vector

Helm chart

Last changed

Request a free trial

Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.

Tag:

# Default values for Vector

# See Vector helm documentation to learn more:

# https://vector.dev/docs/setup/installation/package-managers/helm/

# nameOverride -- Override the name of resources.

nameOverride: ""

# fullnameOverride -- Override the full name of resources.

fullnameOverride: ""

# role -- [Role](https://vector.dev/docs/setup/deployment/roles/) for this Vector instance, valid options are:

# "Agent", "Aggregator", and "Stateless-Aggregator".

# Each role is created with the following workloads:

# Agent = DaemonSet

# Aggregator = StatefulSet

# Stateless-Aggregator = Deployment

role: "Aggregator"

# Workload API version overrides. Use these to switch to custom controllers

# or to test new Kubernetes API versions.

daemonSet:

# daemonSet.apiVersion -- Override the DaemonSet apiVersion. Valid for the "Agent" role.

apiVersion: ""

statefulSet:

# statefulSet.apiVersion -- Override the StatefulSet apiVersion. Valid for the "Aggregator" role.

apiVersion: ""

# rollWorkload -- Add a checksum of the generated ConfigMap to workload annotations.

rollWorkload: true

# rollWorkloadSecrets -- Add a checksum of the generated Secret to workload annotations.

rollWorkloadSecrets: false

# rollWorkloadExtraObjects -- Add a checksum of the generated ExtraObjects to workload annotations.

rollWorkloadExtraObjects: false

# commonLabels -- Add additional labels to all created resources.

commonLabels: {}

# Define the Vector image to use.

# Vector images are available from:

# - Docker Hub: docker.io/timberio/vector

# - GitHub Container Registry: ghcr.io/vectordotdev/vector

image:

# image.repository -- Override default registry and name for Vector's image.

repository: cgr.dev/chainguard-private/vector

# image.pullPolicy -- The [pullPolicy](https://kubernetes.io/docs/concepts/containers/images/#image-pull-policy) for

# Vector's image.

pullPolicy: IfNotPresent

# image.pullSecrets -- The [imagePullSecrets](https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod)

# to reference for the Vector Pods.

pullSecrets: []

# image.tag -- The tag to use for Vector's image.

# @default -- Derived from the Chart's appVersion.

tag: latest

# image.sha -- The SHA to use for Vector's image.

sha: sha256:4ec812fe6b6b03bd26b5f9751cd9805db5b11562a2c16d75bc7e3bf03ff775ee

# image.base -- The base distribution to use for vector. If set, then the base in appVersion will be replaced with this base alongside the version.

# For example: with a `base` of `debian` `0.38.0-distroless-libc` becomes `0.38.0-debian`

base: ""

# replicas -- Specify the number of Pods to create. Valid for the "Aggregator" and "Stateless-Aggregator" roles.

replicas: 1

# Adding additional entries with hostAliases

hostAliases: []

# - ip: "127.0.0.1"

# hostnames:

# - "foo.local"

# - "bar.local"

# podManagementPolicy -- Specify the [podManagementPolicy](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#pod-management-policies)

# for the StatefulSet. Valid for the "Aggregator" role.

podManagementPolicy: OrderedReady

# Create a Secret resource for Vector to use.

secrets:

# secrets.generic -- Each Key/Value will be added to the Secret's data key, each value should be raw and NOT base64

# encoded. Any secrets can be provided here. It's commonly used for credentials and other access related values.

# **NOTE: Don't commit unencrypted secrets to git!**

generic: {}

# my_variable: "my-secret-value"

# datadog_api_key: "api-key"

# awsAccessKeyId: "access-key"

# awsSecretAccessKey: "secret-access-key"

autoscaling:

# autoscaling.enabled -- Create a [HorizontalPodAutoscaler](https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/)

# for Vector. Valid for the "Aggregator" and "Stateless-Aggregator" roles.

enabled: false

# autoscaling.external -- Set to `true` if using an external autoscaler like [KEDA](https://keda.sh/).

# Valid for the "Aggregator and "Stateless-Aggregator" roles.

external: false

# autoscaling.annotations -- Annotations to add to Vector's HPA.

annotations: {}

# autoscaling.minReplicas -- Minimum replicas for Vector's HPA.

minReplicas: 1

# autoscaling.maxReplicas -- Maximum replicas for Vector's HPA.

maxReplicas: 10

# autoscaling.targetCPUUtilizationPercentage -- Target CPU utilization for Vector's HPA.

targetCPUUtilizationPercentage: 80

# autoscaling.targetMemoryUtilizationPercentage -- (int) Target memory utilization for Vector's HPA.

targetMemoryUtilizationPercentage:

