What Is New in Helm 2.12 – Summary Table
| Category | Key Highlights |
|---|---|
| New Features |
|
| Improvements |
|
| Bug Fixes |
|
| Security & Docs |
|
For the full changelog see the Helm 2.12 release notes.
What new features does Helm 2.12 bring to chart authors?
Key additions
- Signing support via
HELM_KEY_PASSPHRASE– you can now protect chart integrity without extra tooling. - The
helm convertplugin simplifies migration from other package formats. helm get valuesnow accepts--output json|yaml, making automation scripts cleaner.- Repository URLs no longer need a trailing slash, reducing common copy‑paste errors.
- The new
--no-sudoflag lets you install Tiller in environments where sudo is unavailable.
How has Helm 2.12 been improved for reliability?
Stability enhancements
- Linter now returns an empty string instead of
nilfor missing required fields, preventing unexpected crashes. - Custom resources are now accepted in hook definitions, expanding hook use cases.
- Release pruning logic was hardened – the last deployed revision is never deleted.
- Nested values are merged correctly during upgrades, avoiding silent configuration loss.
- Documentation around
.helmignore, license files, and provenance has been clarified.
Which bugs were fixed in Helm 2.12?
Selected bug fixes
- Line‑break handling for custom resources and pod status output corrected.
- CRD deletion bug with
crd-installhook resolved. - Out‑of‑order list values via
--setnow work as expected. - Race condition in
helm listeliminated, improving concurrent usage. - Windows test suite failures fixed, ensuring cross‑platform reliability.
What security‑related changes are included?
Security and documentation updates
- Chart signing via
HELM_KEY_PASSPHRASEadds a lightweight integrity check. - Guidance for running Tiller locally only reduces exposure surface.
- Provenance documentation now reflects the new GnuPG format, helping teams adopt modern signing practices.
- RBAC considerations are highlighted, aiding secure cluster configurations.
FAQ
Can I use helm init --upgrade without sudo?
Yes – add the --no-sudo flag and Helm will skip any sudo calls during Tiller installation.
How do I sign a chart with the new environment variable?
Set HELM_KEY_PASSPHRASE to your GPG passphrase before running helm package; Helm will automatically sign the chart.
Does the helm get values output option replace the old --output flag?
The new option extends the command; you can now choose json or yaml directly, which is useful for CI pipelines.
Will pruning releases ever delete the last successful revision?
No – the pruning logic was updated to keep the most recent deployed revision, preventing accidental loss of the only working version.
Are custom resources now fully supported in hook definitions?
Yes – you can declare any Kubernetes custom resource in helm.sh/hook annotations, and Helm will process them correctly.