hostRules": [
    {
      "hostType": "helm",
      "matchHost": "my-bucket",
      "username": "AKIAIOSFODNN7EXAMPLE",
      "password": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
    }
  ]
}

If no matching host rule provides both username and password, the default AWS credential provider chain is used.