SlideShare a Scribd company logo
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Helm 3
to Distant Shores
Navigating
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Bridget Kromhout Jessica Deen
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Outline
1.why Helm?
2.v3 overview
3.breaking changes
4.new features
5.what’s next?
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Spoilers
1.why Helm?
2.v3 overview
3.breaking changes
4.new features
5.what’s next?
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
consistent development repeatable deployment
containers solve problems
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
containers solve problemsdon’t
all
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
containers need orchestrating
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
“Kubernetes is an open-source
platform designed to automate
deploying, scaling, and operating
application containers."
Initial release: 7 June 2014
enter: k8s
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Image credit: James Ernest
managing your apps
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Find, share, and use software built for k8s
Manage complexity Easy updates
Simple sharing Rollbacks
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Manage complexity
Charts can describe complex apps;
provide repeatable app installs, and
serve as a single point of authority
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Easy updates
Take the pain out of updates with
in-place upgrades and custom hooks
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Simple sharing
Charts are easy to version, share,
and host on public or private servers
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Rollbacks
Use helm rollback to roll back to an
older version of a release with ease
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
v3 overview
- based on community best practices
- dramatic simplification
- architectural changes (security as priority)
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Simpler, more secure, production use cases
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Major refactor needed
Helm is almost as old as k8s
Predating CRDs and k8s RBAC!
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Replacing custom APIs for charts and deployments
with secrets
making Helm more k8s-native
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Inheriting security controls from kubeconfig
Using k8s RBAC to limit access & resources
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Farewell, Tiller
- simpler & more flexible architecture, security, &
upgrades
- now using Kubernetes API directly
- rendering Charts client-side; storing in release
- lowering the barrier of entry for contributors
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
CLI changes
helm delete ——-> helm uninstall
helm inspect ——-> helm show
helm fetch ——-> helm pull
--purge is now default (to override: helm uninstall --
keep-history)
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Warning! Breaking Changes!
(see https://github.com/helm/helm/blob/master/
CONTRIBUTING.md#semantic-versioning for
context)
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Namespaces changes
- defaulting to a single namespace for a release
and objects (no longer using the tiller namespace)
- creating resources in the same namespace as the
release
- this is why you can’t upgrade a helm 2 release
with helm 3 (migration story is in progress!)
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Chart dependency management
- Old style: requirements.yaml and requirements.lock
- New style: Chart.yaml and Chart.lock
(breaking change if you use helm dependency
subcommands)
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
--generate-name
- Old style: auto-generated unless overridden
- New style: error unless auto-generation requested
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Adventure! Excitement! Features!
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
- iterating on Helm Chart Repository API
- working towards compat with OCI standard
(eventually: pluggable auth! novel artifact types!
host on ACR!)
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Lua, in lieu of go templates (optionally)
Helm 2: late-binding error from k8s with a failed
release.
Helm 3: “Can I actually create these resources?”
could have a pre-install hook, see if “can I?” is true
or “Do these CRDs exist? If yes, don’t create
them.”
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Library chart support
- shared by other charts
- does not create any release artifacts of its own
- A library chart’s templates can only
declare define elements
- allows simpler code reuse
@bridgetkromhout @jldeen#kubecon@bridgetkromhout #kubecon
Demo time!
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
the future
“What’s next?”
Jed Bartlet, The West Wing
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Helm 3 alpha releases
alpha.1: tillerless, library charts, secrets storage
backend, beginning OCI groundwork (chart
commands)
alpha.2: Lua, XDG, start OCI integration (package,
install, dependency update)
alpha.3: refactoring upgrade logic (maybe with
server-side apply, 3-way diffs, etc), plugins written
in Lua
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
get involved!
- deep dive at 16:45 today in Hall 8.0 D4
- https://v3.helm.sh/docs/faq/
- helm.sh for community calls
- feedback on the alpha release (on new use
cases & workflows)
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
CFP till 31 May!
11-12 September 2019, in Amsterdam
https://helm.sh/blog/helm-summit-eu-2019/
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
To learn more…
Cloud Native Tooling
deislabs.io
Demo code
github.com/jldeen/helm3-demo
AKS docs
docs.microsoft.com/azure/aks
Microsoft Learn
aka.ms/k8slearning
@bridgetkromhout @jldeen#kubecon@bridgetkromhout @jldeen#kubecon
Cloud Native Tooling
deislabs.io
Demo code
github.com/jldeen/helm3-demo
AKS docs
docs.microsoft.com/azure/aks
Microsoft Learn
aka.ms/k8slearning
Thanks!

