Helm

Helm is the Kubernetes Package Manager.

The Helm Quickstart Guide contains all required information use the tool. We recommend using helm v3 which no longer requires the tiller component.

Managing Secrets

We recommend relying on SOPS and the Barbican plugin, you can find instructions and an example in our gitops-getting-started.

The previous helm barbican plugin is now being deprecated in favor of SOPS.

Chart Repositories

We host a set of useful repositories, including a CERN specific one.

Here's an example setup:

helm repo list
NAME            URL
cern            https://registry.cern.ch/chartrepo/cern
openstack-infra https://registry.cern.ch/chartrepo/openstack-infra
openstack       https://registry.cern.ch/chartrepo/openstack

To check all available charts, try helm search.

Chart Provenance

Charts hosted under registry.cern.ch are signed and provenance can be checked using the --verify option. As an example when deploying eosxd:

helm install --verify cern/eosxd

GitOps

GitOps is the principle of relying on a git repo as the source of truth for the configuration and deployment of your application.

We've prepared an example setup and instructions you can use as a starting point to do the same for your own application, check it out: https://gitlab.cern.ch/helm/releases/gitops-getting-started.