diff --git a/.jx/secret/mapping/Kptfile b/.jx/secret/mapping/Kptfile
new file mode 100644
index 0000000000..88ab29e73d
--- /dev/null
+++ b/.jx/secret/mapping/Kptfile
@@ -0,0 +1,11 @@
+apiVersion: kpt.dev/v1alpha1
+kind: Kptfile
+metadata:
+  name: mapping
+upstream:
+  type: git
+  git:
+    commit: 6cffb711a45624236e061c26c23f72da7b45acc3
+    repo: https://github.com/jenkins-x/jx3-gitops-template
+    directory: /.jx/secret/local/mapping
+    ref: master
diff --git a/.jx/secret/mapping/secret-mappings.yaml b/.jx/secret/mapping/secret-mappings.yaml
new file mode 100644
index 0000000000..87a2c3f085
--- /dev/null
+++ b/.jx/secret/mapping/secret-mappings.yaml
@@ -0,0 +1,5 @@
+apiVersion: gitops.jenkins-x.io/v1alpha1
+kind: SecretMapping
+spec:
+  defaults:
+    backendType: local
diff --git a/README-zh_CN.md b/README-zh_CN.md
new file mode 100644
index 0000000000..812d222be1
--- /dev/null
+++ b/README-zh_CN.md
@@ -0,0 +1,119 @@
+<!-- markdownlint-configure-file {
+  "MD013": {
+    "code_blocks": false,
+    "tables": false
+  },
+  "MD033": false,
+  "MD041": false
+} -->
+
+<div align="center" markdown="1">
+
+# Helmfile
+
+[![Tests](https://github.com/helmfile/helmfile/actions/workflows/ci.yaml/badge.svg?branch=main)](https://github.com/helmfile/helmfile/actions/workflows/ci.yaml?query=branch%3Amain)
+[![Container Image Repository on GHCR](https://ghcr-badge.deta.dev/helmfile/helmfile/latest_tag?trim=major&label=latest "Docker Repository on ghcr")](https://github.com/helmfile/helmfile/pkgs/container/helmfile)
+[![Go Report Card](https://goreportcard.com/badge/github.com/helmfile/helmfile)](https://goreportcard.com/report/github.com/helmfile/helmfile)
+[![Slack Community #helmfile](https://slack.sweetops.com/badge.svg)](https://slack.sweetops.com)
+[![Documentation](https://readthedocs.org/projects/helmfile/badge/?version=latest&style=flat)](https://helmfile.readthedocs.io/en/latest/)
+
+声明式Helm Chart管理工具
+<br />
+
+</div>
+
+[English](./README.md) | [简体中文]
+
+# 关于
+
+Helmfile 是一个声明式Helm Chart管理工具
+
+> Helmfile 项目已经从原仓库 roboll/helmfile 转移到了 helmfile/helmfile。有关更多信息，请参见 roboll/helmfile#1824
+
+## 特性
+
+- 通过一个YAML集中管理集群中多个Helm Chart， 类似于Docker Compose统一管理Docker
+- 对Helm Chart根据部署环境区分管理
+- Helm Chart版本控制，比如指定版本范围、锁定某一版本
+- 快速识别 Kubernetes 集群内已经部署应用与新更改之间的差异
+- Helmfile支持Go Templates语法定义Helm Chart
+- 在部署阶段支持配置hook，可以执行脚本等，实现变量远程获取，报错清理，成功提醒等
+
+
+## 安装
+
+**方式1: 二进制安装**
+
+下载 [releases](https://github.com/helmfile/helmfile/releases)
+
+**方式2: 包管理工具**
+
+* Archlinux: `pacman -S helmfile`
+* openSUSE: `zypper in helmfile`
+* Windows: ([scoop](https://scoop.sh/)): `scoop install helmfile`
+* macOS ([homebrew](https://brew.sh/)): `brew install helmfile`
+
+**方式3: 容器**
+
+详细见：[run as a container](https://helmfile.readthedocs.io/en/latest/#running-as-a-container)
+
+> 安装后请运行一次 `helmfile init`。 检查[helm-diff](https://github.com/databus23/helm-diff) 等插件安装正确。
+
+## 使用
+
+让我们从最简单的 helmfile 开始，逐渐改进它以适应您的用例！
+
+假设表示您 helm releases 的期望状态的 helmfile.yaml 看起来像这样：
+
+```yaml
+repositories:
+- name: prometheus-community
+  url: https://prometheus-community.github.io/helm-charts
+
+releases:
+- name: prom-norbac-ubuntu
+  namespace: prometheus
+  chart: prometheus-community/prometheus
+  set:
+  - name: rbac.create
+    value: false
+```
+
+通过运行来同步您的Kubernetes集群状态到期望状态:
+
+```console
+helmfile apply
+```
+
+恭喜！您现在已经在集群内部运行了第一个Prometheus部署。
+
+
+## 文档
+
+[Documentation](https://helmfile.readthedocs.io/)
+
+
+## 参与贡献
+
+欢迎贡献！ 让我们一起使helmfile变得更好：[贡献指南](https://helmfile.readthedocs.io/en/latest/contributing/)
+
+
+## 使用者
+
+Helmfile 已经被许多用户在生产环境中使用:
+
+* [gitlab.com](https://gitlab.com)
+* [reddit.com](https://reddit.com)
+* [Jenkins](https://jenkins.io)
+* ...
+
+更多用户请参见: [Users](https://helmfile.readthedocs.io/en/latest/users/)
+
+
+## License
+
+[MIT](https://github.com/helmfile/helmfile/blob/main/LICENSE)
+
+## Star History
+
+[![Star History Chart](https://api.star-history.com/svg?repos=helmfile/helmfile&type=Date)](https://star-history.com/#helmfile/helmfile&Date)
diff --git a/helmfiles/jx/helmfile.lock b/helmfiles/jx/helmfile.lock
new file mode 100644
index 0000000000..4c4c7daece
--- /dev/null
+++ b/helmfiles/jx/helmfile.lock
@@ -0,0 +1,34 @@
+version: 0.157.0
+dependencies:
+- name: bucketrepo
+  repository: https://jenkins-x-charts.github.io/repo
+  version: 0.5.0
+- name: docker-registry
+  repository: https://helm.twun.io
+  version: 2.2.2
+- name: jenkins-x-crds
+  repository: https://jenkins-x-charts.github.io/repo
+  version: 3.0.12
+- name: jx-build-controller
+  repository: https://jenkins-x-charts.github.io/repo
+  version: 0.5.4
+- name: jx-pipelines-visualizer
+  repository: https://jenkins-x-charts.github.io/repo
+  version: 1.8.2
+- name: jx-preview
+  repository: https://jenkins-x-charts.github.io/repo
+  version: 0.3.1
+- name: jxboot-helmfile-resources
+  repository: https://jenkins-x-charts.github.io/repo
+  version: 1.1.338
+- name: lighthouse
+  repository: https://jenkins-x-charts.github.io/repo
+  version: 1.13.8
+- name: lighthouse-webui-plugin
+  repository: https://jenkins-x-charts.github.io/repo
+  version: 0.1.7
+- name: local-external-secrets
+  repository: https://jenkins-x-charts.github.io/repo
+  version: 0.0.14
+digest: sha256:2fe758b465548de74850a0b7639c37d2c87fb4bc9ca254f082bf98d319f77a5a
+generated: "2023-09-22T13:27:24.828306506Z"
diff --git a/helmfiles/tekton-pipelines/helmfile.lock b/helmfiles/tekton-pipelines/helmfile.lock
new file mode 100644
index 0000000000..b227c09e75
--- /dev/null
+++ b/helmfiles/tekton-pipelines/helmfile.lock
@@ -0,0 +1,7 @@
+version: 0.157.0
+dependencies:
+- name: tekton-pipeline
+  repository: https://cdfoundation.github.io/tekton-helm-chart
+  version: 1.0.2
+digest: sha256:79256f50ff4841855f654d8a0ae4be7038ecaa571b8f70e128d67bef584a7d9e
+generated: "2023-09-22T13:27:28.266985319Z"