mirror of https://github.com/helm/helm
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
573 lines
20 KiB
573 lines
20 KiB
# Charts
|
|
|
|
Helm uses a packaging format called _charts_. A chart is a collection of files
|
|
that describe a related set of Kubernetes resources. A single chart
|
|
might be used to deploy something simple, like a memcached pod, or
|
|
something complex, like a full web app stack with HTTP servers,
|
|
databases, caches, and so on.
|
|
|
|
Charts are created as files laid out in a particular directory tree,
|
|
then they can be packaged into versioned archives to be deployed.
|
|
|
|
This document explains the chart format, and provides basic guidance for
|
|
building charts with Helm.
|
|
|
|
## The Chart File Structure
|
|
|
|
A chart is organized as a collection of files inside of a directory. The
|
|
directory name is the name of the chart (without versioning information). Thus,
|
|
a chart describing Wordpress would be stored in the `wordpress/` directory.
|
|
|
|
Inside of this directory, Helm will expect a structure that matches this:
|
|
|
|
```
|
|
wordpress/
|
|
Chart.yaml # A YAML file containing information about the chart
|
|
LICENSE # OPTIONAL: A plain text file containing the license for the chart
|
|
README.md # OPTIONAL: A human-readable README file
|
|
values.yaml # The default configuration values for this chart
|
|
charts/ # OPTIONAL: A directory containing any charts upon which this chart depends.
|
|
templates/ # OPTIONAL: A directory of templates that, when combined with values,
|
|
# will generate valid Kubernetes manifest files.
|
|
templates/NOTES.txt # OPTIONAL: A plain text file containing short usage notes
|
|
```
|
|
|
|
Helm reserves use of the `charts/` and `templates/` directories, and of
|
|
the listed file names. Other files will be left as they are.
|
|
|
|
## The Chart.yaml File
|
|
|
|
The `Chart.yaml` file is required for a chart. It contains the following fields:
|
|
|
|
```yaml
|
|
name: The name of the chart (required)
|
|
version: A SemVer 2 version (required)
|
|
description: A single-sentence description of this project (optional)
|
|
keywords:
|
|
- A list of keywords about this project (optional)
|
|
home: The URL of this project's home page (optional)
|
|
sources:
|
|
- A list of URLs to source code for this project (optional)
|
|
maintainers: # (optional)
|
|
- name: The maintainer's name (required for each maintainer)
|
|
email: The maintainer's email (optional for each maintainer)
|
|
engine: gotpl # The name of the template engine (optional, defaults to gotpl)
|
|
icon: A URL to an SVG or PNG image to be used as an icon (optional).
|
|
```
|
|
|
|
If you are familiar with the `Chart.yaml` file format for Helm Classic, you will
|
|
notice that fields specifying dependencies have been removed. That is because
|
|
the new Chart format expresses dependencies using the `charts/` directory.
|
|
|
|
Other fields will be silently ignored.
|
|
|
|
### Charts and Versioning
|
|
|
|
Every chart must have a version number. A version must follow the
|
|
[SemVer 2](http://semver.org/) standard. Unlike Helm Classic, Kubernetes
|
|
Helm uses version numbers as release markers. Packages in repositories
|
|
are identified by name plus version.
|
|
|
|
For example, an `nginx` chart whose version field is set to `version:
|
|
1.2.3` will be named:
|
|
|
|
```
|
|
nginx-1.2.3.tgz
|
|
```
|
|
|
|
More complex SemVer 2 names are also supported, such as
|
|
`version: 1.2.3-alpha.1+ef365`. But non-SemVer names are explicitly
|
|
disallowed by the system.
|
|
|
|
**NOTE:** Whereas Helm Classic and Deployment Manager were both
|
|
very GitHub oriented when it came to charts, Kubernetes Helm does not
|
|
rely upon or require GitHub or even Git. Consequently, it does not use
|
|
Git SHAs for versioning at all.
|
|
|
|
The `version` field inside of the `Chart.yaml` is used by many of the
|
|
Helm tools, including the CLI and the Tiller server. When generating a
|
|
package, the `helm package` command will use the version that it finds
|
|
in the `Chart.yaml` as a token in the package name. The system assumes
|
|
that the version number in the chart package name matches the version number in
|
|
the `Chart.yaml`. Failure to meet this assumption will cause an error.
