CI — Helm

Runs helm lint and an optional helm template dry-run across one or more charts. Catches chart errors and render failures before deployment.

Usage

jobs:
  ci:
    uses: KevinDeBenedetti/github-workflows/.github/workflows/ci-helm.yml@main
    with:
      chart-paths: 'charts/*'
      run-template: true

Inputs

Input	Type	Default	Description
run-lint	boolean	true	Run helm lint on all charts
chart-paths	string	'charts/*'	Space-separated chart directory paths (supports globs)
helm-version	string	v3.17.0	Helm version to install
lint-strict	boolean	false	Fail on lint warnings as well as errors (passes --strict)
run-template	boolean	false	Run helm template dry-run on all charts to catch render errors
template-values	string	''	Optional path to a values file used during helm template
template-exclude-paths	string	''	Space-separated chart paths to skip during the template dry-run only (lint still covers them)

Steps

1. (helm-lint, if run-lint) Checkout → Install Helm → helm lint each chart (--strict when enabled)
2. (helm-template, if run-template) Checkout → Install Helm → helm dependency update + helm template each chart under an explicit release name

Notes

• A directory counts as a chart only when it contains a Chart.yaml. If no matching charts are found, the job exits with an error.
• The helm-lint and helm-template jobs are independent and gated by run-lint / run-template respectively.
• helm dependency update failures during the template dry-run do not fail the step — a chart may depend on a momentarily unreachable repo. The failure is logged as a warning, because helm template may still fail afterwards on the missing dependency.
• template-exclude-paths matches whole paths, not prefixes: excluding charts/foo leaves charts/foobar in the dry-run. It is meant for umbrella charts whose dependencies are pulled from a registry — rendering those validates the published artifacts rather than the source tree, which couples the workflow to registry state.
• Exclusions never substitute for a rendered chart: if every path matching chart-paths is excluded, the dry-run job fails rather than reporting success on zero validated charts.