A typical application deployed to Kubernetes will have objects like deployments, services, Pods, configmaps, secrets, hpa, ingress, etc., and with its declarative nature, you define everything through YAML files.
Now imagine having to manage and maintain the YAML files for each environment. That’s where Helm comes in. It’s a widely known package manager for your Kubernetes workloads. Helm Charts help you define, install, and upgrade complex Kubernetes applications.
In this article, you’ll learn how Helm Charts fit into a Kubernetes workflow and review examples for how they can be used to benefit your organization.
Why You Need Helm
Helm is the only package manager specifically for Kubernetes applications. You can package your applications as a Helm Chart, and then install, update, and roll back your Kubernetes applications using Helm. In addition, you can use production-ready, pre-packaged charts for popular software like NGINX, MySQL, and MongoDB from a stable chart repository like Bitnami or ArtifactHUB.
What Makes Helm Architecture Superior
The original version of Helm followed a client-server architecture, which required two separate installations; On the client-side, the CLI, and on the server-side, a component named Tiller. Because of some security concerns, Tiller was removed, and Helm v3 is a client-only utility.
Helm provides numerous features for Kubernetes applications including:
- Deploying Kubernetes packages through a single CLI command. If you have a dependency on other charts, you can include that as well.
- Helm allows you to customize application configurations during deployment so that you can reuse one Helm Chart across multiple environments.
- It makes it easy to streamline CI/CD pipeline for Kubernetes workloads.
- It simplifies the rollback of your Kubernetes applications in case of issues in deployment. Helm does this by automatically maintaining all the versions of your releases.
- Helm enables teams to automate the pre- and post-deployment actions with its CI/CD integration hooks.
How to Use Helm Charts in Practice
Let’s begin by first installing Helm. You can install Helm on Windows, macOS, and Linux using standard package managers like Chocolatey, Homebrew, or APT.
On macOS, you can use the Homebrew command <terminal inline>brew install helm<terminal inline> to install.
Or, on Windows, you can use <terminal inline>choco install kubernetes-helm<terminal inline> to install using Chocolatey.
Helm also provides an installer script that will download the latest version for you.
After installing Helm on your operating system, verify the installation using <terminal inline>helm version<terminal inline>. You will see the following output after running the command:
The following is a list of supported commands with Helm CLI:
Let’s install NGINX using a pre-packaged Helm Chart on your local Kubernetes cluster. Use <terminal inline>helm search repo chart-name<terminal inline> to look for the chart in the local repository.
As you can see, the local helm repository is not updated, and it fails to find the chart. You can fix this by running the command <terminal inline>helm repo update<terminal inline>.
Then rerun the command <terminal inline>helm search repo nginx<terminal inline> to verify that you can now search for the NGINX Helm Chart.
You should see all the charts have NGINX in their name.
Now, choose the <terminal inline>bitnami/nginx<terminal inline> chart name and install it using the <terminal inline>helm install nginx bitnami/nginx command<terminal inline>.
There are five different ways you can express the chart you want to install:
- By chart reference: <terminal inline>helm install mymaria example/mariadb<terminal inline>
- By path to a packaged chart: <terminal inline>helm install mynginx ./nginx-1.2.3.tgz<terminal inline>
- By path to an unpacked chart directory: <terminal inline>helm install mynginx ./nginx<terminal inline>
- By absolute URL: <terminal inline>helm install mynginx https://example.com/charts/nginx-1.2.3.tgz<terminal inline>
- By chart reference and repo url: <terminal inline>helm install --repo https://example.com/charts/ mynginx nginx<terminal inline>
Before you continue with installing the Helm Chart, make sure you have a local Kubernetes cluster up and running.
The following is the output of running <terminal inline>helm install nginx bitnami/nginx<terminal inline>:
Verify the installation by running <terminal inline>kubectl<terminal inline>.
You’ll notice from the output above that Helm has created the service, Pod, deployment, and replica set for us.
Run the <terminal inline>helm list<terminal inline> command to list down the deployed or failed releases.
Since you are using minikube as a local Kubernetes cluster, you can use the <terminal inline>minikube service nginx<terminal inline> command to expose the service for external access.
Use the URL mentioned in the preceding output to access your application:
Now you have deployed a pre-packaged Helm Chart.
You can also create a Helm Chart specific to your application using the <terminal inline>helm create<terminal inline> command. Your output would be:
An NGINX image is configured by default, but you can tweak all the configurations based on your needs by editing the <terminal inline>values.yaml<terminal inline> file and installing it using the <terminal inline>helm install<terminal inline> command. Template files under the <terminal inline>/templates<terminal inline> directory contain the placeholders. Their values are replaced by <terminal inline>values.yaml<terminal inline>.
For example, maybe you want to limit the amount of hardware resources your application can utilize. You can add the following changes in your <terminal inline>values.yaml<terminal inline> file.
If you would like to change the <terminal inline>imagePullPolicy<terminal inline> to <terminal inline>Always<terminal inline> from the default <terminal inline>IfNotPresent<terminal inline> add the following changes to your <terminal inline>values.yaml<terminal inline> file.
Helm Tips and Best Practices
Before incorporating Helm Charts into your Kubernetes workflow, keep in mind the following best practices to ensure your processes are efficient and practical.
Use heml template to Verify
To make sure that everything is as expected before deploying your chart to the target Kubernetes cluster, use the <terminal inline>helm template<terminal inline> command. This will render chart templates locally and display the output.
Any values that would normally be looked up or retrieved in-cluster will be faked locally, and the command will finally display each YAML file created by all the templates.
Use heml lint to Test
You can use <terminal inline>helm lint<terminal inline> to run a series of tests to verify that the chart is well-formed. If the linter encounters things that will cause the chart to fail installation, it will emit ERROR messages. If it encounters issues that break with convention or recommendation, it will emit WARNING messages.
Label Your Resources
Labels can be used to find your resources created by Helm releases instantly. The easiest way to define labels is using the <terminal inline>helpers.tpl<terminal inline> file.
Use Helm Functions to Simplify
For example, if the value for an image tag is not provided in a template file, it will use the chart app version as an image tag. Here <terminal inline>default<terminal inline> is the function.
Limitations of Helm Charts
As with any new tool, there is a learning curve involved with Helm. It’s not easy to create and deploy your first chart.
Charts are also an extra piece of code that you have to manage and take care of. This includes the overhead to manage, maintain, and store in a chart repository. Helm can be excessive for simpler deployments.
Maintaining charts alone may not be a significant issue, but using charts managed by others can be. Are you comfortable using charts managed by third parties? What if the chart uses an old image with known vulnerabilities? Keep these factors in mind before using Helm.
In addition, troubleshooting issues on an application with a lot of Kubernetes resources can be difficult with Helm.
A Helm Alternative
If you want to consider a Helm alternative, then Kustomize is worth exploring. It’s a Kubernetes native configuration management open-source tool. Contrary to Helm, Kustomize introduces a template-free way to customize application configuration. You don’t have to install it separately, as it’s baked into <terminal inline>kubectl<terminal inline>. You can use it by simply supplying the -k flag with the <terminal inline>kubectl apply<terminal inline> command.
With Helm, deploying and reverting changes for your Kubernetes workloads is as easy as pressing a button.
If you are a DevOps engineer trying to install applications developed internally or with third-party software like databases, you should consider Helm. It’s easier to share applications packaged as charts with others in the organization, and you can deploy Kubernetes packages through a single CLI command.
Helm allows you to customize application configurations during deployment and makes it easy to streamline CI/CD pipelines for Kubernetes workloads. If you are looking for help in managing complex Kubernetes deployments, Helm can help.