Add per-workload replicas values and a chart-global scaleDown flag

Every Deployment/StatefulSet now takes its replica count from a replicas
value (default 1, explicit 0 allowed) via a new per-chart <chart>.replicas
helper; the helper uses a kindIs "invalid" nil check so an explicit 0 is
not swallowed by Helm's default function. A chart-global scaleDown flag
(default false) takes precedence: it renders every workload with
replicas: 0 and suspends the paperless-ngx consume CronJob, stopping the
app without uninstalling it (PVCs, Secrets, Services and Ingress remain).

Defaults leave the rendered manifests byte-identical to main, so all
published charts get a minor version bump; the template-chart carries the
reference helper implementation and stays unversioned.

Fixes #25

README.md

@@ -78,4 +78,5 @@ For runtime verification (do the workloads actually start, do probes/security se
 - `env` entries in `values.yaml` are rendered through `tpl`, so values may contain Helm templating; `value`, `secretKeyRef` and `configMapKeyRef` forms are supported.
 - Hardened defaults: `automountServiceAccountToken: false`, non-root user, `readOnlyRootFilesystem: true`, all capabilities dropped, probes and resource requests always set. Pod and container contexts are configurable via `securityContext.pod` / `securityContext.container` in each chart's values; writable paths (e.g. `/tmp`, nginx cache dirs, s6-overlay's `/run`) are emptyDirs. Where an image cannot satisfy the full standard (e.g. Home Assistant must start as root for s6-overlay, paperless needs a root init container to hand over `/run`), the deviation is minimal and justified with a comment in that chart's `values.yaml`.
 - Resource requests ship as chart defaults and are user-overridable; limits are computed by a per-chart `_helpers.tpl` helper (reference implementation in `template-chart/templates/_helpers.tpl`): an explicitly set limit always wins, missing memory and ephemeral-storage limits default to `resources.limitFactor` × the request (factor default `3`), and a CPU limit is only rendered when set explicitly — otherwise CPU stays unlimited (it is compressible, throttling instead of OOM-killing). The helper is duplicated into every chart because charts have no dependencies.
+- Replica counts and scale-to-zero: every Deployment/StatefulSet has a `replicas` value (default `1`, the values path per workload matches its section, e.g. `patchmon.frontend.replicas`) that also accepts an explicit `0` for per-workload fine control. In addition, every chart has a global `scaleDown` flag (default `false`): `scaleDown: true` takes precedence over all `replicas` values, renders every Deployment/StatefulSet with `replicas: 0` and suspends CronJobs (paperless-ngx consume job). `scaleDown` **stops** the app but does not uninstall it — PVCs, Secrets, Services and Ingress stay in place, and setting it back to `false` brings the workloads back up. Implemented via a per-chart `<chart>.replicas` helper in `_helpers.tpl` (reference in `template-chart`); the helper uses an explicit nil check (`kindIs "invalid"`) because Helm's `default` would swallow an explicit `0`.
 - Charts have no dependencies (`charts/` directories are empty).

apache-tika/Chart.yaml

@@ -4,5 +4,5 @@ description: A Helm chart to deploy Apache Tika on Kubernetes
 
 type: application
 
-version: 7.0.0+up3.2.3.0.full
+version: 7.1.0+up3.2.3.0.full
 appVersion: "3.2.3.0-full"

apache-tika/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "apache-tika.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "apache-tika.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

apache-tika/templates/deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
 spec:
-  replicas: 1
+  replicas: {{ include "apache-tika.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.tika.replicas) }}
   selector:
     matchLabels:
       app: {{ .Release.Name }}-{{ .Chart.Name }}-deployment

apache-tika/values.yaml

@@ -1,4 +1,13 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 tika:
+  # Replica count for this workload; 0 is allowed and scales it down.
+  # The chart-global scaleDown flag takes precedence.
+  replicas: 1
   # The official image runs as the dedicated user 35002:35002. /tmp is a
   # writable emptyDir because Tika writes temporary files while parsing.
   securityContext:

calibre-web-automated/Chart.yaml

@@ -4,7 +4,7 @@ type: application
 name: calibre-web-automated
 description: A Helm chart to deploy calibere-web-automated
 
