From 5b3fb02758dea3d89da7afbeadf9d3484fa87ac3 Mon Sep 17 00:00:00 2001
From: Simon Leiner <simon@leiner.me>
Date: Wed, 15 Jul 2026 13:34:20 +0200
Subject: [PATCH] helm-secrets: Fix CLI compatibility with Helm v4

While introducing support for Helm v4, helm-secrets has split
up into multiple plugins [1], with the the v4-compatible
manifest residing at "plugins/helm-secrets-cli/plugin.yaml"
[2] in the source repo, while the manifest in the root
directory [3] is compatible to Helm v3, not v4.

This patch is minimally invasive and only restores the CLI;
getter and post-renderer do not become available through this.

[1]: https://github.com/jkroepke/helm-secrets/wiki/Installation#helm-4
[2]: https://github.com/jkroepke/helm-secrets/blob/main/plugins/helm-secrets-cli/plugin.yaml
[3]: https://github.com/jkroepke/helm-secrets/blob/main/plugin.yaml

Fixes: https://github.com/NixOS/nixpkgs/issues/536239
---
 .../networking/cluster/helm/plugins/helm-secrets.nix          | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/networking/cluster/helm/plugins/helm-secrets.nix b/pkgs/applications/networking/cluster/helm/plugins/helm-secrets.nix
index 6395244fe708..7b23822646e0 100644
--- a/pkgs/applications/networking/cluster/helm/plugins/helm-secrets.nix
+++ b/pkgs/applications/networking/cluster/helm/plugins/helm-secrets.nix
@@ -40,8 +40,8 @@ stdenv.mkDerivation rec {
     runHook preInstall
 
     install -dm755 $out/helm-secrets $out/helm-secrets/scripts
-    install -m644 -Dt $out/helm-secrets plugin.yaml
-    cp -r scripts/* $out/helm-secrets/scripts
+    install -m644 -Dt $out/helm-secrets plugins/helm-secrets-cli/plugin.yaml
+    cp -r plugins/helm-secrets-cli/scripts/* $out/helm-secrets/scripts
     wrapProgram $out/helm-secrets/scripts/run.sh \
         --prefix PATH : ${
           lib.makeBinPath [