<p>I'm using helm 3.4.2 for upgrade my charts to my AKS cluster and I saw that every time I deploy something new, it creates a new secret called sh.helm.v... This is the first time I'm using helm.</p>
<p>I was reading the doc and found that at version 3.x helm is using secrets to store driver as default. Cool, but every time I deploy it creates a new secret and I'm now sure if this is the best to keep it all in my cluster.</p>
<p>Soo, should I keep then all in my cluster? Like, every time I deploy some thing, it creates a secret and live there</p>
<p>or</p>
<p>Can I remove the last before? Like, deploy v5 now and erase v1, v2, v3 and keep the v4 and v5 for some reason. If it's ok to do it, does anyone has a clue for how to do it? Using a bash ou kubectl?</p>
<p>Thanks a lot!</p>

Arthur Ávila
<p>So yes, There are few major changes in Helm3, comparing to Helm2.</p>
<ol>
<li><a href="https://v3.helm.sh/docs/faq/#secrets-as-the-default-storage-driver" rel="nofollow noreferrer">Secrets are now used as the default storage driver</a></li>
</ol>
<blockquote>
<p>In Helm 3, Secrets are now used as the default storage driver. Helm 2 used ConfigMaps by default to store release information. In
Helm 2.7.0, a new storage backend that uses Secrets for storing
release information was implemented, and it is now the default
starting in Helm 3.</p>
</blockquote>
<p>Also</p>
<ol start="2">
<li><a href="https://v3.helm.sh/docs/faq/#release-names-are-now-scoped-to-the-namespace" rel="nofollow noreferrer">Release Names are now scoped to the Namespace</a></li>
</ol>
<blockquote>
<p>In Helm 3, information about a particular release is now stored in the
same namespace as the release itself. With this greater alignment to
native cluster namespaces, the helm list command no longer lists all
releases by default. Instead, it will list only the releases in the
namespace of your current kubernetes context (i.e. the namespace shown
when you run kubectl config view --minify). It also means you must
supply the --all-namespaces flag to helm list to get behaviour similar
to Helm 2.</p>
</blockquote>
<hr />
<blockquote>
<p>Soo, should I keep then all in my cluster? Like, every time I deploy
some thing, it creates a secret and live there or
Can I remove the last before?</p>
</blockquote>
<p>I dont thinks its a good practice to remove anything manually. If it is not mandatory necessary - sure better not touch them. However, you can delete unused ones, if you sure you will not need old revisions in the future.</p>
<pre><code>#To check all secretes were created by helm:
kubectl get secret -l &quot;owner=helm&quot; --all-namespaces

#To delete revision you can simply remove appropriate secret..
kubectl delete secret -n &lt;namespace&gt; &lt;secret-name&gt;
</code></pre>
<p>Btw(just FYI), taking into an account the fact Helm3 is scoped to namespaces - you can simply <a href="https://stackoverflow.com/a/63188508/9929015">delete deployment by deleting its corresponding namespace</a></p>
<p>And the last remark, maybe it would be useful for: you can pass <code>--history-max</code> to <a href="https://helm.sh/docs/helm/helm_upgrade/#helm-upgrade" rel="nofollow noreferrer">helm upgrade</a> to</p>
<blockquote>
<p>limit the maximum number of revisions saved per release. Use 0 for no
limit (default 10)</p>
</blockquote>