-version: 3.0.0+upv4.0.6
+version: 3.1.0+upv4.0.6
 appVersion: v4.0.6
 
 maintainers:

calibre-web-automated/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "calibre-web-automated.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "calibre-web-automated.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

calibre-web-automated/templates/calibre-web-automated.sfs.yaml

@@ -6,7 +6,7 @@ metadata:
     app: {{ .Chart.Name }}-{{ .Release.Name }}
 spec:
   serviceName: {{ .Chart.Name }}-{{ .Release.Name }}-cwa-service
-  replicas: 1
+  replicas: {{ include "calibre-web-automated.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.cwa.replicas) }}
   selector:
     matchLabels:
       app: {{ .Chart.Name }}-{{ .Release.Name }}-cwa-sfs

calibre-web-automated/values.yaml

@@ -1,7 +1,16 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 secrets:
   cwaSecretRef: null
 
 cwa:
+  # Replica count for this workload; 0 is allowed and scales it down.
+  # The chart-global scaleDown flag takes precedence.
+  replicas: 1
   storage: 10Gi
   storageClass: longhorn
   timezone: "UTC"

cyberchef/Chart.yaml

@@ -4,7 +4,7 @@ description: A Helm chart to deploy Cyberchef on Kubernetes
 
 type: application
 
-version: 4.0.0+up10.22.1
+version: 4.1.0+up10.22.1
 appVersion: "10.22.1"
 
 maintainers:

cyberchef/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "cyberchef.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "cyberchef.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

cyberchef/templates/cyberchef.deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
 spec:
-  replicas: 1
+  replicas: {{ include "cyberchef.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.cyberchef.replicas) }}
   selector:
     matchLabels:
       app: {{ .Release.Name }}-{{ .Chart.Name }}-deployment

cyberchef/values.yaml

@@ -1,4 +1,13 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 cyberchef:
+  # Replica count for this workload; 0 is allowed and scales it down.
+  # The chart-global scaleDown flag takes precedence.
+  replicas: 1
   # The upstream image is stock nginx (root, listening on port 80). To still
   # run fully non-root, the pod runs as the image's nginx user (uid 101) and
   # the safe sysctl net.ipv4.ip_unprivileged_port_start=80 lets the unprivileged

gotenberg/Chart.yaml

@@ -4,7 +4,7 @@ description: A Helm chart to deploy Gotenberg on Kubernetes
 
 type: application
 
-version: 4.0.0+up8.26.0
+version: 4.1.0+up8.26.0
 appVersion: "8.26.0"
 
 maintainers:

gotenberg/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "gotenberg.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "gotenberg.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

gotenberg/templates/deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
 spec:
-  replicas: 1
+  replicas: {{ include "gotenberg.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.gotenberg.replicas) }}
   selector:
     matchLabels:
       app: {{ .Release.Name }}-{{ .Chart.Name }}-deployment

gotenberg/values.yaml

@@ -1,4 +1,13 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 gotenberg:
+  # Replica count for this workload; 0 is allowed and scales it down.
+  # The chart-global scaleDown flag takes precedence.
+  replicas: 1
   # The official image runs as the dedicated gotenberg user (uid 1001). /tmp
   # and /home/gotenberg are writable emptyDirs so Chromium/LibreOffice keep
   # working with a read-only root filesystem.

homeassistant/Chart.yaml

@@ -3,7 +3,7 @@ name: homeassistant
 description: A Helm chart to deploy Home Assistant on Kubernetes
 type: application
 
-version: 4.0.0+up2026.2.3
+version: 4.1.0+up2026.2.3
 
 appVersion: "2026.2.3"
 

homeassistant/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "homeassistant.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "homeassistant.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

homeassistant/templates/homeassistant.sfs.yaml

@@ -6,7 +6,7 @@ metadata:
     app: "{{ .Release.Name }}-{{ .Chart.Name }}"
 spec:
   serviceName: "{{ .Release.Name }}-{{ .Chart.Name }}-service"
-  replicas: 1
+  replicas: {{ include "homeassistant.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.replicas) }}
   selector:
     matchLabels:
       app: "{{ .Release.Name }}-{{ .Chart.Name }}"

homeassistant/values.yaml

@@ -1,3 +1,13 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
+# Replica count for this workload; 0 is allowed and scales it down.
+# The chart-global scaleDown flag takes precedence.
+replicas: 1
+
 # This is for setting up a service more information can be found here: https://kubernetes.io/docs/concepts/services-networking/service/
 service:
   # This sets the service type more information can be found here: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types

