helm plugin: Usage, Options & Common CI Errors

Extend Helm with plugins like diff and secrets.

helm plugin installs, lists, updates, and removes Helm CLI plugins - extensions such as helm-diff (preview upgrades) and helm-secrets (encrypted values). CI pipelines that rely on a plugin must install it on every fresh runner.

What it does

helm plugin install URL fetches and installs a plugin from a git repo or local path; plugin list shows installed plugins and versions; plugin update / uninstall manage them. Installed plugins add new top-level commands (e.g. helm diff, helm secrets). Plugins live under the Helm data home, which is per-runner in CI.

Common usage

Terminal

helm plugin install https://github.com/databus23/helm-diff
helm plugin install https://github.com/jkroepke/helm-secrets --version v4.6.0
helm plugin list
helm diff upgrade web ./charts/web -f values.prod.yaml

Common errors in CI

"Error: unknown command \"diff\" for \"helm\"" means the plugin is not installed on this runner - fresh CI runners have no plugins, so install them in a setup step (and pin --version for reproducibility). "plugin already exists" on re-run means a cached Helm home already has it; guard with helm plugin list or uninstall-then-install. Plugin installs hit the network (git clone), so they fail in air-gapped CI unless vendored; and an unpinned plugin can change behaviour build-to-build, so always pin the version.

Related guides

kubectl Cheat Sheet: Commands for Everyday KubernetesA kubectl cheat sheet - get, describe, logs, apply, rollout, debug, and context commands for daily Kubernetes… helm upgrade: Usage, Options & Common CI Errorshelm upgrade changes a release to a new chart or values. The --install idempotent pattern, --atomic auto-roll… helm install: Usage, Options & Common CI Errorshelm install deploys a chart as a new release. Setting values, --wait and --atomic for CI, --dry-run, and the… helm template: Usage, Options & Common CI Errorshelm template renders a chart to manifests locally without a cluster. Validating values in CI, --show-only, a…