cpln helm

Overview

The cpln helm command streamlines the process of managing Control Plane resources by leveraging the output generated by the helm template command. This functionality proves invaluable for those preferring to define their Control Plane resources within a helm chart, facilitating regular updates to these resources with ease.

To ensure a seamless transition for users familiar with the original helm commands, we have intentionally designed our CLI helm subcommands to closely resemble their helm counterparts. This approach aims to minimize confusion and provide a familiar environment, as our CLI helm command adheres to the same foundational principles and workflows as the traditional helm commands.

Prerequisites

CLI installed.
helm installed.
Defined policies to create applicable Control Plane resources.
Policy to reveal applicable secrets.

Definitions

cpln release

The definition of a cpln release mirrors that of a helm release, essentially representing a deployed instance of a helm chart within Control Plane. Executing a cpln release involves the use of the cpln helm install command. Each upgrade ensures that the resources defined in the helm chart are appropriately applied. The upgrade also takes care of removing any resources that are no longer part of the chart and updates the cpln release state to reflect these changes.

When you run the cpln helm install command, it results in the creation of a secret of type opaque within your org. This secret is integral to the process, as it contains the payload corresponding to the cpln release state.

cpln release state

The cpln release state is the single source of truth for managing releases via the CLI. It lets you track changes—like new or removed resources—by comparing the stored state with the output of helm template command.

The state is stored as a gzipped JSON object with these top-level keys:

schemaVersion
- Version of the generator that produced this state. Incremented when the CLI’s state format or logic changes.
name
- Name of the release.
info
- Metadata about this release:
  - firstDeployed: Timestamp when the release was first installed.
  - lastDeployed: Timestamp of the most recent deployment.
  - description: Human-readable log entry for this release.
  - status: Current release status (e.g. deployed, failed).
  - notes: Rendered NOTES.txt from the chart, if available.
  - resources
    - Array of active resources in this revision. Each entry has:
      - id: Unique identifier for the resource.
      - kind: Control Plane resource kind (e.g. workload).
      - version: Version of the resource.
      - link: Self-link of the resource.
      - template: The resource’s manifest as generated by helm template command.
chart
- Details of the chart that was released:
  - metadata
    - Contents of the chart’s Chart.yaml:
      - name: Chart name.
      - home: URL for the project homepage or repository.
      - sources: Array of URLs pointing to the chart’s source code.
      - version: Chart version (SemVer 2).
      - description: One-sentence summary of the chart.
      - keywords: Array of search keywords.
      - maintainers
        
        A list of name and URL/email address combinations for the maintainer(s):
        
        name: Maintainer’s name or organization.
        
        email: An optional email address to contact the named maintainer.
        
        url: An optional URL to an address for the named maintainer.
      - icon: URL for the chart icon.
      - apiVersion: Chart API version (e.g. v2).
      - condition: The condition to check to enable chart.
      - tags: Array of tags for grouping charts.
      - appVersion: Version of the application contained in this chart.
      - deprecated: Boolean indicating if the chart is deprecated.
      - annotations: Arbitrary key/value pairs for external tooling.
      - kubeVersion: SemVer constraint for the required Kubernetes version.
      - dependencies
        
        Array of chart dependencies, each with:
        
        name: Dependency chart name (must match its Chart.yaml).
        
        version: Version (range) of this chart.
        
        repository: URL of the dependency’s chart repository.
        
        condition: A yaml path that resolves to a boolean, used for enabling/disabling charts (e.g. subchart1.enabled).
        
        tags: Tags to group dependencies.
        
        enabled: Boolean to include the dependency by default.
        
        importValues: Mapping of child values to parent keys (either string entries or { child: parent } pairs).
        
        alias: Alternate name for the dependency.
      - type: Either application or library.
  - values: Default configuration values for the chart.
config: Merged user-provided values (overrides the chart’s defaults).
manifest: Full rendered manifest (as a YAML string).
version: Revision number of this release (incremented on each upgrade).
gvc: The GVC name for the release.
valuesFiles: Array of custom values files (contents of each -f or --values file).