matrix-synapse/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: matrix-synapse
 description: A Helm chart to deploy a Matrix Synapse server on Kubernetes
 type: application
-version: 4.0.0+upv1.149.1
+version: 4.1.0+upv1.149.1
 appVersion: "v1.149.1"
 maintainers:
   - name: jklein

matrix-synapse/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "matrix-synapse.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "matrix-synapse.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

matrix-synapse/templates/matrix-delegation-nginx.deployment.yaml

@@ -6,7 +6,7 @@ metadata:
   labels:
     app: {{ .Release.Name }}-{{ .Chart.Name }}-delegation-nginx
 spec:
-  replicas: 1
+  replicas: {{ include "matrix-synapse.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.matrix.delegation.replicas) }}
   selector:
     matchLabels:
       app: {{ .Release.Name }}-{{ .Chart.Name }}-delegation-nginx

matrix-synapse/templates/matrix-synapse.sfs.yaml

@@ -6,7 +6,7 @@ metadata:
     app: {{ .Release.Name }}-{{ .Chart.Name }}-sfs
 spec:
   serviceName: {{ .Release.Name }}-{{ .Chart.Name }}-service
-  replicas: 1
+  replicas: {{ include "matrix-synapse.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.matrix.replicas) }}
   selector:
     matchLabels:
       app: {{ .Release.Name }}-{{ .Chart.Name }}-sfs

matrix-synapse/values.yaml

@@ -1,8 +1,20 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 matrix:
+  # Replica count for this workload; 0 is allowed and scales it down.
+  # The chart-global scaleDown flag takes precedence.
+  replicas: 1
   serverName: null
   timezone: UTC
   configSecretRef: null
   delegation:
+    # Replica count for this workload; 0 is allowed and scales it down.
+    # The chart-global scaleDown flag takes precedence.
+    replicas: 1
     enabled: false
     serverUrl: null
     # The delegation nginx runs as the image's unprivileged nginx user

outline/Chart.yaml

@@ -4,7 +4,7 @@ description: A Helm chart to deploy Outline on Kubernetes
 
 type: application
 
-version: 3.0.0+up1.9.2
+version: 3.1.0+up1.9.2
 appVersion: 1.9.2
 
 maintainers:

outline/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "outline.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "outline.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

outline/templates/outline.sfs.yaml

@@ -6,7 +6,7 @@ metadata:
     app: {{ .Release.Name }}-{{ .Chart.Name }}-sfs
 spec:
   serviceName: {{ .Release.Name }}-{{ .Chart.Name }}-service
-  replicas: 1
+  replicas: {{ include "outline.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.outline.replicas) }}
   selector:
     matchLabels:
       app: {{ .Release.Name }}-{{ .Chart.Name }}-sfs

outline/values.yaml

@@ -1,8 +1,17 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 secrets:
   configSecretRef: null
   redisSecretRef: null
   dbSecretRef: null
 outline:
+  # Replica count for this workload; 0 is allowed and scales it down.
+  # The chart-global scaleDown flag takes precedence.
+  replicas: 1
   maxUploadSize: '262144000'
   forceHttps: 'false'
   oidc:

paperless-ngx/Chart.yaml

@@ -4,7 +4,7 @@ description: A Helm chart to deploy Paperless-NGX on Kubernetes
 
 type: application
 
-version: 7.0.0+up2.20.13
+version: 7.1.0+up2.20.13
 
 appVersion: 2.20.13
 

paperless-ngx/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "paperless-ngx.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "paperless-ngx.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

paperless-ngx/templates/paperless-consume.cronjob.yaml

@@ -5,6 +5,9 @@ metadata:
   name: {{ .Release.Name }}-{{ .Chart.Name }}-consume-cronjob
 spec:
   schedule: {{ .Values.smbConnection.cronJob }}
+  {{- if .Values.scaleDown }}
+  suspend: true
+  {{- end }}
   jobTemplate:
     spec:
       template:

paperless-ngx/templates/paperless-server.sfs.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app: {{ .Release.Name }}-{{ .Chart.Name }}-sfs
 spec:
-  replicas: 1
+  replicas: {{ include "paperless-ngx.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.paperless.replicas) }}
   serviceName: {{ .Release.Name }}-{{ .Chart.Name }}-service
   selector:
     matchLabels:

