Godep is also fine, no real issues with dependencies here.

I've ran into some pretty gnarly issues vendoring both helm and Kubernetes in the same project. Your luck really depends on the dependency graph for the stuff you are vendoring.

Ah yes. Vendoring things that themselves vendor other libraries gets very hairy.