Create a Helm Chart

To create a helm chart, follow these steps:

In an empty directory, execute the command (substitute CHART_NAME with your desired name):
- helm create CHART_NAME
A directory named CHART_NAME will be created which will contain the following resources:
- Directories: charts and templates
- Files: .helmignore, Chart.yaml, and values.yaml
Delete the contents of the templates directory.
Using your favorite text editor, open the values.yaml file and replace the contents with the following:

YAML

exampleGvc:
  name: example-gvc
  description: This is a description
  locationLinks:
    - //location/aws-eu-central-1

exampleHttpbinWorkload:
  name: httpbin-example

exampleIdentity:
  name: example-identity

Create a file called resources.yaml within the templates directory and paste the following:

YAML

kind: gvc
name: {{ .Values.exampleGvc.name }}
description: {{ .Values.exampleGvc.description }}
spec:
  staticPlacement:
    locationLinks:
    {{- range .Values.exampleGvc.locationLinks }}
      - {{ . }}
    {{- end }}
---
kind: identity
name: {{ .Values.exampleIdentity.name }}
description: {{ .Values.exampleIdentity.name }}
gvc: {{ .Values.exampleGvc.name }}
---
kind: workload
name: {{ .Values.exampleHttpbinWorkload.name }}
description: {{ .Values.exampleHttpbinWorkload.name }}
gvc: {{ .Values.exampleGvc.name }}
spec:
  identityLink: //gvc/{{ .Values.exampleGvc.name }}/identity/{{ .Values.exampleIdentity.name }}
  type: serverless
  containers:
    - name: httpbin
      cpu: 50m
      image: kennethreitz/httpbin
      inheritEnv: false
      memory: 128Mi
      ports:
        - number: 80
          protocol: http
  defaultOptions:
    autoscaling:
      maxConcurrency: 1000
      maxScale: 1
      metric: concurrency
      minScale: 1
      scaleToZeroDelay: 300
      target: 100
    capacityAI: true
    debug: false
    suspend: true
    timeoutSeconds: 5
  firewallConfig:
    external:
      inboundAllowCIDR:
        - 0.0.0.0/0
      outboundAllowCIDR:
        - 0.0.0.0/0
      outboundAllowHostname: []
      outboundAllowPort: []
    internal:
      inboundAllowType: none
      inboundAllowWorkload: []
  localOptions: []
  supportDynamicTags: false

Create a file called NOTES.txt within the templates directory and paste the following:

Text

Hello world from release {{ .Release.Name }}!

Generate a Helm Template

The cpln helm template command will execute the helm template command in the background and will output to stdout.

Example:

cpln helm template NAME PATH_TO_HELM_CHART

Output from executing the chart created in the above example

YAML

---
# Source: test-chart/templates/resources.yaml
kind: gvc
name: example-gvc
description: This is a description
spec:
  staticPlacement:
    locationLinks:
      - //location/aws-eu-central-1
---
# Source: test-chart/templates/resources.yaml
kind: identity
name: example-identity
description: example-identity
gvc: example-gvc
---
# Source: test-chart/templates/resources.yaml
kind: workload
name: httpbin-example
description: httpbin-example
gvc: example-gvc
spec:
  identityLink: //gvc/example-gvc/identity/example-identity
  type: serverless
  containers:
    - name: httpbin
      cpu: 50m
      image: kennethreitz/httpbin
      inheritEnv: false
      memory: 128Mi
      ports:
        - number: 80
          protocol: http
  defaultOptions:
    autoscaling:
      maxConcurrency: 1000
      maxScale: 1
      metric: concurrency
      minScale: 1
      scaleToZeroDelay: 300
      target: 100
    capacityAI: true
    debug: false
    suspend: true
    timeoutSeconds: 5
  firewallConfig:
    external:
      inboundAllowCIDR:
        - 0.0.0.0/0
      outboundAllowCIDR:
        - 0.0.0.0/0
      outboundAllowHostname: []
      outboundAllowPort: []
    internal:
      inboundAllowType: none
      inboundAllowWorkload: []
  localOptions: []
  supportDynamicTags: false

Helm Template Options

For the list of options, browse to the cpln helm template command and expand the References panel.

