helm-charts

The central repository for every metio Helm chart. Source repositories build and publish container images; this repository builds and publishes the charts that deploy them. The two are versioned and released independently.

See docs/design.md for the full design — layout, versioning, CRD provenance, CI, and release flow.

Charts

Chart	Deploys	OCI artifact	ArtifactHub
jaas	JaaS — Jsonnet-as-a-Service	oci://ghcr.io/metio/helm-charts/jaas	jaas
stageset-controller	stageset-controller — ordered, gated Flux deployments	oci://ghcr.io/metio/helm-charts/stageset-controller	stageset-controller
joi	jsonnet-oci-images as Flux OCIRepository + JaaS JsonnetLibrary pairs	oci://ghcr.io/metio/helm-charts/joi	joi

Install a chart straight from its OCI location:

helm upgrade --install jaas oci://ghcr.io/metio/helm-charts/jaas

Each release is cosign-signed; the GitHub Release for a chart version carries the exact cosign verify command and a link to that chart's MIGRATIONS.md.

Versioning

A chart's version is calendar-plus-time (%Y.%-m.%-d+%H%M%S, e.g. 2026.6.16+142305) stamped at release; its appVersion is the image it deploys, committed and bumped by Renovate. A chart is re-released only when its templates change or its appVersion advances.

Development

Tooling runs in a containerized ilo dev shell — no host toolchain required:

ilo bash -c 'ct lint --config ct.yaml'                       # lint changed charts
ilo bash -c 'helm unittest charts/jaas'                       # template assertions + snapshots
ilo bash -c 'helm-schema -c charts/jaas -k additionalProperties'  # regenerate values.schema.json
ilo bash -c 'helm template release-x charts/jaas | kube-score score -'  # static analysis

License

0BSD — the repository is REUSE compliant; see REUSE.toml for per-path metadata.