community-grafana
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
Compare:
1
global:
2
# -- Overrides the Docker registry globally for all images
3
imageRegistry: null
4
# To help compatibility with other charts which use global.imagePullSecrets.
5
# Allow either an array of {name: pullSecret} maps (k8s-style), or an array of strings (more common helm-style).
6
# Can be templated.
7
# global:
8
# imagePullSecrets:
9
# - name: pullSecret1
10
# - name: pullSecret2
11
# or
12
# global:
13
# imagePullSecrets:
14
# - pullSecret1
15
# - pullSecret2
16
imagePullSecrets: []
17
rbac:
18
create: true
19
## Use an existing ClusterRole/Role (depending on rbac.namespaced false/true)
20
# useExistingRole: name-of-some-role
21
# useExistingClusterRole: name-of-some-clusterRole
22
pspEnabled: false
23
pspUseAppArmor: false
24
namespaced: false
25
# Only has an effect if namespaced: true is set
26
namespaces: []
27
extraRoleRules: []
28
# - apiGroups: []
29
# resources: []
30
# verbs: []
31
extraClusterRoleRules: []
32
# - apiGroups: []
33
# resources: []
34
# verbs: []
35
serviceAccount:
36
create: true
37
name: ""
38
nameTest: ""
39
## ServiceAccount labels.
40
labels: {}
41
## Service account annotations. Can be templated.
42
# annotations:
43
# eks.amazonaws.com/role-arn: arn:aws:iam::123456789000:role/iam-role-name-here
44
45
## autoMount is deprecated in favor of automountServiceAccountToken
46
# autoMount: false
47
automountServiceAccountToken: false
48
replicas: 1
49
## Create a headless service for the deployment
50
headlessService: false
51
## Should the service account be auto mounted on the pod
52
automountServiceAccountToken: true
53
## Create HorizontalPodAutoscaler object for deployment type
54
#
55
autoscaling:
56
enabled: false
57
minReplicas: 1
58
maxReplicas: 5
59
targetCPU: "60"
60
targetMemory: ""
61
behavior: {}
62
## See `kubectl explain poddisruptionbudget.spec` for more
63
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
64
podDisruptionBudget: {}
65
# apiVersion: ""
66
# minAvailable: 1
67
# maxUnavailable: 1
68
# unhealthyPodEvictionPolicy: IfHealthyBudget
69
70
## See `kubectl explain deployment.spec.strategy` for more
71
## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
72
deploymentStrategy:
73
type: RollingUpdate
74
## The maximum time in seconds for a Deployment to make progress before it is considered to be failed.
75
## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#progress-deadline-seconds
76
progressDeadlineSeconds: null
77
## Startup probe. Holds off the liveness and readiness probes until it succeeds, useful for slow starts.
78
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/
79
startupProbe: {}
80
readinessProbe:
81
httpGet:
82
path: /api/health
83
port: grafana
84
livenessProbe:
85
httpGet:
86
path: /api/health
87
port: grafana
88
initialDelaySeconds: 60
89
timeoutSeconds: 30
90
failureThreshold: 10
91
## Use an alternate scheduler, e.g. "stork".
92
## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/
93
##
94
# schedulerName: "default-scheduler"
95
image:
96
# -- The Docker registry
97
registry: cgr.dev
98
# -- Docker image repository
99
repository: scratch-images/test-tmp/grafana
100
# Overrides the Grafana image tag whose default is the chart appVersion
101
tag: v13.2.1-r4
102
sha: sha256:38b3bcfb688cafd6f6d2517bb5d5532751660aa3a780ea31222df6d7a434bf26
103
pullPolicy: IfNotPresent
104
## Optionally specify an array of imagePullSecrets.
105
## Secrets must be manually created in the namespace.
106
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
107
## Can be templated.
108
##
109
pullSecrets: []
110
# - myRegistrKeySecretName
111
testFramework:
112
enabled: true
113
## The type of Helm hook used to run this test. Defaults to test.
114
## ref: https://helm.sh/docs/topics/charts_hooks/#the-available-hooks
115
##
116
# hookType: test
117
image:
118
# -- The Docker registry
119
registry: docker.io
120
repository: bats/bats
121
tag: "1.14.0"
122
imagePullPolicy: IfNotPresent
123
securityContext: {}
124
containerSecurityContext: {}
125
resources: {}
126
# limits:
127
# cpu: 100m
128
# memory: 128Mi
129
# requests:
130
# cpu: 100m
131
# memory: 128Mi
132
# dns configuration for pod
133
dnsPolicy: ~
134
dnsConfig: {}
135
# nameservers:
136
# - 8.8.8.8
137
# options:
138
# - name: ndots
139
# value: "2"
140
# - name: edns0
141
142
hostUsers: ~
143
securityContext:
144
runAsNonRoot: true
145
runAsUser: 472
146
runAsGroup: 472
147
fsGroup: 472
148
containerSecurityContext:
149
allowPrivilegeEscalation: false
150
privileged: false
151
capabilities:
152
drop:
153
- ALL
154
seccompProfile:
155
type: RuntimeDefault
156
readOnlyRootFilesystem: true
157
# Enable creating the grafana configmap
158
createConfigmap: true
159
# Extra configmaps to mount in grafana pods
160
# Values are templated.
161
extraConfigmapMounts: []
162
# - name: certs-configmap
163
# mountPath: /etc/grafana/ssl/
164
# subPath: certificates.crt # (optional)
165
# configMap: certs-configmap
166
# readOnly: true
167
# optional: false
168
169
extraEmptyDirMounts: []
170
# - name: provisioning-notifiers
171
# mountPath: /etc/grafana/provisioning/notifiers
172
173
# Shadow `/usr/share/grafana/data/plugins-bundled` with an emptyDir so plugins
174
# listed under `plugins:` install cleanly into `/var/lib/grafana/plugins` instead
175
# of failing on the read-only bundled directory shipped in the Grafana image.
176
# Required for plugins moved out of core in Grafana 13 (e.g. `elasticsearch`,
177
# `cloudwatch`) when listed in `plugins:`. Side effect: any bundled plugin not
178
# explicitly listed in `plugins:` will not be available.
179
shadowBundledPlugins: false
180
# Apply extra labels to common labels.
181
extraLabels: {}
182
## Assign a PriorityClassName to pods if set
183
# priorityClassName:
184
downloadDashboardsImage:
185
# -- The Docker registry
186
registry: cgr.dev
187
repository: chainguard-private/curl
188
tag: latest-dev
189
sha: sha256:1af3434d459c184cf7af170d1c0a8a62d51150992227c2c82500f96740818c0c
190
pullPolicy: IfNotPresent
191
downloadDashboards:
192
env: {}
193
envFromSecret: ""
194
resources: {}
195
securityContext:
196
allowPrivilegeEscalation: false
197
capabilities:
198
drop:
199
- ALL
200
seccompProfile:
201
type: RuntimeDefault
202
envValueFrom: {}
203
# ENV_NAME:
204
# configMapKeyRef:
205
# name: configmap-name
206
# key: value_key
207
## Pod Annotations
208
# podAnnotations: {}
209
210
## ConfigMap Annotations
211
# configMapAnnotations: {}
212
# argocd.argoproj.io/sync-options: Replace=true
213
214
## Pod Labels
215
# podLabels: {}
216
podPortName: grafana
217
gossipPortName: gossip
218
## Deployment annotations
219
# annotations: {}
220
221
## Expose the grafana service to be accessed from outside the cluster (LoadBalancer service).
222
## or access it from within the cluster (ClusterIP service). Set the service type and the port to serve it.
223
## ref: http://kubernetes.io/docs/user-guide/services/
224
##
225
service:
226
enabled: true
227
type: ClusterIP
228
# Set the ip family policy to configure dual-stack see [Configure dual-stack](https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services)
229
ipFamilyPolicy: ""
230
# Sets the families that should be supported and the order in which they should be applied to ClusterIP as well. Can be IPv4 and/or IPv6.
