fleet
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
Compare:
1
image:
2
repository: cgr.dev/chainguard-private/rancher-fleet
3
tag: 0.16.3-r0@sha256:697e8c1472a977caf4b0170aa6461184f75a4d42b6e207585a728f453617301e
4
imagePullPolicy: IfNotPresent
5
agentImage:
6
repository: cgr.dev/chainguard-private/rancher-fleet-agent
7
tag: 0.16.3-r0@sha256:7de50c2ae4003728ccc5dc9db75684ed77354b999406e4cedfed7664abb8efb8
8
imagePullPolicy: IfNotPresent
9
# For cluster registration the public URL of the Kubernetes API server must be set here
10
# Example: https://example.com:6443
11
apiServerURL: ""
12
# For cluster registration the pem encoded value of the CA of the Kubernetes API server must be set here
13
# If left empty it is assumed this Kubernetes API TLS is signed by a well known CA.
14
apiServerCA: ""
15
# Determines whether the agent should trust CA bundles from the operating system's trust store when connecting to a
16
# management cluster. True in `system-store` mode, false in `strict` mode.
17
agentTLSMode: "system-store"
18
# A duration string for how often agents should report a heartbeat
19
agentCheckinInterval: "15m"
20
# The amount of time that agents will wait before they clean up old Helm releases.
21
# A non-existent value or 0 will result in an interval of 15 minutes.
22
garbageCollectionInterval: "15m"
23
# Whether you want to allow cluster upon registration to specify their labels.
24
ignoreClusterRegistrationLabels: false
25
# Whether an existing agent-initiated cluster can register again with a registration token other than the one it is registered with.
26
allowClusterRegistrationTokenChange: false
27
# A Cluster referencing a kubeconfig secret in another namespace
28
# (spec.kubeConfigSecretNamespace) requires that secret to carry the label
29
# fleet.cattle.io/kubeconfig-referenceable-from=<Cluster namespace>.
30
# Setting this to true also accepts unlabeled secrets in Fleet's well-known
31
# namespaces (fleet-local, fleet-default and the Fleet system namespaces), as
32
# in earlier releases. A nonempty reference label still limits access to its
33
# named namespace. Agents are only deployed onto the management cluster for
34
# Clusters in the bootstrap or Fleet system namespaces, regardless of this value.
35
allowUnlabeledKubeConfigSecretNamespaces: false
36
# Counts from gitrepo are out of sync with bundleDeployment state.
37
# Just retry in a number of seconds as there is no great way to trigger an event that doesn't cause a loop.
38
# If not set default is 15 seconds.
39
# clusterEnqueueDelay: 120s
40
41
# http[s] proxy server
42
# proxy: http://<username>:<password>@<url>:<port>
43
44
# comma separated list of domains or ip addresses that will not use the proxy
45
noProxy: 127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local
46
# PEM-encoded CA certificate to trust when connecting to the proxy. Required
47
# when proxy is set to an https:// URL and the proxy uses a self-signed cert.
48
# proxyCACert: |
49
# -----BEGIN CERTIFICATE-----
50
# ...
51
# -----END CERTIFICATE-----
52
53
# The amount of time to wait for a response from the server before canceling the
54
# request. Used to retrieve the latest commit of configured git repositories.
55
# A non-existent value or 0 will result in a timeout of 30 seconds.
56
gitClientTimeout: 30s
57
bootstrap:
58
enabled: true
59
# The namespace that will be autocreated and the local cluster will be registered in
60
namespace: fleet-local
61
# The namespace where the fleet agent for the local cluster will be ran, if empty
62
# this will default to cattle-fleet-system
63
agentNamespace: ""
64
# If true, the local cluster stays registered (Cluster + ClusterGroup) but the
65
# fleet-agent is NOT deployed into it. An already-running local agent will be removed.
66
# The local cluster will not receive deployments.
67
localAgentDisabled: false
68
# Apply extra clusterLabels to the local cluster bootstrapped by fleet-controller
69
clusterLabels: {}
70
# A repo to add at install time that will deploy to the local cluster. This allows
71
# one to fully bootstrap fleet, its configuration and all its downstream clusters
72
# in one shot.
73
repo: ""
74
secret: ""
75
branch: master
76
paths: ""
77
global:
78
cattle:
79
imagePullSecrets: []
80
systemDefaultRegistry: ""
81
## Node labels for pod assignment
82
## Ref: https://kubernetes.io/docs/user-guide/node-selection/
83
##
84
nodeSelector: {}
85
## List of node taints to tolerate (requires Kubernetes >= 1.6)
86
tolerations: []
87
## Pod affinity for the controllers.
88
affinity: {}
89
# Container resource limits and requests for the controllers
90
resources: {}
91
## Limits and requests for all fleet containers.
92
# limits:
93
# cpu: 8000m
94
# memory: 8Gi
95
# requests:
96
# cpu: 250m
97
# memory: 768Mi
98
#
99
## Set per-component overrides here.
100
## Set to empty object {} to use none rather than the default from above.
101
# fleetController:
102
# limits:
103
# cpu: 8000m
104
# memory: 8Gi
105
# requests:
106
# cpu: 250m
107
# memory: 768Mi
108
# fleetCleanup: {} # none rather than default
109
# fleetAgentmanagement: {} # none rather than default
110
# gitjob: {} # none rather than default
111
# helmops: {} # none rather than default
112
113
## PriorityClassName assigned to deployment.
114
priorityClassName: ""
115
## Determines whether SSH operations (eg. cloning git repos, downloading Helm charts) could succeed if
116
## host verification fails. Insecure when set to true. Default: false.
117
insecureSkipHostKeyChecks: false
118
## Adds hosts to the known_hosts configmap if using a custom git provider for gitrepos
119
additionalKnownHosts: []
120
# Custom entries to be added in SSH known_hosts format (see charts/fleet/templates/configmap_known_hosts.yaml for examples):
121
# - <host>[:port] <key-algorithm> <fingerprint>
122
123
gitops:
124
enabled: true
125
# syncPeriod is used to pick up polling for lost gitrepo events.
126
# It should be larger than the largest gitrepo pollinginterval.
127
syncPeriod: 2h
128
metrics:
129
enabled: true
130
debug: false
131
debugLevel: 0
132
propagateDebugSettingsToAgents: true
133
disableSecurityContext: false
134
migrations:
135
clusterRegistrationCleanup: true
136
gitrepoJobsCleanup: true
137
gitrepoHelmURLRegexMigration: true
138
## Leader election configuration
139
leaderElection:
140
leaseDuration: 30s
141
retryPeriod: 10s
142
renewDeadline: 25s
143
## Fleet controller configuration
144
controller:
145
replicas: 1
146
registrationTokenTTL:
147
required: false
148
reconciler:
149
# The number of workers that are allowed to each type of reconciler
150
workers:
151
gitrepo: "50"
152
bundle: "50"
153
bundledeployment: "50"
154
cluster: "50"
155
clustergroup: "50"
156
imagescan: "50"
157
schedule: "50"
158
content: "50"
159
gitjob:
160
replicas: 1
161
helmops:
162
enabled: true
163
replicas: 1
164
# When enabled, the imagescan controller will run to monitor image repositories.
165
# If disabled, config files (e.g. fleet.yaml) containing non-empty imageScan fields will result in errors.
166
# This option may be deprecated in a future release, and imagescan removed.
167
imagescan:
168
enabled: false
169
## Fleet agent configuration
170
agent:
171
replicas: 1
172
reconciler:
173
# The number of workers that are allowed for each type of reconciler
174
workers:
175
bundledeployment: "50"
176
drift: "50"
177
## Leader election configuration
178
leaderElection:
179
leaseDuration: 30s
180
retryPeriod: 10s
181
renewDeadline: 25s
182
183
# Extra environment variables passed to the fleet pods.
184
# extraEnv:
185
# - name: OCI_STORAGE
186
# value: "false"
187
188
# shards:
189
# - id: shard0
190
# nodeSelector:
191
# kubernetes.io/hostname: k3d-upstream-server-0
192
# - id: shard1
193
# nodeSelector:
194
# kubernetes.io/hostname: k3d-upstream-server-1
195
# - id: shard2
196
# nodeSelector:
197
# kubernetes.io/hostname: k3d-upstream-server-2
198
199
# Extra labels passed to the fleet pods.
200
# extraLabels:
201
# fleetController:
202
# new-label: "new-label-value"
203
# new-label-2: "new-label-value-2"
204
# gitjob:
205
# new-label: "new-label-value"
206
# new-label-2: "new-label-value-2"
207
# helmops:
208
# new-label: "new-label-value"
209
# new-label-2: "new-label-value-2"
210
211
# Extra annotations passed to the fleet pods.
212
# extraAnnotations:
213
# fleetController:
214
# new-annotation: "new-annotation-value"
215
# new-annotation-2: "new-annotation-value-2"
216
# gitjob:
217
# new-annotation: "new-annotation-value"
218
# new-annotation-2: "new-annotation-value-2"
219
# helmops:
220
# new-annotation: "new-annotation-value"
221
# new-annotation-2: "new-annotation-value-2"
222
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.