feat(helm): optional runtime AI inventory via k8s-aibom (default off)

Adds k8s-aibom (https://github.com/GoogleCloudPlatform/k8s-aibom) as an
optional, condition-gated chart dependency (k8s-aibom.enabled, default
false). When enabled, an unprivileged controller generates a CycloneDX
1.6 ML-BOM per AI workload in opted-in namespaces, including the LiteLLM
proxy this chart deploys. Nothing is rendered or inventoried unless both
the flag and the namespace opt-in label are set.

Bumps litellm-helm to 1.1.4 since the chart's dependencies change, and
adds a helm-unittest suite for the enabled path. Rebuilt on current main
(Chart.lock regenerated over the lens dependency added upstream).

Signed-off-by: Glen Messenger <57537684+glenmessenger@users.noreply.github.com>

helm/litellm-helm/Chart.lock

@@ -8,5 +8,8 @@ dependencies:
 - name: lens
   repository: oci://ghcr.io/berriai/charts
   version: 0.1.0-dev.0
-digest: sha256:16b92c3d7fc74632e8aa11e602c136d273c774ed39b2fe970b80273e0570898b
-generated: '2026-10-09T04:18:10.643228000Z'
+- name: k8s-aibom
+  repository: oci://ghcr.io/googlecloudplatform/charts
+  version: 1.5.1
+digest: sha256:7fdc90afcab19b3ba66a73694b2921be7e1e12151ffe2253aa1ff9963ebed3a6
+generated: "2026-10-12T13:11:38.656487Z"

helm/litellm-helm/Chart.yaml

@@ -18,7 +18,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.1.3
+version: 1.1.4
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
@@ -42,3 +42,7 @@ dependencies:
   - name: lens
     version: 0.1.0-dev.0
     repository: oci://ghcr.io/berriai/charts
+  - name: k8s-aibom
+    version: "1.5.1"
+    repository: oci://ghcr.io/googlecloudplatform/charts
+    condition: k8s-aibom.enabled

helm/litellm-helm/README.md

@@ -132,6 +132,8 @@ Set `billingMetrics.caSecretName` only when the collector is a private or test o
 | `postgresql.auth.*`       | If `db.deployStandalone` is `true`, care should be taken to ensure the default `password` and `postgres-password` values are **NOT** used.                                                                                                                                                | `NoTaGrEaTpAsSwOrD`                                                                        |
 | `postgresql.image.*`      | If `db.deployStandalone` is `true`, the image for the bundled Postgres. Pinned to a `docker.io/bitnamilegacy` build because Bitnami retired the versioned tags under `docker.io/bitnami`.                                                                                                 | `bitnamilegacy/postgresql:16.2.0-debian-12-r6`                                             |
 | `redis.image.*`           | If `redis.enabled` is `true`, the image for the bundled Redis. Pinned to a `docker.io/bitnamilegacy` build for the same reason.                                                                                                                                                            | `bitnamilegacy/redis:7.2.4-debian-12-r9`                                                   |
+| `k8s-aibom.enabled`       | Install [k8s-aibom](https://github.com/GoogleCloudPlatform/k8s-aibom), an unprivileged controller that generates a CycloneDX 1.6 ML-BOM per AI workload at runtime (model, runtime, image digests, each with evidence and a confidence tier). Namespace opt-in: also label the namespace `aibom.k8saibom.dev/enabled=true`. | `false`                                                                                    |
+| `k8s-aibom.*`             | If `k8s-aibom.enabled` is `true`, configuration passed to the k8s-aibom chart. See its [values](https://github.com/GoogleCloudPlatform/k8s-aibom/blob/main/charts/k8s-aibom/values.yaml).                                                                                                    | See k8s-aibom [values.yaml](https://github.com/GoogleCloudPlatform/k8s-aibom/blob/main/charts/k8s-aibom/values.yaml) |
 
 #### Bundled Postgres image
 

helm/litellm-helm/tests/k8s_aibom_test.yaml

@@ -0,0 +1,37 @@
+# The k8s-aibom subchart is condition-gated (k8s-aibom.enabled, default
+# false). helm-unittest does not load a disabled dependency's templates at
+# all, so the default-off path cannot be asserted here as "zero documents";
+# it is covered by every other suite rendering with default values. These
+# tests exercise the enabled configuration end to end.
+suite: k8s-aibom optional subchart (enabled)
+templates:
+  - charts/k8s-aibom/templates/deployment.yaml
+  - charts/k8s-aibom/templates/clusterrole.yaml
+  - charts/k8s-aibom/templates/controllerconfig.yaml
+set:
+  k8s-aibom.enabled: true
+tests:
+  - it: renders the k8s-aibom controller Deployment when enabled
+    template: charts/k8s-aibom/templates/deployment.yaml
+    asserts:
+      - hasDocuments:
+          count: 1
+      - isKind:
+          of: Deployment
+      - equal:
+          path: spec.template.spec.containers[0].name
+          value: manager
+  - it: renders the k8s-aibom ClusterRole when enabled
+    template: charts/k8s-aibom/templates/clusterrole.yaml
+    asserts:
+      - hasDocuments:
+          count: 1
+      - isKind:
+          of: ClusterRole
+  - it: renders the default AIBOMControllerConfig when enabled
+    template: charts/k8s-aibom/templates/controllerconfig.yaml
+    asserts:
+      - hasDocuments:
+          count: 1
+      - isKind:
+          of: AIBOMControllerConfig

helm/litellm-helm/values.yaml

@@ -721,3 +721,12 @@ lensWorker:
   nodeSelector: {}
   tolerations: []
   affinity: {}
+
+# Optional runtime AI inventory (k8s-aibom). When enabled, an unprivileged
+# controller generates a CycloneDX 1.6 ML-BOM for AI workloads in namespaces
+# labeled aibom.k8saibom.dev/enabled=true — including the LiteLLM proxy
+# this chart deploys (detected as the `litellm` runtime). Disabled by
+# default; nothing is inventoried without both this flag and the namespace
+# opt-in label.
+k8s-aibom:
+  enabled: false