#910799 RFP: helm-kubernetes -- Kubernetes Package Manager

Package:
wnpp
Source:
wnpp
Submitter:
Laurent Bigonville
Date:
2026-11-12 10:37:01 UTC
Severity:
wishlist
#910799#5
Date:
2018-10-11 12:50:34 UTC
From:
To:
* Package name    : help
  Version         : 2.11.0
  Upstream Author : https://github.com/helm/helm/blob/master/OWNERS
* URL             : https://helm.sh/
* License         : Apache 2.0
  Programming Lang: Go
  Description     : Kubernetes Package Manager

Helm is a tool that streamlines installing and managing Kubernetes
applications. Think of it like apt/yum/homebrew for Kubernetes.

#910799#12
Date:
2018-10-13 07:16:56 UTC
From:
To:
Control: retitle -1 RFP: helm-kubernetes -- Kubernetes Package Manager

The binary package name "helm" is still available, but there is already
a completely unrelated package src:helm in Debian:
https://tracker.debian.org/pkg/helm

This has to be sorted out if this software actually gets packaged,
I am retitling the RFP to a temporary name to make it clear that
this is something different.[1]

cu
Adrian

[1] If it builds a binary package helm there would be benefits
    in renaming the other src:helm (the BTS handles binary package
    in a different source package than a source package of the same
    name very poorly), but this should be discussed when it becomes
    relevant.

#910799#19
Date:
2020-06-23 14:31:56 UTC
From:
To:
This "helm" is a plugin for emacs. Its binary packages are elpa-helm and elpa-
helm core. It does not deliver a helm executable.

So there's no collision between emacs' helm and kubernetes' helm besides the
source package name.

HTH

#910799#24
Date:
2024-07-04 15:59:11 UTC
From:
To:
According to upstream, you can install helm from apt on Debian:
https://helm.sh/docs/intro/install/#from-apt-debianubuntu

 > Members of the Helm community have contributed a Helm package for Apt.

The link points to:
https://helm.baltorepo.com/stable/debian/packages/helm/

The package source apparently is:
https://github.com/BaltoRepo/helm-linux-packages

They package it with fpm: https://fpm.readthedocs.io/en/latest/
which is not (and likely won't ever be) in Debian:
https://bugs.debian.org/688896

P.

#910799#31
Date:
2026-10-30 13:06:22 UTC
From:
To:
Hi,

I am working on packaging helm, with my colleague Arthur (cc'd).
We will package this and maintain it in the Golang team (along with
other Kubernetes tools).


We are tracking our work here:
https://cloud.debianbrasil.org.br/s/7DEGAQsZ8eZFzdL

If anyone is interested in helping out, reach out to us!

Thanks,
Rafael Passos

#910799#46
Date:
2026-11-03 01:26:00 UTC
From:
To:
Hi Rafael, Arthur, Hermes, Emmanuel,

trivy (https://bugs.debian.org/929458) needs helm v4, so I packaged the libraries helm was still missing. They are on salsa, build in sbuild with their tests (also on a single CPU), and are ready for a sponsor:

controller-runtime 0.24.1 https://salsa.debian.org/go-team/packages/golang-k8s-sigs-controller-runtime/-/merge_requests/1 (ITP https://bugs.debian.org/1152905)
cli-utils 1.2.2 https://salsa.debian.org/go-team/packages/golang-github-fluxcd-cli-utils (ITP https://bugs.debian.org/1152906)
extism go-sdk 1.7.1 https://salsa.debian.org/go-team/packages/golang-github-extism-go-sdk (ITP https://bugs.debian.org/1152903), with the wasm kernel built from source
observe-sdk https://salsa.debian.org/go-team/packages/golang-github-dylibso-observe-sdk (ITP https://bugs.debian.org/1152904)
gorp v3 https://salsa.debian.org/go-team/packages/golang-github-go-gorp-gorp (ITP https://bugs.debian.org/1152907)
sql-migrate 1.8.1 https://salsa.debian.org/go-team/packages/golang-github-rubenv-sql-migrate/-/merge_requests/3

Hermes, your six packages build unchanged here, and observe-sdk waits for your wabin. Helm 4.3.0 builds and passes its tests against all of the above. My helm packaging is at https://salsa.debian.org/mendezr/golang-helm-sh-helm in case any of it helps your kubernetes-helm. One test there, TestInvalidYaml, failed once in two autopkgtest runs.

