// product · available now
Production Helm Chart Kit
tested library chart with secure, observable defaults
An application chart and a library chart with the production defaults every team rewrites — unit-tested, schema-validated and proven on a live cluster.
● instant download · secure checkout by Gumroad
// tested
Tested, not just written
Every release runs its full test suite against real tooling before it ships.
135 helm-unittest assertions ship with the charts; 266 runs across the tiers on every build
helm lint --strict and helm template on Helm 4.0.5 and Helm 3.22, with default, all-features and per-environment values
20 invalid values files rejected: :latest tags, malformed digests, typo'd keys, inline secrets
kubeconform -strict against Kubernetes 1.32, 1.35 and 1.37 schemas, including CRDs
Zero violations against all 21 Kyverno policies of our Hardening Kit (575 passing results)
Live kind cluster: install, config rollout, helm rollback, NetworkPolicy isolation, CronJob, uninstall
// pricing
One-time purchase, three tiers
Pay once, keep the files. Each tier includes everything in the tier before it.
Starter
Teams shipping their first service to Kubernetes
$19USD
- ftw-app chart for a stateless HTTP service
- Secure pod defaults: non-root, seccomp, drop ALL, read-only root FS
- Probes, resources, optional Ingress, config-checksum rollouts
- Strict values.schema.json, quickstart and troubleshooting
- 30 days of updates
Pro
Platform teams standardising many services
$49USD
- ftw-lib library chart: 14 resource templates you include from your own charts
- HPA, PDB, NetworkPolicies, ServiceMonitor/PodMonitor, External Secrets
- Gateway API HTTPRoute, CronJob/Job, topology spread and anti-affinity
- 3 example charts (web API, worker, cron job), library reference
- Upgrade and rollback guide, 1 year of updates
Studio
Consultants, agencies, GitOps platform teams
$99USD
- helm-unittest suites you can extend, chart-testing config
- GitHub Actions release workflow: OCI push to GHCR with cosign signing
- Argo CD Application and Flux HelmRelease examples
- dev/staging/prod values layout, OpenTelemetry env injection
- Client-use license, 1 year of updates
// contents
14 resource templates
- Deployment, Service, ServiceAccountStarter+
- ConfigMap + checksum rolloutStarter+
- Ingress (networking.k8s.io/v1)Starter+
- values.schema.json validationStarter+
- HorizontalPodAutoscaler + PodDisruptionBudgetPro+
- NetworkPolicies (default deny + allows)Pro+
- ServiceMonitor / PodMonitorPro+
- External Secrets (ExternalSecret)Pro+
- Gateway API HTTPRoutePro+
- CronJob / JobPro+
- helm-unittest suites + ct configStudio+
- OCI release workflow with cosignStudio+
// compatibility
Works with your stack
- Kubernetes 1.32 – 1.37 · Helm 4 and Helm 3.14+
- EKS, GKE, AKS, DOKS, OKE, k3s, kind
- ingress-nginx, Traefik, Contour, cloud ingress controllers, Gateway API 1.6
- Prometheus Operator · External Secrets Operator 0.17+
- Argo CD · Flux · GitHub Actions · cosign
// faq
Questions
+Do I have to replace my existing charts?
No. ftw-lib is a library chart: you add it as a dependency and include the templates you want, one line each. The example charts show the whole pattern.
+How is this different from bitnami/common?
bitnami/common is generic helpers. This ships the production resources themselves — probes, security context, HPA, PDB, NetworkPolicies, ServiceMonitor, External Secrets — with unit tests, a strict values schema and a live-cluster suite behind them.
+Will the defaults pass our security policies?
Every rendered chart passes all 21 Kyverno policies from our Kubernetes Hardening Kit with enforce semantics, and installs into a Pod Security restricted namespace in the live tests.
+Can I use it for client work?
Starter and Pro are licensed for your own organization. Client and agency use requires Studio.
+Refunds?
If the charts don't work with a supported Kubernetes and Helm version and the troubleshooting guide doesn't fix it, contact us within 14 days for a refund.
Write the chart once, and let the tests keep it honest.
Questions first? Email hello@fractaltechware.com