helm-charts

The central repository for every metio Helm chart. Source repositories build and publish container images; this repository builds and publishes the charts that deploy them. The two are versioned and released independently.

See docs/design.md for the full design — layout, versioning, CRD provenance, CI, and release flow.

Charts

Chart	Deploys	OCI artifact	ArtifactHub
jaas	JaaS — Jsonnet-as-a-Service	oci://ghcr.io/metio/helm-charts/jaas	jaas
stageset-controller	stageset-controller — ordered, gated Flux deployments	oci://ghcr.io/metio/helm-charts/stageset-controller	stageset-controller
joi	jsonnet-oci-images as Flux OCIRepository + JaaS JsonnetLibrary pairs	oci://ghcr.io/metio/helm-charts/joi	joi
tik	tik — process tracker as append-only, content-addressed event logs (stage derived, never stored)	oci://ghcr.io/metio/helm-charts/tik	tik

Install a chart straight from its OCI location:

helm upgrade --install jaas oci://ghcr.io/metio/helm-charts/jaas

Each release is cosign-signed; the GitHub Release for a chart version carries the exact cosign verify command and a link to that chart's MIGRATIONS.md.

Versioning

A chart's version is calendar-plus-time (%Y.%-m.%-d+%H%M%S, e.g. 2026.6.16+142305) stamped at release; its appVersion is the image it deploys, committed and bumped by Renovate. A chart is re-released only when its templates change or its appVersion advances.

Development

The toolchain is a nix flake — no host tools required beyond nix. Run any gate through the devShell:

nix develop --command chart-static jaas   # ct lint + unittest + helm-docs + kube-score + kubeconform
nix develop --command helm unittest charts/jaas             # template assertions + snapshots
nix develop --command helm-schema -c charts/jaas -k additionalProperties  # regenerate values.schema.json
nix develop --command helm template release-x charts/jaas   # render a chart with defaults

Or nix develop to drop into the shell (it prints the command menu) and run tools bare.

License

0BSD — the repository is REUSE compliant; see REUSE.toml for per-path metadata.