Using Helm in a Codefresh pipeline

Deploying and pushing Helm charts with Codefresh

We have created a special Helm step for easy integration of Helm in Codefresh pipelines. The Helm step facilitates authentication, configuration and execution of Helm commands.

You can always use the regular helm cli in a freestyle step, if you have a special use case that is not covered by the Codefresh Helm step. In this case, you can use the simpler container codefresh/kube-helm which includes only the kubectl and helm tools. kube-helm is available on DockerHub: https://hub.docker.com/r/codefresh/kube-helm/.

If you are just starting using Helm please also consult the Helm quick start guide.

Helm setup

In order to use Helm in your Codefresh pipeline you must do the following

1. Create a Helm package for your application
2. Add a Kubernetes cluster enabled with Helm/Tiller
3. Define a Helm repository or use the one offered by Codefresh to all accounts
4. Import the Helm configuration in your pipeline variables
5. Use the codefresh/cfstep-helm in your yml build definition.

Let’s see these steps in order

Step 1 - Create a Helm chart for your application

Helm applications are bundled in special archives called Charts. You can create a Helm chart for your application by following the official documentation on charts.

The example Codefresh application also comes with a sample chart that is used in the Helm quick start guide.

You can create the chart manually or by using the helm create command on your workstation. There are also several third part tools that can create Helm packages for you such as Draft.

Once you have your Helm chart ready, commit it to the same git repository that contains the source code of your application. It should be in a folder called charts. Codefresh can also work with Helm charts that are in different Git repositories. We suggest however that you keep both the source code and the Helm chart of an application in the same git repository as this makes chart management much easier.

Step 2 - Kubernetes Configuration

You can configure a Kubernetes cluster to deploy to using the KUBE_CONTEXT variable.

First, you’ll need to connect your Kubernetes cluster with Codefresh as described here. Once you have a Kubernetes cluster connected, provide it to the Helm step by adding the KUBE_CONTEXT variable, where the value is the connection name that you’ve entered when creating the connection. The connection name also appears as the title of the cluster in Kubernetes integration settings (from the left sidebar go to Integrations -> Kubernetes).

Make sure also that your Kubernetes cluster has the server part of Helm installed (called Tiller). The easiest way to do that is to run helm init from the command shell of your cloud provider or any other terminal that has access to your cluster via kubectl.

To verify that your cluster is setup for Helm select the Helm Releases item from the left sidebar in the Codefresh UI. You should see the Helm releases in your cluster or an empty screen if you just started using Helm.

Step 3 - Define a Helm repository

You should configure a Helm repository for the step to work with. Besides public HTTP repositories, we support a variety of private, authenticated Helm repositories. Codefresh also provides a free, managed Helm repository for every account.

You will need to connect your repository with Codefresh as described here, or obtain your managed Helm repository URL as described here.

Step 4 - Import the Helm Configuration in your pipeline definition

Once you have a Helm repository connected, attach it to the pipeline by selecting it in the pipeline editing page, under “Environment Variables” -> “Import from shared configuration”.

This concludes the Helm setup for Codefresh. Now you can use the Helm freestyle step in the pipeline codefresh.yml file.

Note that this step is only needed in pipelines that actually upload/fetch Helm charts from/to Helm repositories. If you have a pipeline that directly installs a Helm chart from the git filesystem, there is no need to import a Helm configuration.

Currently only one Helm configuration can be used in the same pipeline. We are aware of this limitation and will soon improve the way Codefresh works with multiple Helm configurations.

Helm Usage

Add a Freestyle step, with the codefresh/cfstep-helm image.
The Helm step is configured using environment variables, which can be provided in any of the various ways supported by Codefresh as described here.
For example, here’s how to provide variables as part of the freestyle step definition:

Helm Upgrade:
    image: 'codefresh/cfstep-helm:2.9.0'
    environment:
      - key=value

(the Docker image tag refers to the version of Helm you need)

Operation modes

The Helm step can operate in one of 3 modes:

1. Install - will install the chart into a Kubernetes cluster. This is the default mode if not explicitly set.
2. Push - will package chart and push it to the repository.
3. Authentication only - will only setup authentication, and add the repo to the helm. This is useful if you want to write your own helm commands using the freestyle step’s commands property, but you still want the step to handle authentication.

The operation mode is set by the ACTION variable, where the value is install/auth/push.

Helm Values

To supply value file, add an environment variable with the name prefix of VALUESFILE_, and the value should point to an existing values file.
To override specific values, add an environment variable with the name prefix of VALUE_ followed by the path to the value to set. For example VALUE_myservice_imageTag. Note that . (dot) should be replaced with _ (underscore). The value of the variable will be used to override or set the templated property.

Examples:

VALUE_myimage_pullPolicy=Always
results in:
--set myimage.pullPolicy=Always

VALUESFILE_prod='values-prod.yaml'
results in:
--values values-prod.yaml

If a variable already contains a _ (underscore) in it’s name, replace it with __ (double underscore).

Examples

All three modes of Helm usage are demonstrated below

Example: Installing a Chart

The following example demonstrates the minimum configuration for installing a chart from a repository. For more configuration options, see the Configuration reference.

deploy:
  image: codefresh/cfstep-helm:2.9.0
  environment:
    - CHART_REF=mychart
    - RELEASE_NAME=mychart-prod
    - KUBE_CONTEXT=kube-prod

Notes:

• Helm repository connection was attached to the pipeline (see step 3 above)
• mychart is a chart that exists in the connected repository
• no ACTION is provided, meaning install by default

Example: Pushing a Chart

The following example demonstrates packaging and pushing a chart into a repository.

push:
  image: codefresh/cfstep-helm:2.9.0
  environment:
    - ACTION=push
    - CHART_REF=mychart

Notes:

• Helm repository connection was attached to the pipeline (see step 3 above)
• assuming a git repository with the Helm chart files
• the repo container the chart files under mychart directory

Example: Authenticating only

The following example demonstrates executing custom commands.

helm:
  image: codefresh/cfstep-helm:2.9.0
  environment:
    - ACTION=auth
  commands:
    - source /opt/bin/release_chart
    - helm fetch $CHART_REF --repo $CF_CTX_myrepo_URL --untar

Notes:

• Helm repository connection was attached to the pipeline (see step 3 above)
• The attached repo will be added to helm cli under the name repo.
• The attached repo URL will be available as a variable called CF_CTX_<reponame>_URL (where <reponame> is the name of the repo).
• The credentials used to setup the repo will be available in the container under the name they were provided when you connected the repo.

Example: Custom Helm Commands

The following example demonstrates executing custom commands.

codefresh.yml

helm:
  image: codefresh/cfstep-helm:2.9.0
  commands:
    - export HELM_REPO_ACCESS_TOKEN=${{CF_API_KEY}}
    - export HELM_REPO_AUTH_HEADER=Authorization
    - helm repo add incubator https://kubernetes-charts-incubator.storage.googleapis.com/
    - helm repo add myrepo ${{CF_CTX_CF_HELM_DEFAULT_URL}}
    - helm push chart-example/ myrepo

Notes:

• The directory that contains a chart MUST have the same name as the chart. Thus, a chart named my-chart MUST be created in a directory called my-chart/. This is a requirement of the Helm Chart format.

Configuration

What to read next

• Helm Charts and repositories
• Codefresh Managed Helm Repositories
• Helm Promotion boards