DirectorySecurity AdvisoriesPricing
Sign in
Directory
vector logoHELM

vector

Helm chart
Last changed
Request a free trial

Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.

Overview
Chart tags
Default values
Chart metadata
Images

Tag:
Compare:

1
# Default values for Vector
2
# See Vector helm documentation to learn more:
3
# https://vector.dev/docs/setup/installation/package-managers/helm/
4
5
# nameOverride -- Override the name of resources.
6
nameOverride: ""
7
# fullnameOverride -- Override the full name of resources.
8
fullnameOverride: ""
9
# role -- [Role](https://vector.dev/docs/setup/deployment/roles/) for this Vector instance, valid options are:
10
# "Agent", "Aggregator", and "Stateless-Aggregator".
11
12
# Each role is created with the following workloads:
13
# Agent = DaemonSet
14
# Aggregator = StatefulSet
15
# Stateless-Aggregator = Deployment
16
role: "Aggregator"
17
# Workload API version overrides. Use these to switch to custom controllers
18
# or to test new Kubernetes API versions.
19
daemonSet:
20
# daemonSet.apiVersion -- Override the DaemonSet apiVersion. Valid for the "Agent" role.
21
apiVersion: ""
22
statefulSet:
23
# statefulSet.apiVersion -- Override the StatefulSet apiVersion. Valid for the "Aggregator" role.
24
apiVersion: ""
25
# rollWorkload -- Add a checksum of the generated ConfigMap to workload annotations.
26
rollWorkload: true
27
# rollWorkloadSecrets -- Add a checksum of the generated Secret to workload annotations.
28
rollWorkloadSecrets: false
29
# rollWorkloadExtraObjects -- Add a checksum of the generated ExtraObjects to workload annotations.
30
rollWorkloadExtraObjects: false
31
# commonLabels -- Add additional labels to all created resources.
32
commonLabels: {}
33
# Define the Vector image to use.
34
# Vector images are available from:
35
# - Docker Hub: docker.io/timberio/vector
36
# - GitHub Container Registry: ghcr.io/vectordotdev/vector
37
image:
38
# image.repository -- Override default registry and name for Vector's image.
39
repository: cgr.dev/chainguard-private/vector
40
# image.pullPolicy -- The [pullPolicy](https://kubernetes.io/docs/concepts/containers/images/#image-pull-policy) for
41
# Vector's image.
42
pullPolicy: IfNotPresent
43
# image.pullSecrets -- The [imagePullSecrets](https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod)
44
# to reference for the Vector Pods.
45
pullSecrets: []
46
# image.tag -- The tag to use for Vector's image.
47
# @default -- Derived from the Chart's appVersion.
48
tag: 0.60.0-r0
49
# image.sha -- The SHA to use for Vector's image.
50
sha: sha256:4d061363db74bfe160718673696f1079a24e23cfcd13b871a8cc6562aa7000bb
51
# image.base -- The base distribution to use for vector. If set, then the base in appVersion will be replaced with this base alongside the version.
52
# For example: with a `base` of `debian` `0.38.0-distroless-libc` becomes `0.38.0-debian`
53
base: ""
54
# replicas -- Specify the number of Pods to create. Valid for the "Aggregator" and "Stateless-Aggregator" roles.
55
replicas: 1
56
# Adding additional entries with hostAliases
57
hostAliases: []
58
# - ip: "127.0.0.1"
59
# hostnames:
60
# - "foo.local"
61
# - "bar.local"
62
63
# podManagementPolicy -- Specify the [podManagementPolicy](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#pod-management-policies)
64
# for the StatefulSet. Valid for the "Aggregator" role.
65
podManagementPolicy: OrderedReady
66
# Create a Secret resource for Vector to use.
67
secrets:
68
# secrets.annotations -- Set annotations on Vector Secrets.
69
annotations: {}
70
# secrets.generic -- Each Key/Value will be added to the Secret's data key, each value should be raw and NOT base64
71
# encoded. Any secrets can be provided here. It's commonly used for credentials and other access related values.
72
# **NOTE: Don't commit unencrypted secrets to git!**
73
generic: {}
74
# my_variable: "my-secret-value"
75
# datadog_api_key: "api-key"
76
# awsAccessKeyId: "access-key"
77
# awsSecretAccessKey: "secret-access-key"
78
autoscaling:
79
# autoscaling.enabled -- Create a [HorizontalPodAutoscaler](https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/)
80
# for Vector. Valid for the "Aggregator" and "Stateless-Aggregator" roles.
81
enabled: false
82
# autoscaling.external -- Set to `true` if using an external autoscaler like [KEDA](https://keda.sh/).
83
# Valid for the "Aggregator and "Stateless-Aggregator" roles.
84
external: false
85
# autoscaling.annotations -- Annotations to add to Vector's HPA.
86
annotations: {}
87
# autoscaling.minReplicas -- Minimum replicas for Vector's HPA.
88
minReplicas: 1
89
# autoscaling.maxReplicas -- Maximum replicas for Vector's HPA.
90
maxReplicas: 10
91
# autoscaling.targetCPUUtilizationPercentage -- Target CPU utilization for Vector's HPA.
92
targetCPUUtilizationPercentage: 80
93
# autoscaling.targetMemoryUtilizationPercentage -- (int) Target memory utilization for Vector's HPA.
94
targetMemoryUtilizationPercentage:
95
# autoscaling.customMetric -- Target a custom metric for autoscaling.
96
customMetric: []
97
# - type: Pods
98
# pods:
99
# metric:
100
# name: utilization
101
# target:
102
# type: AverageValue
103
# averageValue: 95
104
# autoscaling.behavior -- Configure separate scale-up and scale-down behaviors.
105
behavior: {}
106
# scaleDown:
107
# stabilizationWindowSeconds: 300
108
podDisruptionBudget:
109
# podDisruptionBudget.enabled -- Enable a [PodDisruptionBudget](https://kubernetes.io/docs/tasks/run-application/configure-pdb/)
110
# for Vector.
111
enabled: false
112
# podDisruptionBudget.minAvailable -- The number of Pods that must still be available after an eviction.
113
minAvailable: 1
114
# podDisruptionBudget.maxUnavailable -- (int) The number of Pods that can be unavailable after an eviction.
115
maxUnavailable:
116
rbac:
117
# rbac.create -- If true, create and use RBAC resources. Only valid for the "Agent" role.
118
create: true
119
# rbac.extraRules -- List of additional Kubernetes RBAC rules to append to the ClusterRole.
120
# Rules defined here are appended after the chart's standard rules.
121
# Each item must follow the Kubernetes ClusterRole rule syntax.
122
#
123
# Example:
124
# extraRules:
125
# - apiGroups: [""]
126
# resources: ["nodes/metrics", "nodes/stats"]
127
# verbs: ["get"]
128
extraRules: []
129
psp:
130
# psp.create -- If true, create a [PodSecurityPolicy](https://kubernetes.io/docs/concepts/security/pod-security-policy/)
131
# resource. PodSecurityPolicy is deprecated as of Kubernetes v1.21, and will be removed in v1.25. Intended for use
132
# with the "Agent" role.
133
create: false
134
serviceAccount:
135
# serviceAccount.create -- If true, create a ServiceAccount for Vector.
136
create: true
137
# serviceAccount.annotations -- Annotations to add to Vector's ServiceAccount.
138
annotations: {}
139
# serviceAccount.name -- The name of the ServiceAccount to use. If not set and serviceAccount.create is true, a name
140
# is generated using the fullname template.
141
name:
142
# serviceAccount.automountToken -- Automount API credentials for Vector's ServiceAccount.
143
automountToken: true
144
# podAnnotations -- Set annotations on Vector Pods. Values are rendered with `tpl`, so
145
# templated strings (e.g. a checksum of an externally managed ConfigMap) are supported.
146
podAnnotations: {}
147
# podLabels -- Set labels on Vector Pods.
148
podLabels:
149
vector.dev/exclude: "true"
150
# podPriorityClassName -- Set the [priorityClassName](https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass)
151
# on Vector Pods.
152
podPriorityClassName: ""
153
# podHostNetwork -- Configure hostNetwork on Vector Pods.
154
podHostNetwork: false
155
# podSecurityContext -- Allows you to overwrite the default [PodSecurityContext](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/)
156
# for Vector Pods.
157
podSecurityContext: {}
158
# workloadResourceAnnotations -- Set annotations on the Vector DaemonSet, Deployment or StatefulSet.
159
workloadResourceAnnotations: {}
160
# securityContext -- Specify securityContext on Vector containers.
161
securityContext: {}
162
# command -- Override Vector's default command.
163
command: []
164
# args -- Override Vector's default arguments.
165
args:
166
- --config-dir
167
- "/etc/vector/"
168
# env -- Set environment variables for Vector containers.
169
env: []
170
# - name: MY_VARIABLE
171
# valueFrom:
172
# secretKeyRef:
173
# name: vector
174
# key: my_variable
175
# - name: AWS_ACCESS_KEY_ID
176
# valueFrom:
177
# secretKeyRef:
178
# name: vector
179
# key: awsAccessKeyId
180
181
# envFrom -- Define environment variables from Secrets or ConfigMaps.
182
envFrom: []
183
# - secretRef:
184
# name: vector
185
186
# containerPorts -- Manually define Vector's containerPorts, overriding automated generation of containerPorts.
187
containerPorts: []
188
# resources -- Set Vector resource requests and limits.
189
resources: {}
190
# requests:
191
# cpu: 200m
192
# memory: 256Mi
193
# limits:
194
# cpu: 200m
195
# memory: 256Mi
196
197
# lifecycle -- Set lifecycle hooks for Vector containers.
198
lifecycle: {}
199
# preStop:
200
# exec:
201
# command:
202
# - /bin/sleep
203
# - "10"
204
205
# minReadySeconds -- Specify the minimum number of seconds a newly spun up pod should wait to
206
# pass healthchecks before it is considered available.
207
minReadySeconds: 0
208
# revisionHistoryLimit -- The number of historical changes to retain to allow rollback. Valid for all roles (Agent, Aggregator, Stateless-Aggregator).
209
# defaults to 10 if not set
210
# revisionHistoryLimit: 10
211
212
# updateStrategy -- Customize the updateStrategy used to replace Vector Pods, this is also used for the
213
# DeploymentStrategy for the "Stateless-Aggregators". Valid options depend on the chosen role.
214
215
# Agent (DaemonSetUpdateStrategy): https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/daemon-set-v1/#DaemonSetSpec)
216
# Aggregator (StatefulSetUpdateStrategy): https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/stateful-set-v1/#StatefulSetSpec
217
# Stateless-Aggregator (DeploymentStrategy): https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/deployment-v1/
218
updateStrategy: {}
219
# type: RollingUpdate
220
# rollingUpdate:
221
# maxUnavailable: 1
222
223
# terminationGracePeriodSeconds -- Override Vector's terminationGracePeriodSeconds.
224
terminationGracePeriodSeconds: 60
225
# nodeSelector -- Configure a [nodeSelector](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector)
226
# for Vector Pods.
227
nodeSelector: {}
228
# tolerations -- Configure Vector Pods to be scheduled on [tainted](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/)
229
# nodes.
230
tolerations: []
231
# affinity -- Configure [affinity](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity)
232
# rules for Vector Pods.
233
affinity: {}
234
# topologySpreadConstraints -- Configure [topology spread constraints](https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/)
235
# for Vector Pods. Valid for the "Aggregator" and "Stateless-Aggregator" roles.
236
#
237
# If no "labelSelector" is defined, Vector's selector labels will be used by default.
238
topologySpreadConstraints: []
239
# Configuration for Vector's Service.
240
service:
241
# service.enabled -- If true, create and provide a Service resource for Vector.
242
enabled: true
243
# service.type -- Set the type for Vector's Service.
244
type: "ClusterIP"
245
# service.annotations -- Set annotations on Vector's Service.
246
annotations: {}
247
# service.topologyKeys -- Specify the [topologyKeys](https://kubernetes.io/docs/concepts/services-networking/service-topology/#using-service-topology)
248
# field on Vector's Service.
249
topologyKeys: []
250
# - "kubernetes.io/hostname"
251
# - "topology.kubernetes.io/zone"
252
# - "topology.kubernetes.io/region"
253
# - "*"
254
# service.ports -- Manually set the Service ports, overriding automated generation of Service ports.
255
ports: []
256
# service.externalTrafficPolicy -- Specify the [externalTrafficPolicy](https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip).
257
externalTrafficPolicy: ""
258
# service.internalTrafficPolicy -- Specify the [internalTrafficPolicy](https://kubernetes.io/docs/concepts/services-networking/service-traffic-policy).
259
internalTrafficPolicy: ""
260
# service.loadBalancerIP -- Specify the [loadBalancerIP](https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer).
261
loadBalancerIP: ""
262
# service.loadBalancerSourceRanges -- Specify the [loadBalancerSourceRanges](https://kubernetes.io/docs/reference/kubernetes-api/core/service-v1/#ServiceSpec) to restrict client IP ranges that can access the LoadBalancer Service.
263
loadBalancerSourceRanges: []
264
# service.ipFamilyPolicy -- Configure [IPv4/IPv6 dual-stack](https://kubernetes.io/docs/concepts/services-networking/dual-stack/).
265
ipFamilyPolicy: ""
266
# service.ipFamilies -- Configure [IPv4/IPv6 dual-stack](https://kubernetes.io/docs/concepts/services-networking/dual-stack/).
267
ipFamilies: []
268
# service.trafficDistribution -- Specify the [Traffic distribution](https://kubernetes.io/docs/concepts/services-networking/service/#traffic-distribution)
269
# additional Topology Aware Routing may be informative. Specify the [Topology Aware Routing](https://kubernetes.io/docs/concepts/services-networking/topology-aware-routing/)
270
trafficDistribution: ""
271
# Configuration for Vector's Headless Service.
272
serviceHeadless:
273
# serviceHeadless.enabled -- If true, create and provide a Headless Service resource for Vector.
274
enabled: true
275
# Configuration for Vector's Ingress.
276
ingress:
277
# ingress.enabled -- If true, create and use an Ingress resource.
278
enabled: false
279
# ingress.className -- Specify the [ingressClassName](https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress),
280
# requires Kubernetes >= 1.18
281
className: ""
282
# ingress.annotations -- Set annotations on the Ingress.
283
annotations: {}
284
# kubernetes.io/ingress.class: nginx
285
# kubernetes.io/tls-acme: "true"
286
# ingress.hosts -- Configure the hosts and paths for the Ingress.
287
hosts: []
288
# - host: chart-example.local
289
# paths:
290
# - path: /
291
# pathType: ImplementationSpecific
292
# # Specify the port name or number on the Service
293
# # Using name requires Kubernetes >=1.19
294
# port:
295
# name: ""
296
# number: ""
297
# ingress.tls -- Configure TLS for the Ingress.
298
tls: []
299
# - secretName: chart-example-tls
300
# hosts:
301
# - chart-example.local
302
# existingConfigMaps -- List of existing ConfigMaps for Vector's configuration instead of creating a new one. Requires
303
# dataDir to be set. Additionally, containerPorts, service.ports, and serviceHeadless.ports should be specified based on
304
# your supplied configuration. If set, this parameter takes precedence over customConfig and the chart's default configs.
305
existingConfigMaps: []
306
# dataDir -- Specify the path for Vector's data, only used when existingConfigMaps are used.
307
dataDir: ""
308
# customConfig -- Override Vector's default configs, if used **all** options need to be specified. This section supports
309
# using helm templates to populate dynamic values. See Vector's [configuration documentation](https://vector.dev/docs/reference/configuration/)
310
# for all options.
311
customConfig: {}
312
# data_dir: /vector-data-dir
313
# api:
314
# enabled: true
315
# address: 127.0.0.1:8686
316
# sources:
317
# vector:
318
# address: 0.0.0.0:6000
319
# type: vector
320
# version: "2"
321
# sinks:
322
# stdout:
323
# type: console
324
# inputs: [vector]
325
# encoding:
326
# codec: json
327
328
# defaultVolumes -- Default volumes that are mounted into pods. In most cases, these should not be changed.
329
# Use `extraVolumes`/`extraVolumeMounts` for additional custom volumes.
330
# @default -- See `values.yaml`
331
defaultVolumes:
332
- name: var-log
333
hostPath:
334
path: "/var/log/"
335
- name: var-lib
336
hostPath:
337
path: "/var/lib/"
338
- name: procfs
339
hostPath:
340
path: "/proc"
341
- name: sysfs
342
hostPath:
343
path: "/sys"
344
# defaultVolumeMounts -- Default volume mounts. Corresponds to `volumes`.
345
# @default -- See `values.yaml`
346
defaultVolumeMounts:
347
- name: var-log
348
mountPath: "/var/log/"
349
readOnly: true
350
- name: var-lib
351
mountPath: "/var/lib"
352
readOnly: true
353
- name: procfs
354
mountPath: "/host/proc"
355
readOnly: true
356
- name: sysfs
357
mountPath: "/host/sys"
358
readOnly: true
359
# extraVolumes -- Additional Volumes to use with Vector Pods.
360
extraVolumes: []
361
# extraVolumeMounts -- Additional Volume to mount into Vector Containers.
362
extraVolumeMounts: []
363
# initContainers -- Init Containers to be added to the Vector Pods.
364
# This also supports template content, which will eventually be converted to yaml.
365
initContainers: []
366
# initContainers:
367
# - name: test
368
# image: busybox:latest
369
# command:
370
# - cp
371
# args:
372
# - /bin/sleep
373
# - /test/sleep
374
# volumeMounts:
375
# - name: test
376
# mountPath: /test
377
378
# extraContainers -- Extra Containers to be added to the Vector Pods.
379
# This also supports template content, which will eventually be converted to yaml.
380
extraContainers: []
381
# extraContainers:
382
# - name: test
383
# command:
384
# - cp
385
# args:
386
# - /bin/sleep
387
# - /test/sleep
388
# image: busybox:latest
389
# volumeMounts:
390
# - name: test
391
# mountPath: /test
392
393
# Configuration for Vector's data persistence.
394
persistence:
395
# persistence.enabled -- If true, create and use PersistentVolumeClaims.
396
enabled: false
397
# persistence.existingClaim -- Name of an existing PersistentVolumeClaim to use. Valid for the "Aggregator" role.
398
existingClaim: ""
399
# persistence.storageClassName -- Specifies the storageClassName for PersistentVolumeClaims. Valid for the
400
# "Aggregator" role.
401
# storageClassName: default
402
403
# persistence.volumeAttributesClassName -- (string) Specifies the volumeAttributesClassName for PersistentVolumeClaims.
404
# Valid for the "Aggregator" role.
405
volumeAttributesClassName:
406
# persistence.retentionPolicy -- Configure a [PersistentVolumeClaimRetentionPolicy](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#persistentvolumeclaim-retention)
407
# for Vector's PersistentVolumeClaims. Valid for the "Aggregator" role.
408
retentionPolicy: {}
409
# whenDeleted: Retain
410
# whenScaled: Retain
411
412
# persistence.annotations -- Set annotations on the PersistentVolumeClaims created by the StatefulSet.
413
annotations: {}
414
# persistence.accessModes -- Specifies the accessModes for PersistentVolumeClaims. Valid for the "Aggregator" role.
415
accessModes:
416
- ReadWriteOnce
417
# persistence.size -- Specifies the size of PersistentVolumeClaims. Valid for the "Aggregator" role.
418
size: 10Gi
419
# persistence.finalizers -- Specifies the finalizers of PersistentVolumeClaims. Valid for the "Aggregator" role.
420
finalizers:
421
- kubernetes.io/pvc-protection
422
# persistence.selectors -- Specifies the selectors for PersistentVolumeClaims. Valid for the "Aggregator" role.
423
selectors: {}
424
hostPath:
425
# persistence.hostPath.enabled -- If true, use hostPath persistence. Valid for the "Agent" role, if it's disabled
426
# the "Agent" role will use emptyDir.
427
enabled: true
428
# persistence.hostPath.path -- Override path used for hostPath persistence. Valid for the "Agent" role, persistence
429
# is always used for the "Agent" role.
430
path: "/var/lib/vector"
431
# dnsPolicy -- Specify the [dnsPolicy](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-s-dns-policy)
432
# for Vector Pods.
433
dnsPolicy: ClusterFirst
434
# dnsConfig -- Specify the [dnsConfig](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config)
435
# options for Vector Pods.
436
dnsConfig: {}
437
# nameservers:
438
# - 1.2.3.4
439
# searches:
440
# - ns1.svc.cluster-domain.example
441
# - my.dns.search.suffix
442
# options:
443
# - name: ndots
444
# value: "2"
445
# - name: edns0
446
447
# shareProcessNamespace -- Specify the [shareProcessNamespace](https://kubernetes.io/docs/tasks/configure-pod-container/share-process-namespace/)
448
# options for Vector Pods.
449
shareProcessNamespace: false
450
# livenessProbe -- Override default liveness probe settings. If customConfig is used, requires customConfig.api.enabled
451
# to be set to true. `grpc` is recommended once the cluster is on Vector 0.55+; the `httpGet /health` probe is kept
452
# for backwards compatibility with older Vector versions.
453
livenessProbe: {}
454
# Option 1: gRPC probe (uses grpc.health.v1.Health/Check, requires Vector 0.55+)
455
# grpc:
456
# port: 8686
457
#
458
# Option 2: HTTP probe
459
# httpGet:
460
# path: /health
461
# port: 8686
462
463
# readinessProbe -- Override default readiness probe settings. If not set, this chart applies an
464
# `httpGet /health` readinessProbe on port `8686` for chart-managed default configs. If customConfig is used,
465
# requires customConfig.api.enabled to be set to true. `grpc` is recommended once the cluster is on Vector 0.55+;
466
# the `httpGet /health` probe is kept for backwards compatibility with older Vector versions.
467
readinessProbe: {}
468
# Option 1: gRPC probe (uses grpc.health.v1.Health/Check, requires Vector 0.55+)
469
# grpc:
470
# port: 8686
471
#
472
# Option 2: HTTP probe
473
# httpGet:
474
# path: /health
475
# port: 8686
476
477
# startupProbe -- Override default startup probe settings. If customConfig is used,
478
# requires customConfig.api.enabled to be set to true. `grpc` is recommended once the cluster is on Vector 0.55+;
479
# the `httpGet /health` probe is kept for backwards compatibility with older Vector versions.
480
startupProbe: {}
481
# Option 1: gRPC probe (uses grpc.health.v1.Health/Check, requires Vector 0.55+)
482
# grpc:
483
# port: 8686
484
#
485
# Option 2: HTTP probe
486
# httpGet:
487
# path: /health
488
# port: 8686
489
490
# Configure a PodMonitor for Vector, requires the PodMonitor CRD to be installed.
491
podMonitor:
492
# podMonitor.enabled -- If true, create a PodMonitor for Vector.
493
enabled: false
494
# podMonitor.jobLabel -- Override the label to retrieve the job name from.
495
jobLabel: app.kubernetes.io/name
496
# podMonitor.port -- Override the port to scrape.
497
port: prom-exporter
498
# podMonitor.path -- Override the path to scrape.
499
path: /metrics
500
# podMonitor.interval -- Override the interval at which metrics should be scraped.
501
interval:
502
# podMonitor.scrapeTimeout -- Override the timeout after which the scrape is ended.
503
scrapeTimeout:
504
# podMonitor.relabelings -- [RelabelConfigs](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config)
505
# to apply to samples before scraping.
506
relabelings: []
507
# podMonitor.metricRelabelings -- [MetricRelabelConfigs](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs)
508
# to apply to samples before ingestion.
509
metricRelabelings: []
510
# podMonitor.podTargetLabels -- [podTargetLabels](https://prometheus-operator.dev/docs/operator/api/#monitoring.coreos.com/v1.PodMonitorSpec)
511
# transfers labels on the Kubernetes Pod onto the target.
512
podTargetLabels: []
513
# podMonitor.additionalLabels -- Adds additional labels to the PodMonitor.
514
additionalLabels: {}
515
# podMonitor.honorLabels -- If true, honor_labels is set to true in the [scrape config](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#scrape_config).
516
honorLabels: false
517
# podMonitor.honorTimestamps -- If true, honor_timestamps is set to true in the [scrape config](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#scrape_config).
518
honorTimestamps: true
519
# Log level for Vector.
520
logLevel: "info"
521
# Optional built-in HAProxy load balancer.
522
haproxy:
523
# haproxy.enabled -- If true, create a HAProxy load balancer.
524
enabled: false
525
# Define the HAProxy image to use.
526
image:
527
# haproxy.image.repository -- Override default registry and name for HAProxy.
528
repository: cgr.dev/chainguard-private/haproxy
529
# haproxy.image.pullPolicy -- HAProxy image pullPolicy.
530
pullPolicy: IfNotPresent
531
# haproxy.image.pullSecrets -- The [imagePullSecrets](https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod)
532
# to reference for the HAProxy Pods.
533
pullSecrets: []
534
# haproxy.image.tag -- The tag to use for HAProxy's image.
535
tag: 3.4.7-r0@sha256:8dca5f45f48fd35f1d75c847fdee3ee897ca49bcfc79f8870b96e3b99fee0058
536
# haproxy.rollWorkload -- Add a checksum of the generated ConfigMap to the HAProxy Deployment.
537
rollWorkload: true
538
# haproxy.replicas -- Set the number of HAProxy Pods to create.
539
replicas: 1
540
serviceAccount:
541
# haproxy.serviceAccount.create -- If true, create a HAProxy ServiceAccount.
542
create: true
543
# haproxy.serviceAccount.annotations -- Annotations to add to the HAProxy ServiceAccount.
544
annotations: {}
545
# haproxy.serviceAccount.name -- The name of the HAProxy ServiceAccount to use. If not set and create is true, a
546
# name is generated using the fullname template.
547
name:
548
# haproxy.serviceAccount.automountToken -- Automount API credentials for the HAProxy ServiceAccount.
549
automountToken: true
550
# haproxy.strategy -- Customize the [strategy](https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/deployment-v1/)
551
# used to replace HAProxy Pods.
552
strategy: {}
553
# rollingUpdate:
554
# maxSurge: 25%
555
# maxUnavailable: 25%
556
# type: RollingUpdate
557
558
# haproxy.terminationGracePeriodSeconds -- Override HAProxy's terminationGracePeriodSeconds.
559
terminationGracePeriodSeconds: 60
560
# haproxy.podAnnotations -- Set annotations on HAProxy Pods.
561
podAnnotations: {}
562
# haproxy.podLabels -- Set labels on HAProxy Pods.
563
podLabels: {}
564
# haproxy.podPriorityClassName -- Set the priorityClassName on HAProxy Pods.
565
podPriorityClassName: ""
566
# haproxy.podSecurityContext -- Allows you to overwrite the default PodSecurityContext for HAProxy.
567
podSecurityContext: {}
568
# fsGroup: 2000
569
570
# haproxy.securityContext -- Specify securityContext on HAProxy containers.
571
securityContext: {}
572
# capabilities:
573
# drop:
574
# - ALL
575
# readOnlyRootFilesystem: true
576
# runAsNonRoot: true
577
# runAsUser: 1000
578
579
# haproxy.containerPorts -- Manually define HAProxy's containerPorts, overrides automated generation of containerPorts.
580
containerPorts: []
581
# HAProxy's Service configuration.
582
service:
583
# haproxy.service.type -- Set type of HAProxy's Service.
584
type: ClusterIP
585
# haproxy.service.annotations -- Set annotations on HAProxy's Service.
586
annotations: {}
587
# haproxy.service.topologyKeys -- Specify the [topologyKeys](https://kubernetes.io/docs/concepts/services-networking/service-topology/#using-service-topology)
588
# field on HAProxy's Service spec.
589
topologyKeys: []
590
# - "kubernetes.io/hostname"
591
# - "topology.kubernetes.io/zone"
592
# - "topology.kubernetes.io/region"
593
# - "*"
594
# haproxy.service.ports -- Manually set HAPRoxy's Service ports, overrides automated generation of Service ports.
595
ports: []
596
# haproxy.service.externalTrafficPolicy -- Specify the [externalTrafficPolicy](https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip).
597
externalTrafficPolicy: ""
598
# haproxy.service.loadBalancerIP -- Specify the [loadBalancerIP](https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer).
599
loadBalancerIP: ""
600
# haproxy.service.loadBalancerSourceRanges -- Specify the [loadBalancerSourceRanges](https://kubernetes.io/docs/reference/kubernetes-api/core/service-v1/#ServiceSpec) to restrict client IP ranges that can access the LoadBalancer Service.
601
loadBalancerSourceRanges: []
602
# haproxy.service.ipFamilyPolicy -- Configure [IPv4/IPv6 dual-stack](https://kubernetes.io/docs/concepts/services-networking/dual-stack/).
603
ipFamilyPolicy: ""
604
# haproxy.service.ipFamilies -- Configure [IPv4/IPv6 dual-stack](https://kubernetes.io/docs/concepts/services-networking/dual-stack/).
605
ipFamilies: []
606
# haproxy.existingConfigMap -- Use this existing ConfigMap for HAProxy's configuration instead of creating a new one.
607
# Additionally, haproxy.containerPorts and haproxy.service.ports should be specified based on your supplied
608
# configuration. If set, this parameter takes precedence over customConfig and the chart's default configs.
609
existingConfigMap: ""
610
# haproxy.customConfig -- Override HAProxy's default configs, if used **all** options need to be specified.
611
# This parameter supports using Helm templates to insert values dynamically. By default, this chart will parse
612
# Vector's configuration from customConfig to generate HAProxy's config, which can be overwritten with
613
# haproxy.customConfig.
614
customConfig: ""
615
# haproxy.extraVolumes -- Additional Volumes to use with HAProxy Pods.
616
extraVolumes: []
617
# haproxy.extraVolumeMounts -- Additional Volume to mount into HAProxy Containers.
618
extraVolumeMounts: []
619
# haproxy.initContainers -- Init Containers to be added to the HAProxy Pods.
620
# This also supports template content, which will eventually be converted to yaml.
621
initContainers: []
622
# haproxy.extraContainers -- Extra Containers to be added to the HAProxy Pods.
623
# This also supports template content, which will eventually be converted to yaml.
624
extraContainers: []
625
autoscaling:
626
# haproxy.autoscaling.enabled -- Create a HorizontalPodAutoscaler for HAProxy.
627
enabled: false
628
# haproxy.autoscaling.external -- HAProxy is controlled by an external HorizontalPodAutoscaler.
629
external: false
630
# haproxy.autoscaling.minReplicas -- Minimum replicas for HAProxy's HPA.
631
minReplicas: 1
632
# haproxy.autoscaling.maxReplicas -- Maximum replicas for HAProxy's HPA.
633
maxReplicas: 10
634
# haproxy.autoscaling.targetCPUUtilizationPercentage -- Target CPU utilization for HAProxy's HPA.
635
targetCPUUtilizationPercentage: 80
636
# haproxy.autoscaling.targetMemoryUtilizationPercentage -- (int) Target memory utilization for HAProxy's HPA.
637
targetMemoryUtilizationPercentage:
638
# haproxy.autoscaling.customMetric -- Target a custom metric for autoscaling.
639
customMetric: []
640
# - type: Pods
641
# pods:
642
# metric:
643
# name: utilization
644
# target:
645
# type: AverageValue
646
# averageValue: 95
647
# haproxy.resources -- Set HAProxy resource requests and limits.
648
resources: {}
649
# limits:
650
# cpu: 100m
651
# memory: 128Mi
652
# requests:
653
# cpu: 100m
654
# memory: 128Mi
655
656
# haproxy.livenessProbe -- Override default HAProxy liveness probe settings.
657
livenessProbe:
658
tcpSocket:
659
port: 1024
660
# haproxy.readinessProbe -- Override default HAProxy readiness probe settings.
661
readinessProbe:
662
tcpSocket:
663
port: 1024
664
# haproxy.nodeSelector -- Configure a [nodeSelector](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector)
665
# for HAProxy Pods
666
nodeSelector: {}
667
# haproxy.tolerations -- Configure HAProxy Pods to be scheduled on [tainted](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/)
668
# nodes.
669
tolerations: []
670
# haproxy.affinity -- Configure [affinity](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity)
671
# rules for HAProxy Pods.
672
affinity: {}
673
# extraObjects -- Create extra manifests via values. Would be passed through `tpl` for templating.
674
extraObjects: []
675
# - apiVersion: v1
676
# kind: ConfigMap
677
# metadata:
678
# name: vector-dashboards
679
# labels:
680
# grafana_dashboard: "1"
681
# data:
682
# vector.json: |
683
# {{ .Files.Get "dashboards/vector.json" | fromJson | toJson }}
684

The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.