More Related Content

Similar to Helm 3: Navigating to Distant Shores (KubeCon EU 2019)

Docker in Production: Reality, Not Hype - DevOps Chicago
Docker in Production: Reality, Not Hype - DevOps ChicagoDocker in Production: Reality, Not Hype - DevOps Chicago
Docker in Production: Reality, Not Hype - DevOps Chicago
bridgetkromhout
 

Similar to Helm 3: Navigating to Distant Shores (KubeCon EU 2019) (20)

Cloud, Containers, Kubernetes (YOW Brisbane 2018)
Cloud, Containers, Kubernetes (YOW Brisbane 2018)Cloud, Containers, Kubernetes (YOW Brisbane 2018)
Cloud, Containers, Kubernetes (YOW Brisbane 2018)
 
Join Our Party: The Cloud Native Adventure Brigade (OSS 2019)
Join Our Party: The Cloud Native Adventure Brigade (OSS 2019)Join Our Party: The Cloud Native Adventure Brigade (OSS 2019)
Join Our Party: The Cloud Native Adventure Brigade (OSS 2019)
 
Cloud, Containers, Kubernetes (YOW Melbourne 2018)
Cloud, Containers, Kubernetes (YOW Melbourne 2018)Cloud, Containers, Kubernetes (YOW Melbourne 2018)
Cloud, Containers, Kubernetes (YOW Melbourne 2018)
 
Day 2 Kubernetes - Tools for Operability (Velocity London Meetup)
Day 2 Kubernetes - Tools for Operability (Velocity London Meetup)Day 2 Kubernetes - Tools for Operability (Velocity London Meetup)
Day 2 Kubernetes - Tools for Operability (Velocity London Meetup)
 
Day 2 Kubernetes - Tools for Operability (HashiConf)
Day 2 Kubernetes - Tools for Operability (HashiConf)Day 2 Kubernetes - Tools for Operability (HashiConf)
Day 2 Kubernetes - Tools for Operability (HashiConf)
 
Day 2 Kubernetes - Tools for Operability (QConSF)
Day 2 Kubernetes - Tools for Operability (QConSF)Day 2 Kubernetes - Tools for Operability (QConSF)
Day 2 Kubernetes - Tools for Operability (QConSF)
 
Kubernetes Operability Tooling (GOTO Chicago 2019)
Kubernetes Operability Tooling (GOTO Chicago 2019)Kubernetes Operability Tooling (GOTO Chicago 2019)
Kubernetes Operability Tooling (GOTO Chicago 2019)
 
Day 2 Kubernetes - Tools for Operability (KubeCon)
Day 2 Kubernetes - Tools for Operability (KubeCon)Day 2 Kubernetes - Tools for Operability (KubeCon)
Day 2 Kubernetes - Tools for Operability (KubeCon)
 
Droidcon Online 2020 quick summary
Droidcon Online 2020 quick summaryDroidcon Online 2020 quick summary
Droidcon Online 2020 quick summary
 
Kubernetes Operability Tooling (LEAP 2019)
Kubernetes Operability Tooling (LEAP 2019)Kubernetes Operability Tooling (LEAP 2019)
Kubernetes Operability Tooling (LEAP 2019)
 
KubeCon EU 2016: A Practical Guide to Container Scheduling
KubeCon EU 2016: A Practical Guide to Container SchedulingKubeCon EU 2016: A Practical Guide to Container Scheduling
KubeCon EU 2016: A Practical Guide to Container Scheduling
 
Kubernetes Operability Tooling (devopsdays Seattle 2019)
Kubernetes Operability Tooling (devopsdays Seattle 2019)Kubernetes Operability Tooling (devopsdays Seattle 2019)
Kubernetes Operability Tooling (devopsdays Seattle 2019)
 
Join Our Party: The Cloud Native Adventure Brigade (Kubernetes Belgium 2019)
Join Our Party: The Cloud Native Adventure Brigade (Kubernetes Belgium 2019)Join Our Party: The Cloud Native Adventure Brigade (Kubernetes Belgium 2019)
Join Our Party: The Cloud Native Adventure Brigade (Kubernetes Belgium 2019)
 
Join Our Party: The Cloud Native Adventure Brigade (devopsdays Philly 2019)
Join Our Party: The Cloud Native Adventure Brigade (devopsdays Philly 2019)Join Our Party: The Cloud Native Adventure Brigade (devopsdays Philly 2019)
Join Our Party: The Cloud Native Adventure Brigade (devopsdays Philly 2019)
 
the endless now: distributed systems & teams
the endless now: distributed systems & teamsthe endless now: distributed systems & teams
the endless now: distributed systems & teams
 
Handling GDPR with Apache Kafka: How to Comply Without Freaking Out? (David J...
Handling GDPR with Apache Kafka: How to Comply Without Freaking Out? (David J...Handling GDPR with Apache Kafka: How to Comply Without Freaking Out? (David J...
Handling GDPR with Apache Kafka: How to Comply Without Freaking Out? (David J...
 
eStargzイメージとlazy pullingによる高速なコンテナ起動
eStargzイメージとlazy pullingによる高速なコンテナ起動eStargzイメージとlazy pullingによる高速なコンテナ起動
eStargzイメージとlazy pullingによる高速なコンテナ起動
 
Kubernetes: Learning from Zero to Production
Kubernetes: Learning from Zero to ProductionKubernetes: Learning from Zero to Production
Kubernetes: Learning from Zero to Production
 
Docker in Production: Reality, Not Hype - DevOps Chicago
Docker in Production: Reality, Not Hype - DevOps ChicagoDocker in Production: Reality, Not Hype - DevOps Chicago
Docker in Production: Reality, Not Hype - DevOps Chicago
 
Using Spinnaker to Create a Development Workflow on Kubernetes - Paul Czarkowski
Using Spinnaker to Create a Development Workflow on Kubernetes - Paul CzarkowskiUsing Spinnaker to Create a Development Workflow on Kubernetes - Paul Czarkowski
Using Spinnaker to Create a Development Workflow on Kubernetes - Paul Czarkowski
 

More from bridgetkromhout

More from bridgetkromhout (15)

devops, distributed (devopsdays Ghent 2019)
devops, distributed (devopsdays Ghent 2019)devops, distributed (devopsdays Ghent 2019)
devops, distributed (devopsdays Ghent 2019)
 
Join Our Party: The Cloud Native Adventure Brigade (TCSW 2019)
Join Our Party: The Cloud Native Adventure Brigade (TCSW 2019)Join Our Party: The Cloud Native Adventure Brigade (TCSW 2019)
Join Our Party: The Cloud Native Adventure Brigade (TCSW 2019)
 
Increasing Reliability via Helm Pre-Release Checks (Helm Summit 2019)
Increasing Reliability via Helm Pre-Release Checks (Helm Summit 2019)Increasing Reliability via Helm Pre-Release Checks (Helm Summit 2019)
Increasing Reliability via Helm Pre-Release Checks (Helm Summit 2019)
 
Kubernetes for the Impatient (devopsdays Cape Town 2019)
Kubernetes for the Impatient (devopsdays Cape Town 2019)Kubernetes for the Impatient (devopsdays Cape Town 2019)
Kubernetes for the Impatient (devopsdays Cape Town 2019)
 
