Audit checklist should only check hardcoded namespaces and required+default conflicts. Resource names are not violations — they depend on subchart implementation and must be tested via helm template, not audited via grep. Testing Templates section rewritten: - require testing with at least 2 different release names and namespaces - verify resource names, labels, selectors linkage works correctly in both - verify manifest links (Service → Deployment) use correct names/namespaces - this is how you validate chart portability, not via code inspection IaC principle clarified: - chart must be deployable to any cluster/namespace without editing - deployment discipline prevents two instances in same cluster/namespace - not a chart constraint, a deployment constraint |
||
|---|---|---|
| .. | ||
| behavior | ||
| constraints | ||
| skills | ||