# Notifier Helm Overlays (DEPLOY-NOTIFY-38-001)

## Values file
- `deploy/helm/stellaops/values-notify.yaml` (added) with:
  - `notify:`
    - `image.repository`: `registry.stella-ops.org/notify`
    - `image.tag`: set by pipeline
    - `smtp.host`, `smtp.port`, `smtp.usernameSecret`, `smtp.passwordSecret`
    - `webhook.allowedHosts`: list
    - `chat.webhookSecret`: secret name for chat tokens
    - `tls.secretName`: optional ingress cert

## Secrets
- SMTP creds secret `notify-smtp` with keys `username`, `password` (see `ops/deployment/notify/secrets-example.yaml`).
- Chat/webhook secret `notify-chat` with key `token` (see example manifest).

## Rollout
- `helm upgrade --install notify deploy/helm/stellaops -f deploy/helm/stellaops/values-notify.yaml --set image.tag=$TAG`
- Pre-flight: `helm lint`, `helm template`.
- Post: `kubectl rollout status deploy/notify` and `curl /healthz`.

## Rollback
- `helm rollback notify <rev>`; confirm previous image tag exists.

## Acceptance
- Overlay renders without missing values.
- Secrets documented and referenced.
- Rollout/rollback steps documented.