# autoscaling.customMetric -- Target a custom metric for autoscaling.

customMetric: {}

# - type: Pods

# pods:

# metric:

# name: utilization

# target:

100

# type: AverageValue

101

# averageValue: 95

102

# autoscaling.behavior -- Configure separate scale-up and scale-down behaviors.

103

behavior: {}

104

# scaleDown:

105

# stabilizationWindowSeconds: 300

106

podDisruptionBudget:

107

# podDisruptionBudget.enabled -- Enable a [PodDisruptionBudget](https://kubernetes.io/docs/tasks/run-application/configure-pdb/)

108

# for Vector.

109

enabled: false

110

# podDisruptionBudget.minAvailable -- The number of Pods that must still be available after an eviction.

111

minAvailable: 1

112

# podDisruptionBudget.maxUnavailable -- (int) The number of Pods that can be unavailable after an eviction.

113

maxUnavailable:

114

rbac:

115

# rbac.create -- If true, create and use RBAC resources. Only valid for the "Agent" role.

116

create: true

117

# rbac.extraRules -- List of additional Kubernetes RBAC rules to append to the ClusterRole.

118

# Rules defined here are appended after the chart's standard rules.

119

# Each item must follow the Kubernetes ClusterRole rule syntax.

120

121

# Example:

122

# extraRules:

123

# - apiGroups: [""]

124

# resources: ["nodes/metrics", "nodes/stats"]

125

# verbs: ["get"]

126

extraRules: []

127

psp:

128

# psp.create -- If true, create a [PodSecurityPolicy](https://kubernetes.io/docs/concepts/security/pod-security-policy/)

129

# resource. PodSecurityPolicy is deprecated as of Kubernetes v1.21, and will be removed in v1.25. Intended for use

130

# with the "Agent" role.

131

create: false

132

serviceAccount:

133

# serviceAccount.create -- If true, create a ServiceAccount for Vector.

134

create: true

135

# serviceAccount.annotations -- Annotations to add to Vector's ServiceAccount.

136

annotations: {}

137

# serviceAccount.name -- The name of the ServiceAccount to use. If not set and serviceAccount.create is true, a name

138

# is generated using the fullname template.

139

name:

140

# serviceAccount.automountToken -- Automount API credentials for Vector's ServiceAccount.

141

automountToken: true

142

# podAnnotations -- Set annotations on Vector Pods.

143

podAnnotations: {}

144

# podLabels -- Set labels on Vector Pods.

145

podLabels:

146

vector.dev/exclude: "true"

147

# podPriorityClassName -- Set the [priorityClassName](https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass)

148

# on Vector Pods.

149

podPriorityClassName: ""

150

# podHostNetwork -- Configure hostNetwork on Vector Pods.

151

podHostNetwork: false

152

# podSecurityContext -- Allows you to overwrite the default [PodSecurityContext](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/)

153

# for Vector Pods.

154

podSecurityContext: {}

155

# workloadResourceAnnotations -- Set annotations on the Vector DaemonSet, Deployment or StatefulSet.

156

workloadResourceAnnotations: {}

157

# securityContext -- Specify securityContext on Vector containers.

158

securityContext: {}

159

# command -- Override Vector's default command.

160

command: []

161

# args -- Override Vector's default arguments.

162

args:

163

- --config-dir

164

- "/etc/vector/"

165

# env -- Set environment variables for Vector containers.

166

env: []

167

# - name: MY_VARIABLE

168

# valueFrom:

169

# secretKeyRef:

170

# name: vector

171

# key: my_variable

172

# - name: AWS_ACCESS_KEY_ID

173

# valueFrom:

174

# secretKeyRef:

175

# name: vector

176

# key: awsAccessKeyId

177

178

# envFrom -- Define environment variables from Secrets or ConfigMaps.

179

envFrom: []

180

# - secretRef:

181

# name: vector

182

183

# containerPorts -- Manually define Vector's containerPorts, overriding automated generation of containerPorts.

184

containerPorts: []

185

# resources -- Set Vector resource requests and limits.

186

resources: {}

187

# requests:

188

# cpu: 200m

189

# memory: 256Mi

190

# limits:

191

# cpu: 200m

192

# memory: 256Mi

193

194

# lifecycle -- Set lifecycle hooks for Vector containers.

195

lifecycle: {}

196

# preStop:

197

# exec:

198

# command:

199

# - /bin/sleep

200

# - "10"

201

202

# minReadySeconds -- Specify the minimum number of seconds a newly spun up pod should wait to

203

# pass healthchecks before it is considered available.

204

minReadySeconds: 0

205

# revisionHistoryLimit -- The number of historical changes to retain to allow rollback. Valid for all roles (Agent, Aggregator, Stateless-Aggregator).

