Add deep-merge of values, and allow empty values file

flux_local/values.py

@@ -173,6 +173,19 @@ def _lookup_value_reference(
 
     return found_value
 
+def deep_merge(base: dict, override: dict) -> dict:
+    """
+    Recursively merge two dictionaries, similar to how Helm merges values.
+    Lists are replaced entirely (Helm behavior).
+    """
+    result = base.copy()
+    for key, value in override.items():
+        if key in result and isinstance(result[key], dict) and isinstance(value, dict):
+            result[key] = deep_merge(result[key], value)
+        else:
+            result[key] = value
+    return result
+
 
 def _update_helmrelease_values(
     ref: ValuesReference,
@@ -196,15 +209,17 @@ def _update_helmrelease_values(
         inner_values[parts[-1]] = found_value
     else:
         obj = yaml.load(found_value, Loader=yaml.SafeLoader)
-        if not obj or not isinstance(obj, dict):
+        # Handle empty YAML file case
+        if obj is None:
+            obj = {}
+        if not isinstance(obj, dict):
             raise InputException(
                 f"Expected '{ref.name}' field '{ref.target_path}' values to be valid yaml, found {type(values)}"
             )
-        values.update(obj)
+        values = deep_merge(values, obj)
 
     return values
 
-
 def expand_value_references(
     helm_release: HelmRelease, kustomization: Kustomization
 ) -> HelmRelease:
@@ -286,3 +301,4 @@ def expand_postbuild_substitute_reference(
     _LOGGER.debug("update_postbuild_substitutions=%s", values)
     ks.update_postbuild_substitutions(values)
     return ks
+

tests/testdata/cluster8/apps/podinfo-values.yaml

@@ -9,7 +9,7 @@ data:
     redis:
       enabled: true
       repository: public.ecr.aws/docker/library/redis
-      tag: 7.0.6
+      tag: 7.0.5
     ingress:
       enabled: true
       className: nginx
@@ -18,3 +18,8 @@ data:
           paths:
             - path: /
               pathType: ImplementationSpecific
+  empty-values.yaml: ""
+  patch-values.yaml: |-
+    redis:
+      tag: 7.0.6
+

tests/testdata/cluster8/apps/podinfo.yaml

@@ -31,8 +31,15 @@ spec:
   valuesFrom:
     - kind: ConfigMap
       name: podinfo-values
+    - kind: ConfigMap
+      name: podinfo-values
+      valuesKey: empty-values.yaml
+    - kind: ConfigMap
+      name: podinfo-values
+      valuesKey: patch-values.yaml
     - kind: Secret
       name: podinfo-tls-values
       valuesKey: crt
       targetPath: tls.crt
       optional: true
+

tests/tool/__snapshots__/test_build.ambr

@@ -948,6 +948,12 @@
     valuesFrom:
     - kind: ConfigMap
       name: podinfo-values
+    - kind: ConfigMap
+      name: podinfo-values
+      valuesKey: empty-values.yaml
+    - kind: ConfigMap
+      name: podinfo-values
+      valuesKey: patch-values.yaml
     - kind: Secret
       name: podinfo-tls-values
       optional: true
@@ -956,11 +962,15 @@
   ---
   apiVersion: v1
   data:
+    empty-values.yaml: ""
+    patch-values.yaml: |-
+      redis:
+        tag: 7.0.6
     values.yaml: |-
       redis:
         enabled: true
         repository: public.ecr.aws/docker/library/redis
-        tag: 7.0.6
+        tag: 7.0.5
       ingress:
         enabled: true
         className: nginx
@@ -6333,6 +6343,12 @@
     valuesFrom:
     - kind: ConfigMap
       name: podinfo-values
+    - kind: ConfigMap
+      name: podinfo-values
+      valuesKey: empty-values.yaml
+    - kind: ConfigMap
+      name: podinfo-values
+      valuesKey: patch-values.yaml
     - kind: Secret
       name: podinfo-tls-values
       optional: true
@@ -6341,11 +6357,15 @@
   ---
   apiVersion: v1
   data:
+    empty-values.yaml: ""
+    patch-values.yaml: |-
+      redis:
+        tag: 7.0.6
     values.yaml: |-
       redis:
         enabled: true
         repository: public.ecr.aws/docker/library/redis
-        tag: 7.0.6
+        tag: 7.0.5
       ingress:
         enabled: true
         className: nginx