Emmanuel, as you offered help with trivy: these are the next ones it needs, if you can sponsor any of them.

The full list, with what each package waits for, is at
https://salsa.debian.org/go-team/packages/trivy/-/wikis/PackagingDependenciesStatus

I am a DM and can maintain these libraries in the team. Happy to help with anything else on your list.

Juan

#910799#51
Date:
2026-11-05 22:48:00 UTC
From:
To:
Hi Juan, Hermes, and all others,

Thanks! I did see some of the unpushed packages!
Do you guys have someone to upload them ?

Your package definitelly helps!
In mine, I am trying to create both the Library and the Binary packages.
https://salsa.debian.org/rcpassos/kubernetes-helm/-/blob/rcpassos-pkg/debian/control
(I left my changes in a separate branch to make it easy to review).

Juan, could we join forces and both be uploaders for this package?
Arthur Diniz is the DD that is helping me, and offered to upload them.

Thanks!
Hope we can work toghether!

#910799#56
Date:
2026-11-05 23:04:06 UTC
From:
To:
Hi everyone, answering below:


El jueves, 5 de noviembre de 2026 a las 23:47, Rafael Passos <rafael@rcpassos.me> escribió:
...

Definitely, you already unblocked some things in the syft effort.

Rafael, yes, gladly. Add me to Uploaders of kubernetes-helm, and I will
review your rcpassos-pkg branch this week.

I am working alongside Simon Quigley to get the triad of the security and supply chain initiative: syft grype and trivy. Whoever has more free cycles may do it.

Arthur, could you upload them before
helm? All but sql-migrate are new packages, in this order:

golang-github-go-gorp-gorp, then golang-github-rubenv-sql-migrate (MR, team upload)
golang-k8s-sigs-controller-runtime (MR), then golang-github-fluxcd-cli-utils
golang-github-dylibso-observe-sdk after Hermes's wabin, then golang-github-extism-go-sdk

Repos and MRs are listed at
https://salsa.debian.org/go-team/packages/trivy/-/wikis/PackagingDependenciesStatus .
I'm a DM, so after each first upload, a
dcut dm --uid 2A840ED00DE669F4219B8B3302A79E3B82151695 --allow <source>
would let me handle the updates.

Thanks,
Juan

#910799#61
Date:
2026-11-06 01:19:07 UTC
From:
To:
Hi Rafael,

I read rcpassos-pkg. It doesn't build yet:

1. Import 4.3.0, not 4.3.0~rc1. trivy needs 4.3.0.
2. golang-pq-dev and golang-toml-dev don't exist. Use
   golang-github-lib-pq-dev and golang-github-burntsushi-toml-dev.
3. Missing Build-Depends: controller-runtime, fluxcd cli-utils, extism
   go-sdk, squirrel and oras-go.
4. The -dev package should be golang-helm-sh-helm-v4-dev.
5. debian/rules needs test skips and a dh-go workaround, and
   debian/copyright needs five more stanzas.

My package already solves all of this and builds 4.3.0 with its tests:
https://salsa.debian.org/mendezr/golang-helm-sh-helm

Shall I open a merge request against your branch that brings it in,
keeping your source name and both binaries?

Juan

#910799#66
Date:
2026-11-06 01:42:30 UTC
From:
To:
Hi,

Yes, sorry I'm working on a few other dependencies still.
(working on some of them right now)
I haven't made any beyond the basic structure yet.

Sounds great ! Please open your mr.
Dont worry about my commits yet,
I'll ammend them soon.

Thanks!

#910799#71
Date:
2026-11-06 17:10:52 UTC
From:
To:
Hi Juan and others,

I'm very busy until next week. Thanks you by your amazing work.

I'll hope have time for OSS soon ;).

HR

El vie, 6 de nov de 2026, 8:01 a.m., Juan M. Méndez Rey <
juan.mendezr@proton.me> escribió: