community-vertical-pod-autoscaler
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
1
# Default values for vertical-pod-autoscaler.
2
# This is a YAML-formatted file.
3
# Declare variables to be passed into your templates.
4
5
# -- Image pull secrets.
6
imagePullSecrets: []
7
# -- (string) Override the name of the chart.
8
nameOverride:
9
# -- (string) Override the full name of the chart.
10
fullnameOverride:
11
# -- Labels to add to all chart resources.
12
commonLabels: {}
13
rbac:
14
# -- If `true`, create `ClusterRole` & `ClusterRoleBinding` resources to enable access to the Kubernetes API.
15
create: true
16
# -- If `true`, create aggregated `ClusterRoles` that extend the existing `ClusterRoles` `view`, `edit` and `admin` to permit view/edit operations on `VerticalPodAutoscaler` resources; see also the [Kubernetes docs about this feature](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#aggregated-clusterroles)
17
createAggregateRoles: false
18
serviceMonitor:
19
# -- If `true`, create a `ServiceMonitor` to support collecting metrics via the _Prometheus Operator_.
20
enabled: false
21
# -- Additional labels for the service monitor.
22
additionalLabels: {}
23
# -- Additional endpoint configuration for the service monitor endpoint.
24
endpointConfig: {}
25
# -- Log level for all components.
26
logLevel: 4
27
# -- If `true`, only deploy the _Recommender_ component.
28
recommenderOnly: false
29
admissionController:
30
image:
31
# -- Image repository for the _Admission Controller_ default container.
32
repository: cgr.dev/scratch-images/test-tmp/vertical-pod-autoscaler-admission-controller-fips
33
# -- (string) Image tag for the _Admission Controller_ default container; this will default to `.Chart.AppVersion` if not set.
34
tag: 1.7.1-r1@sha256:d78c3f9d8934153852d5d6fd4f7619eec6eb906570d8608d276b35916d546d2a
35
# -- Image pull policy for the _Admission Controller_ default container.
36
pullPolicy: IfNotPresent
37
serviceAccount:
38
# -- If `true`, create a new `ServiceAccount` for the _Admission Controller_.
39
create: true
40
# -- Labels to add to the _Admission Controller_ service account.
41
labels: {}
42
# -- Annotations to add to the _Admission Controller_ service account.
43
annotations: {}
44
# -- (string) If this is set and `admissionController.serviceAccount.create` is `true` this will be used for the created _Admission Controller_ service account name, if this is set and `admissionController.serviceAccount.create` is `false` then this will define an existing service account to use.
45
name:
46
service:
47
# -- Annotations to add to the _Admission Controller_ service.
48
annotations: {}
49
# -- Number of _Admission Controller_ replicas to create.
50
replicas: 1
51
# -- Update strategy for the _Admission Controller_.
52
updateStrategy: {}
53
podDisruptionBudget:
54
# -- If `true`, create a `PodDisruptionBudget` for the _Admission Controller_.
55
enabled: false
56
# -- (string) Minimum number of available pods for the _Admission Controller_; either a number or a percentage.
57
minAvailable:
58
# -- (string) Minimum number of unavailable pods for the _Admission Controller_; either a number or a percentage.
59
maxUnavailable:
60
# -- (string) Unhealthy pod eviction policy for the _Admission Controller_ PDB.
61
unhealthyPodEvictionPolicy:
62
# -- Labels to add to the _Admission Controller_ pod.
63
podLabels: {}
64
# -- Annotations to add to the _Admission Controller_ pod.
65
podAnnotations: {}
66
# -- Security context for the _Admission Controller_ pod.
67
# @default -- See _values.yaml_
68
podSecurityContext:
69
runAsNonRoot: true
70
fsGroup: 65534
71
seccompProfile:
72
type: RuntimeDefault
73
# -- (string) Priority class name for the _Admission Controller_.
74
priorityClassName:
75
# -- (int) Termination grace period for the _Admission Controller_; in seconds.
76
terminationGracePeriodSeconds:
77
# -- Security context for the _Admission Controller_ default container.
78
# @default -- See _values.yaml_
79
securityContext:
80
privileged: false
81
allowPrivilegeEscalation: false
82
readOnlyRootFilesystem: true
83
runAsNonRoot: true
84
runAsUser: 65532
85
runAsGroup: 65532
86
capabilities:
87
drop:
88
- ALL
89
# -- Additional environment variables for the _Admission Controller_ default container.
90
extraEnv: []
91
# -- Additional args for the _Admission Controller_ default container.
92
extraArgs: []
93
# -- Liveness probe configuration for the _Admission Controller_ default container.
94
# @default -- See _values.yaml_
95
livenessProbe:
96
httpGet:
97
path: /health-check
98
port: http-metrics
99
initialDelaySeconds: 0
100
periodSeconds: 10
101
timeoutSeconds: 1
102
successThreshold: 1
103
failureThreshold: 10
104
# -- Readiness probe configuration for the _Admission Controller_ default container.
105
# @default -- See _values.yaml_
106
readinessProbe:
107
httpGet:
108
path: /health-check
109
port: http-metrics
110
initialDelaySeconds: 0
111
periodSeconds: 10
112
timeoutSeconds: 1
113
successThreshold: 1
114
failureThreshold: 10
115
# -- Resources for the _Admission Controller_ default container.
116
resources: {}
117
# -- Node selector labels for scheduling the _Admission Controller_.
118
nodeSelector: {}
119
# -- Affinity settings for scheduling the _Admission Controller_ component. If an explicit label selector is not provided for pod affinity or pod anti-affinity one will be created from the pod selector labels.
120
affinity: {}
121
# -- Topology spread constraints for scheduling for the _Admission Controller_ component. If an explicit label selector is not provided one will be created from the pod selector labels.
122
topologySpreadConstraints: []
123
# -- Node taints the _Admission Controller_ will be tolerate for scheduling.
124
tolerations: []
125
webhook:
126
# -- Name of the _Admission Controller_ webhook to create.
127
name: vpa-webhook-config
128
certManager:
129
# -- If `true`, create a `Certificate` resource for the _Admission Controller_ webhook.
130
enabled: false
131
# -- `Issuer` kind for the _Admission Controller_ webhook certificate.
132
issuerKind: Issuer
133
# -- `Issuer` name for the _Admission Controller_ webhook certificate; if not provided an `Issuer` will be created.
134
issuerName:
135
recommender:
136
image:
137
# -- Image repository for the _Recommender_ default container.
138
repository: cgr.dev/scratch-images/test-tmp/vertical-pod-autoscaler-recommender-fips
139
# -- (string) Image tag for the _Recommender_ default container; this will default to `.Chart.AppVersion` if not set.
140
tag: 1.7.1-r1@sha256:4b33133d17de8a25daf4119539353dd9a38fe64449374811146323ed8a91dd2f
141
# -- Image pull policy for the _Recommender_ default container.
142
pullPolicy: IfNotPresent
143
serviceAccount:
144
# -- If `true`, create a new `ServiceAccount` for the _Recommender_.
145
create: true
146
# -- Labels to add to the _Recommender_ service account.
147
labels: {}
148
# -- Annotations to add to the _Recommender_ service account.
149
annotations: {}
150
# -- (string) If this is set and `admissionController.serviceAccount.create` is `true` this will be used for the created _Recommender_ service account name, if this is set and `admissionController.serviceAccount.create` is `false` then this will define an existing service account to use.
151
name:
152
service:
153
# -- Annotations to add to the _Recommender_ service.
154
annotations: {}
155
# -- Number of _Recommender_ replicas to create.
156
replicas: 1
157
leaderElect:
158
# -- Name of resource object that is used for locking during leader election for the _Recommender_.
159
name: vpa-recommender
160
# -- Update strategy for the _Recommender_.
161
updateStrategy: {}
162
podDisruptionBudget:
163
# -- If `true`, create a `PodDisruptionBudget` for the _Recommender_.
164
enabled: false
165
# -- (string) Minimum number of available pods for the _Recommender_; either a number or a percentage.
166
minAvailable:
167
# -- (string) Minimum number of unavailable pods for the _Recommender_; either a number or a percentage.
168
maxUnavailable:
169
# -- (string) Unhealthy pod eviction policy for the _Recommender_ PDB.
170
unhealthyPodEvictionPolicy:
171
# -- Labels to add to the _Recommender_ pod.
172
podLabels: {}
173
# -- Annotations to add to the _Recommender_ pod.
174
podAnnotations: {}
175
# -- Security context for the _Recommender_ pod.
176
# @default -- See _values.yaml_
177
podSecurityContext:
178
runAsNonRoot: true
179
fsGroup: 65534
180
seccompProfile:
181
type: RuntimeDefault
182
# -- (string) Priority class name for the _Recommender_.
183
priorityClassName:
184
# -- (int) Termination grace period for the _Recommender_; in seconds.
185
terminationGracePeriodSeconds:
186
# -- Security context for the _Recommender_ default container.
187
# @default -- See _values.yaml_
188
securityContext:
189
privileged: false
190
allowPrivilegeEscalation: false
191
readOnlyRootFilesystem: true
192
runAsNonRoot: true
193
runAsUser: 65532
194
runAsGroup: 65532
195
capabilities:
196
drop:
197
- ALL
198
# -- Additional environment variables for the _Recommender_ default container.
199
extraEnv: []
200
# -- Additional args for the _Recommender_ default container.
201
extraArgs: []
202
# -- Liveness probe configuration for the _Recommender_ default container.
203
# @default -- See _values.yaml_
204
livenessProbe:
205
httpGet:
206
path: /health-check
207
port: http-metrics
208
initialDelaySeconds: 0
209
periodSeconds: 10
210
timeoutSeconds: 1
211
successThreshold: 1
212
failureThreshold: 10
213
# -- Readiness probe configuration for the _Recommender_ default container.
214
# @default -- See _values.yaml_
215
readinessProbe:
216
httpGet:
217
path: /health-check
218
port: http-metrics
219
initialDelaySeconds: 0
220
periodSeconds: 10
221
timeoutSeconds: 1
222
successThreshold: 1
223
failureThreshold: 10
224
# -- Resources for the _Recommender_ default container.
225
resources: {}
226
# -- Node selector labels for scheduling the _Recommender_.
227
nodeSelector: {}
228
# -- Affinity settings for scheduling the _Recommender_ component. If an explicit label selector is not provided for pod affinity or pod anti-affinity one will be created from the pod selector labels.
229
affinity: {}
230
# -- Topology spread constraints for scheduling for the _Recommender_ component. If an explicit label selector is not provided one will be created from the pod selector labels.
231
topologySpreadConstraints: []
232
# -- Node taints the _Recommender_ will be tolerate for scheduling.
233
tolerations: []
234
updater:
235
image:
236
# -- Image repository for the _Updater_ default container.
237
repository: cgr.dev/scratch-images/test-tmp/vertical-pod-autoscaler-updater-fips
238
# -- (string) Image tag for the _Updater_ default container; this will default to `.Chart.AppVersion` if not set.
239
tag: 1.7.1-r1@sha256:70fb8e27f5c3fb2e4d5e06b27c9ddb670a6a9a3a524b44099a495e0f5a7badb3
240
# -- Image pull policy for the _Updater_ default container.
241
pullPolicy: IfNotPresent
242
serviceAccount:
243
# -- If `true`, create a new `ServiceAccount` for the _Updater_.
244
create: true
245
# -- Labels to add to the _Updater_ service account.
246
labels: {}
247
# -- Annotations to add to the _Updater_ service account.
248
annotations: {}
249
# -- (string) If this is set and `admissionController.serviceAccount.create` is `true` this will be used for the created _Updater_ service account name, if this is set and `admissionController.serviceAccount.create` is `false` then this will define an existing service account to use.
250
name:
251
service:
252
# -- Annotations to add to the _Updater_ service.
253
annotations: {}
254
# -- Number of _Updater_ replicas to create.
255
replicas: 1
256
leaderElect:
257
# -- Name of resource object that is used for locking during leader election for the _Updater_.
258
name: vpa-updater
259
# -- Update strategy for the _Updater_.
260
updateStrategy: {}
261
podDisruptionBudget:
262
# -- If `true`, create a `PodDisruptionBudget` for the _Updater_.
263
enabled: false
264
# -- (string) Minimum number of available pods for the _Updater_; either a number or a percentage.
265
minAvailable:
266
# -- (string) Minimum number of unavailable pods for the _Updater_; either a number or a percentage.
267
maxUnavailable:
268
# -- (string) Unhealthy pod eviction policy for the _Updater_ PDB.
269
unhealthyPodEvictionPolicy:
270
# -- Labels to add to the _Updater_ pod.
271
podLabels: {}
272
# -- Annotations to add to the _Updater_ pod.
273
podAnnotations: {}
274
# -- Security context for the _Updater_ pod.
275
# @default -- See _values.yaml_
276
podSecurityContext:
277
runAsNonRoot: true
278
fsGroup: 65534
279
seccompProfile:
280
type: RuntimeDefault
281
# -- (string) Priority class name for the _Updater_.
282
priorityClassName:
283
# -- (int) Termination grace period for the _Updater_; in seconds.
284
terminationGracePeriodSeconds:
285
# -- Security context for the _Updater_ default container.
286
# @default -- See _values.yaml_
287
securityContext:
288
privileged: false
289
allowPrivilegeEscalation: false
290
readOnlyRootFilesystem: true
291
runAsNonRoot: true
292
runAsUser: 65532
293
runAsGroup: 65532
294
capabilities:
295
drop:
296
- ALL
297
# -- Additional environment variables for the _Updater_ default container.
298
extraEnv: []
299
# -- Additional args for the _Updater_ default container.
300
extraArgs: []
301
# -- Liveness probe configuration for the _Updater_ default container.
302
# @default -- See _values.yaml_
303
livenessProbe:
304
httpGet:
305
path: /health-check
306
port: http-metrics
307
initialDelaySeconds: 0
308
periodSeconds: 10
309
timeoutSeconds: 1
310
successThreshold: 1
311
failureThreshold: 10
312
# -- Readiness probe configuration for the _Updater_ default container.
313
# @default -- See _values.yaml_
314
readinessProbe:
315
httpGet:
316
path: /health-check
317
port: http-metrics
318
initialDelaySeconds: 0
319
periodSeconds: 10
320
timeoutSeconds: 1
321
successThreshold: 1
322
failureThreshold: 10
323
# -- Resources for the _Updater_ default container.
324
resources: {}
325
# -- Node selector labels for scheduling the _Updater_.
326
nodeSelector: {}
327
# -- Affinity settings for scheduling the _Updater_ component. If an explicit label selector is not provided for pod affinity or pod anti-affinity one will be created from the pod selector labels.
328
affinity: {}
329
# -- Topology spread constraints for scheduling for the _Updater_ component. If an explicit label selector is not provided one will be created from the pod selector labels.
330
topologySpreadConstraints: []
331
# -- Node taints the _Updater_ will be tolerate for scheduling.
332
tolerations: []
333
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.