If the release name is not specified, a release name will be auto generated.

Injected Values

The following values get injected into the cpln helm template command which can be accessed from within your chart.

Key: cpln.org, Value: Name of your organization.
Key: cpln.gvc, Value: Name of your GVC.

Example Usage:

{{ .Values.cpln.org }}

It is recommended that you avoid defining a top-level cpln property within your values.yaml file, as the injected values above will override them.

Chart Notes

After executing cpln helm install or cpln helm upgrade, the content of the NOTES.txt file that is defined within the chart directory will be output to stdout.

Injected Tags

When you install or upgrade, the specified tags are added to each resource that is being installed or upgraded.

Key: cpln/release, Value: The name of the release.

Tell Helm Not To Uninstall a Resource

Sometimes there are resources that should not be uninstalled. Chart developers can add the helm.sh/resource-policy: keep tag to a resource to prevent it from being uninstalled.

YAML

kind: location
tags:
  helm.sh/resource-policy: keep
[...]

The tag helm.sh/resource-policy: keep instructs the CLI to skip deleting this resource when a cpln helm operation (such as cpln helm upgrade or cpln helm rollback) would result in its deletion.

Install a Release

The cpln helm install command accepts the same options as the cpln helm template command. It injects the same values and executes the helm template command in the background. It will use the output to create resources based on the content that is added within the chart.

The release name should follow the same naming convention that is used to name resources in Control Plane since the name of the release will be part of the secret name that will be created.

Example usage:

cpln helm install NAME PATH_TO_HELM_CHART

Output from executing the chart created in the above example

Created /org/cpln-test-org/gvc/example-gvc
Created /org/cpln-test-org/gvc/example-gvc/identity/example-identity
Created /org/cpln-test-org/gvc/example-gvc/workload/httpbin-example

Release 'example' has been installed successfully!

Wait for Workload Readiness

To guarantee the readiness of one or more workloads during a cpln helm install or a cpln helm upgrade, include the --wait option in your command. This will enforce a default waiting period of 300 seconds (5 minutes). If you need to adjust this duration, use the --timeout option with your preferred number of seconds.

Example usage:

cpln helm install NAME PATH_TO_HELM_CHART --wait --timeout 600

cpln helm upgrade NAME PATH_TO_HELM_CHART --wait --timeout 600

Upgrade a Release

If you need to modify your release following alterations to your chart — be it adding a new resource, updating an existing one, or removing a resource — execute the cpln helm upgrade command. It’s crucial to use the same release name when running this command. This consistency enables the CLI to accurately determine which resources should be deleted and to appropriately update the cpln release state with these changes.

A release can only have up to 10 revisions. Every additional upgrade will omit the oldest one (i.e. the revision with the lowest revision number that doesn’t have the deployed status).

Using the above example, the updated template (resources.yaml) below has the identity and the identityLink (from the workload) removed.

Updated Resources Template

YAML

kind: gvc
name: {{ .Values.exampleGvc.name }}
description: {{ .Values.exampleGvc.description }}
spec:
  staticPlacement:
    locationLinks:
    {{- range .Values.exampleGvc.locationLinks }}
      - {{ . }}
    {{- end }}
---
kind: workload
name: {{ .Values.exampleHttpbinWorkload.name }}
description: {{ .Values.exampleHttpbinWorkload.name }}
gvc: {{ .Values.exampleGvc.name }}
spec:
  type: serverless
  containers:
    - name: httpbin
      cpu: 50m
      image: kennethreitz/httpbin
      inheritEnv: false
      memory: 128Mi
      ports:
        - number: 80
          protocol: http
  defaultOptions:
    autoscaling:
      maxConcurrency: 1000
      maxScale: 1
      metric: concurrency
      minScale: 1
      scaleToZeroDelay: 300
      target: 100
    capacityAI: true
    debug: false
    suspend: true
    timeoutSeconds: 5
  firewallConfig:
    external:
      inboundAllowCIDR:
        - 0.0.0.0/0
      outboundAllowCIDR:
        - 0.0.0.0/0
      outboundAllowHostname: []
      outboundAllowPort: []
    internal:
      inboundAllowType: none
      inboundAllowWorkload: []
  localOptions: []
  supportDynamicTags: false

Example usage:

cpln helm upgrade NAME PATH_TO_HELM_CHART

Output from executing the updated template

Unchanged /org/cpln-test-org/gvc/example-gvc
Updated /org/cpln-test-org/gvc/example-gvc/workload/httpbin-example

Performing cleanup...

