Helm Values

Managing values files and configuration overrides in Helm.

在Helm中管理values文件和配置覆盖。

Values Hierarchy

Values 层级结构

Helm merges values from multiple sources (lower precedence first):

Built-in default values
Chart's
```
values.yaml
```
Parent chart's values
Values files specified with
```
-f
```
(can be multiple)
Individual parameters with
```
--set
```

Helm会从多个来源合并values（优先级从低到高）：

内置默认值
Chart的
```
values.yaml
```
父Chart的values
通过
```
-f
```
指定的values文件（可指定多个）
使用
```
--set
```
指定的单个参数

values.yaml Structure

values.yaml 结构

Organize by Resource

按资源组织

yaml

undefined

yaml

undefined

Global settings

global: environment: production domain: example.com

Application settings

app: name: myapp version: "1.0.0"

Image settings

image: repository: myregistry/myapp pullPolicy: IfNotPresent tag: "" # Overrides appVersion

Service settings

service: type: ClusterIP port: 80 targetPort: 8080

Ingress settings

ingress: enabled: false className: nginx annotations: {} hosts: - host: myapp.example.com paths: - path: / pathType: Prefix tls: []

Resources

resources: limits: cpu: 500m memory: 512Mi requests: cpu: 250m memory: 256Mi

Persistence

persistence: enabled: false storageClass: "" accessMode: ReadWriteOnce size: 8Gi

undefined

persistence: enabled: false storageClass: "" accessMode: ReadWriteOnce size: 8Gi

undefined

Override Strategies

覆盖策略

Override with File

使用文件覆盖

bash

undefined

bash

undefined

Single file

helm install myrelease ./mychart -f custom-values.yaml

Multiple files (later files override earlier)

helm install myrelease ./mychart
-f values-base.yaml
-f values-production.yaml

undefined

helm install myrelease ./mychart
-f values-base.yaml
-f values-production.yaml

undefined

Override with --set

使用--set覆盖

bash

undefined

bash

undefined

Single value

helm install myrelease ./mychart --set image.tag=2.0.0

Multiple values

helm install myrelease ./mychart
--set image.tag=2.0.0
--set replicaCount=5

Nested values

helm install myrelease ./mychart
--set ingress.enabled=true
--set ingress.hosts[0].host=myapp.com

undefined

helm install myrelease ./mychart
--set ingress.enabled=true
--set ingress.hosts[0].host=myapp.com

undefined

Override with --set-string

使用--set-string覆盖

bash

undefined

bash

undefined

Force string type (useful for numeric-looking strings)

helm install myrelease ./mychart
--set-string version="1.0"

undefined

helm install myrelease ./mychart
--set-string version="1.0"

undefined

Override with --set-file

使用--set-file覆盖

bash

undefined

bash

undefined

Read value from file

helm install myrelease ./mychart
--set-file config=./config.json

undefined

helm install myrelease ./mychart
--set-file config=./config.json

undefined

Environment-Specific Values

环境专属Values

values-development.yaml

yaml

replicaCount: 1

image:
  tag: "dev-latest"
  pullPolicy: Always

resources:
  limits:
    cpu: 200m
    memory: 256Mi

ingress:
  enabled: true
  hosts:
    - host: dev.myapp.com

postgresql:
  enabled: true

yaml

replicaCount: 1

image:
  tag: "dev-latest"
  pullPolicy: Always

resources:
  limits:
    cpu: 200m
    memory: 256Mi

ingress:
  enabled: true
  hosts:
    - host: dev.myapp.com

postgresql:
  enabled: true

values-production.yaml

yaml

replicaCount: 5

image:
  tag: "1.0.0"
  pullPolicy: IfNotPresent

resources:
  limits:
    cpu: 1000m
    memory: 1Gi

ingress:
  enabled: true
  hosts:
    - host: myapp.com
  tls:
    - secretName: myapp-tls
      hosts:
        - myapp.com

