Helm 3 Deep Dive
Talkat KubeCon + CloudNativeCon North America 2019 · on Wednesday, 2019-11-20· at 16:25· Exhibit Hall AB - San Diego Convention Center, Ground Level·
summary
Helm 3 is released with no more Tiller and a client-only architecture; release metadata moves from ConfigMaps to per-namespace Kubernetes Secrets and follows the XDG config spec. Charts require apiVersion v2, add a new type: application|library, consolidate dependencies into Chart.yaml, and support JSON Schema value validation. Upgrades use a three-way merge to preserve injected sidecars, tests run as Jobs, OCI registry support is experimental, a go SDK exists, and a helm-2to3 plugin migrates v2 release history. Security shifts to kubeconfig-derived per-user RBAC and a third-party audit finds it production-fit.
AI-written summary · about
chapters (15)
- 0:00Intro
- 1:15Helm Trigger Release
- 3:49Chart Updates
- 11:44Architecture Changes
- 14:33Release Object
- 17:07Backwards Compatibility
- 17:19CRDS Directory
- 18:22DevOps Patterns
- 19:01CLI
- 20:28Migrations
- 22:53Straggler Pattern
- 27:05Helm 3 Security
- 28:25Helm 3 Security Model
- 29:43Recap
- 33:12Whats next
