Helm Releases
Skyflo exposes 16 typed Helm tools via MCP. All mutations require approval. Dry-run render and manifest comparison are shown before any install, upgrade, or rollback.
Workflow: Discovery
Search repos, list releases, show chart info, get values. Read-only. No approval required.
| Operation | Purpose |
|---|---|
| Search repos | Find charts in configured repositories |
| List releases | Enumerate releases by namespace or all |
| Show chart info | Chart metadata, version, description |
| Get values | Current values for a release |
Use discovery to understand what is installed and what values are in use before proposing changes.
Workflow: Install & Upgrade
Install new releases or upgrade existing ones. Dry-run render and manifest comparison before execution. No mutation without approval.
| Operation | Purpose |
|---|---|
| Install | Install a chart with values. Dry-run first, diff shown. |
| Upgrade | Upgrade a release. Dry-run first, diff shown. |
The agent runs helm upgrade --install with --dry-run first. You see the rendered manifests and diff before approving. Schema-validated values. No blind installs.
Workflow: Rollback
Revert a release to a previous revision. Approval-gated.
| Operation | Purpose |
|---|---|
| Rollback | Roll back to a previous revision |
"Rollback the ingress controller" triggers a rollback proposal. You approve or deny.
Workflow: Template Rendering
Render templates without installing. Read-only. Useful for validating values or inspecting rendered manifests.
| Operation | Purpose |
|---|---|
| Template | Render chart templates with values |
Workflow: Uninstall
Remove a release. Destructive. Flagged for extra caution. Approval required.
| Operation | Purpose |
|---|---|
| Uninstall | Remove a release and its resources |
Uninstall is annotated as destructive. The UI flags it. You must explicitly approve.
Example Workflows
"Upgrade the cert-manager release to 1.14"
- Agent searches for cert-manager chart, finds version.
- Runs dry-run upgrade.
- Shows diff of changes.
- Pauses for approval.
- Executes on approval. Verifies release status.
"What values is the nginx-ingress release using?"
- Agent lists releases, finds nginx-ingress.
- Gets values. Returns them. No approval (read-only).
"Uninstall the old metrics release"
- Agent finds the release.
- Proposes uninstall. Flagged as destructive.
- Pauses for approval.
- Executes on approval.
Safety Summary
| Type | Approval | Notes |
|---|---|---|
| Search, list, show, get values | Auto | Read-only |
| Template | Auto | Read-only, no cluster changes |
| Install, upgrade, rollback | Required | Dry-run render + manifest comparison before execution |
| Uninstall | Required | Destructive, flagged |