diff --git a/images/helm/Earthfile b/images/helm/Earthfile
new file mode 100644
index 0000000..6809e37
--- /dev/null
+++ b/images/helm/Earthfile
@@ -0,0 +1,12 @@
+VERSION 0.7
+
+binary:
+  FROM curlimages/curl:7.78.0
+  ARG TARGETOS
+  ARG TARGETARCH
+  ARG VERSION=3.14.0
+  WORKDIR /tmp
+  RUN curl -LO https://get.helm.sh/helm-v3.14.0-${TARGETOS}-${TARGETARCH}.tar.gz
+  RUN tar -zxvf /tmp/helm-v3.14.0-${TARGETOS}-${TARGETARCH}.tar.gz
+  RUN ${TARGETOS}-${TARGETARCH}/helm version
+  SAVE ARTIFACT ${TARGETOS}-${TARGETARCH}/helm
diff --git a/images/magnum/Earthfile b/images/magnum/Earthfile
index 645d99c..c309459 100644
--- a/images/magnum/Earthfile
+++ b/images/magnum/Earthfile
@@ -16,6 +16,7 @@
   COPY +build/venv /var/lib/openstack
   DO ../+APT_INSTALL \
     --PACKAGES "haproxy"
+  COPY ../helm+binary/helm /usr/local/bin/helm
   SAVE IMAGE --push \
     ghcr.io/vexxhost/atmosphere/${PROJECT}:${RELEASE} \
     ghcr.io/vexxhost/atmosphere/${PROJECT}:${PROJECT_REF}
diff --git a/roles/defaults/vars/main.yml b/roles/defaults/vars/main.yml
index 0c3ffa9..63368dd 100644
--- a/roles/defaults/vars/main.yml
+++ b/roles/defaults/vars/main.yml
@@ -101,10 +101,10 @@
   local_path_provisioner: docker.io/rancher/local-path-provisioner:v0.0.24@sha256:b7dea5221f06f6feed7788db0ad6b024a433c8f55533bd6cc792dc2079ff9ad2
   loki_gateway: docker.io/nginxinc/nginx-unprivileged:1.19-alpine@sha256:bbd46452aae30a7cc7bc438f267af812c7a2b0f3b5bcd4cc55eb99669cea3f28
   loki: docker.io/grafana/loki:2.7.3@sha256:8e3abbd89173066721fa07bddfee1c1a7a8fe59bed5b00a2fa09d2b3cef8758c
-  magnum_api: ghcr.io/vexxhost/atmosphere/magnum:2023.2@sha256:846cfa5d62775a335ccd01304808cd2895c7b23d256f3d7fd29e2f8f0ad28110
-  magnum_cluster_api_proxy: ghcr.io/vexxhost/atmosphere/magnum:2023.2@sha256:846cfa5d62775a335ccd01304808cd2895c7b23d256f3d7fd29e2f8f0ad28110
-  magnum_conductor: ghcr.io/vexxhost/atmosphere/magnum:2023.2@sha256:846cfa5d62775a335ccd01304808cd2895c7b23d256f3d7fd29e2f8f0ad28110
-  magnum_db_sync: ghcr.io/vexxhost/atmosphere/magnum:2023.2@sha256:846cfa5d62775a335ccd01304808cd2895c7b23d256f3d7fd29e2f8f0ad28110
+  magnum_api: ghcr.io/vexxhost/atmosphere/magnum:2023.2@sha256:c13b20bd597a7f922232e19f66c050e875e6e49b6ae427b605f778c8ad04b71e
+  magnum_cluster_api_proxy: ghcr.io/vexxhost/atmosphere/magnum:2023.2@sha256:c13b20bd597a7f922232e19f66c050e875e6e49b6ae427b605f778c8ad04b71e
+  magnum_conductor: ghcr.io/vexxhost/atmosphere/magnum:2023.2@sha256:c13b20bd597a7f922232e19f66c050e875e6e49b6ae427b605f778c8ad04b71e
+  magnum_db_sync: ghcr.io/vexxhost/atmosphere/magnum:2023.2@sha256:c13b20bd597a7f922232e19f66c050e875e6e49b6ae427b605f778c8ad04b71e
   magnum_registry: quay.io/vexxhost/magnum-cluster-api-registry:latest@sha256:b954f23ccdbfb2b5b43f6a4e6f7ef5f2ba7bfc81f31de54cf141a56b26628c41
   manila_api: ghcr.io/vexxhost/atmosphere/manila:2023.2@sha256:684e4fbdbfbd032d298ce513399f0bd3ef64e7aa12016d7099d1cb0db2f9b4f7
   manila_data: ghcr.io/vexxhost/atmosphere/manila:2023.2@sha256:684e4fbdbfbd032d298ce513399f0bd3ef64e7aa12016d7099d1cb0db2f9b4f7
diff --git a/shell.nix b/shell.nix
index 28966f9..9b81adb 100644
--- a/shell.nix
+++ b/shell.nix
@@ -2,6 +2,7 @@
 
 pkgs.mkShell {
   packages = with pkgs; [
+    pkgs.earthly
     pkgs.poetry
   ];
 }