Helm Installation

Stage: Alpha Status: Draft

IronRoot ships a Helm chart under deploy/helm/ironroot and publishes release charts as OCI artifacts.

Install an RC chart:

helm install ironroot oci://ghcr.io/parisnakitakejser/charts/ironroot \
  --version 0.1.0-rc.1 \
  --namespace ironroot \
  --create-namespace \
  --set pki.existingSecret=ironroot-ca \
  --set tls.existingSecret=ironroot-api-tls

Install a stable chart:

helm install ironroot oci://ghcr.io/parisnakitakejser/charts/ironroot \
  --version 0.1.0 \
  --namespace ironroot \
  --create-namespace

Local chart testing:

just helm-lint
just helm-template
just helm-test

The chart expects CA material from a Kubernetes Secret. Never include the offline Root CA private key.