231
ipFamilies: []
232
loadBalancerIP: ""
233
loadBalancerClass: ""
234
loadBalancerSourceRanges: []
235
port: 80
236
targetPort: 3000
237
# targetPort: 4181 To be used with a proxy extraContainer
238
## Service annotations. Can be templated.
239
annotations: {}
240
labels: {}
241
portName: service
242
# Adds the appProtocol field to the service. This allows to work with istio protocol selection. Ex: "http" or "tcp"
243
appProtocol: ""
244
sessionAffinity: ""
245
# trafficDistribution allows specifying how traffic is distributed to Service endpoints.
246
# Valid values: "" (default - standard load balancing),"PreferSameZone" (K8s 1.34+), "PreferSameNode" (K8s 1.35+), "PreferClose" (deprecated, use PreferSameZone),
247
trafficDistribution: ""
248
serviceMonitor:
249
## If true, a ServiceMonitor CR is created for a prometheus operator
250
## https://github.com/coreos/prometheus-operator
251
##
252
enabled: false
253
path: /metrics
254
# namespace: monitoring (defaults to use the namespace this chart is deployed to)
255
labels: {}
256
# Set these to override the Prometheus global scrape interval/timeout.
257
# interval: 30s
258
# scrapeTimeout: 30s
259
scheme: http
260
tlsConfig: {}
261
relabelings: []
262
metricRelabelings: []
263
basicAuth: {}
264
targetLabels: []
265
extraExposePorts: []
266
# - name: keycloak
267
# port: 8080
268
# targetPort: 8080
269
270
# overrides pod.spec.hostAliases in the grafana deployment's pods
271
hostAliases: []
272
# - ip: "1.2.3.4"
273
# hostnames:
274
# - "my.host.com"
275
276
ingress:
277
enabled: false
278
# ingressClassName: nginx
279
# Values can be templated
280
annotations: {}
281
# kubernetes.io/ingress.class: nginx
282
# kubernetes.io/tls-acme: "true"
283
labels: {}
284
path: /
285
pathType: Prefix
286
hosts:
287
- chart-example.local
288
## Extra paths to prepend to every host configuration. This is useful when working with annotation based services.
289
extraPaths: []
290
# - path: /*
291
# pathType: Prefix
292
# backend:
293
# service:
294
# name: ssl-redirect
295
# port:
296
# name: use-annotation
297
298
tls: []
299
# - secretName: chart-example-tls
300
# hosts:
301
# - chart-example.local
302
# -- BETA: Configure the gateway routes for the chart here.
303
# More routes can be added by adding a dictionary key like the 'main' route.
304
# Be aware that this is an early beta of this feature,
305
# kube-prometheus-stack does not guarantee this works and is subject to change.
306
# Being BETA this can/will change in the future without notice, do not use unless you want to take that risk
307
# [[ref]](https://gateway-api.sigs.k8s.io/references/spec/#gateway.networking.k8s.io%2fv1alpha2)
308
route:
309
main:
310
# -- Enables or disables the route
311
enabled: false
312
# -- Set the route apiVersion, e.g. gateway.networking.k8s.io/v1 or gateway.networking.k8s.io/v1alpha2
313
apiVersion: gateway.networking.k8s.io/v1
314
# -- Set the route kind
315
# Valid options are GRPCRoute, HTTPRoute, TCPRoute, TLSRoute, UDPRoute
316
kind: HTTPRoute
317
annotations: {}
318
labels: {}
319
hostnames: []
320
# - my-filter.example.com
321
parentRefs: []
322
# - name: acme-gw
323
324
matches:
325
- path:
326
type: PathPrefix
327
value: /
328
## Timeouts define the timeouts that can be configured for an HTTP request.
329
## Ref. https://gateway-api.sigs.k8s.io/api-types/httproute/#timeouts-optional
330
timeouts: {}
331
# request: 10s
332
# backendRequest: 5s
333
334
## SessionPersistence defines and configures session persistence for the route rule.
335
## Ref. https://gateway-api.sigs.k8s.io/geps/gep-1619/
336
sessionPersistence: {}
337
# sessionName: grafana-session
338
# type: Cookie
339
# absoluteTimeout: 48h
340
# cookieConfig:
341
# lifetimeType: Permanent
342
343
## Filters define the filters that are applied to requests that match this rule.
344
filters: []
345
## Additional custom rules that can be added to the route
346
additionalRules: []
347
## httpsRedirect adds a filter for redirecting to https (HTTP 301 Moved Permanently).
348
## To redirect HTTP traffic to HTTPS, you need to have a Gateway with both HTTP and HTTPS listeners.
349
## Matches and filters do not take effect if enabled.
350
## Ref. https://gateway-api.sigs.k8s.io/guides/http-redirect-rewrite/
351
httpsRedirect: false
352
# -- BETA: Configure Gateway API ListenerSet resources for the chart here.
353
# ListenerSet allows attaching additional listeners to an existing Gateway.
354
# More listener sets can be added by adding a dictionary key like the 'main' entry.
355
# Being BETA this can/will change in the future without notice, do not use unless you want to take that risk
356
# [[ref]](https://gateway-api.sigs.k8s.io/reference/api-spec/main/spec/#listenerset)
357
listenerSet:
358
main:
359
# -- Enables or disables the listener set
360
enabled: false
361
# -- Set the ListenerSet apiVersion, e.g. gateway.networking.k8s.io/v1
362
apiVersion: gateway.networking.k8s.io/v1
363
annotations: {}
364
labels: {}
365
# -- Reference to the parent Gateway this ListenerSet attaches to
366
parentRef: {}
367
# name: my-gateway
368
# namespace: default
369
# group: gateway.networking.k8s.io
370
# kind: Gateway
371
372
# -- List of listeners to attach to the parent Gateway
373
listeners: []
374
# - name: https
375
# port: 443
376
# protocol: HTTPS
377
# hostname: grafana.example.com
378
# tls:
379
# mode: Terminate
380
# certificateRefs:
381
# - name: grafana-tls
382
# allowedRoutes:
383
# namespaces:
384
# from: Same
385
resources: {}
386
# limits:
387
# cpu: 100m
388
# memory: 128Mi
389
# requests:
390
# cpu: 100m
391
# memory: 128Mi
392
393
## Configure the GOMEMLIMIT environment variable.
394
## When enabled and resources.limits.memory is set, GOMEMLIMIT is injected
395
## as a computed value (factor × memory limit) unless the user has already
396
## defined GOMEMLIMIT via env or envValueFrom.
397
goMemLimit:
398
# -- Enable automatic GOMEMLIMIT injection.
399
enabled: true
400
# -- Fraction of resources.limits.memory to use as GOMEMLIMIT (e.g. 0.9 = 90 %).
401
factor: 0.9
402
## Node labels for pod assignment
403
## ref: https://kubernetes.io/docs/user-guide/node-selection/
404
#
405
nodeSelector: {}
406
## Tolerations for pod assignment
407
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
408
##
409
tolerations: []
410
## Affinity for pod assignment (evaluated as template)
411
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
412
##
413
affinity: {}
414
## Topology Spread Constraints
415
## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
416
##
417
topologySpreadConstraints: []
418
## Additional init containers (evaluated as template)
419
## ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
420
##
421
extraInitContainers: []
422
## Enable an Specify container in extraContainers. This is meant to allow adding an authentication proxy to a grafana pod
423
extraContainers: ""
424
# extraContainers: |
425
# - name: proxy
426
# image: quay.io/gambol99/keycloak-proxy:latest
427
# args:
428
# - -provider=github
429
# - -client-id=
430
# - -client-secret=
431
# - -github-org=<ORG_NAME>
432
# - -email-domain=*
433
# - -cookie-secret=
434
# - -http-address=http://0.0.0.0:4181
435
# - -upstream-url=http://127.0.0.1:3000
436
# ports:
437
# - name: proxy-web
438
# containerPort: 4181
439
440
## Volumes that can be used in init containers that will not be mounted to deployment pods
441
extraContainerVolumes: []
442
# - name: volume-from-secret
443
# secret:
444
# secretName: secret-to-mount
445
# - name: empty-dir-volume
446
# emptyDir: {}
447
448
## Enable persistence using Persistent Volume Claims
449
## ref: https://kubernetes.io/docs/concepts/storage/persistent-volumes/
450
##
451
persistence:
452
type: pvc
453
enabled: false
454
# storageClassName: default
455
## (Optional) Use this to bind the claim to an existing PersistentVolume (PV) by name.
456
volumeName: ""
457
accessModes:
458
- ReadWriteOnce
459
size: 10Gi
460
# annotations: {}
461
finalizers:
462
- kubernetes.io/pvc-protection
463
# selectorLabels: {}
464
## Sub-directory of the PV to mount. Can be templated.
465
# subPath: ""
466
## Name of an existing PVC. Can be templated.
467
# existingClaim:
468
## Extra labels to apply to a PVC.
469
extraPvcLabels: {}
470
disableWarning: false
471
## Configure StatefulSet persistent volume claim retention policy.
472
## This is ignored when Grafana is configured to use a Deployment with a PVC.
473
## By default, Kubernetes uses Retain for both whenDeleted and whenScaled.
474
persistentVolumeClaimRetentionPolicy: {}
475
# whenDeleted: Retain
476
# whenScaled: Retain
477
478
## If persistence is not enabled, this allows to mount the
479
## local storage in-memory to improve performance
480
##
481
inMemory:
482
enabled: false
483
## The maximum usage on memory medium EmptyDir would be
484
## the minimum value between the SizeLimit specified
485
## here and the sum of memory limits of all containers in a pod
486
##
487
# sizeLimit: 300Mi
488
## If 'lookupVolumeName' is set to true, Helm will attempt to retrieve
489
## the current value of 'spec.volumeName' and incorporate it into the template.
490
lookupVolumeName: true
491
initChownData:
492
## If false, data ownership will not be reset at startup
493
## This allows the grafana-server to be run with an arbitrary user
494
##
495
enabled: true
496
## initChownData container image
497
##
498
image:
499
# -- The Docker registry
500
registry: cgr.dev
501
repository: scratch-images/test-tmp/busybox
502
tag: glibc-1.38.0-r2
503
sha: sha256:f58f36e1a829585dd613459ccdf22301a787d25dd07b6ac45047cf1129933cf1
504
pullPolicy: IfNotPresent
505
## initChownData resource requests and limits
506
## Ref: http://kubernetes.io/docs/user-guide/compute-resources/
507
##
508
resources: {}
509
# limits:
510
# cpu: 100m
511
# memory: 128Mi
512
# requests:
513
# cpu: 100m
514
# memory: 128Mi
515
securityContext:
516
readOnlyRootFilesystem: false
517
runAsNonRoot: false
518
runAsUser: 0
519
seccompProfile:
520
type: RuntimeDefault
521
capabilities:
522
add:
523
- CHOWN
524
- DAC_OVERRIDE
525
drop:
526
- ALL
527
# Administrator credentials when not using an existing secret (see below)
528
adminUser: admin
529
# adminPassword: strongpassword
530
531
# Use an existing secret for the admin user.
532
admin:
533
## Name of the secret. Can be templated.
534
existingSecret: ""
535
userKey: admin-user
536
passwordKey: admin-password
537
## Define command to be executed at startup by grafana container
538
## Needed if using `vault-env` to manage secrets (ref: https://banzaicloud.com/blog/inject-secrets-into-pods-vault/)
539
## The default distroless image starts Grafana directly and does not contain a shell or `/run.sh`.
540
# command:
541
# - "/path/to/your/entrypoint"
542
543
## Optionally define args if command is used
544
## Needed if using `hashicorp/envconsul` to manage secrets
545
## By default no arguments are set
546
# args:
547
# - "-secret"
548
# - "secret/grafana"
549
# - "./grafana"
550
551
## Extra environment variables that will be pass onto deployment pods
552
##
553
## to provide grafana with access to CloudWatch on AWS EKS:
554
## 1. create an iam role of type "Web identity" with provider oidc.eks.* (note the provider for later)
555
## 2. edit the "Trust relationships" of the role, add a line inside the StringEquals clause using the
556
## same oidc eks provider as noted before (same as the existing line)
557
## also, replace NAMESPACE and prometheus-operator-grafana with the service account namespace and name
558
##
559
## "oidc.eks.us-east-1.amazonaws.com/id/XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:sub": "system:serviceaccount:NAMESPACE:prometheus-operator-grafana",
560
##
561
## 3. attach a policy to the role, you can use a built in policy called CloudWatchReadOnlyAccess
562
## 4. use the following env: (replace 123456789000 and iam-role-name-here with your aws account number and role name)
563
##
564
## env:
565
## AWS_ROLE_ARN: arn:aws:iam::123456789000:role/iam-role-name-here
566
## AWS_WEB_IDENTITY_TOKEN_FILE: /var/run/secrets/eks.amazonaws.com/serviceaccount/token
567
## AWS_REGION: us-east-1
568
##
569
## 5. uncomment the EKS section in extraSecretMounts: below
570
## 6. uncomment the annotation section in the serviceAccount: above
571
## make sure to replace arn:aws:iam::123456789000:role/iam-role-name-here with your role arn
572
env: {}
573
## "valueFrom" environment variable references that will be added to deployment pods. Name is templated.
574
## ref: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#envvarsource-v1-core
575
## Renders in container spec as:
576
## env:
577
## ...
578
## - name: <key>
579
## valueFrom:
580
## <value rendered as YAML>
581
envValueFrom: {}
582
# ENV_NAME:
583
# configMapKeyRef:
584
# name: configmap-name
585
# key: value_key
586
587
## The name of a secret in the same kubernetes namespace which contain values to be added to the environment
588
## This can be useful for auth tokens, etc. Value is templated.
589
envFromSecret: ""
590
## Sensible environment variables that will be rendered as new secret object
591
## This can be useful for auth tokens, etc.
592
## If the secret values contains "{{", they'll need to be properly escaped so that they are not interpreted by Helm
593
## ref: https://helm.sh/docs/howto/charts_tips_and_tricks/#using-the-tpl-function
594
envRenderSecret: {}
595
## The names of secrets in the same kubernetes namespace which contain values to be added to the environment
596
## Each entry should contain a name key, and can optionally specify whether the secret must be defined with an optional key.
597
## Name is templated.
598
envFromSecrets: []
599
## - name: secret-name
600
## prefix: prefix
601
## optional: true
602
603
## The names of configmaps in the same kubernetes namespace which contain values to be added to the environment
604
## Each entry should contain a name key, and can optionally specify whether the configmap must be defined with an optional key.
605
## Name is templated.
606
## ref: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#configmapenvsource-v1-core
607
envFromConfigMaps: []
608
## - name: configmap-name
609
## prefix: prefix
610
## optional: true
611
612
# Inject Kubernetes services as environment variables.
613
# See https://kubernetes.io/docs/concepts/services-networking/connect-applications-service/#environment-variables
614
enableServiceLinks: true
615
## Additional grafana server secret mounts
616
# Defines additional mounts with secrets. Secrets must be manually created in the namespace.
617
extraSecretMounts: []
618
# - name: secret-files
619
# mountPath: /etc/secrets
620
# secretName: grafana-secret-files
621
# readOnly: true
622
# optional: false
623
# subPath: ""
624
#
625
# for AWS EKS (cloudwatch) use the following (see also instruction in env: above)
626
# - name: aws-iam-token
627
# mountPath: /var/run/secrets/eks.amazonaws.com/serviceaccount
628
# readOnly: true
629
# projected:
630
# defaultMode: 420
631
# sources:
632
# - serviceAccountToken:
633
# audience: sts.amazonaws.com
634
# expirationSeconds: 86400
635
# path: token
636
#
637
# for CSI e.g. Azure Key Vault use the following
638
# - name: secrets-store-inline
639
# mountPath: /run/secrets/vault.azure.com
640
# readOnly: true
641
# csi:
642
# driver: secrets-store.csi.k8s.io
643
# readOnly: true
644
# volumeAttributes:
645
# secretProviderClass: "akv-grafana-spc"
646
# nodePublishSecretRef: # Only required when using service principal mode
647
# name: grafana-akv-creds # Only required when using service principal mode
648
649
## Additional grafana server volume mounts
650
# Defines additional volume mounts.
651
extraVolumeMounts: []
652
# - name: extra-volume-0
653
# mountPath: /mnt/volume0
654
# readOnly: true
655
# - name: extra-volume-1
656
# mountPath: /mnt/volume1
657
# readOnly: true
658
# - name: grafana-secrets
659
# mountPath: /mnt/volume2
660
661
## Additional Grafana server volumes
662
extraVolumes: []
663
# - name: extra-volume-0
664
# existingClaim: volume-claim
665
# - name: extra-volume-1
666
# hostPath:
667
# path: /usr/shared/
668
# type: ""
669
# - name: grafana-secrets
670
# csi:
671
# driver: secrets-store.csi.k8s.io
672
# readOnly: true
673
# volumeAttributes:
674
# secretProviderClass: "grafana-env-spc"
675
676
## Container Lifecycle Hooks. Execute a specific bash command or make an HTTP request
677
lifecycleHooks: {}
678
# postStart:
679
# exec:
680
# command: []
681
682
## Pass the plugins you want installed as a list.
683
##
684
plugins: []
685
# - digrich-bubblechart-panel
686
# - grafana-clock-panel
687
## You can also use other plugin download URL, as long as they are valid zip files,
688
## and specify the name of the plugin as prefix, with an version. Like this:
689
# - marcusolsson-json-datasource@1.3.24@https://grafana.com/api/plugins/marcusolsson-json-datasource/versions/1.3.24/download
690
691
## Configure grafana datasources
692
## ref: http://docs.grafana.org/administration/provisioning/#datasources
693
##
694
datasources: {}
695
# datasources.yaml:
696
# apiVersion: 1
697
# datasources:
698
# - name: Prometheus
699
# type: prometheus
700
# url: http://prometheus-prometheus-server
701
# access: proxy
702
# isDefault: true
703
# - name: CloudWatch
704
# type: cloudwatch
705
# access: proxy
706
# uid: cloudwatch
707
# editable: false
708
# jsonData:
709
# authType: default
710
# defaultRegion: us-east-1
711
# deleteDatasources: []
712
# - name: Prometheus
713
714
## Configure grafana alerting (can be templated)
715
## ref: https://docs.grafana.com/alerting/set-up/provision-alerting-resources/file-provisioning/
716
##
717
alerting: {}
718
# policies.yaml:
719
# apiVersion: 1
720
# policies:
721
# - orgId: 1
722
# receiver: first_uid
723
#
724
# rules.yaml:
725
# apiVersion: 1
726
# groups:
727
# - orgId: 1
728
# name: '{{ .Chart.Name }}_my_rule_group'
729
# folder: my_first_folder
730
# interval: 60s
731
# rules:
732
# - uid: my_id_1
733
# title: my_first_rule
734
# condition: A
735
# data:
736
# - refId: A
737
# datasourceUid: '-100'
738
# model:
739
# conditions:
740
# - evaluator:
741
# params:
742
# - 3
743
# type: gt
744
# operator:
745
# type: and
746
# query:
747
# params:
748
# - A
749
# reducer:
750
# type: last
751
# type: query
752
# datasource:
753
# type: __expr__
754
# uid: '-100'
755
# expression: 1==0
756
# intervalMs: 1000
757
# maxDataPoints: 43200
758
# refId: A
759
# type: math
760
# dashboardUid: my_dashboard
761
# panelId: 123
762
# noDataState: Alerting
763
# for: 60s
764
# annotations:
765
# some_key: some_value
766
# labels:
767
# team: sre_team_1
768
#
769
# contactpoints.yaml:
770
# secret:
771
# apiVersion: 1
772
# contactPoints:
773
# - orgId: 1
774
# name: cp_1
775
# receivers:
776
# - uid: first_uid
777
# type: pagerduty
778
# settings:
779
# integrationKey: XXX
780
# severity: critical
781
# class: ping failure
782
# component: Grafana
783
# group: app-stack
784
# summary: |
785
# {{ `{{ include "default.message" . }}` }}
786
#
787
# templates.yaml:
788
# apiVersion: 1
789
# templates:
790
# - orgId: 1
791
# name: my_first_template
792
# template: |
793
# {{ `
794
# {{ define "my_first_template" }}
795
# Custom notification message
796
# {{ end }}
797
# ` }}
798
#
799
# mutetimes.yaml
800
# apiVersion: 1
801
# muteTimes:
802
# - orgId: 1
803
# name: mti_1
804
# # refer to https://prometheus.io/docs/alerting/latest/configuration/#time_interval-0
805
# time_intervals: {}
806
807
## Configure notifiers
808
## ref: http://docs.grafana.org/administration/provisioning/#alert-notification-channels
809
##
810
notifiers: {}
811
# notifiers.yaml:
812
# notifiers:
813
# - name: email-notifier
814
# type: email
815
# uid: email1
816
# # either:
817
# org_id: 1
818
# # or
819
# org_name: Main Org.
820
# is_default: true
821
# settings:
822
# addresses: an_email_address@example.com
823
# delete_notifiers:
824
825
## Configure grafana dashboard providers
826
## ref: http://docs.grafana.org/administration/provisioning/#dashboards
827
##
828
## `path` must be /var/lib/grafana/dashboards/<provider_name>
829
##
830
dashboardProviders: {}
831
# dashboardproviders.yaml:
832
# apiVersion: 1
833
# providers:
834
# - name: 'default'
835
# orgId: 1
836
# folder: ''
837
# type: file
838
# disableDeletion: false
839
# editable: true
840
# options:
841
# path: /var/lib/grafana/dashboards/default
842
843
## Configure how curl fetches remote dashboards. The beginning dash is required.
844
## NOTE: This sets the default short flags for all dashboards, but these
845
## defaults can be overridden individually for each dashboard by setting
846
## curlOptions. See the example dashboards section below.
847
##
848
## -s - silent mode
849
## -k - allow insecure (eg: non-TLS) connections
850
## -f - fail fast
851
## See the curl documentation for additional options
852
##
853
defaultCurlOptions: "-skf"
854
## Configure shell options for downloading dashboards. The beginning dash is added automatically.
855
## Add `x` to enable command tracing. This can expose sensitive values in logs.
856
##
857
defaultShellOptions: "eufo pipefail"
858
## Configure grafana dashboard to import
859
## NOTE: To use dashboards you must also enable/configure dashboardProviders
860
## ref: https://grafana.com/dashboards
861
##
862
## dashboards per provider, use provider name as key.
863
## For dashboards downloaded via gnetId or url, the optional "title" key overrides
864
## the dashboard title in the downloaded JSON so the UI displays your custom title.
865
##
866
dashboards: {}
867
# default:
868
# some-dashboard:
869
# json: |
870
# $RAW_JSON
871
# custom-dashboard:
872
# file: dashboards/custom-dashboard.json
873
# prometheus-stats:
874
# title: My Custom Dashboard Title # optional; overrides the dashboard title in the downloaded JSON
875
# gnetId: 2
876
# revision: 2
877
# datasource: Prometheus
878
# local-dashboard:
879
# url: https://example.com/repository/test.json
880
# curlOptions: "-sLf"
881
# token: ''
882
# local-dashboard-base64:
883
# url: https://example.com/repository/test-b64.json
884
# token: ''
885
# b64content: true
886
# local-dashboard-gitlab:
887
# url: https://example.com/repository/test-gitlab.json
888
# gitlabToken: ''
889
# local-dashboard-bitbucket:
890
# url: https://example.com/repository/test-bitbucket.json
891
# bearerToken: ''
892
# local-dashboard-azure:
893
# url: https://example.com/repository/test-azure.json
894
# basic: ''
895
# acceptHeader: '*/*'
896
897
## Reference to external ConfigMap per provider. Use provider name as key and ConfigMap name as value.
898
## A provider dashboards must be defined either by external ConfigMaps or in values.yaml, not in both.
899
## ConfigMap data example:
900
##
901
## data:
902
## example-dashboard.json: |
903
## RAW_JSON
904
##
905
dashboardsConfigMaps: {}
906
# default: ""
907
908
## Grafana's primary configuration
909
## NOTE: values in map will be converted to ini format
910
## ref: http://docs.grafana.org/installation/configuration/
911
##
912
grafana.ini:
913
paths:
914
data: /var/lib/grafana/
915
logs: /var/log/grafana
916
plugins: /var/lib/grafana/plugins
917
provisioning: /etc/grafana/provisioning
918
analytics:
919
check_for_updates: true
920
log:
921
mode: console
922
server:
923
domain: "{{ if (and .Values.ingress.enabled .Values.ingress.hosts) }}{{ tpl (.Values.ingress.hosts | first) . }}{{ else if (and .Values.route.main.enabled .Values.route.main.hostnames) }}{{ tpl (.Values.route.main.hostnames | first) . }}{{ else }}''{{ end }}"
924
unified_storage:
925
index_path: /var/lib/grafana-search/bleve
926
## grafana Authentication can be enabled with the following values on grafana.ini
927
# server:
928
# The full public facing url you use in browser, used for redirects and emails
929
# root_url:
930
# https://grafana.com/docs/grafana/latest/auth/github/#enable-github-in-grafana
931
# auth.github:
932
# enabled: false
933
# allow_sign_up: false
934
# scopes: user:email,read:org
935
# auth_url: https://github.com/login/oauth/authorize
936
# token_url: https://github.com/login/oauth/access_token
937
# api_url: https://api.github.com/user
938
# team_ids:
939
# allowed_organizations:
940
# client_id:
941
# client_secret:
942
## LDAP Authentication can be enabled with the following values on grafana.ini
943
## NOTE: Grafana will fail to start if the value for ldap.toml is invalid
944
# auth.ldap:
945
# enabled: true
946
# allow_sign_up: true
947
# config_file: /etc/grafana/ldap.toml
948
## Grafana's alerting configuration
949
# unified_alerting:
950
# enabled: true
951
# rule_version_record_limit: "5"
952
953
## Grafana's LDAP configuration
954
## Templated by the template in _helpers.tpl
955
## NOTE: To enable the grafana.ini must be configured with auth.ldap.enabled
956
## ref: http://docs.grafana.org/installation/configuration/#auth-ldap
957
## ref: http://docs.grafana.org/installation/ldap/#configuration
958
ldap:
959
enabled: false
960
# `existingSecret` is a reference to an existing secret containing the ldap configuration
961
# for Grafana in a key `ldap-toml`.
962
existingSecret: ""
963
# `config` is the content of `ldap.toml` that will be stored in the created secret
964
config: ""
965
# config: |-
966
# verbose_logging = true
967
# [[servers]]
968
# host = "my-ldap-server"
969
# port = 636
970
# use_ssl = true
971
# start_tls = false
972
# ssl_skip_verify = false
973
# bind_dn = "uid=%s,ou=users,dc=myorg,dc=com"
974
975
# When process namespace sharing is enabled, processes in a container are visible to all other containers in the same pod
976
# This parameter is added because the ldap reload api is not working https://grafana.com/docs/grafana/latest/developers/http_api/admin/#reload-ldap-configuration
977
# To allow an extraContainer to restart the Grafana container
978
shareProcessNamespace: false
979
## Grafana's SMTP configuration
980
## NOTE: To enable, grafana.ini must be configured with smtp.enabled
981
## ref: http://docs.grafana.org/installation/configuration/#smtp
982
smtp:
983
# `existingSecret` is a reference to an existing secret containing the smtp configuration
984
# for Grafana.
985
existingSecret: ""
986
userKey: "user"
987
passwordKey: "password"
988
## Sidecars that collect the configmaps with specified label and stores the included files them into the respective folders
989
## Requires at least Grafana 5 to work and can't be used together with parameters dashboardProviders, datasources and dashboards
990
sidecar:
991
image:
992
# -- The Docker registry
993
registry: cgr.dev
994
repository: scratch-images/test-tmp/k8s-sidecar
995
tag: 2.11.2-r0
996
sha: sha256:46642034de7c0b26d01c2d4e5bc481c45645f854eacdb65a45a467a035399351
997
imagePullPolicy: IfNotPresent
998
resources: {}
999
# limits:
1000
# cpu: 100m
1001
# memory: 100Mi
1002
# requests:
1003
# cpu: 50m
1004
# memory: 50Mi
1005
securityContext:
1006
allowPrivilegeEscalation: false
1007
capabilities:
1008
drop:
1009
- ALL
1010
seccompProfile:
1011
type: RuntimeDefault
1012
# Set to true to skip tls verification for kube api calls. Can be overridden per sidecar
1013
# skipTlsVerify: true
1014
enableUniqueFilenames: false
1015
readinessProbe: {}
1016
livenessProbe: {}
1017
# Log level default for all sidecars. Can be one of: DEBUG, INFO, WARN, ERROR, CRITICAL. Defaults to INFO
1018
# logLevel: INFO
1019
alerts:
1020
enabled: false
1021
# Additional environment variables for the alerts sidecar
1022
env: {}
1023
## "valueFrom" environment variable references that will be added to deployment pods. Name is templated.
1024
## ref: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#envvarsource-v1-core
1025
## Renders in container spec as:
1026
## env:
1027
## ...
1028
## - name: <key>
1029
## valueFrom:
1030
## <value rendered as YAML>
1031
envValueFrom: {}
1032
# ENV_NAME:
1033
# configMapKeyRef:
1034
# name: configmap-name
1035
# key: value_key
1036
# Do not reprocess already processed unchanged resources on k8s API reconnect.
1037
# ignoreAlreadyProcessed: true
1038
# Set to true to skip tls verification for kube api calls. Overrides sidecar.skipTlsVerify
1039
# skipTlsVerify: true
1040
# label that the configmaps with alert are marked with (can be templated)
1041
label: grafana_alert
1042
# value of label that the configmaps with alert are set to (can be templated)
1043
labelValue: ""
1044
# Log level. Can be one of: DEBUG, INFO, WARN, ERROR, CRITICAL.
1045
# logLevel: INFO
1046
# If specified, the sidecar will search for alert config-maps inside this namespace.
1047
# Otherwise the namespace in which the sidecar is running will be used.
1048
# It's also possible to specify ALL to search in all namespaces
1049
searchNamespace: null
1050
# Method to use to detect ConfigMap changes. With WATCH the sidecar will do a WATCH requests, with SLEEP it will list all ConfigMaps, then sleep for 60 seconds.
1051
watchMethod: WATCH
1052
# search in configmap, secret or both
1053
resource: both
1054
#
1055
# resourceName: comma separated list of resource names to be fetched/checked by this sidecar.
1056
# per default all resources of the type defined in {{ .Values.sidecar.alerts.resource }} will be checked.
1057
# This e.g. allows stricter RBAC rules which are limited to the resources meant for the sidecars.
1058
# resourceName: "secret/alerts-1,configmap/alerts-0"
1059
resourceName: ""
1060
#
1061
# watchServerTimeout: request to the server, asking it to cleanly close the connection after that.
1062
# defaults to 60sec; much higher values like 3600 seconds (1h) are feasible for non-Azure K8S
1063
# watchServerTimeout: 3600
1064
#
1065
# watchClientTimeout: is a client-side timeout, configuring your local socket.
1066
# If you have a network outage dropping all packets with no RST/FIN,
1067
# this is how long your client waits before realizing & dropping the connection.
1068
# defaults to 66sec (sic!)
1069
# watchClientTimeout: 60
1070
#
1071
# maxTotalRetries: Total number of retries to allow for any http request.
1072
# Takes precedence over other counts. Applies to all requests to reloadURL and k8s api requests.
1073
# Set to 0 to fail on the first retry.
1074
# maxTotalRetries: 5
1075
#
1076
# maxConnectRetries: How many connection-related errors to retry on for any http request.
1077
# These are errors raised before the request is sent to the remote server, which we assume has not triggered the server to process the request.
1078
# Applies to all requests to reloadURL and k8s api requests.
1079
# Set to 0 to fail on the first retry of this type.
1080
# maxConnectRetries: 10
1081
#
1082
# maxReadRetries: How many times to retry on read errors for any http request
1083
# These errors are raised after the request was sent to the server, so the request may have side-effects.
1084
# Applies to all requests to reloadURL and k8s api requests.
1085
# Set to 0 to fail on the first retry of this type.
1086
# maxReadRetries: 5
1087
#
1088
# Endpoint to send request to reload alerts
1089
reloadURL: "http://localhost:3000/api/admin/provisioning/alerting/reload"
1090
# Absolute path to a script to execute after a configmap got reloaded.
1091
# It runs before calls to REQ_URI. If the file is not executable it will be passed to sh.
1092
# Otherwise, it's executed as is. Shebangs known to work are #!/bin/sh and #!/usr/bin/env python
1093
script: null
1094
skipReload: false
1095
# This is needed if skipReload is true, to load any alerts defined at startup time.
1096
# Deploy the alert sidecar as an initContainer.
1097
initAlerts: false
1098
# Use native sidecar https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/
1099
# restartPolicy: Always
1100
# # only applies to native sidecars
1101
# startupProbe:
1102
# httpGet:
1103
# path: /healthz
1104
# port: 8080
1105
# initialDelaySeconds: 5
1106
# periodSeconds: 5
1107
# failureThreshold: 60 # 5 minutes
1108
# Additional alerts sidecar volume mounts
1109
extraMounts: []
1110
# Sets the size limit of the alert sidecar emptyDir volume
1111
sizeLimit: ""
1112
dashboards:
1113
enabled: false
1114
# Additional environment variables for the dashboards sidecar
1115
env: {}
1116
## "valueFrom" environment variable references that will be added to deployment pods. Name is templated.
1117
## ref: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#envvarsource-v1-core
1118
## Renders in container spec as:
1119
## env:
1120
## ...
1121
## - name: <key>
1122
## valueFrom:
1123
## <value rendered as YAML>
1124
envValueFrom: {}
1125
# ENV_NAME:
1126
# configMapKeyRef:
1127
# name: configmap-name
1128
# key: value_key
1129
# Do not reprocess already processed unchanged resources on k8s API reconnect.
1130
# ignoreAlreadyProcessed: true
1131
# Set to true to skip tls verification for kube api calls. Overrides sidecar.skipTlsVerify
1132
# skipTlsVerify: true
1133
SCProvider: true
1134
# label that the configmaps with dashboards are marked with (can be templated)
1135
label: grafana_dashboard
1136
# value of label that the configmaps with dashboards are set to (can be templated)
1137
labelValue: ""
1138
# Log level. Can be one of: DEBUG, INFO, WARN, ERROR, CRITICAL.
1139
# logLevel: INFO
1140
# folder in the pod that should hold the collected dashboards (unless `defaultFolderName` is set)
1141
folder: /tmp/dashboards
1142
# The default folder name, it will create a subfolder under the `folder` and put dashboards in there instead
1143
defaultFolderName: null
1144
# Namespaces list. If specified, the sidecar will search for config-maps/secrets inside these namespaces.
1145
# Otherwise the namespace in which the sidecar is running will be used.
1146
# It's also possible to specify ALL to search in all namespaces.
1147
searchNamespace: null
1148
# Method to use to detect ConfigMap changes. With WATCH the sidecar will do a WATCH requests, with SLEEP it will list all ConfigMaps, then sleep for 60 seconds.
1149
watchMethod: WATCH
1150
# search in configmap, secret or both
1151
resource: both
1152
# If specified, the sidecar will look for annotation with this name to create folder and put graph here.
1153
# You can use this parameter together with `provider.foldersFromFilesStructure`to annotate configmaps and create folder structure.
1154
folderAnnotation: null
1155
#
1156
# resourceName: comma separated list of resource names to be fetched/checked by this sidecar.
1157
# per default all resources of the type defined in {{ .Values.sidecar.dashboards.resource }} will be checked.
1158
# This e.g. allows stricter RBAC rules which are limited to the resources meant for the sidecars.
1159
# resourceName: "secret/dashboards-0,configmap/dashboards-1"
1160
resourceName: ""
1161
#
1162
# maxTotalRetries: Total number of retries to allow for any http request.
1163
# Takes precedence over other counts. Applies to all requests to reloadURL and k8s api requests.
1164
# Set to 0 to fail on the first retry.
1165
# maxTotalRetries: 5
1166
#
1167
# maxConnectRetries: How many connection-related errors to retry on for any http request.
1168
# These are errors raised before the request is sent to the remote server, which we assume has not triggered the server to process the request.
1169
# Applies to all requests to reloadURL and k8s api requests.
1170
# Set to 0 to fail on the first retry of this type.
1171
# maxConnectRetries: 10
1172
#
1173
# maxReadRetries: How many times to retry on read errors for any http request
1174
# These errors are raised after the request was sent to the server, so the request may have side-effects.
1175
# Applies to all requests to reloadURL and k8s api requests.
1176
# Set to 0 to fail on the first retry of this type.
1177
# maxReadRetries: 5
1178
#
1179
# Endpoint to send request to reload alerts
1180
reloadURL: "http://localhost:3000/api/admin/provisioning/dashboards/reload"
1181
# Absolute path to a script to execute after a configmap got reloaded.
1182
# It runs before calls to REQ_URI. If the file is not executable it will be passed to sh.
1183
# Otherwise, it's executed as is. Shebangs known to work are #!/bin/sh and #!/usr/bin/env python
1184
script: null
1185
skipReload: false
1186
# This is needed if skipReload is true, to load any dashboards defined at startup time.
1187
# Deploy the dashboard sidecar as an initContainer.
1188
initDashboards: false
1189
# Use native sidecar https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/
1190
# restartPolicy: Always
1191
# # only applies to native sidecars
1192
# startupProbe:
1193
# httpGet:
1194
# path: /healthz
1195
# port: 8083
1196
# initialDelaySeconds: 5
1197
# periodSeconds: 5
1198
# failureThreshold: 60 # 5 minutes
1199
# watchServerTimeout: request to the server, asking it to cleanly close the connection after that.
1200
# defaults to 60sec; much higher values like 3600 seconds (1h) are feasible for non-Azure K8S
1201
# watchServerTimeout: 3600
1202
#
1203
# watchClientTimeout: is a client-side timeout, configuring your local socket.
1204
# If you have a network outage dropping all packets with no RST/FIN,
1205
# this is how long your client waits before realizing & dropping the connection.
1206
# defaults to 66sec (sic!)
1207
# watchClientTimeout: 60
1208
#
1209
# provider configuration that lets grafana manage the dashboards
1210
provider:
1211
# name of the provider, should be unique
1212
name: sidecarProvider
1213
# orgid as configured in grafana
1214
orgid: 1
1215
# folder in which the dashboards should be imported in grafana
1216
folder: ''
1217
# <string> folder UID. will be automatically generated if not specified
1218
folderUid: ''
1219
# type of the provider
1220
type: file
1221
# disableDelete to activate a import-only behaviour
1222
disableDelete: false
1223
# allow updating provisioned dashboards from the UI
1224
allowUiUpdates: false
1225
# allow Grafana to replicate dashboard structure from filesystem
1226
foldersFromFilesStructure: false
1227
# Additional dashboards sidecar volume mounts
1228
extraMounts: []
1229
# Sets the size limit of the dashboard sidecar emptyDir volume
1230
sizeLimit: ""
1231
datasources:
1232
enabled: false
1233
# Additional environment variables for the datasourcessidecar
1234
env: {}
1235
## "valueFrom" environment variable references that will be added to deployment pods. Name is templated.
1236
## ref: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#envvarsource-v1-core
1237
## Renders in container spec as:
1238
## env:
1239
## ...
1240
## - name: <key>
1241
## valueFrom:
1242
## <value rendered as YAML>
1243
envValueFrom: {}
1244
# ENV_NAME:
1245
# configMapKeyRef:
1246
# name: configmap-name
1247
# key: value_key
1248
# Do not reprocess already processed unchanged resources on k8s API reconnect.
1249
# ignoreAlreadyProcessed: true
1250
# Set to true to skip tls verification for kube api calls. Overrides sidecar.skipTlsVerify
1251
# skipTlsVerify: true
1252
# label that the configmaps with datasources are marked with (can be templated)
1253
label: grafana_datasource
1254
# value of label that the configmaps with datasources are set to (can be templated)
1255
labelValue: ""
1256
# Log level. Can be one of: DEBUG, INFO, WARN, ERROR, CRITICAL.
1257
# logLevel: INFO
1258
# If specified, the sidecar will search for datasource config-maps inside this namespace.
1259
# Otherwise the namespace in which the sidecar is running will be used.
1260
# It's also possible to specify ALL to search in all namespaces
1261
searchNamespace: null
1262
# Method to use to detect ConfigMap changes. With WATCH the sidecar will do a WATCH requests, with SLEEP it will list all ConfigMaps, then sleep for 60 seconds.
1263
watchMethod: WATCH
1264
# search in configmap, secret or both
1265
resource: both
1266
#
1267
# resourceName: comma separated list of resource names to be fetched/checked by this sidecar.
1268
# per default all resources of the type defined in {{ .Values.sidecar.datasources.resource }} will be checked.
1269
# This e.g. allows stricter RBAC rules which are limited to the resources meant for the sidecars.
1270
# resourceName: "secret/datasources-0,configmap/datasources-15"
1271
resourceName: ""
1272
#
1273
# watchServerTimeout: request to the server, asking it to cleanly close the connection after that.
1274
# defaults to 60sec; much higher values like 3600 seconds (1h) are feasible for non-Azure K8S
1275
# watchServerTimeout: 3600
1276
#
1277
# watchClientTimeout: is a client-side timeout, configuring your local socket.
1278
# If you have a network outage dropping all packets with no RST/FIN,
1279
# this is how long your client waits before realizing & dropping the connection.
1280
# defaults to 66sec (sic!)
1281
# watchClientTimeout: 60
1282
#
1283
# maxTotalRetries: Total number of retries to allow for any http request.
1284
# Takes precedence over other counts. Applies to all requests to reloadURL and k8s api requests.
1285
# Set to 0 to fail on the first retry.
1286
# maxTotalRetries: 5
1287
#
1288
# maxConnectRetries: How many connection-related errors to retry on for any http request.
1289
# These are errors raised before the request is sent to the remote server, which we assume has not triggered the server to process the request.
1290
# Applies to all requests to reloadURL and k8s api requests.
1291
# Set to 0 to fail on the first retry of this type.
1292
# maxConnectRetries: 10
1293
#
1294
# maxReadRetries: How many times to retry on read errors for any http request
1295
# These errors are raised after the request was sent to the server, so the request may have side-effects.
1296
# Applies to all requests to reloadURL and k8s api requests.
1297
# Set to 0 to fail on the first retry of this type.
1298
# maxReadRetries: 5
1299
#
1300
# Endpoint to send request to reload datasources
1301
reloadURL: "http://localhost:3000/api/admin/provisioning/datasources/reload"
1302
# Absolute path to a script to execute after a configmap got reloaded.
1303
# It runs before calls to REQ_URI. If the file is not executable it will be passed to sh.
1304
# Otherwise, it's executed as is. Shebangs known to work are #!/bin/sh and #!/usr/bin/env python
1305
script: null
1306
skipReload: false
1307
# This is needed if skipReload is true, to load any datasources defined at startup time.
1308
# Deploy the datasources sidecar as an initContainer.
1309
initDatasources: false
1310
# Use native sidecar https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/
1311
# restartPolicy: Always
1312
# # only applies to native sidecars
1313
# startupProbe:
1314
# httpGet:
1315
# path: /healthz
1316
# port: 8081
1317
# initialDelaySeconds: 5
1318
# periodSeconds: 5
1319
# failureThreshold: 60 # 5 minutes
1320
# Additional datasources sidecar volume mounts
1321
extraMounts: []
1322
# Sets the size limit of the datasource sidecar emptyDir volume
1323
sizeLimit: ""
1324
plugins:
1325
enabled: false
1326
# Additional environment variables for the plugins sidecar
1327
env: {}
1328
# Do not reprocess already processed unchanged resources on k8s API reconnect.
1329
# ignoreAlreadyProcessed: true
1330
# Set to true to skip tls verification for kube api calls. Overrides sidecar.skipTlsVerify
1331
# skipTlsVerify: true
1332
# label that the configmaps with plugins are marked with (can be templated)
1333
label: grafana_plugin
1334
# value of label that the configmaps with plugins are set to (can be templated)
1335
labelValue: ""
1336
# Log level. Can be one of: DEBUG, INFO, WARN, ERROR, CRITICAL.
1337
# logLevel: INFO
1338
# If specified, the sidecar will search for plugin config-maps inside this namespace.
1339
# Otherwise the namespace in which the sidecar is running will be used.
1340
# It's also possible to specify ALL to search in all namespaces
1341
searchNamespace: null
1342
# Method to use to detect ConfigMap changes. With WATCH the sidecar will do a WATCH requests, with SLEEP it will list all ConfigMaps, then sleep for 60 seconds.
1343
watchMethod: WATCH
1344
# search in configmap, secret or both
1345
resource: both
1346
#
1347
# resourceName: comma separated list of resource names to be fetched/checked by this sidecar.
1348
# per default all resources of the type defined in {{ .Values.sidecar.plugins.resource }} will be checked.
1349
# This e.g. allows stricter RBAC rules which are limited to the resources meant for the sidecars.
1350
# resourceName: "secret/plugins-0,configmap/plugins-1"
1351
resourceName: ""
1352
#
1353
# watchServerTimeout: request to the server, asking it to cleanly close the connection after that.
1354
# defaults to 60sec; much higher values like 3600 seconds (1h) are feasible for non-Azure K8S
1355
# watchServerTimeout: 3600
1356
#
1357
# watchClientTimeout: is a client-side timeout, configuring your local socket.
1358
# If you have a network outage dropping all packets with no RST/FIN,
1359
# this is how long your client waits before realizing & dropping the connection.
1360
# defaults to 66sec (sic!)
1361
# watchClientTimeout: 60
1362
#
1363
# maxTotalRetries: Total number of retries to allow for any http request.
1364
# Takes precedence over other counts. Applies to all requests to reloadURL and k8s api requests.
1365
# Set to 0 to fail on the first retry.
1366
# maxTotalRetries: 5
1367
#
1368
# maxConnectRetries: How many connection-related errors to retry on for any http request.
1369
# These are errors raised before the request is sent to the remote server, which we assume has not triggered the server to process the request.
1370
# Applies to all requests to reloadURL and k8s api requests.
1371
# Set to 0 to fail on the first retry of this type.
1372
# maxConnectRetries: 10
1373
#
1374
# maxReadRetries: How many times to retry on read errors for any http request
1375
# These errors are raised after the request was sent to the server, so the request may have side-effects.
1376
# Applies to all requests to reloadURL and k8s api requests.
1377
# Set to 0 to fail on the first retry of this type.
1378
# maxReadRetries: 5
1379
#
1380
# Endpoint to send request to reload plugins
1381
reloadURL: "http://localhost:3000/api/admin/provisioning/plugins/reload"
1382
# Absolute path to a script to execute after a configmap got reloaded.
1383
# It runs before calls to REQ_URI. If the file is not executable it will be passed to sh.
1384
# Otherwise, it's executed as is. Shebangs known to work are #!/bin/sh and #!/usr/bin/env python
1385
script: null
1386
skipReload: false
1387
# Deploy the datasource sidecar as an initContainer in addition to a container.
1388
# This is needed if skipReload is true, to load any plugins defined at startup time.
1389
initPlugins: false
1390
# Additional plugins sidecar volume mounts
1391
extraMounts: []
1392
# Sets the size limit of the plugin sidecar emptyDir volume
1393
sizeLimit: ""
1394
notifiers:
1395
enabled: false
1396
# Additional environment variables for the notifierssidecar
1397
env: {}
1398
# Do not reprocess already processed unchanged resources on k8s API reconnect.
1399
# ignoreAlreadyProcessed: true
1400
# Set to true to skip tls verification for kube api calls. Overrides sidecar.skipTlsVerify
1401
# skipTlsVerify: true
1402
# label that the configmaps with notifiers are marked with (can be templated)
1403
label: grafana_notifier
1404
# value of label that the configmaps with notifiers are set to (can be templated)
1405
labelValue: ""
1406
# Log level. Can be one of: DEBUG, INFO, WARN, ERROR, CRITICAL.
1407
# logLevel: INFO
1408
# If specified, the sidecar will search for notifier config-maps inside this namespace.
1409
# Otherwise the namespace in which the sidecar is running will be used.
1410
# It's also possible to specify ALL to search in all namespaces
1411
searchNamespace: null
1412
# Method to use to detect ConfigMap changes. With WATCH the sidecar will do a WATCH requests, with SLEEP it will list all ConfigMaps, then sleep for 60 seconds.
1413
watchMethod: WATCH
1414
# search in configmap, secret or both
1415
resource: both
1416
#
1417
# resourceName: comma separated list of resource names to be fetched/checked by this sidecar.
1418
# per default all resources of the type defined in {{ .Values.sidecar.notifiers.resource }} will be checked.
1419
# This e.g. allows stricter RBAC rules which are limited to the resources meant for the sidecars.
1420
# resourceName: "secret/notifiers-2,configmap/notifiers-1"
1421
resourceName: ""
1422
#
1423
# watchServerTimeout: request to the server, asking it to cleanly close the connection after that.
1424
# defaults to 60sec; much higher values like 3600 seconds (1h) are feasible for non-Azure K8S
1425
# watchServerTimeout: 3600
1426
#
1427
# watchClientTimeout: is a client-side timeout, configuring your local socket.
1428
# If you have a network outage dropping all packets with no RST/FIN,
1429
# this is how long your client waits before realizing & dropping the connection.
1430
# defaults to 66sec (sic!)
1431
# watchClientTimeout: 60
1432
#
1433
# maxTotalRetries: Total number of retries to allow for any http request.
1434
# Takes precedence over other counts. Applies to all requests to reloadURL and k8s api requests.
1435
# Set to 0 to fail on the first retry.
1436
# maxTotalRetries: 5
1437
#
1438
# maxConnectRetries: How many connection-related errors to retry on for any http request.
1439
# These are errors raised before the request is sent to the remote server, which we assume has not triggered the server to process the request.
1440
# Applies to all requests to reloadURL and k8s api requests.
1441
# Set to 0 to fail on the first retry of this type.
1442
# maxConnectRetries: 10
1443
#
1444
# maxReadRetries: How many times to retry on read errors for any http request
1445
# These errors are raised after the request was sent to the server, so the request may have side-effects.
1446
# Applies to all requests to reloadURL and k8s api requests.
1447
# Set to 0 to fail on the first retry of this type.
1448
# maxReadRetries: 5
1449
#
1450
# Endpoint to send request to reload notifiers
1451
reloadURL: "http://localhost:3000/api/admin/provisioning/notifications/reload"
1452
# Absolute path to a script to execute after a configmap got reloaded.
1453
# It runs before calls to REQ_URI. If the file is not executable it will be passed to sh.
1454
# Otherwise, it's executed as is. Shebangs known to work are #!/bin/sh and #!/usr/bin/env python
1455
script: null
1456
skipReload: false
1457
# Deploy the notifier sidecar as an initContainer in addition to a container.
1458
# This is needed if skipReload is true, to load any notifiers defined at startup time.
1459
initNotifiers: false
1460
# Use native sidecar https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/
1461
# restartPolicy: Always
1462
# # only applies to native sidecars
1463
# startupProbe:
1464
# httpGet:
1465
# path: /healthz
1466
# port: 8082
1467
# initialDelaySeconds: 5
1468
# periodSeconds: 5
1469
# failureThreshold: 60 # 5 minutes
1470
# Additional notifiers sidecar volume mounts
1471
extraMounts: []
1472
# Sets the size limit of the notifier sidecar emptyDir volume
1473
sizeLimit: ""
1474
## Override the deployment namespace
1475
##
1476
namespaceOverride: ""
1477
## Number of old ReplicaSets to retain
1478
##
1479
revisionHistoryLimit: 10
1480
## Add a separate remote image renderer deployment/service
1481
imageRenderer:
1482
deploymentStrategy: {}
1483
## The maximum time in seconds for the image renderer Deployment to make progress before it is
1484
## considered to be failed.
1485
## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#progress-deadline-seconds
1486
progressDeadlineSeconds: null
1487
# Enable the image-renderer deployment & service
1488
enabled: false
1489
replicas: 1
1490
autoscaling:
1491
enabled: false
1492
minReplicas: 1
1493
maxReplicas: 5
1494
targetCPU: "60"
1495
targetMemory: ""
1496
behavior: {}
1497
# The url of remote image renderer if it is not in the same namespace with the grafana instance
1498
serverURL: ""
1499
# The callback url of grafana instances if it is not in the same namespace with the remote image renderer
1500
renderingCallbackURL: ""
1501
# Token used for authentication between Grafana and the remote image renderer.
1502
token: ""
1503
# Use an existing secret for the image renderer token. Must contain a key named "token".
1504
existingSecret: ""
1505
image:
1506
# -- The Docker registry
1507
registry: cgr.dev
1508
# image-renderer Image repository
1509
repository: scratch-images/test-tmp/grafana-image-renderer
1510
# image-renderer Image tag
1511
tag: 5.12.2-r3
1512
# image-renderer Image sha (optional)
1513
sha: sha256:93bf151203b17e02c7bfa9da26a7a42c6be9e11182387c41ec1f9a3c573c07a4
1514
# image-renderer Image pull secrets (optional)
1515
pullSecrets: []
1516
# image-renderer ImagePullPolicy
1517
pullPolicy: Always
1518
dnsPolicy: ~
1519
dnsConfig: {}
1520
# nameservers:
1521
# - 8.8.8.8
1522
# options:
1523
# - name: ndots
1524
# value: "2"
1525
# - name: edns0
1526
# extra environment variables
1527
env:
1528
HTTP_HOST: "0.0.0.0"
1529
# Fixes "Error: Failed to launch the browser process!\nchrome_crashpad_handler: --database is required"
1530
XDG_CONFIG_HOME: /tmp/.chromium
1531
XDG_CACHE_HOME: /tmp/.chromium
1532
# RENDERING_ARGS: --no-sandbox,--disable-gpu,--window-size=1280x758
1533
# RENDERING_MODE: clustered
1534
# IGNORE_HTTPS_ERRORS: true
1535
## "valueFrom" environment variable references that will be added to deployment pods. Name is templated.
1536
## ref: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#envvarsource-v1-core
1537
## Renders in container spec as:
1538
## env:
1539
## ...
1540
## - name: <key>
1541
## valueFrom:
1542
## <value rendered as YAML>
1543
envValueFrom: {}
1544
# ENV_NAME:
1545
# configMapKeyRef:
1546
# name: configmap-name
1547
# key: value_key
1548
1549
# image-renderer deployment serviceAccount
1550
serviceAccountName: ""
1551
automountServiceAccountToken: false
1552
# image-renderer deployment hostUsers
1553
hostUsers: ~
1554
# image-renderer deployment securityContext
1555
securityContext: {}
1556
# image-renderer deployment container securityContext
1557
containerSecurityContext:
1558
seccompProfile:
1559
type: RuntimeDefault
1560
capabilities:
1561
drop: ['ALL']
1562
allowPrivilegeEscalation: false
1563
readOnlyRootFilesystem: true
1564
## image-renderer pod annotation
1565
podAnnotations: {}
1566
# image-renderer deployment Host Aliases
1567
hostAliases: []
1568
# image-renderer deployment priority class
1569
priorityClassName: ''
