# KubernetesHelmChartExtensions Methods - Package: [Aspire.Hosting.Kubernetes](/reference/api/csharp/aspire.hosting.kubernetes.md) - Type: [KubernetesHelmChartExtensions](/reference/api/csharp/aspire.hosting.kubernetes/kuberneteshelmchartextensions.md) - Kind: `Methods` - Members: `6` Provides extension methods for adding and configuring external Helm charts in a Kubernetes environment. ## AddHelmChart(IResourceBuilder, string, string, string) - Name: `AddHelmChart(IResourceBuilder, string, string, string)` - Modifiers: `extension` - Returns: `IResourceBuilder` - Source: [GitHub](https://github.com/microsoft/aspire/blob/becb48e2d61099e35ae336d527d3875e928d6594/src/Aspire.Hosting.Kubernetes/KubernetesHelmChartExtensions.cs#L65-L129) Adds an external Helm chart to be installed in the Kubernetes environment. The chart is installed via `helm upgrade --install` as a pipeline step after the main application Helm chart is deployed. ```csharp public static class KubernetesHelmChartExtensions { public static IResourceBuilder AddHelmChart( this IResourceBuilder builder, string name, string chartReference, string chartVersion) { // ... } } ``` ## Parameters - `builder` (`IResourceBuilder`) The Kubernetes environment resource builder. - `name` (`string`) The name of the Helm chart resource (used as release name and namespace if not overridden). - `chartReference` (`string`) The Helm chart reference. Can be an OCI registry URL (e.g., `oci://quay.io/jetstack/charts/cert-manager`) or a chart name from an added repository. - `chartVersion` (`string`) The chart version to install. ## Returns `IResourceBuilder` -- A resource builder for the Helm chart resource. ## Remarks The chart is installed in a dedicated namespace (defaulting to the chart resource name). Use [KubernetesHelmChartExtensions.WithNamespace(IResourceBuilder, string)](/reference/api/csharp/aspire.hosting.kubernetes/kuberneteshelmchartextensions/methods.md#withnamespace-iresourcebuilder-kuberneteshelmchartresource-string) to override the namespace, and [KubernetesHelmChartExtensions.WithHelmValue(IResourceBuilder, string, string)](/reference/api/csharp/aspire.hosting.kubernetes/kuberneteshelmchartextensions/methods.md#withhelmvalue-iresourcebuilder-kuberneteshelmchartresource-string-string) to set chart values. By default, `aspire destroy` does not uninstall the external chart, because it may be shared with workloads outside the Aspire app. Opt in to destroy-time uninstall by chaining [KubernetesHelmChartExtensions.WithDestroy(IResourceBuilder)](/reference/api/csharp/aspire.hosting.kubernetes/kuberneteshelmchartextensions/methods.md#withdestroy-iresourcebuilder-kuberneteshelmchartresource). ## Examples ```csharp var k8s = builder.AddKubernetesEnvironment("k8s"); // Install cert-manager from OCI registry k8s.AddHelmChart("cert-manager", "oci://quay.io/jetstack/charts/cert-manager", "1.17.0") .WithHelmValue("crds.enabled", "true"); ``` ## ATS metadata ### ATS export - Available to Polyglot AppHosts through the Aspire Type System. ## WithDestroy(IResourceBuilder) - Name: `WithDestroy(IResourceBuilder)` - Modifiers: `extension` - Returns: `IResourceBuilder` - Source: [GitHub](https://github.com/microsoft/aspire/blob/becb48e2d61099e35ae336d527d3875e928d6594/src/Aspire.Hosting.Kubernetes/KubernetesHelmChartExtensions.cs#L223-L226) Opts the Helm chart in to destroy-time uninstall. When set, `aspire destroy` will run `helm uninstall` for this release as part of the destroy pipeline. ```csharp public static class KubernetesHelmChartExtensions { public static IResourceBuilder WithDestroy( this IResourceBuilder builder) { // ... } } ``` ## Parameters - `builder` (`IResourceBuilder`) The Helm chart resource builder. ## Returns `IResourceBuilder` -- The resource builder for chaining. ## Remarks External Helm charts are not uninstalled by default because they may be shared with workloads outside the Aspire app (for example, cert-manager or an ingress controller installed once for many apps). Opt in only when the chart's lifecycle is owned by this app. ## Examples ```csharp k8s.AddHelmChart("podinfo", "oci://ghcr.io/stefanprodan/charts/podinfo", "6.7.1") .WithDestroy(); ``` ## ATS metadata ### ATS export - Available to Polyglot AppHosts through the Aspire Type System. ## WithForceConflicts(IResourceBuilder) - Name: `WithForceConflicts(IResourceBuilder)` - Modifiers: `extension` - Returns: `IResourceBuilder` - Source: [GitHub](https://github.com/microsoft/aspire/blob/becb48e2d61099e35ae336d527d3875e928d6594/src/Aspire.Hosting.Kubernetes/KubernetesHelmChartExtensions.cs#L279-L282) Opts the Helm chart in to `helm upgrade --install --force-conflicts`. When set, Helm's server-side apply forcibly takes over any fields owned by another field manager instead of failing with a conflict. ```csharp public static class KubernetesHelmChartExtensions { public static IResourceBuilder WithForceConflicts( this