chart2kro

✨ Features

📦 Installation

go install github.com/hupe1980/chart2kro/cmd/chart2kro@latest

git clone https://github.com/hupe1980/chart2kro.git
cd chart2kro
just build   # or: CGO_ENABLED=0 go build -o chart2kro ./cmd/chart2kro/

docker run --rm ghcr.io/hupe1980/chart2kro version

🚀 Quick Start

# Convert a local Helm chart
chart2kro convert ./my-chart/

# Convert from an OCI registry
chart2kro convert oci://ghcr.io/org/my-chart:1.0.0

# Convert from a Helm repository
chart2kro convert my-chart --repo-url https://charts.example.com --version "^1.0.0"

# Customise Kind and API group
chart2kro convert ./my-chart/ --kind MyApp --group myapp.kro.run

# Save to file
chart2kro convert ./my-chart/ -o rgd.yaml

# Preview without writing
chart2kro convert ./my-chart/ --dry-run

# Pipe directly to kubectl
chart2kro convert ./my-chart/ | kubectl apply -f -

💡 Check out the examples/ directory for ready-to-run charts including NGINX, Redis, and a production microservice.

🎯 Chart Sources

Values & Rendering

Values are merged in the same order as helm install:

chart2kro convert ./my-chart/ \
  -f base-values.yaml \
  -f env-values.yaml \
  --set image.tag=v2.0.0 \
  --set-string annotations.commit=abc123 \
  --set-file config=./app.conf \
  --release-name myapp \
  --namespace production \
  --strict

🔧 Commands

See docs/cli-reference.md for the full CLI reference.

convert

Convert a Helm chart to a KRO ResourceGraphDefinition.

chart2kro convert <chart-reference> [flags]

inspect

Preview a chart before converting it:

chart2kro inspect ./my-chart/
chart2kro inspect ./my-chart/ --format json

plan

Terraform-like preview showing schema fields, resources, and status projections:

chart2kro plan ./my-chart/
chart2kro plan ./my-chart/ --existing rgd.yaml   # with evolution analysis

diff

Detect drift and breaking schema changes:

chart2kro diff ./my-chart/ --existing rgd.yaml
chart2kro diff ./my-chart/ --existing rgd.yaml --format json   # CI-friendly

Exit code 8 signals breaking changes — safe for CI/CD gates.

validate

chart2kro validate rgd.yaml
chart2kro validate --strict rgd.yaml   # also fail on warnings

export

chart2kro export rgd.yaml                                        # canonical YAML
chart2kro export rgd.yaml --format json                          # JSON
chart2kro export rgd.yaml --format kustomize --output-dir ./out  # Kustomize

audit

chart2kro audit ./my-chart/
chart2kro audit ./my-chart/ --fail-on high --format sarif > results.sarif

docs

chart2kro docs my-rgd.yaml
chart2kro docs my-rgd.yaml --format html -o api-reference.html

watch

Auto-re-convert on file changes:

chart2kro watch ./my-chart/ -o rgd.yaml
chart2kro watch ./my-chart/ -o rgd.yaml --apply            # auto-apply to cluster
chart2kro watch ./my-chart/ -o rgd.yaml --debounce 1s      # custom debounce

🛡️ Security Hardening

# Enable hardening (PSS restricted + resource defaults + SLSA provenance)
chart2kro convert ./my-chart/ --harden -o rgd.yaml

# Full hardening with NetworkPolicy and RBAC generation
chart2kro convert ./my-chart/ --harden --generate-network-policies --generate-rbac

# Resolve image tags to sha256 digests
chart2kro convert ./my-chart/ --harden --resolve-digests

harden:
  images:
    deny-latest-tag: true
    allowed-registries: ["gcr.io/", "quay.io/"]
  resources:
    cpu-request: "200m"
    memory-request: "256Mi"

🏗️ Resource Filtering & Profiles

For enterprise charts with many subcharts:

--exclude-kinds Secret,ConfigMap           # exclude by kind
--exclude-subcharts postgresql,redis       # exclude by subchart
--exclude-labels "component=database"      # exclude by label
--externalize-secret db-creds=externalDb   # externalize resources
--use-external-pattern postgresql          # smart patterns
--profile enterprise                       # preset filter bundles

Custom profiles can be defined in .chart2kro.yaml. See docs/cli-reference.md for details.

⚙️ Transformation Pipeline

chart2kro convert executes a multi-phase pipeline:

Load & Render → Parse Resources → Analyze Dependencies → Filter & Externalize
     → Assign Resource IDs → Detect Parameters → Apply Field Mappings
     → Extract Schema → Build Dependency Graph → Generate Readiness & Status
     → Security Hardening (optional) → Assemble RGD

See docs/transformation-pipeline.md for the full architecture reference.

🔧 Configuration

Configuration is loaded from three sources (highest precedence first):

1. CLI flags — e.g. --log-level debug
2. Environment variables — e.g. CHART2KRO_LOG_LEVEL=debug
3. Config file — .chart2kro.yaml (auto-discovered in . or $HOME/.config/chart2kro/)

See docs/configuration.md for the full reference.

� Go Library

chart2kro can be used as a Go library in your own tools. The public API lives in pkg/chart2kro and uses the functional options pattern.

Install

go get github.com/hupe1980/chart2kro/pkg/chart2kro

Basic Usage

package main

import (
	"context"
	"fmt"
	"log"

	"github.com/hupe1980/chart2kro/pkg/chart2kro"
)

func main() {
	result, err := chart2kro.Convert(context.Background(), "./my-chart/")
	if err != nil {
		log.Fatal(err)
	}

	fmt.Println(string(result.YAML))
}

With Options

result, err := chart2kro.Convert(ctx, "oci://ghcr.io/org/my-chart:1.0.0",
	chart2kro.WithReleaseName("my-release"),
	chart2kro.WithNamespace("production"),
	chart2kro.WithIncludeAllValues(),
	chart2kro.WithTimeout(60 * time.Second),
	chart2kro.WithSchemaOverrides(map[string]chart2kro.SchemaOverride{
		"replicaCount": {Type: "integer", Default: 3},
	}),
)

Result

The Result struct provides:

See docs/library-api.md for the full API reference.

�🐚 Shell Completion

# Bash
source <(chart2kro completion bash)

# Zsh
chart2kro completion zsh > "${fpath[1]}/_chart2kro"

# Fish
chart2kro completion fish > ~/.config/fish/completions/chart2kro.fish

📚 Documentation

📄 License

Apache 2.0 — see LICENSE for details.