paperless-ngx/values.yaml

@@ -1,3 +1,9 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 secrets:
   redisRef: null
   databaseRef: null
@@ -10,6 +16,9 @@ ingress:
   domain: null
 
 paperless:
+  # Replica count for this workload; 0 is allowed and scales it down.
+  # The chart-global scaleDown flag takes precedence.
+  replicas: 1
   ocr:
     languages: "eng"
     mode: "skip"

patchmon/Chart.yaml

@@ -4,7 +4,7 @@ description: A Helm chart to deploy Patchmon on Kubernetes
 
 type: application
 
-version: 4.0.0+up1.4.2
+version: 4.1.0+up1.4.2
 appVersion: "1.4.2"
 
 maintainers:

patchmon/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "patchmon.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "patchmon.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

patchmon/templates/patchmon-backend.deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app: {{ .Release.Name }}-{{ .Chart.Name }}-backend
 spec:
-  replicas: 1
+  replicas: {{ include "patchmon.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.patchmon.backend.replicas) }}
   selector:
     matchLabels:
       app: {{ .Release.Name }}-{{ .Chart.Name }}-backend

patchmon/templates/patchmon-frontend.deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app: {{ .Release.Name }}-{{ .Chart.Name }}-frontend
 spec:
-  replicas: 1
+  replicas: {{ include "patchmon.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.patchmon.frontend.replicas) }}
   selector:
     matchLabels:
       app: {{ .Release.Name }}-{{ .Chart.Name }}-frontend

patchmon/values.yaml

@@ -1,8 +1,17 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 patchmon:
   storage:
     size: 10Gi
     storageClass: null
   frontend:
+    # Replica count for this workload; 0 is allowed and scales it down.
+    # The chart-global scaleDown flag takes precedence.
+    replicas: 1
     # The frontend image is based on nginx-unprivileged; the pod runs as its
     # nginx user (uid 101). The image's root-only init script (it would chown
     # the shared assets volume) is replaced by fsGroup 1000: the same group
@@ -31,6 +40,9 @@ patchmon:
         memory: 128Mi
         ephemeral-storage: 10Mi
   backend:
+    # Replica count for this workload; 0 is allowed and scales it down.
+    # The chart-global scaleDown flag takes precedence.
+    replicas: 1
     resources:
       # Limits are optional: memory and ephemeral-storage limits default to
       # limitFactor x the request, an explicitly set limit always wins, and a

rallly/Chart.yaml

@@ -4,7 +4,7 @@ description: A Helm chart to deploy Rallly on Kubernetes
 
 type: application
 
-version: 3.0.0+up4.8.1
+version: 3.1.0+up4.8.1
 appVersion: "4.8.1"
 
 maintainers:

rallly/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "rallly.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "rallly.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

rallly/templates/rallly.deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app: {{ .Release.Name }}-{{ .Chart.Name }}
 spec:
-  replicas: 1
+  replicas: {{ include "rallly.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.rallly.replicas) }}
   selector:
     matchLabels:
       app: {{ .Release.Name }}-{{ .Chart.Name }}

rallly/values.yaml

@@ -1,3 +1,9 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 secrets:
   ralllySecretRef: null
   oidcSecretRef: null
@@ -5,6 +11,9 @@ secrets:
   smtpSecretRef: null
 
 rallly:
+  # Replica count for this workload; 0 is allowed and scales it down.
+  # The chart-global scaleDown flag takes precedence.
+  replicas: 1
   smtp:
     enabled: false
   allowedEmails: '*'

samba/Chart.yaml

@@ -4,6 +4,6 @@ description: A Helm chart for Samba
 
 type: application
 
-version: 3.0.0+up4.23.5
+version: 3.1.0+up4.23.5
 
 appVersion: 4.23.5

samba/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "samba.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "samba.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

samba/templates/samba.sfs.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app: {{ .Release.Name }}-{{ .Chart.Name }}-sfs
 spec:
-  replicas: 1
+  replicas: {{ include "samba.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.samba.replicas) }}
   serviceName: {{ .Release.Name }}-{{ .Chart.Name }}-service
   selector:
     matchLabels:

samba/values.yaml

@@ -1,7 +1,16 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 secrets:
   sambaUsersRef: null
 
 samba:
+  # Replica count for this workload; 0 is allowed and scales it down.
+  # The chart-global scaleDown flag takes precedence.
+  replicas: 1
   shares:
     - name: null
       validUsers: null