Deleted /org/cpln-test-org/gvc/example-gvc/identity/example-identity

Release 'example' has been upgraded successfully!

Rollback a Release

The cpln helm rollback command rolls back a release to a previous revision. If no revision is specified, the command will rollback to the previous revision. To view the revision number of each deployment, refer to the cpln helm history command.

Example usage:

cpln helm rollback NAME [REVISION]

Output

Unchanged /org/cpln-test-org/gvc/example-gvc
Created /org/cpln-test-org/gvc/example-gvc/identity/example-identity
Updated /org/cpln-test-org/gvc/example-gvc/workload/httpbin-example

Rollback to revision '1' has been successful!

Release History

The cpln helm history command will output the deployments of a given release in the format defined in your profile (YAML, JSON, etc.). You can override the formatting with the --output option.

Example usage:

cpln helm history NAME

Output

+---------+--------------+-----------+--------+------------+-----------------+
|REVISION |UPDATED       |STATUS     |CHART   |APP VERSION |DESCRIPTION      |
| :------ | :----------- | :-------- | :----- | :--------- | :-------------- |
|1        |0 minutes ago |superseded |example |1.16.0      |Install complete |
|2        |0 minutes ago |deployed   |example |1.16.0      |Upgrade complete |
+---------+--------------+-----------+--------+------------+-----------------+

Get

All

The cpln helm get all command fetches all information for a named release.

Example usage:

cpln helm get all RELEASE_NAME

Output

JSON

{
  'name': 'example',
  'chart':
    {
      'metadata':
        {
          'name': 'example',
          'description': 'A Helm chart for Kubernetes',
          'type': 'application',
          'apiVersion': 'v2',
          'appVersion': '1.16.0',
          'version': '0.1.0',
        },
      'values':
        {
          'exampleGvc': { 'name': 'example-gvc', 'description': 'This is a description', 'locationLinks': ['//location/aws-eu-central-1'] },
          'exampleHttpbinWorkload': { 'name': 'httpbin-example' },
          'exampleIdentity': { 'name': 'example-identity' },
        },
    },
  'config': {},
  'gvc': 'cpln-test-gvc',
  'info':
    {
      'description': 'Rollback to 1',
      'firstDeployed': '2025-05-05T17:01:46.996Z',
      'lastDeployed': '2025-05-05T17:03:22.368Z',
      'notes': '',
      'resources':
        [
          {
            'kind': 'gvc',
            'link': '/org/cpln-test-org/gvc/example-gvc',
            'template':
              {
                'kind': 'gvc',
                'name': 'example-gvc',
                'description': 'This is a description',
                'tags': { 'cpln/release': 'cpln-helm-release-example-sq8nbfv8-v1' },
                'spec': { 'staticPlacement': { 'locationLinks': ['//location/aws-eu-central-1'] } },
              },
            'version': 1,
            'id': '46bc988d-d13d-4820-a7a9-3c5d21de125f',
          },
          {
            'kind': 'identity',
            'link': '/org/cpln-test-org/gvc/example-gvc/identity/example-identity',
            'template':
              {
                'kind': 'identity',
                'name': 'example-identity',
                'description': 'example-identity',
                'tags': { 'cpln/release': 'cpln-helm-release-example-sq8nbfv8-v1' },
                'gvc': 'example-gvc',
              },
            'version': 2,
            'id': 'ccefbbc3-520f-4e26-a423-be6b7e282309',
          },
          {
            'kind': 'workload',
            'link': '/org/cpln-test-org/gvc/example-gvc/workload/httpbin-example',
            'template':
              {
                'kind': 'workload',
                'name': 'httpbin-example',
                'description': 'httpbin-example',
                'tags': { 'cpln/release': 'cpln-helm-release-example-sq8nbfv8-v1' },
                'gvc': 'example-gvc',
                'spec':
                  {
                    'type': 'serverless',
                    'containers':
                      [
                        {
                          'name': 'httpbin',
                          'cpu': '50m',
                          'image': 'kennethreitz/httpbin',
                          'inheritEnv': false,
                          'memory': '128Mi',
                          'ports': [{ 'number': 80, 'protocol': 'http' }],
                        },
                      ],
                    'defaultOptions':
                      {
                        'autoscaling':
                          {
                            'maxConcurrency': 1000,
                            'maxScale': 1,
                            'metric': 'concurrency',
                            'minScale': 1,
                            'scaleToZeroDelay': 300,
                            'target': 100,
                          },
                        'capacityAI': true,
                        'debug': false,
                        'suspend': true,
                        'timeoutSeconds': 5,
                      },
                    'firewallConfig':
                      {
                        'external':
                          {
                            'inboundAllowCIDR': ['0.0.0.0/0'],
                            'outboundAllowCIDR': ['0.0.0.0/0'],
                            'outboundAllowHostname': [],
                            'outboundAllowPort': [],
                          },
                        'internal': { 'inboundAllowType': 'none', 'inboundAllowWorkload': [] },
                      },
                    'identityLink': '//gvc/example-gvc/identity/example-identity',
                    'localOptions': [],
                    'supportDynamicTags': false,
                  },
              },
            'version': 4,
            'id': '431fface-1a70-4725-910b-79eb4666c3d7',
          },
        ],
      'status': 'deployed',
    },
  'schemaVersion': '3',
  'valuesFiles': [],
  'version': 3,
  'manifest': "---\n# Source: example/templates/resources.yaml\nkind: gvc\nname: example-gvc\ndescription: This is a description\nspec:\n  staticPlacement:\n    locationLinks:\n      - //location/aws-eu-central-1\n---\n# Source: example/templates/resources.yaml\nkind: identity\nname: example-identity\ndescription: example-identity\ngvc: example-gvc\n---\n# Source: example/templates/resources.yaml\nkind: workload\nname: httpbin-example\ndescription: httpbin-example\ngvc: example-gvc\nspec:\n  identityLink: //gvc/example-gvc/identity/example-identity\n  type: serverless\n  containers:\n    - name: httpbin\n      cpu: 50m\n      image: kennethreitz/httpbin\n      inheritEnv: false\n      memory: 128Mi\n      ports:\n        - number: 80\n          protocol: http\n  defaultOptions:\n    autoscaling:\n      maxConcurrency: 1000\n      maxScale: 1\n      metric: concurrency\n      minScale: 1\n      scaleToZeroDelay: 300\n      target: 100\n    capacityAI: true\n    debug: false\n    suspend: true\n    timeoutSeconds: 5\n  firewallConfig:\n    external:\n      inboundAllowCIDR:\n        - 0.0.0.0/0\n      outboundAllowCIDR:\n        - 0.0.0.0/0\n      outboundAllowHostname: []\n      outboundAllowPort: []\n    internal:\n      inboundAllowType: none\n      inboundAllowWorkload: []\n  localOptions: []\n  supportDynamicTags: false\n",
}

Manifest

The cpln helm get manifest command fetches the generated manifest for a given release.

Example usage:

