What problem does it solve? Helm charts often ship with inconsistent versioning, mutable selectors that break upgrades, plaintext secrets, unsigned packages, and hooks that leak Jobs into namespaces. This Skill encodes a complete chart contract so every chart you author or review follows SemVer discipline, standard labels, schema-validated values, and supply-chain integrity from the start. ## Core Features & Use Cases - Chart contract enforcement: Twelve non-negotiable rules covering apiVersion v2, SemVer 2 version bumps, deterministic rendering, immutable selector labels, values.schema.json validation, CRD placement in crds/, and pinned dependencies with a committed Chart.lock. - Template and lifecycle guidance: Go template + Sprig idioms, named templates with chart-name prefixes, hook lifecycle management with hook-delete-policy, test hooks under templates/tests/, and RBAC plus pod security defaults. - Supply-chain and distribution: PGP provenance signing with helm package --sign and helm verify, OCI registry push workflows, immutable oci://...@sha256: digest pinning, and lint/dry-run/template validation gates. - Use Case: When asked to convert raw kubectl manifests into a production chart, apply the skeleton layout, add standard app.kubernetes.io labels, write values.schema.json, sign the package, and push it to an OCI registry pinned by digest. ## Quick Start Ask the AI to create a production-ready Helm chart for your application following the helm-chart-packages rules, including values.schema.json, standard labels, and OCI signing.