postgresql:
  enabled: false
  external:
    host: prod-db.example.com

yaml

replicaCount: 5

image:
  tag: "1.0.0"
  pullPolicy: IfNotPresent

resources:
  limits:
    cpu: 1000m
    memory: 1Gi

ingress:
  enabled: true
  hosts:
    - host: myapp.com
  tls:
    - secretName: myapp-tls
      hosts:
        - myapp.com

postgresql:
  enabled: false
  external:
    host: prod-db.example.com

Global Values

全局Values

Parent Chart values.yaml

父Chart的values.yaml

yaml

global:
  environment: production
  storageClass: fast-ssd

  postgresql:
    auth:
      existingSecret: db-credentials

yaml

global:
  environment: production
  storageClass: fast-ssd

  postgresql:
    auth:
      existingSecret: db-credentials

Subchart Access

子Chart访问

yaml

undefined

yaml

undefined

In subchart template

environment: {{ .Values.global.environment }}

undefined

environment: {{ .Values.global.environment }}

undefined

Schema Validation

Schema 验证

values.schema.json

json

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "required": ["image"],
  "properties": {
    "replicaCount": {
      "type": "integer",
      "minimum": 1,
      "maximum": 10
    },
    "image": {
      "type": "object",
      "required": ["repository"],
      "properties": {
        "repository": {
          "type": "string"
        },
        "tag": {
          "type": "string"
        },
        "pullPolicy": {
          "type": "string",
          "enum": ["Always", "IfNotPresent", "Never"]
        }
      }
    },
    "service": {
      "type": "object",
      "properties": {
        "type": {
          "type": "string",
          "enum": ["ClusterIP", "NodePort", "LoadBalancer"]
        },
        "port": {
          "type": "integer",
          "minimum": 1,
          "maximum": 65535
        }
      }
    }
  }
}

json

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "required": ["image"],
  "properties": {
    "replicaCount": {
      "type": "integer",
      "minimum": 1,
      "maximum": 10
    },
    "image": {
      "type": "object",
      "required": ["repository"],
      "properties": {
        "repository": {
          "type": "string"
        },
        "tag": {
          "type": "string"
        },
        "pullPolicy": {
          "type": "string",
          "enum": ["Always", "IfNotPresent", "Never"]
        }
      }
    },
    "service": {
      "type": "object",
      "properties": {
        "type": {
          "type": "string",
          "enum": ["ClusterIP", "NodePort", "LoadBalancer"]
        },
        "port": {
          "type": "integer",
          "minimum": 1,
          "maximum": 65535
        }
      }
    }
  }
}

Secrets in Values

Values中的密钥

Don't Commit Secrets

不要提交密钥

yaml

undefined

yaml

undefined

values.yaml - public defaults

database: host: "" username: "" password: ""

values-secrets.yaml - not in git

database: host: "prod-db.example.com" username: "dbuser" password: "super-secret"

undefined

database: host: "prod-db.example.com" username: "dbuser" password: "super-secret"

undefined

Use External Secrets

使用外部密钥

yaml

undefined

yaml

undefined

values.yaml

database: useExistingSecret: true existingSecretName: db-credentials


```yaml

database: useExistingSecret: true existingSecretName: db-credentials


```yaml

In template

{{- if .Values.database.useExistingSecret }} secretKeyRef: name: {{ .Values.database.existingSecretName }} key: password {{- else }} value: {{ .Values.database.password | quote }} {{- end }}

undefined

{{- if .Values.database.useExistingSecret }} secretKeyRef: name: {{ .Values.database.existingSecretName }} key: password {{- else }} value: {{ .Values.database.password | quote }} {{- end }}

undefined

Complex Value Structures

复杂值结构

Lists

列表

yaml

undefined

yaml

undefined

values.yaml

extraEnvVars:

name: LOG_LEVEL value: info
name: API_KEY valueFrom: secretKeyRef: name: api-secret key: key


```yaml

extraEnvVars:

name: LOG_LEVEL value: info
name: API_KEY valueFrom: secretKeyRef: name: api-secret key: key


