CertGrid CertGrid
Hands-on Lab·Certified Kubernetes Application Developer

Helm Install, Upgrade and Rollback

Helm is a package manager with a memory: every install and upgrade is a revision it can go back to. The five commands that cover almost everything are template, install, upgrade, history and rollback, and all five are here against a chart created locally so nothing depends on a reachable repository.

Application Deployment Guide 21 of 44 Intermediate

Helm 3 has no Tiller and stores each release revision as a Secret of type helm.sh/release.v1 in the release's own namespace. That is why helm list is namespaced, why deleting a namespace destroys the release history with it, and why anyone with Secret read access in that namespace can read the release.

Helm runs client-side and talks to the API server; the release Secrets live in the cluster.
Server NameIP AddressOSRolesCPURAMHDD
CKA1001192.168.0.175Ubuntu 26.04 LTSControl Plane Node2 Core4 GB50 GB
CKA1001-NODE01192.168.0.176Ubuntu 26.04 LTSWorker Node2 Core4 GB50 GB
CKA1001-NODE02192.168.0.177Ubuntu 26.04 LTSWorker Node2 Core4 GB50 GB
CKA1001-NODE03192.168.0.178Ubuntu 26.04 LTSWorker Node2 Core4 GB50 GB

This guide includes

Use this when a chart has to be installed, changed and rolled back under time pressure. This matters because Helm keeps every revision as a Secret in the namespace - which is what makes a rollback one command instead of a redeploy.

Before you start

  1. A chart you can read

  2. Render it without a cluster

  3. Install, and look at the release

  4. Upgrade, then take it back

  5. Where the state actually lives

Official sources