helm

# Helm Charts Create, test, secure, and publish Helm charts. Covers Helm 4 (November 2025), OCI distribution, OpenShift compatibility, and production patterns from Bitnami, Cilium, cert-manager, and ArgoCD. **Authoring only.** This skill is for charts you write. Consuming someone else's chart routes elsewhere in the `k8s` plugin: delivering it through GitOps is **`argo-cd-apps`**, making it survive OpenShift's SCCs and arbitrary UIDs is **`openshift-app`**, and checking a chart's version against the rest of the stack before an upgrade is **`k8s-components-checker`**. "How do I set this value in chart X" is usually not a chart-authoring question. ## Quick Decision Guide | Task | Go to | |------|-------| | Create a new chart from scratch | § Chart Scaffold below | | Structure values.yaml, helpers, labels | `references/chart-structure.md` | | Harden security (SecurityContext, RBAC, NetworkPolicy) | `references/security.md` | | Sign and verify charts (cosign, OCI) | `references/security.md` § Supply Chain | | Make chart work on OpenShift | `references/openshift.md` | | Write tests (unittest, ct, kubeconform) | `references/testing-ci.md` § Testing | | Set up CI/CD (lint, test, release, OCI push) | `references/testing-ci.md` § CI/CD | | Integrate release-please with Helm charts | `references/testing-ci.md` § Release-Please Integration | | Add ServiceMonitor, HPA, persistence, extensions | `references/production-patterns.md` | | Manage CRDs properly | `references/chart-structure...