Helm 3: Navigating To Distant Shores (OSS NA 2019)
Helm 3: Navigating To Distant Shores (OSS NA 2019)Helm 3: Navigating To Distant Shores (OSS NA 2019)
Helm 3: Navigating To Distant Shores (OSS NA 2019)
 
Helm 3: Navigating to Distant Shores (OSCON 2019)
Helm 3: Navigating to Distant Shores (OSCON 2019)Helm 3: Navigating to Distant Shores (OSCON 2019)
Helm 3: Navigating to Distant Shores (OSCON 2019)
 
Kubernetes for the Impatient (Velocity San Jose 2019)
Kubernetes for the Impatient (Velocity San Jose 2019)Kubernetes for the Impatient (Velocity San Jose 2019)
Kubernetes for the Impatient (Velocity San Jose 2019)
 
Community projects inform enterprise products (Velocity San Jose 2019)
Community projects inform enterprise products (Velocity San Jose 2019)Community projects inform enterprise products (Velocity San Jose 2019)
Community projects inform enterprise products (Velocity San Jose 2019)
 
Kubernetes Operability Tooling (Minnebar 2019)
Kubernetes Operability Tooling (Minnebar 2019)Kubernetes Operability Tooling (Minnebar 2019)
Kubernetes Operability Tooling (Minnebar 2019)
 
Livetweeting Tech Conferences - SREcon Americas 2019
Livetweeting Tech Conferences - SREcon Americas 2019Livetweeting Tech Conferences - SREcon Americas 2019
Livetweeting Tech Conferences - SREcon Americas 2019
 
Day 2 Kubernetes - Tools for Operability (Philly Open Source)
Day 2 Kubernetes - Tools for Operability (Philly Open Source)Day 2 Kubernetes - Tools for Operability (Philly Open Source)
Day 2 Kubernetes - Tools for Operability (Philly Open Source)
 
Containers will not fix your broken culture (and other hard truths) - OhioLinux
Containers will not fix your broken culture (and other hard truths) - OhioLinuxContainers will not fix your broken culture (and other hard truths) - OhioLinux
Containers will not fix your broken culture (and other hard truths) - OhioLinux
 
Containers will not fix your broken culture (and other hard truths) - ApacheC...
Containers will not fix your broken culture (and other hard truths) - ApacheC...Containers will not fix your broken culture (and other hard truths) - ApacheC...
Containers will not fix your broken culture (and other hard truths) - ApacheC...
 
Through a glass darkly: ethics in AI (PagerDuty Summit 2018)
Through a glass darkly: ethics in AI (PagerDuty Summit 2018)Through a glass darkly: ethics in AI (PagerDuty Summit 2018)
Through a glass darkly: ethics in AI (PagerDuty Summit 2018)
 
Give Actionable Takeaways
Give Actionable TakeawaysGive Actionable Takeaways
Give Actionable Takeaways
 

Recently uploaded

Essentials of Automations: Optimizing FME Workflows with Parameters
Essentials of Automations: Optimizing FME Workflows with ParametersEssentials of Automations: Optimizing FME Workflows with Parameters
Essentials of Automations: Optimizing FME Workflows with Parameters
Safe Software
 

Recently uploaded (20)

Custom Approval Process: A New Perspective, Pavel Hrbacek & Anindya Halder
Custom Approval Process: A New Perspective, Pavel Hrbacek & Anindya HalderCustom Approval Process: A New Perspective, Pavel Hrbacek & Anindya Halder
Custom Approval Process: A New Perspective, Pavel Hrbacek & Anindya Halder
 
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
 
Optimizing NoSQL Performance Through Observability
Optimizing NoSQL Performance Through ObservabilityOptimizing NoSQL Performance Through Observability
Optimizing NoSQL Performance Through Observability
 
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMsTo Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
 
