Hands-on Lab·Certified Kubernetes Administrator
Helm Basics
Helm templates YAML and remembers what it sent, which is what makes rollback work. The corollary catches everyone: a change you make with kubectl is invisible to Helm and gets reverted by the next upgrade.
Cluster Architecture and Configuration Guide 18 of 103 Intermediate
- Kubernetes1.36.4
- Cluster4 nodes
- Runtimecontainerd 2.2.6
- CNICalico v3.32.1
- TimeAbout 40 min
Helm 3. Helm 2 needed a cluster-side Tiller component and is long dead; anything referring to Tiller is out of date.
- Helmv3.18.5
| Server Name | IP Address | OS | Roles | CPU | RAM | HDD |
|---|---|---|---|---|---|---|
| CKA1001 | 192.168.0.175 | Ubuntu 26.04 LTS | Control Plane Node | 2 Core | 4 GB | 50 GB |
| CKA1001-NODE01 | 192.168.0.176 | Ubuntu 26.04 LTS | Worker Node | 2 Core | 4 GB | 50 GB |
| CKA1001-NODE02 | 192.168.0.177 | Ubuntu 26.04 LTS | Worker Node | 2 Core | 4 GB | 50 GB |
| CKA1001-NODE03 | 192.168.0.178 | Ubuntu 26.04 LTS | Worker Node | 2 Core | 4 GB | 50 GB |
This guide includes
Use this when an application has to be packaged, parameterised and upgraded repeatedly. This matters because Helm remembers what it sent, and that record is the only reason helm rollback can work at all.
- confirming Helm 3 is one client-side binary with nothing installed into the cluster
- scaffolding a chart, and rendering it locally with
helm templatebefore touching a cluster - adding a repository and reading a chart before trusting it
- installing a named release, then answering what was sent and what changed with
helm get valuesandget manifest - upgrading, rolling back and uninstalling - including the hand-made change that vanishes and the two things left behind
Before you start
- The Deployments and Services guides.
- A working kubeconfig, since Helm uses the same credentials
kubectldoes. - Outbound internet access to add a chart repository.
-
A client-side binary, and nothing in the cluster
-
A chart is a directory with a contract
-
Render locally before touching the cluster
-
Repositories, and reading a chart before trusting it
-
Install, and where the release actually lives
-
What was sent, and what changed
-
Upgrade, history, rollback, and the change that vanishes
-
Uninstall, and the two things it leaves behind