206

# defaults to 10 if not set

207

# revisionHistoryLimit: 10

208

209

# updateStrategy -- Customize the updateStrategy used to replace Vector Pods, this is also used for the

210

# DeploymentStrategy for the "Stateless-Aggregators". Valid options depend on the chosen role.

211

212

# Agent (DaemonSetUpdateStrategy): https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/daemon-set-v1/#DaemonSetSpec)

213

# Aggregator (StatefulSetUpdateStrategy): https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/stateful-set-v1/#StatefulSetSpec

214

# Stateless-Aggregator (DeploymentStrategy): https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/deployment-v1/

215

updateStrategy: {}

216

# type: RollingUpdate

217

# rollingUpdate:

218

# maxUnavailable: 1

219

220

# terminationGracePeriodSeconds -- Override Vector's terminationGracePeriodSeconds.

221

terminationGracePeriodSeconds: 60

222

# nodeSelector -- Configure a [nodeSelector](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector)

223

# for Vector Pods.

224

nodeSelector: {}

225

# tolerations -- Configure Vector Pods to be scheduled on [tainted](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/)

226

# nodes.

227

tolerations: []

228

# affinity -- Configure [affinity](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity)

229

# rules for Vector Pods.

230

affinity: {}

231

# topologySpreadConstraints -- Configure [topology spread constraints](https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/)

232

# for Vector Pods. Valid for the "Aggregator" and "Stateless-Aggregator" roles.

233

topologySpreadConstraints: []

234

# Configuration for Vector's Service.

235

service:

236

# service.enabled -- If true, create and provide a Service resource for Vector.

237

enabled: true

238

# service.type -- Set the type for Vector's Service.

239

type: "ClusterIP"

240

# service.annotations -- Set annotations on Vector's Service.

241

annotations: {}

242

# service.topologyKeys -- Specify the [topologyKeys](https://kubernetes.io/docs/concepts/services-networking/service-topology/#using-service-topology)

243

# field on Vector's Service.

244

topologyKeys: []

245

# - "kubernetes.io/hostname"

246

# - "topology.kubernetes.io/zone"

247

# - "topology.kubernetes.io/region"

248

# - "*"

249

# service.ports -- Manually set the Service ports, overriding automated generation of Service ports.

250

ports: []

251

# service.externalTrafficPolicy -- Specify the [externalTrafficPolicy](https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip).

252

externalTrafficPolicy: ""

253

# service.internalTrafficPolicy -- Specify the [internalTrafficPolicy](https://kubernetes.io/docs/concepts/services-networking/service-traffic-policy).

254

internalTrafficPolicy: ""

255

# service.loadBalancerIP -- Specify the [loadBalancerIP](https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer).

256

loadBalancerIP: ""

257

# service.ipFamilyPolicy -- Configure [IPv4/IPv6 dual-stack](https://kubernetes.io/docs/concepts/services-networking/dual-stack/).

258

ipFamilyPolicy: ""

259

# service.ipFamilies -- Configure [IPv4/IPv6 dual-stack](https://kubernetes.io/docs/concepts/services-networking/dual-stack/).

260

ipFamilies: []

261

# service.trafficDistribution -- Specify the [Traffic distribution](https://kubernetes.io/docs/concepts/services-networking/service/#traffic-distribution)

262

# additional Topology Aware Routing may be informative. Specify the [Topology Aware Routing](https://kubernetes.io/docs/concepts/services-networking/topology-aware-routing/)

263

trafficDistribution: ""

264

# Configuration for Vector's Headless Service.

265

serviceHeadless:

266

# serviceHeadless.enabled -- If true, create and provide a Headless Service resource for Vector.

267

enabled: true

268

# Configuration for Vector's Ingress.

269

ingress:

270

# ingress.enabled -- If true, create and use an Ingress resource.

271

enabled: false

272

# ingress.className -- Specify the [ingressClassName](https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress),

273

# requires Kubernetes >= 1.18

274

className: ""

