todo.academy Try a free chapter

Helm Core, with Kubernetes literacy or a placement pass

Application Packaging with Helm

Build and operate Helm releases from chart source to verified recovery.

Control values, render safely, operate release revisions, and troubleshoot Helm with evidence.

No credit card for the free chapter. Preview what the chapter covers.

By the end

Observable skills you will practice.

  • Explain chart source, values, rendered manifests, releases, revisions, and evidence as separate layers
  • Inspect chart structure, metadata, versions, Kubernetes constraints, and package identity
  • Apply values files and command overrides with predictable precedence and types
  • Author templates with scope, control flow, helpers, functions, quoting, and safe YAML placement
  • Render, lint, dry-run, localize failures, and repair chart source before installation
  • Install, inspect, upgrade, review history, roll back, and uninstall named releases
  • Manage dependency locks, hook ordering, chart tests, Secret redaction, and least-privilege RBAC boundaries
  • Package, verify, promote, test, recover, and hand off one release through an independent capstone

Syllabus

29 chapters from the published course structure.

The focused path contains 87 required lessons. The advanced library remains available when your role needs more depth.

Focused path chapters14 chapters contain the required 87-lesson path.
Chapter 00Free

Free Helm first contact

Learn what Helm is, how charts, values, templates, releases, manifests, and cleanup fit together, then prove the complete first loop.

14 focused lessons
Chapter 01Full course

Chart anatomy and metadata

Read chart source like a professional: reserved paths, required metadata, package version, appVersion, compatibility, ignore rules, and chart archive proof.

4 focused lessons + 6 advanced lessons
Chapter 02Full course

Values contracts and precedence

Read default values, apply user values files, prove right-most precedence, use command-line overrides deliberately, and inspect release values evidence.

5 focused lessons + 7 advanced lessons
Chapter 03Full course

Template basics

Read built-in objects, nested values, conditionals, scope, ranges, whitespace, helpers, and rendered output contracts.

7 focused lessons + 5 advanced lessons
Chapter 04Full course

Functions, pipelines, and safety

Use default, required, quote, pipelines, toYaml, nindent, and layered render checks to produce safe, explainable YAML.

7 focused lessons + 5 advanced lessons
Chapter 05Full course

Kubernetes objects from charts

Read Deployments, Services, ConfigMaps, Secrets, labels, selectors, namespaces, ownership metadata, and cross-object contracts before installation.

4 focused lessons + 8 advanced lessons
Chapter 06Full course

Release operations and evidence

Install and inspect named releases in the correct namespace. Use list, status, stored manifests, values, and cleanup evidence to prove the release lifecycle.

5 focused lessons + 7 advanced lessons
Chapter 07Full course

Upgrades and revisions

Change existing releases with explicit value policy, dry-run previews, revision history, reuse-values, reset-values, and upgrade --install evidence.

4 focused lessons + 8 advanced lessons
Chapter 08Full course

Rollback and safe recovery

Select explicit target revisions, preview rollback safely, apply recovery, control hooks, reject invalid targets, and verify restored history, status, and values.

4 focused lessons + 8 advanced lessons
Chapter 09Full course

Debugging renders and lint failures

Classify lint warnings and errors, trace debug renders and required values, preview installs safely, repair chart source, and retrieve stored manifest evidence.

5 focused lessons + 7 advanced lessons
Chapter 10Full course

Dependencies and subcharts

Resolve, lock, rebuild, configure, disable, alias, import, repair, and release parent charts with subchart evidence.

3 focused lessons + 9 advanced lessons
Chapter 11Full course

Hooks and chart tests

Use hook lifecycle annotations, weights, readiness, deletion policy, stored hook evidence, and chart tests with deliberate failure recovery.

4 focused lessons + 8 advanced lessons
Chapter 12Full course

Security, RBAC, and secrets

Review service accounts, namespaced permissions, Secret handling, sensitive values, token mounting, and security release evidence.

5 focused lessons + 7 advanced lessons
Chapter 13Full course

Professional delivery capstone

Deliver a chart through source review, strict lint, rendering, dependency and security checks, signed packaging, staged promotion, tests, rollback, and handoff.

16 focused lessons + 1 advanced lesson
Explore 15 advanced library chapters

These chapters provide optional drills and reference depth. They are not required to complete the focused path.

Library 11Full course

Values schemas and chart documentation

Validate merged values with values.schema.json, document defaults and operator actions, verify README and NOTES, repair malformed contracts, and close a reproducible release handoff.

12 advanced lessons
Library 12Full course

Named templates, helpers, and identity contracts

Design chart-prefixed helpers, pass scope deliberately, format include output safely, and keep labels, names, and selectors stable across the object graph.

12 advanced lessons
Library 15Full course

Packaging, repositories, and OCI

Package charts, preserve chart and application versions, generate and merge repository indexes, refresh clients, and publish, pull, inspect, and install OCI artifacts with digest-aware evidence.

12 advanced lessons
Library 16Full course

Provenance and integrity

Inspect signing identities, create and read .prov files, verify packages, detect tampering and missing provenance, and install only after trusted verification.

