Helm Charts

Appearance

Changelog ​

2026-06-02 ​

Standard ​

  • Ingress TLS smart defaults: tls: now accepts four forms. tls: (null) or tls: true auto-derives hosts from ingress.hosts and sets secretName to <fullname>-tls — the bare key is enough to get cert-manager to pick up the ingress. List mode and dict mode each merge entries with the same defaults, so omitted hosts and secretName fields are filled in automatically. tls: false, tls: [], and tls: {} explicitly suppress the TLS block (clear convention).

  • Ingress service lookup nil guard: Rendering an ingress with no services defined no longer panics with "invalid value; expected string".

  • app.kubernetes.io/name now reflects the application, not the chart: When using the standard chart directly without nameOverride, the name label now uses the Helm release name instead of the meaningless value standard. Set nameOverride: backend (or your app name) in values.yaml to get a stable application identity across all environments.

  • nameOverride enables per-branch uniqueness in shared namespaces: nameOverride affects both the app.kubernetes.io/name label and the resource name suffix. With nameOverride: backend and release feat-xyz, resources are named feat-xyz-backend — unique per branch, stable app identity. In production where release equals the app name, deduplication produces just backend.

  • Ingress service fallback is now deterministic: When no service matches the ingress name, the fallback now always selects the alphabetically first service rather than relying on Go map iteration order.

2026-06-01 ​

Standard ​

  • volumes dict mode: volumes: now supports the same dict/list duality as env, envFrom, and volumeMounts. Dict keys are injected as the name field; list-mode passes through unchanged. Previously, a dict value produced invalid Kubernetes YAML (a map instead of a sequence). Default changed from {} to [].

  • test-connection respects enabled: false: The Helm test pod was generated for every service regardless of enabled: false. It now skips disabled services.

  • extraManifests: Render arbitrary Kubernetes resources alongside the chart's own output. Dict mode (recommended) automatically injects metadata.name, metadata.namespace, and standard labels — using the same naming rules as other resources, with user-provided metadata winning over auto-injected values. List mode passes resources through raw with tpl rendering for full control. Useful for NetworkPolicies, ExternalSecrets, ClusterRoles, BackendConfigs, or anything the chart does not natively support.

2026-05-31 ​

Standard ​

  • initContainers and sidecarContainers configure is opt-in: Both container types now use an empty configure: {} by default — no auto-mounting of variables, secrets, files, or PVCs unless explicitly enabled on the container. Regular containers continue to inherit the pod/global configure. Use Jobs with helm.sh/hook for tasks like DB migrations that need app config; they run once per Helm operation rather than on every pod restart.

  • volumeMounts dict key as name: When volumeMounts is specified as a dict, the key is now injected as the name field (matching the behaviour of env and envFrom). List-style volumeMounts continues to pass through unchanged.

  • configure.env: Renamed from the undocumented configure.environment and now implemented. Set configure.env: false on a container to suppress the global env list from being applied. Container- and pod-level env are always respected regardless of this flag.

  • Ingress port name: The backend port name in generated Ingress rules is now resolved directly from the service port map keys instead of relying on a side-effect mutation from service.yaml. No change in rendered output.

  • volumeMounts guard: The volumeMounts: section no longer renders when all auto-mount flags (configure.files, configure.secretFiles) are disabled and no explicit mounts are defined, preventing an empty volumeMounts: null key in the container spec.

  • Nil pointer fix: deployment, cronJob, and job entries with a null value (e.g. deployments: { app: }) no longer crash. The null-guard merge now runs before the enabled check in all three templates.

  • standard.fullname: The chart name standard is now treated as a transparent wrapper. Resources no longer get a -standard suffix when the chart is used directly; the release name is used as the full name instead. All dependent charts that set chartName are unaffected.

  • ingress:: Single-ingress shorthand. Set ingress.hosts, ingress.className, ingress.annotations, and ingress.tls directly — injected into ingresses using the release name as key.

  • service:: Single-service shorthand. Set service.ports directly — injected into services using the release name as key.

  • deployment:: Single-deployment shorthand. Set deployment.containers, deployment.replicaCount, etc. directly — injected into deployments using the release name as key.

2026-04-15 ​

Standard ​

  • deployments[].autoscaling: Reworked HPA support to use autoscaling/v2. The scaleTargetRef is automatically populated from the deployment context. Defaults: minReplicas: 1, maxReplicas: 10. Added enabled flag to disable the HPA while keeping the config. Supports full metrics list (passed through), shorthand targetCPUUtilizationPercentage/targetMemoryUtilizationPercentage, and behavior (scaleUp/scaleDown policies).