[omattsson]

Closes #600

Summary

The backend image installed Helm 3.20.1, while CI linted and tested the chart with 3.17.0. Both now use 3.22.1, the latest 3.x release, so the chart is checked with the Helm that deploys the stacks.

• backend/Dockerfile: HELM_VERSION=3.22.1. The download is now checked against SHA-256 checksums pinned in the file for amd64 and arm64, so a changed tarball fails the build. It used to pipe curl straight into tar. The checksums come from the v3.22.1 release notes and match get.helm.sh.
• pull-request.yml, e2e.yml, helm-release.yml: azure/setup-helm with version: 'v3.22.1'.

To update Helm later, change HELM_VERSION and the two checksums together; the Dockerfile comment says where to find them.

Release notes, 3.18 to 3.22

No change to the commands or flags the deployer uses (upgrade --install, --create-namespace, --timeout, --repo, --version, -f, --skip-crds, uninstall --wait, rollback, status, history --max, get values --revision, list, registry login --password-stdin, --kubeconfig). Relevant fixes:

• 3.19: registry login with a scheme in the host works again after a 3.18 regression (the deployer passes the host only).
• 3.20: uninstall supersedes deployed releases.
• 3.22: rollback with missing resources; plain-HTTP registries keep their credentials on fallback.

Helm 4 (4.3.1) is out too. Moving to it is a major upgrade and is not part of this PR.

Tests

• The helm stage builds for linux/amd64 and linux/arm64: sha256sum -c reports OK for both, and helm version reports v3.22.1+gd6c1a0e.
• The full backend image builds, and helm version inside it reports v3.22.1+gd6c1a0e.
• make helm-lint and make helm-test pass with Helm 3.22.1, run inside the image.
• go test ./internal/deployer/... -race passes.
• Local cluster (Docker Desktop, Kubernetes v1.36.1): I ran the deployer's exact command lines from deployer/helm.go with Helm 3.22.1 and loadtest/chart/loadtest-tiny. Deploy (revision 1), redeploy (revision 2), status -o json, history -o json, get values --revision 1, rollback to 1 (back to 1 replica, revision 3) and uninstall --wait all work. I did not run them through the full app.

🤖 Generated with Claude Code

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: ce254e92-0e39-4b02-aaee-d291470ea140

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}