opensearch-operator
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
1
nameOverride: ""
2
fullnameOverride: ""
3
podAnnotations: {}
4
podLabels: {}
5
nodeSelector: {}
6
tolerations: []
7
securityContext:
8
runAsNonRoot: true
9
priorityClassName: ""
10
manager:
11
securityContext:
12
allowPrivilegeEscalation: false
13
extraEnv: []
14
resources:
15
limits:
16
cpu: 200m
17
memory: 500Mi
18
requests:
19
cpu: 100m
20
memory: 350Mi
21
livenessProbe:
22
failureThreshold: 3
23
httpGet:
24
path: /healthz
25
port: 8081
26
periodSeconds: 15
27
successThreshold: 1
28
timeoutSeconds: 3
29
initialDelaySeconds: 10
30
readinessProbe:
31
failureThreshold: 3
32
httpGet:
33
path: /readyz
34
port: 8081
35
periodSeconds: 15
36
successThreshold: 1
37
timeoutSeconds: 3
38
initialDelaySeconds: 10
39
# Set this to false to disable the experimental parallel recovery in case you are experiencing problems
40
parallelRecoveryEnabled: true
41
# Set this to true to enable the standard go pprof endpoints on port 6060 (https://pkg.go.dev/net/http/pprof)
42
# Should only be used for debugging purposes
43
pprofEndpointsEnabled: false
44
image:
45
repository: cgr.dev/chainguard-private/opensearch-k8s-operator
46
## tag default uses appVersion from Chart.yaml, to override specify tag tag: "v1.1"
47
tag: latest@sha256:8e6387dbb6dc6a33371283abb9d7baa8f07b416f29aa7081789fceea89910bc0
48
pullPolicy: "Always"
49
## Optional array of imagePullSecrets containing private registry credentials
50
imagePullSecrets: []
51
# - name: secretName
52
53
dnsBase: cluster.local
54
# Log level of the operator. Possible values: debug, info, warn, error
55
loglevel: info
56
# If a watchNamespace is specified, the manager's cache will be restricted to
57
# watch objects in the desired namespace. Defaults is to watch all namespaces.
58
watchNamespace:
59
# Install the Custom Resource Definitions with Helm
60
installCRDs: true
61
serviceAccount:
62
# Specifies whether a service account should be created
63
create: true
64
# Override the service account name. Defaults to opensearch-operator-controller-manager
65
name: ""
66
kubeRbacProxy:
67
enable: true
68
securityContext:
69
allowPrivilegeEscalation: false
70
readOnlyRootFilesystem: true
71
capabilities:
72
drop:
73
- ALL
74
resources:
75
limits:
76
cpu: 50m
77
memory: 50Mi
78
requests:
79
cpu: 25m
80
memory: 25Mi
81
livenessProbe:
82
failureThreshold: 3
83
httpGet:
84
path: /healthz
85
port: 10443
86
scheme: HTTPS
87
periodSeconds: 15
88
successThreshold: 1
89
timeoutSeconds: 3
90
initialDelaySeconds: 10
91
readinessProbe:
92
failureThreshold: 3
93
httpGet:
94
path: /healthz
95
port: 10443
96
scheme: HTTPS
97
periodSeconds: 15
98
successThreshold: 1
99
timeoutSeconds: 3
100
initialDelaySeconds: 10
101
image:
102
repository: cgr.dev/chainguard-private/kube-rbac-proxy
103
tag: latest@sha256:509d9ce92f0a3484531a446021fed7145738ccec7edd312d00d620644b3e6023
104
## If this is set to true, RoleBindings will be used instead of ClusterRoleBindings, inorder to restrict ClusterRoles
105
## to the namespace where the operator and OpenSearch cluster are in. In that case, specify the namespace where they
106
## are in in manager.watchNamespace field.
107
## If false, ClusterRoleBindings will be used
108
useRoleBindings: false
109
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.