Hide `release plan` diffs for chosen fields

[maxout123]

Before proceeding

• I didn't find a similar issue

Problem

Need a way to ignore some changes in "nelm release plan install" diff.
Helm has --suppress-output-line-regex flag for that.
It would be perfect if resource will be completely hidden from diff when it only differs by lines suppressed by this option.

Solution (if you have one)

No response

Additional information

No response

[ilya-lesikov]

Can be solved with annotation like werf.io/no-diff-paths: $.spec.template.spec.containers[*].env[*].value, which will allow to hide some fields of the resources, or resources as a whole, from release plan diff output.

[vizh]

This is a long-awaited feature. Would really appreciate the implementation! @ilya-lesikov variant looks good.

[ilya-lesikov]

We've recently added werf.io/sensitive-paths, which is probably exactly what you need. I guess I can close this issue.

[vizh]

The werf.io/sensitive-paths label is for masking sensitive data without being able to see that it was changed. A very useful feature, we use it, but for other scenarios.

I would really like to hide from the release plan report usual changes that occur with every project deployment. For example, if only $.spec.template.spec.containers[*].image changed in the plan, then hide these changes and not display them in diff.

This would make it more visible when unusual changes occur, allowing for faster plan reviews and more focused analysis.

[maxout123]

Sure, +1 for previous post, we need to completely hide some changes as if they doesn't exist at all.
Here is how helm diff does it:

test, web-app, ExternalSecret (external-secrets.io) has changed:

Just one line about a change, with empty content part.

And here is nelm:

┌ Update ExternalSecret/web-app
│   kind: ExternalSecret
│   metadata:
│     annotations:
│ -     force-sync: SENSITIVE (19 bytes, aa42432d7a8d)
│ +     force-sync: SENSITIVE (19 bytes, 0743801c1b95)
│     labels:
│       app: web-app
│       app.kubernetes.io/instance: preprod
└ Update ExternalSecret/web-app

The task initially was to hide all of these lines.

[maxout123]

It may be acceptable like:

┌ Update ExternalSecret/web-app
│ <hidden insignificant changes>
└ Update ExternalSecret/web-app

but definitely not as werf.io/sensitive-paths annotation does