401 Unauthorized Error when reconciling Private HelmRepository

[haimari]

I set up ChartMuseum with Plain Auth.
I'm able to authenticate using curl command and to list/push/delete helm charts successfully.

Then I set up the Flux HelmRepository source according to the Docs Example

apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: HelmRepository
metadata:
  name: example-com-helm
  namespace: flux-system
spec:
  interval: 1m
  url: https://helm.example.com
  secretRef:
    name: https-credentials
  interval: 1m

I set up a secret in the flux-system namespace
(Without Any CA, only user and password data) and base64 the credentials before adding them.

---
apiVersion: v1
kind: Secret
metadata:
  name: https-credentials
  namespace: flux-system
type: Opaque
data:
  username: "XXXXXXXXXXXXXXXXXX"
  password: "XXXXXXXXXXXXXXXXXXXXXXXXXXXX"
  certFile: ""
  keyFile: ""
  caFile: ""

I'm facing this error:

{
	"level": "error",
	"ts": "2021-03-23T08:04:21.213Z",
	"logger": "controller.helmrepository",
	"msg": "Reconciler error",
	"reconciler group": "source.toolkit.fluxcd.io",
	"reconciler kind": "HelmRepository",
	"name": "example-com-helm",
	"namespace": "flux-system",
	"error": "failed to download repository index: failed to fetch https://helm.example.com/index.yaml : 401 Unauthorized"
}

What am I missing ?

[hiddeco]

Please make sure your credentials do not accidentally include a newline (base64 encoded string ends with Cg==).

[stefanprodan]

@haimari we provide a helper command to create secrets. Use flux create secret helm to avoid the newline kubectl issues.