satisfactory/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: satisfactory
 description: A Helm chart to deploy a Satisfactory Gameserver on Kubernetes
 type: application
-version: 3.0.0+upv1.9.10
+version: 3.1.0+upv1.9.10
 appVersion: "v1.9.10"
 maintainers:
   - name: jklein

satisfactory/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "satisfactory.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "satisfactory.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

satisfactory/templates/satisfactory-server.sfs.yaml

@@ -7,7 +7,7 @@ spec:
     matchLabels:
       app: "{{ .Release.Name }}-{{ .Chart.Name }}-sf-server"
   serviceName: "{{ .Release.Name }}-{{ .Chart.Name }}-sf-service"
-  replicas: 1
+  replicas: {{ include "satisfactory.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.server.replicas) }}
   template:
     metadata:
       labels:

satisfactory/values.yaml

@@ -1,3 +1,9 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 dev:
   debug: false
 
@@ -7,6 +13,9 @@ game:
   seasonalEvents: true
 
 server:
+  # Replica count for this workload; 0 is allowed and scales it down.
+  # The chart-global scaleDown flag takes precedence.
+  replicas: 1
   gamePort: 30777
   messagingPort: 30888
   storage: 20Gi

teamspeak-server/Chart.yaml

@@ -4,5 +4,5 @@ description: A Helm chart for deploying a teamspeak-server on Kubernetes
 
 type: application
 
-version: 3.0.0+upv6.0.0.beta8
+version: 3.1.0+upv6.0.0.beta8
 appVersion: "v6.0.0-beta8"

teamspeak-server/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "teamspeak-server.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "teamspeak-server.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

teamspeak-server/templates/teamspeak-server.sfs.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app: {{ .Release.Name }}
 spec:
-  replicas: 1
+  replicas: {{ include "teamspeak-server.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.replicas) }}
   selector:
     matchLabels:
       app: {{ .Release.Name }}-server-sfs

teamspeak-server/values.yaml

@@ -1,3 +1,13 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
+# Replica count for this workload; 0 is allowed and scales it down.
+# The chart-global scaleDown flag takes precedence.
+replicas: 1
+
 resources:
   # Limits are optional: memory and ephemeral-storage limits default to
   # limitFactor x the request, an explicitly set limit always wins, and a

template-chart/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "xxx.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "xxx.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

template-chart/templates/xxx.deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
 spec:
-  replicas: 1
+  replicas: {{ include "xxx.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.xxx.replicas) }}
   selector:
     matchLabels:
       app: {{ .Release.Name }}-{{ .Chart.Name }}-deployment

template-chart/templates/xxx.sfs.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app: {{ .Release.Name }}-{{ .Chart.Name }}-sfs
 spec:
-  replicas: 1
+  replicas: {{ include "xxx.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.xxx.replicas) }}
   serviceName: {{ .Release.Name }}-{{ .Chart.Name }}-service
   selector:
     matchLabels:

template-chart/values.yaml

@@ -1,7 +1,16 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 secrets:
   xxxSecretRef: null
 
 xxx:
+  # Replica count for this workload; 0 is allowed and scales it down.
+  # The chart-global scaleDown flag takes precedence.
+  replicas: 1
   resources:
     # Limits are optional: memory and ephemeral-storage limits default to
     # limitFactor x the request, an explicitly set limit always wins, and a

urlaubsverwaltung/Chart.yaml

@@ -3,5 +3,5 @@ name: urlaubsverwaltung
 description: A Helm chart to deploy urlaubsverwaltung on Kubernetes
 type: application
 
-version: 4.0.0+up6.5.0
+version: 4.1.0+up6.5.0
 appVersion: 6.5.0

urlaubsverwaltung/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "urlaubsverwaltung.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "urlaubsverwaltung.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

urlaubsverwaltung/templates/urlaubsverwaltung.deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app: {{ .Chart.Name }}-{{ .Release.Name }}
 spec:
-  replicas: 1
+  replicas: {{ include "urlaubsverwaltung.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.urlaubsverwaltung.replicas) }}
   selector:
     matchLabels:
       app: {{ .Chart.Name }}-{{ .Release.Name }}-uv-deployment

urlaubsverwaltung/values.yaml

@@ -1,3 +1,9 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 secrets:
   databaseSecretRef: null
   oidcSecretRef: null
@@ -7,6 +13,9 @@ ingress:
   domain: null
 
 urlaubsverwaltung:
+  # Replica count for this workload; 0 is allowed and scales it down.
+  # The chart-global scaleDown flag takes precedence.
+  replicas: 1
   # The official image is built with Cloud Native Buildpacks and runs as the
   # non-root cnb user (uid 1002, gid 1001). /tmp is a writable emptyDir for
   # the JVM's temp/work files.