```yaml

template

name: {{ .name }} {{- if .value }} value: {{ .value | quote }} {{- else if .valueFrom }} valueFrom: {{- toYaml .valueFrom | nindent 4 }} {{- end }} {{- end }}

undefined

name: {{ .name }} {{- if .value }} value: {{ .value | quote }} {{- else if .valueFrom }} valueFrom: {{- toYaml .valueFrom | nindent 4 }} {{- end }} {{- end }}

undefined

Maps

映射

yaml

undefined

yaml

undefined

values.yaml

annotations: prometheus.io/scrape: "true" prometheus.io/port: "9090"

labels: team: platform environment: production


```yaml

annotations: prometheus.io/scrape: "true" prometheus.io/port: "9090"

labels: team: platform environment: production


```yaml

template

annotations: {{- range $key, $value := .Values.annotations }} {{ $key }}: {{ $value | quote }} {{- end }}

undefined

annotations: {{- range $key, $value := .Values.annotations }} {{ $key }}: {{ $value | quote }} {{- end }}

undefined

Best Practices

最佳实践

Document Values

为Values添加文档

yaml

undefined

yaml

undefined

values.yaml with comments

Number of replicas

@param replicaCount - Number of pod replicas

replicaCount: 3

Image configuration

@param image.repository - Docker image repository

@param image.tag - Docker image tag (defaults to Chart appVersion)

image: repository: myapp tag: ""

undefined

image: repository: myapp tag: ""

undefined

Sensible Defaults

合理的默认值

yaml

undefined

yaml

undefined

Provide production-ready defaults

replicaCount: 3 # Not 1

resources: limits: cpu: 500m memory: 512Mi requests: cpu: 500m # Same as limit for guaranteed QoS memory: 512Mi

undefined

replicaCount: 3 # Not 1

resources: limits: cpu: 500m memory: 512Mi requests: cpu: 500m # Same as limit for guaranteed QoS memory: 512Mi

undefined

Feature Flags

功能开关

yaml

undefined

yaml

undefined

Allow enabling/disabling features

features: metrics: enabled: true port: 9090

tracing: enabled: false endpoint: ""

undefined

features: metrics: enabled: true port: 9090

tracing: enabled: false endpoint: ""

undefined

View Computed Values

查看计算后的值

bash

undefined

bash

undefined

See final merged values

helm get values myrelease

See all values (including defaults)

helm get values myrelease --all

Template with values

helm template myrelease ./mychart -f custom-values.yaml

undefined

helm template myrelease ./mychart -f custom-values.yaml

undefined

helm-values

Original

Translation

Helm Values

Helm Values

Values Hierarchy

Values 层级结构

values.yaml Structure

values.yaml 结构

Organize by Resource

按资源组织

Global settings

Global settings

Application settings

Application settings

Image settings

Image settings

Service settings

Service settings

Ingress settings

Ingress settings

Resources

Resources

Persistence

Persistence

Override Strategies

覆盖策略

Override with File

使用文件覆盖

Single file

Single file

Multiple files (later files override earlier)

Multiple files (later files override earlier)

Override with --set

使用--set覆盖

Single value

Single value

Multiple values

Multiple values

Nested values

Nested values

Override with --set-string

使用--set-string覆盖

Force string type (useful for numeric-looking strings)

Force string type (useful for numeric-looking strings)

Override with --set-file

使用--set-file覆盖

Read value from file

Read value from file

Environment-Specific Values

环境专属Values

values-development.yaml

values-development.yaml

values-production.yaml

values-production.yaml

Global Values

全局Values

Parent Chart values.yaml

父Chart的values.yaml

Subchart Access

子Chart访问

In subchart template

In subchart template

Schema Validation

Schema 验证

values.schema.json

values.schema.json

Secrets in Values

Values中的密钥

Don't Commit Secrets

不要提交密钥

values.yaml - public defaults

values.yaml - public defaults

values-secrets.yaml - not in git

values-secrets.yaml - not in git

Use External Secrets

使用外部密钥

values.yaml

values.yaml

In template