1570
# Path to the healthcheck endpoint. On Image Renderer v5.0.0 or newer, this is '/healthz'. Older versions use '/'.
1571
healthcheckPath: '/healthz'
1572
service:
1573
# Enable the image-renderer service
1574
enabled: true
1575
# image-renderer service port name
1576
portName: 'http'
1577
# image-renderer service port used by both service and deployment
1578
port: 8081
1579
targetPort: 8081
1580
# Adds the appProtocol field to the image-renderer service. This allows to work with istio protocol selection. Ex: "http" or "tcp"
1581
appProtocol: ""
1582
serviceMonitor:
1583
## If true, a ServiceMonitor CRD is created for a prometheus operator
1584
## https://github.com/coreos/prometheus-operator
1585
##
1586
enabled: false
1587
path: /metrics
1588
# namespace: monitoring (defaults to use the namespace this chart is deployed to)
1589
labels: {}
1590
# Set these to override the Prometheus global scrape interval/timeout.
1591
# interval: 1m
1592
# scrapeTimeout: 30s
1593
scheme: http
1594
tlsConfig: {}
1595
relabelings: []
1596
# See: https://doc.crds.dev/github.com/prometheus-operator/kube-prometheus/monitoring.coreos.com/ServiceMonitor/v1@v0.11.0#spec-targetLabels
1597
targetLabels: []
1598
# - targetLabel1
1599
# - targetLabel2
1600
# If https is enabled in Grafana, this needs to be set as 'https' to correctly configure the callback used in Grafana
1601
grafanaProtocol: http
1602
# In case a sub_path is used this needs to be added to the image renderer callback
1603
grafanaSubPath: ""
1604
# name of the image-renderer port on the pod
1605
podPortName: http
1606
# number of image-renderer replica sets to keep
1607
revisionHistoryLimit: 10
1608
networkPolicy:
1609
# Enable a NetworkPolicy to limit inbound traffic to only the created grafana pods
1610
limitIngress: true
1611
# Enable a NetworkPolicy to limit outbound traffic to only the created grafana pods
1612
limitEgress: false
1613
# Allow additional services to access image-renderer (eg. Prometheus operator when ServiceMonitor is enabled)
1614
extraIngressSelectors: []
1615
resources: {}
1616
# limits:
1617
# cpu: 100m
1618
# memory: 100Mi
1619
# requests:
1620
# cpu: 50m
1621
# memory: 50Mi
1622
## Node labels for pod assignment
1623
## ref: https://kubernetes.io/docs/user-guide/node-selection/
1624
#
1625
nodeSelector: {}
1626
## Tolerations for pod assignment
1627
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
1628
##
1629
tolerations: []
1630
## Affinity for pod assignment (evaluated as template)
1631
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
1632
##
1633
affinity: {}
1634
## Use an alternate scheduler, e.g. "stork".
1635
## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/
1636
##
1637
# schedulerName: "default-scheduler"
1638
1639
# Extra configmaps to mount in image-renderer pods
1640
extraConfigmapMounts: []
1641
# Extra secrets to mount in image-renderer pods
1642
extraSecretMounts: []
1643
# Extra volumes to mount in image-renderer pods
1644
extraVolumeMounts: []
1645
# Extra volumes for image-renderer pods
1646
extraVolumes: []
1647
networkPolicy:
1648
# -- networkPolicy.enabled Enable creation of NetworkPolicy resources. Only Ingress traffic is filtered for now.
1649
enabled: false
1650
# --networkPolicy.allowExternal Don't require client label for connections
1651
# The Policy model to apply. When set to false, only pods with the correct
1652
# client label will have network access to grafana port defined.
1653
# When true, grafana will accept connections from any source
1654
# (with the correct destination port).
1655
#
1656
ingress: true
1657
# -- networkPolicy.ingress When true enables the creation
1658
# an ingress network policy
1659
allowExternal: true
1660
# -- networkPolicy.explicitNamespacesSelector A Kubernetes LabelSelector to explicitly select namespaces from which traffic could be allowed
1661
# If explicitNamespacesSelector is missing or set to {}, only client Pods that are in the networkPolicy's namespace
1662
# and that match other criteria, the ones that have the good label, can reach the grafana.
1663
# But sometimes, we want the grafana to be accessible to clients from other namespaces, in this case, we can use this
1664
# LabelSelector to select these namespaces, note that the networkPolicy's namespace should also be explicitly added.
1665
# </br>
1666
#
1667
# Example:
1668
#
1669
# ```
1670
# explicitNamespacesSelector:
1671
# matchLabels:
1672
# role: frontend
1673
# matchExpressions:
1674
# - {key: role, operator: In, values: [frontend]}
1675
# ```
1676
explicitNamespacesSelector: {}
1677
# -- networkPolicy.explicitIpBlocks List of CIDR blocks allowed as ingress sources.
1678
# Each entry must be a valid CIDR notation string (e.g. 10.0.0.0/8).
1679
# When defined, the specified CIDR ranges are added to the ingress `from` rules
1680
# using `ipBlock` entries and complement the other configured ingress sources.
1681
# </br>
1682
#
1683
# Example:
1684
#
1685
# ```
1686
# explicitIpBlocks:
1687
# - 35.191.0.0/16
1688
# - 130.211.0.0/22
1689
# ```
1690
#
1691
explicitIpBlocks: []
1692
egress:
1693
# -- networkPolicy.egress.enabled When enabled, an egress network policy will be
1694
# created allowing grafana to connect to external data sources from kubernetes cluster.
1695
enabled: false
1696
# -- networkPolicy.egress.blockDNSResolution When enabled, DNS resolution will be blocked
1697
# for all pods in the grafana namespace.
1698
blockDNSResolution: false
1699
# -- networkPolicy.egress.ports Add individual ports to be allowed by the egress
1700
ports: []
1701
# Add ports to the egress by specifying - port: <port number>
1702
# E.X.
1703
# - port: 80
1704
# - port: 443
1705
#
1706
# -- networkPolicy.egress.to Allow egress traffic to specific destinations
1707
to: []
1708
# -- destinations to the egress by specifying - ipBlock: <CIDR>
1709
# E.X.
1710
# to:
1711
# - namespaceSelector:
1712
# matchExpressions:
1713
# - {key: role, operator: In, values: [grafana]}
1714
# Enable backward compatibility of kubernetes where version below 1.13 doesn't have the enableServiceLinks option
1715
enableKubeBackwardCompatibility: false
1716
useStatefulSet: false
1717
# extraObjects could be utilized to add dynamic manifests via values
1718
extraObjects: []
1719
# Examples:
1720
# extraObjects:
1721
# - apiVersion: kubernetes-client.io/v1
1722
# kind: ExternalSecret
1723
# metadata:
1724
# name: grafana-secrets-{{ .Release.Name }}
1725
# spec:
1726
# backendType: gcpSecretsManager
1727
# data:
1728
# - key: grafana-admin-password
1729
# name: adminPassword
1730
# Alternatively, you can use strings, which lets you use additional templating features:
1731
# extraObjects:
1732
# - |
1733
# apiVersion: kubernetes-client.io/v1
1734
# kind: ExternalSecret
1735
# metadata:
1736
# name: grafana-secrets-{{ .Release.Name }}
1737
# spec:
1738
# backendType: gcpSecretsManager
1739
# data:
1740
# - key: grafana-admin-password
1741
# name: {{ include "some-other-template" }}
1742
1743
# assertNoLeakedSecrets is a helper function defined in _helpers.tpl that checks if secret
1744
# values are not exposed in the rendered grafana.ini configmap. It is enabled by default.
1745
#
1746
# To pass values into grafana.ini without exposing them in a configmap, use variable expansion:
1747
# https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/#variable-expansion
1748
#
1749
# Alternatively, if you wish to allow secret values to be exposed in the rendered grafana.ini configmap,
1750
# you can disable this check by setting assertNoLeakedSecrets to false.
1751
assertNoLeakedSecrets: true
1752
# updateMode options are:
1753
# Off: n the Off update mode, the VPA recommender still analyzes resource usage and generates recommendations, but these recommendations are not automatically applied to Pods. The recommendations are only stored in the VPA object's .status field.
1754
# Initial: In Initial mode, VPA only sets resource requests when Pods are first created. It does not update resources for already running Pods, even if recommendations change over time. The recommendations apply only during Pod creation.
1755
# Recreate: In Recreate mode, VPA actively manages Pod resources by evicting Pods when their current resource requests differ significantly from recommendations. When a Pod is evicted, the workload controller (managing a Deployment, StatefulSet, etc) creates a replacement Pod, and the VPA admission controller applies the updated resource requests to the new Pod.
1756
# InPlaceOrRecreate: In Recreate mode, VPA actively manages Pod resources by evicting Pods when their current resource requests differ significantly from recommendations. When a Pod is evicted, the workload controller (managing a Deployment, StatefulSet, etc) creates a replacement Pod, and the VPA admission controller applies the updated resource requests to the new Pod.
1757
# Auto (deprecated): The Auto update mode is deprecated since VPA version 1.4.0. Use Recreate for eviction-based updates, or InPlaceOrRecreate for in-place updates with eviction fallback.
1758
verticalPodAutoscaler:
1759
enabled: false
1760
updateMode: "Off"
1761
controlledResources:
1762
cpu: true
1763
memory: true
1764
# Default safety bounds
1765
minAllowed:
1766
cpu: "25m"
1767
memory: "128Mi"
1768
maxAllowed:
1769
cpu: "1000m"
1770
memory: "1Gi"
1771
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.