ci: add loud skip-list for charts that cannot template with default values

The newly-live verify gate exposed 16 charts on master that fail
helm template without user-supplied values. Rather than blocking the
weekly update on pre-existing conditions or hiding them, list them in
.helm-template-skip: the verify script skips them with an explicit
SKIPPED line and a summary count, and every entry must carry a reason.
The list is meant to shrink as charts gain renderable defaults.

Signed-off-by: Ashish Jaiswal <ashish@obmondo.com>

Author: ashish1099

.helm-template-skip

@@ -0,0 +1,23 @@
+# Charts that `helm template` cannot render with default values alone.
+# bin/verify-helm-chart.sh skips these LOUDLY — they are not verified by CI.
+# Every entry must carry a reason. Remove a chart from this list once its
+# default values render (that is the goal; this list should shrink).
+#
+# All entries below were found failing on master when the verify gate first
+# went live (workflow run 31887548046, 2026-08-15).
+open-xchange                     # requires user-supplied values to render
+lemmy                            # requires user-supplied values to render
+hcloud-fip-controller            # requires user-supplied values to render
+hetzner-robot                    # requires user-supplied values to render
+metallb                          # requires user-supplied values to render
+odoo                             # requires user-supplied values to render
+peertube                         # requires user-supplied values to render
+azure-workload-identity-webhook  # requires user-supplied values to render
+rustfs                           # requires user-supplied values to render
+buzz                             # requires user-supplied values to render
+pixelfed                         # requires user-supplied values to render
+mattermost-operator              # requires user-supplied values to render
+twenty                           # requires user-supplied values to render
+funkwhale                        # requires user-supplied values to render
+mastodon                         # requires user-supplied values to render
+redmine                          # templates/postgresql.yaml dereferences postgresql.logicalBackup with no default

bin/verify-helm-chart.sh

@@ -51,15 +51,44 @@ if [ "${#charts[@]}" -eq 0 ]; then
   exit 0
 fi
 
+# Charts listed in .helm-template-skip (one name per line, comments with #)
+# cannot render with default values alone and are skipped loudly. Every
+# entry must carry a reason in the file.
+SKIP_FILE=".helm-template-skip"
+skip_list=()
+if [ -f "$SKIP_FILE" ]; then
+  mapfile -t skip_list < <(sed 's/#.*//' "$SKIP_FILE" | awk 'NF {print $1}')
+fi
+
+is_skipped() {
+  local name="$1" s
+  for s in "${skip_list[@]}"; do
+    [ "$s" = "$name" ] && return 0
+  done
+  return 1
+}
+
 failed=()
+skipped=()
 
 for chart in "${charts[@]}"; do
+  chart_name="$(basename "$chart")"
+  if is_skipped "$chart_name"; then
+    skipped+=("$chart")
+    echo "==> SKIPPED ${chart} (listed in ${SKIP_FILE} — cannot template with default values)"
+    continue
+  fi
   echo "==> Templating ${chart}"
   if ! helm template "$chart" --api-versions="monitoring.coreos.com/v1" >/dev/null; then
     failed+=("$chart")
   fi
 done
 
+if [ "${#skipped[@]}" -gt 0 ]; then
+  echo
+  echo "NOTE: ${#skipped[@]} chart(s) were skipped via ${SKIP_FILE} and are NOT verified."
+fi
+
 echo
 if [ "${#failed[@]}" -eq 0 ]; then
   echo "All ${#charts[@]} chart(s) templated successfully."