Cloud Native

Helm 3 EOL plan: final limited release Sep 9, 2026; security-only support until Feb 10, 2027

Helm 3 maintainers scheduled a final limited feature release for Sep 9, 2026; security updates follow only until Feb 10, 2027. Migrate charts, harden pipelines.

September 6, 2026·3 min read·AI researched · AI written · AI reviewed

Helm just put a calendar on your backlog: its maintainers have declared a final limited feature release for Helm 3 on September 9, 2026, after which only security patches will be published through February 10, 2027. The release is explicitly limited to Kubernetes client-library updates so Chart behavior can keep pace with new Kubernetes server versions—no new features, no API redesigns, and no further maintenance beyond security fixes.

This is the single most useful and overdue move Helm could have made. Endless backports keep maintainers trapped and teams complacent; by defining a hard stop the project forces a decision: migrate charts and pipelines, or run the risk of unsupported toolchains and shrinking security windows.

What you need to account for now is not obscure. First, CI and delivery: your release pipelines that download helm client binaries, run helm lint, or perform helm template must be pinned to explicit Helm 3 binaries until Feb 2027 and validated against any updated Kubernetes client libraries in that Sep 9 release. If your pipeline implicitly pulls latest helm via a script or package manager you will either need to vendor the binary or lock an image tag. Second, chart compatibility: chart authors who relied on Helm 3–specific quirks, plugins, or Tiller-era hacks must clean up before you hand off to Helm 4 or another tool. Third, distribution: artifact registries and ChartMuseum-compatible tooling should be audited for compatibility with whatever you choose next.

OpenTelemetry's logs work in Go reaching release-candidate status is the other change that will alter platform operations. Making logs a first-class signal (API + SDK in RC) gives vendors and in-house agents a clearer standard for structured log correlation with traces and metrics. Expect a short feedback window while the API stabilizes and rapid vendor updates to exporters, batch processors, and sampling hooks.

Operational implications are concrete: exporters need to handle higher cardinality and bursty write patterns; log pipeline owners should test memory and backpressure characteristics under production log volumes; and instrumentation libraries ought to adopt context-propagation hooks so logs can carry trace IDs as efficiently as metrics. This finally unblocks unified telemetry, but it also surfaces messy historical logging practices—if you ship everything at full fidelity now, your exporters and backends will scream.

The rest of the week was busy but less existential. Argo CD, Cilium, and Istio all published releases and pre-releases; follow their upgrade notes, practice safe upgrade windows, and validate new release trains in staging. For eBPF-heavy setups, schedule node-level soak tests before flipping major branches. For supply-chain-sensitive tooling, mirror critical images and run interruption tests so you own your artifact surface area.

Two blunt takes: first, Helm's timeline is the right call; open-ended support would have been a trap for maintainers and teams alike. Second, OpenTelemetry logs hitting RC is not incremental — it's foundational. Teams that treat these as low-priority housekeeping will be the ones paged after Feb 2027 when security fixes stop flowing.

If you haven't already, mark Sep 9, 2026 and Feb 10, 2027 in your sprint calendar and make chart migration a first-class ticket. Simultaneously, run pressure tests on your logging pipeline with the new OpenTelemetry Go SDK to flush out exporter and memory issues now, not in the middle of an incident. The next six months will separate teams that treat tools as furniture from teams that treat them as living systems.

For details on the Helm schedule and what to migrate, see our deeper coverage: Helm 3 final limited release Sep 9, 2026 — security support until Feb 10, 2027.

Sources

helmkubernetesopentelemetryargo-cdciliumistio
← All articles
Cloud Native

Helm 3 final limited release Sep 9, 2026 — security support until Feb 10, 2027

Helm 3 gets a last limited release on Sep 9, 2026 with security backports through Feb 10, 2027. Teams must prioritize chart and CI migrations now. Act now.

Sep 4, 2026·3mhelmistio
Cloud Native

Helm 3: End-of-life schedule — final limited feature release Sep 9, 2026 and security patch window to Feb 2027

Helm 3 gets a final limited feature release on Sep 9, 2026, with security fixes through Feb 2027. Platform teams must audit charts and pin versions now.

Sep 3, 2026·3mhelm-3opentelemetry
Cloud Native

Istio 1.31.0 released — ISTIO-SECURITY-2026-006 fixes Envoy CVEs; 1.28 EOL

Istio 1.31.0 fixes Envoy CVEs in ISTIO-SECURITY-2026-006, marks 1.28 EOL, and adds Helm-focused docs and VM artifact hosting. Prioritize upgrades now.

Sep 2, 2026·3mistioenvoy