voucher-vault/Chart.yaml

@@ -4,7 +4,7 @@ description: A Helm chart to deploy VoucherVault on Kubernetes
 
 type: application
 
-version: 3.0.0+up1.27.4
+version: 3.1.0+up1.27.4
 appVersion: "1.27.4"
 
 maintainers:

voucher-vault/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "voucher-vault.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "voucher-vault.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

voucher-vault/templates/voucher-vault.sfs.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app: {{ .Release.Name }}-{{ .Chart.Name }}-sfs
 spec:
-  replicas: 1
+  replicas: {{ include "voucher-vault.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.voucherVault.replicas) }}
   serviceName: {{ .Release.Name }}-{{ .Chart.Name }}-service
   selector:
     matchLabels:

voucher-vault/values.yaml

@@ -1,9 +1,18 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 secrets:
   voucherVaultSecretRef: null
   oidcSecretRef: null
   databaseSecretRef: null
 
 voucherVault:
+  # Replica count for this workload; 0 is allowed and scales it down.
+  # The chart-global scaleDown flag takes precedence.
+  replicas: 1
   resources:
     # Limits are optional: memory and ephemeral-storage limits default to
     # limitFactor x the request, an explicitly set limit always wins, and a

zipline/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 4.0.0+up4.6.4
+version: 4.1.0+up4.6.4
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

zipline/templates/_helpers.tpl

@@ -83,3 +83,34 @@ results are printed without a decimal point.
 {{- printf "%v%s" $product $suffix -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Render the replica count for a Deployment/StatefulSet.
+
+Input: dict
+  "scaleDown"  the chart-global .Values.scaleDown flag (may be nil)
+  "replicas"   the workload's replicas value (may be nil)
+
+Rules (issue #25):
+  - scaleDown: true takes precedence and always yields 0.
+  - otherwise an explicitly set replicas value is used as given, including an
+    explicit 0 — Helm's "default" would swallow 0, hence the explicit
+    kindIs "invalid" nil check.
+  - a missing replicas value defaults to 1.
+
+Usage (the values path to the workload's replicas varies per chart):
+  replicas: {{ include "zipline.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.<app>.replicas) }}
+
+NOTE: like the resources helper above, this is duplicated into every chart's
+templates/_helpers.tpl with the chart's name as define prefix. This file in
+template-chart is the reference implementation.
+*/}}
+{{- define "zipline.replicas" -}}
+{{- if .scaleDown -}}
+0
+{{- else if not (kindIs "invalid" .replicas) -}}
+{{- .replicas -}}
+{{- else -}}
+1
+{{- end -}}
+{{- end -}}

zipline/templates/zipline.sfs.yaml

@@ -7,7 +7,7 @@ spec:
     matchLabels:
       app: "{{ .Release.Name }}-{{ .Chart.Name }}-sfs"
   serviceName: "{{ .Release.Name }}-{{ .Chart.Name }}-service"
-  replicas: 1
+  replicas: {{ include "zipline.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.zipline.replicas) }}
   template:
     metadata:
       labels:

zipline/values.yaml

@@ -1,3 +1,9 @@
+# Scale the whole chart down without uninstalling it: scaleDown: true renders
+# every Deployment/StatefulSet with replicas: 0 (and suspends CronJobs) and
+# takes precedence over any per-workload replicas value. PVCs, Secrets and
+# Services stay in place; scaleDown: false brings the workloads back up.
+scaleDown: false
+
 config:
   storage: 50Gi
   storageClass: longhorn
@@ -7,6 +13,9 @@ config:
   domain: null
   maxUploadFileSize: 30m
 zipline:
+  # Replica count for this workload; 0 is allowed and scales it down.
+  # The chart-global scaleDown flag takes precedence.
+  replicas: 1
   # The upstream image ships no dedicated user, but the Node.js server runs
   # fine as an arbitrary non-root uid; fsGroup makes the uploads PVC writable.
   securityContext: