dragonfly-operator
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
1
# Default values for dragonfly-operator.
2
# This is a YAML-formatted file.
3
# Declare variables to be passed into your templates.
4
5
replicaCount: 1
6
## Custom resource configuration
7
crds:
8
# -- Install and upgrade CRDs
9
install: true
10
# -- Keep CRDs on chart uninstall
11
keep: true
12
nameOverride: ""
13
fullnameOverride: ""
14
namespaceOverride: ""
15
# -- Default dragonfly image to use
16
dragonflyImage: cgr.dev/chainguard-private/dragonfly:latest@sha256:471967f91c29d391e3f31c1373a1d030c38bc82ba1c8ccaf3346aa9e05ffd528
17
# -- Additional labels to add to all resources
18
additionalLabels: {}
19
# app: dragonfly-operator
20
21
# -- Create aggregated cluster roles for view, edit, and admin
22
createAggregateRoles: true
23
serviceAccount:
24
# Specifies whether a service account should be created
25
create: true
26
# Automatically mount a ServiceAccount's API credentials?
27
automount: true
28
# Annotations to add to the service account
29
annotations: {}
30
# The name of the service account to use.
31
# If not set and create is true, a name is generated using the fullname template
32
name: dragonfly-operator-controller-manager
33
podAnnotations:
34
kubectl.kubernetes.io/default-container: manager
35
podLabels: {}
36
# Additional annotations to add to deployments
37
deploymentAnnotations: {}
38
# Additional labels to add to deployments
39
deploymentLabels: {}
40
podSecurityContext:
41
runAsNonRoot: true
42
service:
43
type: ClusterIP
44
port: 8443
45
metricsPort: 8080
46
terminationGracePeriodSeconds: 10
47
rbacProxy:
48
enabled: true
49
image:
50
repository: cgr.dev/chainguard-private/kube-rbac-proxy
51
pullPolicy: IfNotPresent
52
# Overrides the image tag whose default is the chart appVersion.
53
tag: latest@sha256:0b1afdc1c7cf753a595ffed4dfebdd0bc71e935ecf6c18d8b2cf00c17389c24e
54
extraArgs: {}
55
resources:
56
limits:
57
cpu: 500m
58
memory: 128Mi
59
requests:
60
cpu: 10m
61
memory: 64Mi
62
securityContext:
63
allowPrivilegeEscalation: false
64
capabilities:
65
drop:
66
- ALL
67
manager:
68
image:
69
repository: cgr.dev/chainguard-private/dragonfly-operator
70
pullPolicy: IfNotPresent
71
# Overrides the image tag whose default is the chart appVersion.
72
tag: latest@sha256:0f7fea0abf5a4f6199f54e9c452c27a381bf58c52c10fea4ded2258b4b6643f9
73
extraArgs: {}
74
resources: {}
75
# limits:
76
# cpu: 500m
77
# memory: 128Mi
78
# requests:
79
# cpu: 10m
80
# memory: 64Mi
81
82
livenessProbe:
83
httpGet:
84
path: /healthz
85
port: 8081
86
initialDelaySeconds: 15
87
periodSeconds: 20
88
readinessProbe:
89
httpGet:
90
path: /readyz
91
port: 8081
92
initialDelaySeconds: 5
93
periodSeconds: 10
94
securityContext:
95
allowPrivilegeEscalation: false
96
capabilities:
97
drop:
98
- ALL
99
# -- Priority class name for the operator pod
100
priorityClassName: ""
101
nodeSelector: {}
102
tolerations: []
103
# -- Assign custom [TopologySpreadConstraints] rules to the application controller
104
# @default -- `[]` (defaults to global.topologySpreadConstraints)
105
## Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
106
## If labelSelector is left out, it will default to the labelSelector configuration of the deployment
107
topologySpreadConstraints: []
108
# - maxSkew: 1
109
# topologyKey: topology.kubernetes.io/zone
110
# whenUnsatisfiable: DoNotSchedule
111
affinity: {}
112
# nodeAffinity:
113
# requiredDuringSchedulingIgnoredDuringExecution:
114
# nodeSelectorTerms:
115
# - matchExpressions:
116
# - key: kubernetes.io/arch
117
# operator: In
118
# values:
119
# - amd64
120
# - arm64
121
# - ppc64le
122
# - s390x
123
# - key: kubernetes.io/os
124
# operator: In
125
# values:
126
# - linux
127
128
serviceMonitor:
129
# When set true then use a ServiceMonitor to configure scraping
130
enabled: false
131
# Set how frequently Prometheus should scrape
132
interval: 30s
133
# Set path to cloudwatch-exporter telemtery-path
134
path: /metrics
135
# Set labels for the ServiceMonitor, use this to define your scrape label for Prometheus Operator
136
labels: {}
137
# Set timeout for scrape
138
timeout: 10s
139
# Set relabelings for the ServiceMonitor, use to apply to samples before scraping
140
relabelings: []
141
# Set metricRelabelings for the ServiceMonitor, use to apply to samples for ingestion
142
metricRelabelings: []
143
# Example - note the Kubernetes convention of camelCase instead of Prometheus' snake_case
144
# metricRelabelings:
145
# - sourceLabels: [dbinstance_identifier]
146
# action: replace
147
# replacement: mydbname
148
# targetLabel: dbname
149
150
# When rbacProxy is enabled, a ClusterRoleBinding is needed to grant the
151
# Prometheus service account access to the /metrics endpoint via kube-rbac-proxy.
152
rbacProxyMetricsReader:
153
# -- Create a ClusterRoleBinding for the Prometheus service account
154
create: false
155
# -- Name of the Prometheus ServiceAccount
156
serviceAccountName: ""
157
# -- Namespace of the Prometheus ServiceAccount
158
serviceAccountNamespace: ""
159
grafanaDashboard:
160
enabled: false
161
folder: database
162
# -- Grafana dashboard configmap annotations.
163
annotations:
164
name: grafana_folder
165
# -- Grafana dashboard configmap labels
166
labels:
167
name: grafana_dashboard
168
grafanaOperator:
169
enabled: false
170
allowCrossNamespaceImport: true
171
# -- Selected labels for Grafana instance
172
matchLabels:
173
dashboards: grafana
174
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.