|
|
|
|
## Chart LICENSE, README and NOTES
|
|
|
|
Charts can also contain files that describe the installation, configuration, usage and license of a
|
|
chart. A README for a chart should be formatted in Markdown (README.md), and should generally
|
|
contain:
|
|
|
|
- A description of the application or service the chart provides
|
|
- Any prerequisites or requirements to run the chart
|
|
- Descriptions of options in `values.yaml` and default values
|
|
- Any other information that may be relevant to the installation or configuration of the chart
|
|
|
|
The chart can also contain a short plain text `templates/NOTES.txt` file that will be printed out
|
|
after installation, and when viewing the status of a release. This file is evaluated as a
|
|
[template](#templates-and-values), and can be used to display usage notes, next steps, or any other
|
|
information relevant to a release of the chart. For example, instructions could be provided for
|
|
connecting to a database, or accessing a web UI. Since this file is printed to STDOUT when running
|
|
`helm install` or `helm status`, it is recommended to keep the content brief and point to the README
|
|
for greater detail.
|
|
|
|
## Chart Dependencies
|
|
|
|
In Helm, one chart may depend on any number of other charts. These
|
|
dependencies are expressed explicitly by copying the dependency charts
|
|
into the `charts/` directory.
|
|
|
|
A dependency can be either a chart archive (`foo-1.2.3.tgz`) or an
|
|
unpacked chart directory. But its name cannot start with `_` or `.`.
|
|
Such files are ignored by the chart loader.
|
|
|
|
**Note:** The `dependencies:` section of the `Chart.yaml` from Helm
|
|
Classic has been completely removed.
|
|
|
|
For example, if the Wordpress chart depends on the Apache chart, the
|
|
Apache chart (of the correct version) is supplied in the Wordpress
|
|
chart's `charts/` directory:
|
|
|
|
```
|
|
wordpress:
|
|
Chart.yaml
|
|
requirements.yaml
|
|
# ...
|
|
charts/
|
|
apache/
|
|
Chart.yaml
|
|
# ...
|
|
mysql/
|
|
Chart.yaml
|
|
# ...
|
|
```
|
|
|
|
The example above shows how the Wordpress chart expresses its dependency
|
|
on Apache and MySQL by including those charts inside of its `charts/`
|
|
directory.
|
|
|
|
**TIP:** _To drop a dependency into your `charts/` directory, use the
|
|
`helm fetch` command or use a `requirements.yaml` file_
|
|
|
|
### Managing Dependencies with `requirements.yaml`
|
|
|
|
While Helm will allow you to manually manage your dependencies, the
|
|
preferred method of declaring dependencies is by using a
|
|
`requirements.yaml` file inside of your chart.
|
|
|
|
A `requirements.yaml` file is a simple file for listing your
|
|
dependencies.
|
|
|
|
```yaml
|
|
dependencies:
|
|
- name: apache
|
|
version: 1.2.3
|
|
repository: http://example.com/charts
|
|
- name: mysql
|
|
version: 3.2.1
|
|
repository: http://another.example.com/charts
|
|
```
|
|
|
|
- The `name` field is the name of the chart you want.
|
|
- The `version` field is the version of the chart you want.
|
|
- The `repository` field is the full URL to the chart repository. Note
|
|
that you must also use `helm repo add` to add that repo locally.
|
|
|
|
Once you have a dependencies file, you can run `helm dependency update`
|
|
and it will use your dependency file to download all of the specified
|
|
charts into your `charts/` directory for you.
|
|
|
|
```console
|
|
$ helm dep up foochart
|
|
Hang tight while we grab the latest from your chart repositories...
|
|
...Successfully got an update from the "local" chart repository
|
|
...Successfully got an update from the "stable" chart repository
|
|
...Successfully got an update from the "example" chart repository
|
|
...Successfully got an update from the "another" chart repository
|
|
Update Complete. Happy Helming!
|
|
Saving 2 charts
|
|
Downloading apache from repo http://example.com/charts
|
|
Downloading mysql from repo http://another.example.com/charts
|
|
```
|
|
|
|
When `helm dependency update` retrieves charts, it will store them as
|
|
chart archives in the `charts/` directory. So for the example above, one
|
|
would expect to see the following files in the charts directory:
|
|
|
|
```
|
|
charts/
|
|
apache-1.2.3.tgz
|
|
mysql-3.2.1.tgz
|
|
```
|
|
|
|
Managing charts with `requirements.yaml` is a good way to easily keep
|
|
charts updated, and also share requirements information throughout a
|
|
team.
|
|
|
|
## Templates and Values
|
|
|
|
Helm Chart templates are written in the
|
|
[Go template language](https://golang.org/pkg/text/template/), with the
|
|
addition of 50 or so add-on template
|
|
functions [from the Sprig library](https://github.com/Masterminds/sprig) and a
|
|
few other [specialized functions](charts_tips_and_tricks.md).
|
|
|
|
All template files are stored in a chart's `templates/` folder. When
|
|
Helm renders the charts, it will pass every file in that directory
|
|
through the template engine.
|
|
|
|
Values for the templates are supplied two ways:
|
|
|
|
- Chart developers may supply a file called `values.yaml` inside of a
|
|
chart. This file can contain default values.
|
|
- Chart users may supply a YAML file that contains values. This can be
|
|
provided on the command line with `helm install`.
|
|
|
|
When a user supplies custom values, these values will override the
|
|
values in the chart's `values.yaml` file.
|
|
|
|
### Template Files
|
|
|
|
Template files follow the standard conventions for writing Go templates
|
|
(see [the text/template Go package documentation](https://golang.org/pkg/text/template/)
|
|
for details).
|
|
An example template file might look something like this:
|
|
|
|
```yaml
|
|
apiVersion: v1
|
|
kind: ReplicationController
|
|
metadata:
|
|
name: deis-database
|
|
namespace: deis
|
|
labels:
|
|
heritage: deis
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
app: deis-database
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: deis-database
|
|
spec:
|
|
serviceAccount: deis-database
|
|
containers:
|
|
- name: deis-database
|
|
image: {{.Values.imageRegistry}}/postgres:{{.Values.dockerTag}}
|
|
imagePullPolicy: {{.Values.pullPolicy}}
|
|
ports:
|
|
- containerPort: 5432
|
|
env:
|
|
- name: DATABASE_STORAGE
|
|
value: {{default "minio" .Values.storage}}
|
|
```
|
|
|
|
The above example, based loosely on [https://github.com/deis/charts](https://github.com/deis/charts), is a template for a Kubernetes replication controller.
|
|
It can use the following four template values (usually defined in a
|
|
`values.yaml` file):
|
|
|
|
- `imageRegistry`: The source registry for the Docker image.
|
|
- `dockerTag`: The tag for the docker image.
|
|
- `pullPolicy`: The Kubernetes pull policy.
|
|
- `storage`: The storage backend, whose default is set to `"minio"`
|
|
|
|
All of these values are defined by the template author. Helm does not
|
|
require or dictate parameters.
|
|
|
|
To see many working charts, check out the [Kubernetes Charts
|
|
project](https://github.com/kubernetes/charts)
|
|
|
|
### Predefined Values
|
|
|
|
Values that are supplied via a `values.yaml` file (or via the `--set`
|
|
flag) are accessible from the `.Values` object in a template. But there
|
|
are other pre-defined pieces of data you can access in your templates.
|
|
|
|
The following values are pre-defined, are available to every template, and
|
|
cannot be overridden. As with all values, the names are _case
|
|
sensitive_.
|
|
|
|
- `Release.Name`: The name of the release (not the chart)
|
|
- `Release.Time`: The time the chart release was last updated. This will
|
|
match the `Last Released` time on a Release object.
|
|
- `Release.Namespace`: The namespace the chart was released to.
|
|
- `Release.Service`: The service that conducted the release. Usually
|
|
this is `Tiller`.
|
|
- `Release.IsUpgrade`: This is set to true if the current operation is an upgrade or rollback.
|
|
- `Release.IsInstall`: This is set to true if the current operation is an
|
|
install.
|
|
- `Release.Revision`: The revision number. It begins at 1, and increments with
|
|
each `helm upgrade`.
|
|
- `Chart`: The contents of the `Chart.yaml`. Thus, the chart version is
|
|
obtainable as `Chart.Version` and the maintainers are in
|
|
`Chart.Maintainers`.
|
|
- `Files`: A map-like object containing all non-special files in the chart. This
|
|
will not give you access to templates, but will give you access to additional
|
|
files that are present. Files can be accessed using `{{index .Files "file.name"}}`
|
|
or using the `{{.Files.Get name}}` or `{{.Files.GetString name}}` functions. You can
|
|
also access the contents of the file as `[]byte` using `{{.Files.GetBytes}}`
|
|
- `Capabilities`: A map-like object that contains information about the versions
|
|
of Kubernetes (`{{.Capabilities.KubeVersion}}`, Tiller
|
|
(`{{.Capabilities.TillerVersion}}`, and the supported Kubernetes API versions
|
|
(`{{.Capabilities.APIVersions.Has "batch/v1"`)
|
|
|
|
**NOTE:** Any unknown Chart.yaml fields will be dropped. They will not
|
|
be accessible inside of the `Chart` object. Thus, Chart.yaml cannot be
|
|
used to pass arbitrarily structured data into the template. The values
|
|
file can be used for that, though.