IResourceBuilder builder) { // ... } } ``` ## Parameters - `builder` (`IResourceBuilder`) The Helm chart resource builder. ## Returns `IResourceBuilder` -- The resource builder for chaining. ## Remarks This is most commonly needed for charts whose templates ship admission webhooks (cert-manager, kyverno, gatekeeper, opa-gatekeeper, etc.) on clusters where another admission controller -- such as the AKS `admissionsenforcer` field manager installed by the Azure Policy add-on or Deployment Safeguards -- mutates the webhook configuration after install. Helm's Server-Side Apply (used by default for charts that opt in, including cert-manager) refuses to overwrite fields owned by another field manager. Without `--force-conflicts`, the next `helm upgrade` fails with a "conflict with admissionsenforcer" error on the webhook's `namespaceSelector` (or similar). See [Deployment Safeguards in AKS](https://learn.microsoft.com/azure/aks/deployment-safeguards) and [Server-Side Apply conflicts](https://kubernetes.io/docs/reference/using-api/server-side-apply/#conflicts) for background. Unlike the deprecated `--force` / `--force-replace` (which delete and recreate the resource and are incompatible with Server-Side Apply), `--force-conflicts` is non-destructive -- it only changes which field manager owns the conflicting field. No resources are deleted or recreated. This flag is also distinct from Helm's `--take-ownership`, which transfers ownership of an entire resource between Helm releases and does not address field-level conflicts. Requires Helm v3.18 or later (the version that introduced `--force-conflicts` for `helm upgrade --install`). Older Helm versions fail with `Error: unknown flag: --force-conflicts`. ## Examples ```csharp // cert-manager on AKS clusters with Azure Policy / Deployment Safeguards enabled. k8s.AddHelmChart("cert-manager", "oci://quay.io/jetstack/charts/cert-manager", "v1.18.2") .WithHelmValue("crds.enabled", "true") .WithForceConflicts(); ``` ## ATS metadata ### ATS export - Available to Polyglot AppHosts through the Aspire Type System. ## WithHelmValue(IResourceBuilder, string, string) - Name: `WithHelmValue(IResourceBuilder, string, string)` - Modifiers: `extension` - Returns: `IResourceBuilder` - Source: [GitHub](https://github.com/microsoft/aspire/blob/becb48e2d61099e35ae336d527d3875e928d6594/src/Aspire.Hosting.Kubernetes/KubernetesHelmChartExtensions.cs#L146-L154) Sets a Helm value for the chart installation. Values are passed to `helm upgrade --install` via `--set` flags. ```csharp public static class KubernetesHelmChartExtensions { public static IResourceBuilder WithHelmValue( this IResourceBuilder builder, string key, string value) { // ... } } ``` ## Parameters - `builder` (`IResourceBuilder`) The Helm chart resource builder. - `key` (`string`) The value key using dot notation (e.g., `config.enableGatewayAPI`). - `value` (`string`) The value to set. ## Returns `IResourceBuilder` -- The resource builder for chaining. ## ATS metadata ### ATS export - Available to Polyglot AppHosts through the Aspire Type System. ## WithNamespace(IResourceBuilder, string) - Name: `WithNamespace(IResourceBuilder, string)` - Modifiers: `extension` - Returns: `IResourceBuilder` - Source: [GitHub](https://github.com/microsoft/aspire/blob/becb48e2d61099e35ae336d527d3875e928d6594/src/Aspire.Hosting.Kubernetes/KubernetesHelmChartExtensions.cs#L169-L175) Sets the Kubernetes namespace for the Helm chart installation. If not set, the namespace defaults to the chart resource name. ```csharp public static class KubernetesHelmChartExtensions { public static IResourceBuilder WithNamespace( this IResourceBuilder builder, string @namespace) { // ... } } ``` ## Parameters - `builder` (`IResourceBuilder`) The Helm chart resource builder. - `namespace` (`string`) The namespace to install the chart into. ## Returns `IResourceBuilder` -- The resource builder for chaining. ## ATS metadata ### ATS export - Available to Polyglot AppHosts through the Aspire Type System. ## WithReleaseName(IResourceBuilder, string) - Name: `WithReleaseName(IResourceBuilder, string)` - Modifiers: `extension` - Returns: `IResourceBuilder` - Source: [GitHub](https://github.com/microsoft/aspire/blob/becb48e2d61099e35ae336d527d3875e928d6594/src/Aspire.Hosting.Kubernetes/KubernetesHelmChartExtensions.cs#L190-L196) Sets the Helm release name for the chart installation. If not set, the release name defaults to the resource name. ```csharp public static class KubernetesHelmChartExtensions { public static IResourceBuilder WithReleaseName( this IResourceBuilder builder, string releaseName) { // ... } } ``` ## Parameters - `builder` (`IResourceBuilder`) The Helm chart resource builder. - `releaseName` (`string`) The Helm release name. ## Returns `IResourceBuilder` -- The resource builder for chaining. ## ATS metadata ### ATS export - Available to Polyglot AppHosts through the Aspire Type System.