What Helm is: charts & releases

The package manager for Kubernetes.

Intermediate12 min · lesson 1 of 12

Helm is the package manager for Kubernetes. Raw Kubernetes means hand-maintaining dozens of YAML manifests per app — a Deployment, Service, ConfigMap, Ingress, and more — duplicated and tweaked per environment. Helm packages all of that into a chart: a templated, versioned bundle you install with one command. Installing a chart produces a release, a tracked instance of the app in a cluster, and Helm remembers every revision so you can upgrade and roll back.

The core value is three things at once: templating (one parameterized chart renders per-environment manifests), packaging (a chart is a shareable, versioned unit like an apt or npm package), and lifecycle management (install, upgrade, roll back, uninstall as atomic operations Helm tracks). Modern Helm (v3) is client-only — it talks straight to the Kubernetes API with your kubeconfig, no in-cluster Tiller component, which removed the big security problem of Helm v2.

Chart to running app

1chart

templates + values

2helm install

render with values

3manifests

applied to the cluster

4release

tracked, versioned

One chart, many releases; Helm records each revision so upgrade and rollback are first-class.

Where Helm fits

Helm is how most third-party software is distributed for Kubernetes — you install ingress-nginx, Prometheus, or cert-manager from their official charts rather than copying YAML. It is equally used to package your own apps. Its main alternative, Kustomize, takes a template-free overlay approach; many teams use both (Kustomize for simple env overlays, Helm for packaged, distributable apps), and you will meet Kustomize in its own course.

A chart applies arbitrary manifests to your cluster

Installing a chart runs whatever Kubernetes objects its templates render — Deployments, RBAC, CRDs, even privileged workloads — with your credentials. A malicious or careless third-party chart can grant itself cluster-admin or run a privileged pod. Always render and inspect an unfamiliar chart (helm template) before installing, pin its version, and prefer charts you can verify (the provenance lesson covers signing).

Install, repos & using charts