|
|
|
|
### Values files
|
|
|
|
Considering the template in the previous section, a `values.yaml` file
|
|
that supplies the necessary values would look like this:
|
|
|
|
```yaml
|
|
imageRegistry: "quay.io/deis"
|
|
dockerTag: "latest"
|
|
pullPolicy: "alwaysPull"
|
|
storage: "s3"
|
|
```
|
|
|
|
A values file is formatted in YAML. A chart may include a default
|
|
`values.yaml` file. The Helm install command allows a user to override
|
|
values by supplying additional YAML values:
|
|
|
|
```console
|
|
$ helm install --values=myvals.yaml wordpress
|
|
```
|
|
|
|
When values are passed in this way, they will be merged into the default
|
|
values file. For example, consider a `myvals.yaml` file that looks like
|
|
this:
|
|
|
|
```yaml
|
|
storage: "gcs"
|
|
```
|
|
|
|
When this is merged with the `values.yaml` in the chart, the resulting
|
|
generated content will be:
|
|
|
|
```yaml
|
|
imageRegistry: "quay.io/deis"
|
|
dockerTag: "latest"
|
|
pullPolicy: "alwaysPull"
|
|
storage: "gcs"
|
|
```
|
|
|
|
Note that only the last field was overridden.
|
|
|
|
**NOTE:** The default values file included inside of a chart _must_ be named
|
|
`values.yaml`. But files specified on the command line can be named
|
|
anything.
|
|
|
|
**NOTE:** If the `--set` flag is used on `helm install` or `helm upgrade`, those
|
|
values are simply converted to YAML on the client side.
|
|
|
|
Any of these values are then accessible inside of templates using the
|
|
`.Values` object:
|
|
|
|
```yaml
|
|
apiVersion: v1
|
|
kind: ReplicationController
|
|
metadata:
|
|
name: deis-database
|
|
namespace: deis
|
|
labels:
|
|
heritage: deis
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
app: deis-database
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: deis-database
|
|
spec:
|
|
serviceAccount: deis-database
|
|
containers:
|
|
- name: deis-database
|
|
image: {{.Values.imageRegistry}}/postgres:{{.Values.dockerTag}}
|
|
imagePullPolicy: {{.Values.pullPolicy}}
|
|
ports:
|
|
- containerPort: 5432
|
|
env:
|
|
- name: DATABASE_STORAGE
|
|
value: {{default "minio" .Values.storage}}
|
|
|
|
```
|
|
|
|
### Scope, Dependencies, and Values
|
|
|
|
Values files can declare values for the top-level chart, as well as for
|
|
any of the charts that are included in that chart's `charts/` directory.
|
|
Or, to phrase it differently, a values file can supply values to the
|
|
chart as well as to any of its dependencies. For example, the
|
|
demonstration Wordpress chart above has both `mysql` and `apache` as
|
|
dependencies. The values file could supply values to all of these
|
|
components:
|
|
|
|
```yaml
|
|
title: "My Wordpress Site" # Sent to the Wordpress template
|
|
|
|
mysql:
|
|
max_connections: 100 # Sent to MySQL
|
|
password: "secret"
|
|
|
|
apache:
|
|
port: 8080 # Passed to Apache
|
|
```
|
|
|
|
Charts at a higher level have access to all of the variables defined
|
|
beneath. So the wordpress chart can access the MySQL password as
|
|
`.Values.mysql.password`. But lower level charts cannot access things in
|
|
parent charts, so MySQL will not be able to access the `title` property. Nor,
|
|
for that matter, can it access `apache.port`.
|
|
|
|
Values are namespaced, but namespaces are pruned. So for the Wordpress
|
|
chart, it can access the MySQL password field as `.Values.mysql.password`. But
|
|
for the MySQL chart, the scope of the values has been reduced and the
|
|
namespace prefix removed, so it will see the password field simply as
|
|
`.Values.password`.
|
|
|
|
#### Global Values
|
|
|
|
As of 2.0.0-Alpha.2, Helm supports special "global" value. Consider
|
|
this modified version of the previous example:
|
|
|
|
```yaml
|
|
title: "My Wordpress Site" # Sent to the Wordpress template
|
|
|
|
global:
|
|
app: MyWordpress
|
|
|
|
mysql:
|
|
max_connections: 100 # Sent to MySQL
|
|
password: "secret"
|
|
|
|
apache:
|
|
port: 8080 # Passed to Apache
|
|
```
|
|
|
|
The above adds a `global` section with the value `app: MyWordpress`.