Free and Effective: Making Flows Publicly Accessible, Yumi Ibrahimzade
Free and Effective: Making Flows Publicly Accessible, Yumi IbrahimzadeFree and Effective: Making Flows Publicly Accessible, Yumi Ibrahimzade
Free and Effective: Making Flows Publicly Accessible, Yumi Ibrahimzade
 
Introduction to Open Source RAG and RAG Evaluation
Introduction to Open Source RAG and RAG EvaluationIntroduction to Open Source RAG and RAG Evaluation
Introduction to Open Source RAG and RAG Evaluation
 
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
 
What's New in Teams Calling, Meetings and Devices April 2024
What's New in Teams Calling, Meetings and Devices April 2024What's New in Teams Calling, Meetings and Devices April 2024
What's New in Teams Calling, Meetings and Devices April 2024
 
IoT Analytics Company Presentation May 2024
IoT Analytics Company Presentation May 2024IoT Analytics Company Presentation May 2024
IoT Analytics Company Presentation May 2024
 
WSO2CONMay2024OpenSourceConferenceDebrief.pptx
WSO2CONMay2024OpenSourceConferenceDebrief.pptxWSO2CONMay2024OpenSourceConferenceDebrief.pptx
WSO2CONMay2024OpenSourceConferenceDebrief.pptx
 
SOQL 201 for Admins & Developers: Slice & Dice Your Org’s Data With Aggregate...
SOQL 201 for Admins & Developers: Slice & Dice Your Org’s Data With Aggregate...SOQL 201 for Admins & Developers: Slice & Dice Your Org’s Data With Aggregate...
SOQL 201 for Admins & Developers: Slice & Dice Your Org’s Data With Aggregate...
 
Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...
Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...
Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...
 
Slack (or Teams) Automation for Bonterra Impact Management (fka Social Soluti...
Slack (or Teams) Automation for Bonterra Impact Management (fka Social Soluti...Slack (or Teams) Automation for Bonterra Impact Management (fka Social Soluti...
Slack (or Teams) Automation for Bonterra Impact Management (fka Social Soluti...
 
The architecture of Generative AI for enterprises.pdf
The architecture of Generative AI for enterprises.pdfThe architecture of Generative AI for enterprises.pdf
The architecture of Generative AI for enterprises.pdf
 
Essentials of Automations: Optimizing FME Workflows with Parameters
Essentials of Automations: Optimizing FME Workflows with ParametersEssentials of Automations: Optimizing FME Workflows with Parameters
Essentials of Automations: Optimizing FME Workflows with Parameters
 
IOS-PENTESTING-BEGINNERS-PRACTICAL-GUIDE-.pptx
IOS-PENTESTING-BEGINNERS-PRACTICAL-GUIDE-.pptxIOS-PENTESTING-BEGINNERS-PRACTICAL-GUIDE-.pptx
IOS-PENTESTING-BEGINNERS-PRACTICAL-GUIDE-.pptx
 
Salesforce Adoption – Metrics, Methods, and Motivation, Antone Kom
Salesforce Adoption – Metrics, Methods, and Motivation, Antone KomSalesforce Adoption – Metrics, Methods, and Motivation, Antone Kom
Salesforce Adoption – Metrics, Methods, and Motivation, Antone Kom
 
Mission to Decommission: Importance of Decommissioning Products to Increase E...
Mission to Decommission: Importance of Decommissioning Products to Increase E...Mission to Decommission: Importance of Decommissioning Products to Increase E...
Mission to Decommission: Importance of Decommissioning Products to Increase E...
 
Agentic RAG What it is its types applications and implementation.pdf
Agentic RAG What it is its types applications and implementation.pdfAgentic RAG What it is its types applications and implementation.pdf
Agentic RAG What it is its types applications and implementation.pdf
 
In-Depth Performance Testing Guide for IT Professionals
In-Depth Performance Testing Guide for IT ProfessionalsIn-Depth Performance Testing Guide for IT Professionals
In-Depth Performance Testing Guide for IT Professionals
 

Helm 3: Navigating to Distant Shores (KubeCon EU 2019)