Will this Helm chart lint, render and upgrade - and is it safe by default?
Paste or drop your chart - Chart.yaml, values.yaml, the templates and
_helpers.tpl. Your browser reads every file and every {{ }} action and checks what
helm lint, helm template and helm upgrade trip on: a version that
is not SemVer, removed Kubernetes APIs, .Values paths that nil-pointer or render empty,
.Values inside range without $, includes nobody defines,
toYaml without nindent, unquoted env values, a selector that carries the chart version
- and what is unsafe by default: passwords in values, Secret data without b64enc,
latest tags, no securityContext. Free, before you sign in, and nothing is uploaded. Then pick a lane:
the audit writes the whole corrected file for each finding, or the schema lane
writes the values.schema.json your defaults must pass - and the page re-checks both.
The companies, registries and values in the examples are invented. The first three are audits (the first also carries a saved schema of its fixed chart, one click after the audit), the last a schema; each comes with a saved model reply, so you can see the whole page without signing in or spending a credit.
The audit says what the chart deploys, confirms or dismisses every flag below, adds what rules cannot see, and gives the whole corrected file for each finding - which the page puts back into your paste and re-checks.
What this does, and what it does not
The check is a reading of the text, not Helm: nothing runs helm lint, renders a template or talks
to a cluster. Chart.yaml and values.yaml are parsed, every template action is scanned with the
if/with/range block it sits in, and each flag carries the catalogue id it
comes from and the line it points at. Checks only see what you paste: a helper or value defined in a file you
did not paste is noted, not reported as missing. The Kubernetes version of your cluster, what the application
needs and a subchart's values are outside the paste - the lanes ask rather than assume.
The paid lanes see your paste and the page's facts. Every quote and fix they return is checked against your paste, every fix and the schema are put back and re-checked, and a reply that repeats a secret from your paste is called out. A paste stays in this browser unless you run a lane - and if the free check finds a credential in it, rotate that credential whatever you do next. Derived from the agent skill @wshobson/helm-chart-scaffolding by Seth Hobson (wshobson/agents, MIT). Sources are listed in llms.txt.