# Deployment

The retained deployment material in this repository is the Kubernetes Helm
chart under `deploy/helm-chart/`. Docker Compose remains the local development
path and is documented in `docker-compose.yml` and `docs/DEVELOPER_JOURNEY.md`.

## Deployment Shape

```mermaid
flowchart LR
  values["values.yaml"] --> chart["helm-ai-kernel chart"]
  chart --> deploy["Deployment"]
  chart --> svc["Service"]
  chart --> secret["signing and auth Secrets"]
  chart --> source["policy.source config"]
  source --> delivery["ConfigMap/Secret delivery or CRD watch"]
  chart --> pvc["PVC or emptyDir"]
  delivery --> pod["runtime reconciler"]
  deploy --> pod["helm-ai-kernel serve"]
```

## Helm Chart

```bash
make helm-chart-smoke
helm lint deploy/helm-chart
helm template helm-ai-kernel deploy/helm-chart
helm install helm-ai-kernel deploy/helm-chart
```

Review `deploy/helm-chart/values.yaml` before use in a real environment.

## Scope

Included:

- `Deployment` running `helm-ai-kernel serve`
- `Service` for HTTP, health, and optional metrics ports
- optional `Ingress`
- generated or existing signing-key `Secret`
- generated or existing runtime-auth `Secret`
- policy source configuration with default mounted-file delivery
- optional mounted-file policy `ConfigMap` or `Secret`
- optional `HelmPolicyBundle` CRD/RBAC template for `policy.source.kind=crd`
- optional `PersistentVolumeClaim`
- optional Prometheus Operator `ServiceMonitor`

Not included:

- hosted demo deployment material
- Grafana dashboards or broader monitoring bundles
- managed control-plane deployment material

Those excluded surfaces are not part of the retained OSS deployment contract.