|
|
This value is available to _all_ charts as `.Values.global.app`.
|
|
|
|
For example, the `mysql` templates may access `app` as `{{.Values.global.app}}`, and
|
|
so can the `apache` chart. Effectively, the values file above is
|
|
regenerated like this:
|
|
|
|
```yaml
|
|
title: "My Wordpress Site" # Sent to the Wordpress template
|
|
|
|
global:
|
|
app: MyWordpress
|
|
|
|
mysql:
|
|
global:
|
|
app: MyWordpress
|
|
max_connections: 100 # Sent to MySQL
|
|
password: "secret"
|
|
|
|
apache:
|
|
global:
|
|
app: MyWordpress
|
|
port: 8080 # Passed to Apache
|
|
```
|
|
|
|
This provides a way of sharing one top-level variable with all
|
|
subcharts, which is useful for things like setting `metadata` properties
|
|
like labels.
|
|
|
|
If a subchart declares a global variable, that global will be passed
|
|
_downward_ (to the subchart's subcharts), but not _upward_ to the parent
|
|
chart. There is no way for a subchart to influence the values of the
|
|
parent chart.
|
|
|
|
_Global sections are restricted to only simple key/value pairs. They do
|
|
not support nesting._
|
|
|
|
For example, the following is **illegal** and will not work:
|
|
|
|
```yaml
|
|
global:
|
|
foo: # It is illegal to nest an object inside of global.
|
|
bar: baz
|
|
```
|
|
|
|
### References
|
|
|
|
When it comes to writing templates and values files, there are several
|
|
standard references that will help you out.
|
|
|
|
- [Go templates](https://godoc.org/text/template)
|
|
- [Extra template functions](https://godoc.org/github.com/Masterminds/sprig)
|
|
- [The YAML format](http://yaml.org/spec/)
|
|
|
|
## Using Helm to Manage Charts
|
|
|
|
The `helm` tool has several commands for working with charts.
|
|
|
|
It can create a new chart for you:
|
|
|
|
```console
|
|
$ helm create mychart
|
|
Created mychart/
|
|
```
|
|
|
|
Once you have edited a chart, `helm` can package it into a chart archive
|
|
for you:
|
|
|
|
```console
|
|
$ helm package mychart
|
|
Archived mychart-0.1.-.tgz
|
|
```
|
|
|
|
You can also use `helm` to help you find issues with your chart's
|
|
formatting or information:
|
|
|
|
```console
|
|
$ helm lint mychart
|
|
No issues found
|
|
```
|
|
|
|
## Chart Repositories
|
|
|
|
A _chart repository_ is an HTTP server that houses one or more packaged
|
|
charts. While `helm` can be used to manage local chart directories, when
|
|
it comes to sharing charts, the preferred mechanism is a chart
|
|
repository.
|
|
|
|
Any HTTP server that can serve YAML files and tar files and can answer
|
|
GET requests can be used as a repository server.
|
|
|
|
Helm comes with built-in package server for developer testing (`helm
|
|
serve`). The Helm team has tested other servers, including Google Cloud
|
|
Storage with website mode enabled, and S3 with website mode enabled.
|
|
|
|
A repository is characterized primarily by the presence of a special
|
|
file called `index.yaml` that has a list of all of the packages supplied
|
|
by the repository, together with metadata that allows retrieving and
|
|
verifying those packages.
|
|
|
|
On the client side, repositories are managed with the `helm repo`
|
|
commands. However, Helm does not provide tools for uploading charts to
|
|
remote repository servers. This is because doing so would add
|
|
substantial requirements to an implementing server, and thus raise the
|
|
barrier for setting up a repository.
|
|
|
|
## Chart Starter Packs
|
|
|
|
The `helm create` command takes an optional `--starter` option that lets you
|
|
specify a "starter chart".
|
|
|
|
Starters are just regular charts, but are located in `$HELM_HOME/starters`.
|
|
As a chart developer, you may author charts that are specifically designed
|
|
to be used as starters. Such charts should be designed with the following
|
|
considerations in mind:
|
|
|
|
- The `Chart.yaml` will be overwritten by the generator.
|
|
- Users will expect to modify such a chart's contents, so documentation
|
|
should indicate how users can do so.
|
|
|
|
Currently the only way to add a chart to `$HELM_HOME/starters` is to manually
|
|
copy it there. In your chart's documentation, you may want to explain that
|
|
process.
|