stakater-reloader
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
Compare:
1
# Generated from deployments/kubernetes/templates/chart/values.yaml.tmpl
2
global:
3
## Reference to one or more secrets to be used when pulling images
4
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
5
##
6
imageRegistry: ""
7
imagePullSecrets: []
8
#imagePullSecrets:
9
# - name: my-pull-secret
10
#imagePullSecrets:
11
# - my-pull-secret
12
kubernetes:
13
host: https://kubernetes.default
14
nameOverride: ""
15
fullnameOverride: ""
16
image:
17
name: stakater/reloader
18
repository: cgr.dev/chainguard-private/stakater-reloader-fips
19
tag: 1.4.21@sha256:335b64163293e97cdb2e472f70f76737421b4db98393c1c4fbc5dbd2712e54d6
20
# digest: sha256:1234567
21
pullPolicy: IfNotPresent
22
reloader:
23
autoReloadAll: false
24
isArgoRollouts: false
25
isOpenshift: false
26
ignoreSecrets: false
27
ignoreConfigMaps: false
28
# Set to true to exclude Job workloads from automatic reload monitoring
29
# Useful when you don't want Jobs to be restarted when their referenced ConfigMaps/Secrets change
30
ignoreJobs: false
31
# Set to true to exclude CronJob workloads from automatic reload monitoring
32
# Useful when you don't want CronJobs to be restarted when their referenced ConfigMaps/Secrets change
33
ignoreCronJobs: false
34
reloadOnCreate: false
35
reloadOnDelete: false
36
syncAfterRestart: false
37
reloadStrategy: default # Set to default, env-vars or annotations
38
ignoreNamespaces: "" # Comma separated list of namespaces to ignore
39
namespaceSelector: "" # Comma separated list of k8s label selectors for namespaces selection
40
resourceLabelSelector: "" # Comma separated list of k8s label selectors for configmap/secret selection
41
logFormat: "" # json
42
logLevel: info # Log level to use (trace, debug, info, warning, error, fatal and panic)
43
watchGlobally: true
44
# Scoped mode: explicit list of namespaces to watch. When non-empty (and watchGlobally
45
# is false), Reloader watches exactly these namespaces and the chart creates a namespace
46
# scoped Role + RoleBinding in each one — no ClusterRole is created. The release namespace
47
# is always included automatically. Leave empty ([]) for the default single-namespace or
48
# global behavior controlled by watchGlobally.
49
# Accepts either a YAML list (e.g. ["team-a", "team-b"]) or a comma-separated string
50
# (e.g. "team-a,team-b")
51
namespaces: []
52
# Set to true to enable leadership election allowing you to run multiple replicas
53
enableHA: false
54
# Set to true to enable pprof for profiling
55
enablePProf: false
56
enableCSIIntegration: false
57
# Address to start pprof server on. Default is ":6060"
58
pprofAddr: ":6060"
59
# Set to true if you have a pod security policy that enforces readOnlyRootFilesystem
60
readOnlyRootFileSystem: false
61
legacy:
62
rbac: false
63
matchLabels: {}
64
# Set to true to expose a prometheus counter of reloads by namespace (this metric may have high cardinality in clusters with many namespaces)
65
enableMetricsByNamespace: false
66
deployment:
67
# Specifies the deployment DNS configuration.
68
dnsConfig: {}
69
# nameservers:
70
# - 1.2.3.4
71
# searches:
72
# - ns1.svc.cluster-domain.example
73
# - my.dns.search.suffix
74
# options:
75
# - name: ndots
76
# value: "1"
77
# - name: attempts
78
# value: "3"
79
80
# If you wish to run multiple replicas set reloader.enableHA = true
81
replicas: 1
82
revisionHistoryLimit: 2
83
hostUsers: null
84
nodeSelector:
85
# cloud.google.com/gke-nodepool: default-pool
86
87
# An affinity stanza to be applied to the Deployment.
88
# Example:
89
# affinity:
90
# nodeAffinity:
91
# requiredDuringSchedulingIgnoredDuringExecution:
92
# nodeSelectorTerms:
93
# - matchExpressions:
94
# - key: "node-role.kubernetes.io/infra-worker"
95
# operator: "Exists"
96
affinity: {}
97
volumeMounts: []
98
volumes: []
99
securityContext:
100
runAsNonRoot: true
101
runAsUser: 65534
102
seccompProfile:
103
type: RuntimeDefault
104
containerSecurityContext: {}
105
# capabilities:
106
# drop:
107
# - ALL
108
# allowPrivilegeEscalation: false
109
# readOnlyRootFilesystem: true
110
111
# A list of tolerations to be applied to the Deployment.
112
# Example:
113
# tolerations:
114
# - key: "node-role.kubernetes.io/infra-worker"
115
# operator: "Exists"
116
# effect: "NoSchedule"
117
tolerations: []
118
# Topology spread constraints for pod assignment
119
# Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
120
# Example:
121
# topologySpreadConstraints:
122
# - maxSkew: 1
123
# topologyKey: zone
124
# whenUnsatisfiable: DoNotSchedule
125
# labelSelector:
126
# matchLabels:
127
# app.kubernetes.io/instance: my-app
128
topologySpreadConstraints: []
129
annotations: {}
130
labels:
131
provider: stakater
132
group: com.stakater.platform
133
version: v1.4.21
134
# Support for extra environment variables.
135
env:
136
# Open supports Key value pair as environment variables.
137
open:
138
# secret supports Key value pair as environment variables. It gets the values based on keys from default reloader secret if any.
139
secret:
140
# ALERT_ON_RELOAD: <"true"|"false">
141
# ALERT_SINK: <"slack"> # By default it will be a raw text based webhook
142
# ALERT_WEBHOOK_URL: <"webhook_url">
143
# ALERT_ADDITIONAL_INFO: <"Additional Info like Cluster Name if needed">
144
# field supports Key value pair as environment variables. It gets the values from other fields of pod.
145
field:
146
# existing secret, you can specify multiple existing secrets, for each
147
# specify the env var name followed by the key in existing secret that
148
# will be used to populate the env var
149
existing:
150
# existing_secret_name:
151
# ALERT_ON_RELOAD: alert_on_reload_key
152
# ALERT_SINK: alert_sink_key
153
# ALERT_WEBHOOK_URL: alert_webhook_key
154
# ALERT_ADDITIONAL_INFO: alert_additional_info_key
155
# Liveness and readiness probe timeout values.
156
livenessProbe: {}
157
# timeoutSeconds: 5
158
# failureThreshold: 5
159
# periodSeconds: 10
160
# successThreshold: 1
161
readinessProbe: {}
162
# timeoutSeconds: 15
163
# failureThreshold: 5
164
# periodSeconds: 10
165
# successThreshold: 1
166
167
# Specify resource requests/limits for the deployment.
168
# Example:
169
# resources:
170
# limits:
171
# cpu: "100m"
172
# memory: "512Mi"
173
# requests:
174
# cpu: "10m"
175
# memory: "128Mi"
176
resources: {}
177
pod:
178
annotations: {}
179
priorityClassName: ""
180
# Set the runtimeClassName for the pod
181
runtimeClassName: ""
182
# Set the schedulerName for the pod
183
schedulerName: ""
184
# imagePullSecrets:
185
# - name: myregistrykey
186
187
# Put "0" in either to have go runtime ignore the set value.
188
# Otherwise, see https://pkg.go.dev/runtime#hdr-Environment_Variables for GOMAXPROCS and GOMEMLIMIT
189
gomaxprocsOverride: ""
190
gomemlimitOverride: ""
191
service: {}
192
# labels: {}
193
# annotations: {}
194
# port: 9090
195
# For IPv4 and IPv6 dual stack support.
196
# Specify the IP family policy for the service. Supported values are SingleStack, PreferDualStack, and RequireDualStack.
197
# ipFamilyPolicy: "SingleStack"
198
# Specify the IP protocol family or dual-stack preference for the service. Supported values: ["IPv4"], ["IPv6"], ["IPv4","IPv6"], or ["IPv6","IPv4"].
199
# ipFamilies: ["IPv4"]
200
rbac:
201
enabled: true
202
labels: {}
203
# Service account config for the agent pods
204
serviceAccount:
205
# Specifies whether a ServiceAccount should be created
206
create: true
207
labels: {}
208
annotations: {}
209
# The name of the ServiceAccount to use.
210
# If not set and create is true, a name is generated using the fullname template
211
name:
212
# Optional flags to pass to the Reloader entrypoint
213
# Example:
214
# custom_annotations:
215
# configmap: "my.company.com/configmap"
216
# secret: "my.company.com/secret"
217
# ignore: "my.company.com/reloader-ignore"
218
custom_annotations: {}
219
serviceMonitor:
220
# Deprecated: Service monitor will be removed in future releases of reloader in favour of Pod monitor
221
# Enabling this requires service to be enabled as well, or no endpoints will be found
222
enabled: false
223
# Set the namespace the ServiceMonitor should be deployed
224
# namespace: monitoring
225
226
# Fallback to the prometheus default unless specified
227
# interval: 10s
228
229
## scheme: HTTP scheme to use for scraping. Can be used with `tlsConfig` for example if using istio mTLS.
230
# scheme: ""
231
232
## tlsConfig: TLS configuration to use when scraping the endpoint. For example if using istio mTLS.
233
## Of type: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#tlsconfig
234
# tlsConfig: {}
235
236
# bearerTokenFile:
237
# Fallback to the prometheus default unless specified
238
# timeout: 30s
239
240
## Used to pass Labels that are used by the Prometheus installed in your cluster to select Service Monitors to work with
241
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#prometheusspec
242
labels: {}
243
## Used to pass annotations that are used by the Prometheus installed in your cluster to select Service Monitors to work with
244
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#prometheusspec
245
annotations: {}
246
# Retain the job and instance labels of the metrics pushed to the Pushgateway
247
# [Scraping Pushgateway](https://github.com/prometheus/pushgateway#configure-the-pushgateway-as-a-target-to-scrape)
248
honorLabels: true
249
## Metric relabel configs to apply to samples before ingestion.
250
## [Metric Relabeling](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs)
251
metricRelabelings: []
252
# - action: keep
253
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
254
# sourceLabels: [__name__]
255
256
## Relabel configs to apply to samples before ingestion.
257
## [Relabeling](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config)
258
relabelings: []
259
# - sourceLabels: [__meta_kubernetes_pod_node_name]
260
# separator: ;
261
# regex: ^(.*)$
262
# targetLabel: nodename
263
# replacement: $1
264
# action: replace
265
266
targetLabels: []
267
podMonitor:
268
enabled: false
269
# Set the namespace the podMonitor should be deployed
270
# namespace: monitoring
271
272
# Fallback to the prometheus default unless specified
273
# interval: 10s
274
275
## scheme: HTTP scheme to use for scraping. Can be used with `tlsConfig` for example if using istio mTLS.
276
# scheme: ""
277
278
## tlsConfig: TLS configuration to use when scraping the endpoint. For example if using istio mTLS.
279
## Of type: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#tlsconfig
280
# tlsConfig: {}
281
282
# bearerTokenSecret:
283
# Fallback to the prometheus default unless specified
284
# timeout: 30s
285
286
## Used to pass Labels that are used by the Prometheus installed in your cluster to select Service Monitors to work with
287
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#prometheusspec
288
labels: {}
289
## Used to pass annotations that are used by the Prometheus installed in your cluster to select Service Monitors to work with
290
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#prometheusspec
291
annotations: {}
292
# Retain the job and instance labels of the metrics pushed to the Pushgateway
293
# [Scraping Pushgateway](https://github.com/prometheus/pushgateway#configure-the-pushgateway-as-a-target-to-scrape)
294
honorLabels: true
295
## Metric relabel configs to apply to samples before ingestion.
296
## [Metric Relabeling](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs)
297
metricRelabelings: []
298
# - action: keep
299
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
300
# sourceLabels: [__name__]
301
302
## Relabel configs to apply to samples before ingestion.
303
## [Relabeling](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config)
304
relabelings: []
305
# - sourceLabels: [__meta_kubernetes_pod_node_name]
306
# separator: ;
307
# regex: ^(.*)$
308
# targetLabel: nodename
309
# replacement: $1
310
# action: replace
311
312
podTargetLabels: []
313
podDisruptionBudget:
314
enabled: false
315
# Set the minimum available replicas
316
# minAvailable: 1
317
# OR Set the maximum unavailable replicas
318
# maxUnavailable: 1
319
# If both defined only maxUnavailable will be used
320
netpol:
321
enabled: false
322
from: []
323
# - podSelector:
324
# matchLabels:
325
# app.kubernetes.io/name: prometheus
326
to: []
327
# Enable vertical pod autoscaler
328
verticalPodAutoscaler:
329
enabled: false
330
# Recommender responsible for generating recommendation for the object.
331
# List should be empty (then the default recommender will generate the recommendation)
332
# or contain exactly one recommender.
333
# recommenders:
334
# - name: custom-recommender-performance
335
336
# List of resources that the vertical pod autoscaler can control. Defaults to cpu and memory
337
controlledResources: []
338
# Specifies which resource values should be controlled: RequestsOnly or RequestsAndLimits.
339
# controlledValues: RequestsAndLimits
340
341
# Define the max allowed resources for the pod
342
maxAllowed: {}
343
# cpu: 200m
344
# memory: 100Mi
345
# Define the min allowed resources for the pod
346
minAllowed: {}
347
# cpu: 200m
348
# memory: 100Mi
349
350
updatePolicy:
351
# Specifies minimal number of replicas which need to be alive for VPA Updater to attempt pod eviction
352
# minReplicas: 1
353
# Specifies whether recommended updates are applied when a Pod is started and whether recommended updates
354
# are applied during the life of a Pod. Possible values are "Off", "Initial", "Recreate", and "Auto".
355
updateMode: Auto
356
webhookUrl: ""
357
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.