cpln helm get manifest RELEASE_NAME

Output

YAML

---
# Source: example/templates/resources.yaml
kind: gvc
name: example-gvc
description: This is a description
spec:
  staticPlacement:
    locationLinks:
      - //location/aws-eu-central-1
---
# Source: example/templates/resources.yaml
kind: identity
name: example-identity
description: example-identity
gvc: example-gvc
---
# Source: example/templates/resources.yaml
kind: workload
name: httpbin-example
description: httpbin-example
gvc: example-gvc
spec:
  identityLink: //gvc/example-gvc/identity/example-identity
  type: serverless
  containers:
    - name: httpbin
      cpu: 50m
      image: kennethreitz/httpbin
      inheritEnv: false
      memory: 128Mi
      ports:
        - number: 80
          protocol: http
  defaultOptions:
    autoscaling:
      maxConcurrency: 1000
      maxScale: 1
      metric: concurrency
      minScale: 1
      scaleToZeroDelay: 300
      target: 100
    capacityAI: true
    debug: false
    suspend: true
    timeoutSeconds: 5
  firewallConfig:
    external:
      inboundAllowCIDR:
        - 0.0.0.0/0
      outboundAllowCIDR:
        - 0.0.0.0/0
      outboundAllowHostname: []
      outboundAllowPort: []
    internal:
      inboundAllowType: none
      inboundAllowWorkload: []
  localOptions: []
  supportDynamicTags: false

You can always change the output format by adjusting the --output option.

Notes

The cpln helm get notes command will output the notes for a named release.

Example usage:

cpln helm get notes RELEASE_NAME

Output

Values

The cpln helm get values command will output the values of a given release.

Example usage:

cpln helm get values RELEASE_NAME

Output with --all option

YAML

exampleGvc:
  name: example-gvc
  description: This is a description
  locationLinks:
    - //location/aws-eu-central-1
exampleHttpbinWorkload:
  name: httpbin-example
exampleIdentity:
  name: example-identity

You can always change the output format by adjusting the --output option.

List Releases

The cpln helm list command lists all cpln releases.

Example usage:

cpln helm list

Output

+--------+--------+---------+---------------+---------+--------+------------+
|NAME    |GVC     |REVISION |UPDATED        |STATUS   |CHART   |APP VERSION |
| :----- | :----- | :------ | :------------ | :------ | :----- | :--------- |
|example |example |1        |12 minutes ago |deployed |example |1.16.0      |
+--------+--------+---------+---------------+---------+--------+------------+

You can always change the output format by adjusting the --output option.

Uninstall a Release

The cpln helm uninstall command will help uninstall a cpln release, that includes deleting every resource defined in the cpln release state and will also delete the secert that has been created to represent the cpln release.

Example usage:

cpln helm uninstall NAME

Output

Deleted /org/cpln-test-org/gvc/example-gvc/workload/httpbin-example
Deleted /org/cpln-test-org/gvc/example-gvc/identity/example-identity
Deleted /org/cpln-test-org/gvc/example-gvc

Release 'example' has been uninstalled successfully!

Quickstart

Concepts

Guides

External Logging

Kubernetes (Managed)

Bring your Own Kubernetes (BYOK)

Terraform Provider

Pulumi Provider

Kubernetes Operator

Reference

Overview

Prerequisites

Definitions

cpln release

cpln release state

Create a Helm Chart

Generate a Helm Template

Helm Template Options

Injected Values

Chart Notes

Injected Tags

Tell Helm Not To Uninstall a Resource

Install a Release

Wait for Workload Readiness

Upgrade a Release

Rollback a Release

Release History

Get

All

Manifest

Notes

Values

List Releases

Uninstall a Release

Quickstart

Concepts

Guides

External Logging

Kubernetes (Managed)

Bring your Own Kubernetes (BYOK)

Terraform Provider

Pulumi Provider

Kubernetes Operator

Reference

​Overview

​Prerequisites

​Definitions

​cpln release

​cpln release state

​Create a Helm Chart

​Generate a Helm Template

​Helm Template Options

​Injected Values

​Chart Notes

​Injected Tags

​Tell Helm Not To Uninstall a Resource

​Install a Release

​Wait for Workload Readiness

​Upgrade a Release

​Rollback a Release

​Release History

​Get

​All

​Manifest

​Notes

​Values

​List Releases

​Uninstall a Release

Overview

Prerequisites

Definitions

cpln release

cpln release state

Create a Helm Chart

Generate a Helm Template

Helm Template Options

Injected Values

Chart Notes

Injected Tags

Tell Helm Not To Uninstall a Resource

Install a Release

Wait for Workload Readiness

Upgrade a Release

Rollback a Release

Release History

Get

All

Manifest

Notes

Values

List Releases

Uninstall a Release