helm-charts

Resolve and pin the latest runwhen-contrib/runwhen-local release in the runwhen-local Helm chart. Use when bumping charts/runwhen-local appVersion, changing workspaceBuilder.image defaults, cutting a chart release that ships the workspace-builder image, or whenever the chart must not default to the floating "latest" tag.

Enterprise BYO checklist for any new service or workload added to the runwhen-local Helm chart. Use when adding a Deployment, StatefulSet, Job, CronJob, DaemonSet, or hook under charts/runwhen-local/templates/, or when retrofitting an existing template that's missing common-labels propagation, pod-template labels, hardened SecurityContext, ServiceAccount overrides, registry overrides, proxy / proxyCA wiring, scratch volumes, scheduling knobs, or any other BYO extension point. Also covers the opentelemetry-collector subchart caveat and unit-test expectations.