10 advanced lessons
Library 17Full course

CRDs and API compatibility

Declare and validate custom APIs, separate CRD and release lifecycles, migrate deprecated Kubernetes APIs, and prove chart support across target Kubernetes versions.

12 advanced lessons
Library 19Full course

CI, GitOps, and promotion

Build a release delivery loop that proves lint, render, chart tests, desired state, promotion previews, applied revisions, history, and rollback recovery.

12 advanced lessons
Library 20Full course

Incident response and production recovery

Triage Helm incidents with inventory, complete release evidence, failed revision inspection, atomic recovery, test logs, and retained uninstall history.

12 advanced lessons
Library 22Full course

Advanced platform operations

Operate Helm as a governed platform tool: make contexts explicit, inventory releases, inspect metadata and hooks, audit computed values, apply trusted post-render policy, verify plugins, and promote with a replayable handoff.

17 advanced lessons
Library 23Full course

Plugin and extension engineering

Design and govern Helm plugins with explicit manifests, platform commands, lifecycle hooks, injected environment, argument contracts, packaging, verification, installation, updates, cleanup, and replayable handoff evidence.

16 advanced lessons
Library 24Full course

Library charts and reusable primitives

Maintain shared Helm template primitives as versioned reusable source, prove they are not installable, import them into a consumer chart, render, install, and hand off the reuse contract.

16 advanced lessons
Library 25Full course

Chart maintenance and deprecation

Deprecate a chart responsibly, publish the deprecation version, prove repository visibility, migrate consumers to a replacement, and retire source only after evidence exists.

17 advanced lessons
Library 26Full course

Release retirement and cleanup

Retire live Helm releases safely with status and history evidence, uninstall previews, wait policy, retained history, idempotent missing-release cleanup, hook policy, and final handoff proof.

16 advanced lessons
Library 27Full course

Ownership, adoption, and resource conflicts

Handle existing resource conflicts safely by reading current metadata, proving Helm's ownership refusal, previewing adoption, using --take-ownership deliberately, and verifying stored release evidence.

14 advanced lessons
Library 28Full course

Post-renderers and manifest mutation

Use post-renderers safely by reviewing executable trust, comparing baseline and transformed manifests, proving failure boundaries, installing and upgrading with stored evidence, and writing a clear handoff.

14 advanced lessons
Library 29Full course

OCI dependency resolution and lock discipline

Consume OCI-hosted child charts safely by publishing the artifact, declaring the dependency correctly, resolving and locking it, rebuilding charts/ from the lock, rendering, installing, and handing off digest evidence.

14 advanced lessons

Full access

Choose access for Application Packaging with Helm

Every available offer is shown with its exact CAD price and billing model. Checkout opens only after you choose an offer and enter the receipt email.

Available access options

The selected offer and exact total remain visible before payment.

Already purchased? Restore access

Payments are processed by Lemon Squeezy for Phoenix Soft Inc. Paid access can be restored after secure sign-in.

Questions

Know what to expect before you start.

What can I try for free?

Free Helm first contact is free and contains 14 lessons. No credit card is requested before the free workspace opens.

What experience do I need?

Kubernetes literacy or a passing placement check is expected. No Helm experience is required.

What does the focused path include?

87 required lessons, with 14 free and 73 included in paid access.

Is there material beyond the focused path?

Yes. The course also includes 292 advanced practice and reference resources. They are available when you need more depth, but they do not lengthen the required path.

Which paid options are available?

Academy Founder Annual: CA$139 per year. Founder Vault: CA$279 one-time.

How is paid access billed?

Academy Founder Annual: Access continues while the annual subscription remains active. Founder Vault: No recurring charge. Coverage includes courses launched during the first 24 months.

How long does it take?

The published estimate is 14 to 18 active hours for the Core Path. Your pace will depend on how much you repeat the practice.

Do I need to install anything?

No installation is required to start the guided free chapter. Later lessons explain the real tools, files, and operating boundaries relevant to the skill.

What technology is covered?

The syllabus and these stated outcomes are the source of truth: Explain chart source, values, rendered manifests, releases, revisions, and evidence as separate layers; Inspect chart structure, metadata, versions, Kubernetes constraints, and package identity; Apply values files and command overrides with predictable precedence and types; Author templates with scope, control flow, helpers, functions, quoting, and safe YAML placement; Render, lint, dry-run, localize failures, and repair chart source before installation; Install, inspect, upgrade, review history, roll back, and uninstall named releases; Manage dependency locks, hook ordering, chart tests, Secret redaction, and least-privilege RBAC boundaries; Package, verify, promote, test, recover, and hand off one release through an independent capstone.

Which browsers are supported?

Use a current browser with JavaScript enabled. The free chapter is the quickest compatibility check for your device.

Does the workspace work on mobile?

The reading pages reflow for small screens. Command-heavy practice is more comfortable with a physical keyboard and a larger display.

What happens when I make a mistake?

The practice state is isolated from production systems. Read the resulting evidence, revise the action, and try again.

How do I restore access?

Use the receipt email on the restore-access page. The sign-in link verifies the account before paid entitlements are loaded.