Helm
Kubernetes
Templating
values.yaml
DevOps

Helm - Templating variables in values.yaml

Master System Design with Codemia

Enhance your system design skills with over 120 practice problems, detailed solutions, and hands-on exercises.

Introduction

A frequent Helm question is whether you can use Go-template expressions directly inside values.yaml. By default, Helm does not render values.yaml as a template. Values files are treated as plain YAML input merged into .Values. If you place {{ ... }} there, it is usually interpreted as a literal string unless chart templates explicitly call tpl.

Understanding this boundary prevents confusing chart behavior and failed expectations.

Core Sections

1. Default behavior: values are data, not templates

yaml
# values.yaml
image:
  tag: "{{ .Chart.AppVersion }}"

Without tpl, this string is not automatically evaluated.

2. Standard template usage in chart files

yaml
# templates/deployment.yaml
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"

Template rendering happens in templates/*.yaml, not in values files themselves.

3. Use tpl for controlled value templating

yaml
# templates/deployment.yaml
image: "{{ tpl .Values.image.full . }}"

With value:

yaml
image:
  full: "{{ .Values.image.repository }}:{{ .Chart.AppVersion }}"

tpl evaluates the value string as template in current context.

4. Security and maintainability considerations

tpl increases flexibility but also complexity and injection risk when values come from untrusted sources.

text
avoid tpl on user-controlled raw input

Keep tpl usage minimal and documented.

5. Prefer explicit computed values where possible

Often simpler to compute inside template directly:

yaml
image: "{{ .Values.image.repository }}:{{ default .Chart.AppVersion .Values.image.tag }}"

This avoids nested template strings in values files.

6. Debug rendering behavior

bash
helm template myrel ./chart -f values.yaml --debug

Rendered output helps confirm whether templating occurs where expected.

Common Pitfalls

  • Expecting values.yaml to be templated automatically.
  • Overusing tpl and making chart logic hard to reason about.
  • Passing untrusted values through tpl without validation.
  • Embedding complex business logic in value strings.
  • Debugging runtime manifests without first inspecting helm template output.

Summary

Helm does not template values.yaml by default. Values are data merged into .Values, while rendering occurs in chart templates. Use tpl only when necessary and with clear boundaries. In most cases, explicit template logic in templates/*.yaml yields simpler, safer, and more maintainable charts.

For long-term maintainability, treat helm - templating variables in valuesyaml as a contract problem as much as a code problem. Write down the assumptions that are currently implicit in helper methods, controller glue, and data adapters. Typical assumptions include input normalization rules, default values, acceptable error states, ordering guarantees, and version compatibility boundaries. Once these are explicit, convert them into fast executable checks. Keep one focused smoke test for the core path and one for each high-impact edge case observed in production logs. This style of regression coverage is usually more valuable than large numbers of shallow unit tests because it reflects real failure modes and protects the exact integration seams where breakages usually occur after upgrades.

Operationally, instrument the decision points, not just the final failures. Emit structured diagnostic fields for environment, dependency version, and branch outcome while redacting sensitive values. During incident review, add one permanent guard per root cause: either a targeted test, a validation rule at the boundary, or an alert on unexpected state transitions. Avoid scattering near-identical logic in multiple modules; centralize shared behavior and expose it through a small, documented API so call sites stay consistent. Before rolling out dependency updates, run a compatibility checklist that includes this topic’s smoke tests against representative fixtures. Teams that combine explicit contracts, narrow regression tests, and lightweight telemetry usually see lower incident recurrence and faster mean time to diagnosis.

Documenting one canonical example command or snippet in team docs alongside expected output also reduces future ambiguity, especially when debugging under time pressure.


Course illustration
Course illustration

All Rights Reserved.