275

# ingress.annotations -- Set annotations on the Ingress.

276

annotations: {}

277

# kubernetes.io/ingress.class: nginx

278

# kubernetes.io/tls-acme: "true"

279

# ingress.hosts -- Configure the hosts and paths for the Ingress.

280

hosts: []

281

# - host: chart-example.local

282

# paths:

283

# - path: /

284

# pathType: ImplementationSpecific

285

# # Specify the port name or number on the Service

286

# # Using name requires Kubernetes >=1.19

287

# port:

288

# name: ""

289

# number: ""

290

# ingress.tls -- Configure TLS for the Ingress.

291

tls: []

292

# - secretName: chart-example-tls

293

# hosts:

294

# - chart-example.local

295

# existingConfigMaps -- List of existing ConfigMaps for Vector's configuration instead of creating a new one. Requires

296

# dataDir to be set. Additionally, containerPorts, service.ports, and serviceHeadless.ports should be specified based on

297

# your supplied configuration. If set, this parameter takes precedence over customConfig and the chart's default configs.

298

existingConfigMaps: []

299

# dataDir -- Specify the path for Vector's data, only used when existingConfigMaps are used.

300

dataDir: ""

301

# customConfig -- Override Vector's default configs, if used **all** options need to be specified. This section supports

302

# using helm templates to populate dynamic values. See Vector's [configuration documentation](https://vector.dev/docs/reference/configuration/)

303

# for all options.

304

customConfig: {}

305

# data_dir: /vector-data-dir

306

# api:

307

# enabled: true

308

# address: 127.0.0.1:8686

309

# sources:

310

# vector:

311

# address: 0.0.0.0:6000

312

# type: vector

313

# version: "2"

314

# sinks:

315

# stdout:

316

# type: console

317

# inputs: [vector]

318

# encoding:

319

# codec: json

320

321

# defaultVolumes -- Default volumes that are mounted into pods. In most cases, these should not be changed.

322

# Use `extraVolumes`/`extraVolumeMounts` for additional custom volumes.

323

# @default -- See `values.yaml`

324

defaultVolumes:

325

- name: var-log

326

hostPath:

327

path: "/var/log/"

328

- name: var-lib

329

hostPath:

330

path: "/var/lib/"

331

- name: procfs

332

hostPath:

333

path: "/proc"

334

- name: sysfs

335

hostPath:

336

path: "/sys"

337

# defaultVolumeMounts -- Default volume mounts. Corresponds to `volumes`.

338

# @default -- See `values.yaml`

339

defaultVolumeMounts:

340

- name: var-log

341

mountPath: "/var/log/"

342

readOnly: true

343

- name: var-lib

344

mountPath: "/var/lib"

345

readOnly: true

346

- name: procfs

347

mountPath: "/host/proc"

348

readOnly: true

349

- name: sysfs

350

mountPath: "/host/sys"

351

readOnly: true

352

# extraVolumes -- Additional Volumes to use with Vector Pods.

353

extraVolumes: []

354

# extraVolumeMounts -- Additional Volume to mount into Vector Containers.

355

extraVolumeMounts: []

356

# initContainers -- Init Containers to be added to the Vector Pods.

357

# This also supports template content, which will eventually be converted to yaml.

358

initContainers: []

359

# initContainers:

360

# - name: test

361

# image: busybox:latest

362

# command:

363

# - cp

364

# args:

365

# - /bin/sleep

366

# - /test/sleep

367

# volumeMounts:

368

# - name: test

369

# mountPath: /test

370

371

# extraContainers -- Extra Containers to be added to the Vector Pods.

372

# This also supports template content, which will eventually be converted to yaml.

373

extraContainers: []

374

# extraContainers:

375

# - name: test

376

# command:

377

# - cp

378

# args:

379

# - /bin/sleep

380

# - /test/sleep

381

# image: busybox:latest

382

# volumeMounts:

383

# - name: test

384

# mountPath: /test

385

386

# Configuration for Vector's data persistence.

387

persistence:

388

# persistence.enabled -- If true, create and use PersistentVolumeClaims.

389

enabled: false

390

# persistence.existingClaim -- Name of an existing PersistentVolumeClaim to use. Valid for the "Aggregator" role.

391

existingClaim: ""

392

# persistence.storageClassName -- Specifies the storageClassName for PersistentVolumeClaims. Valid for the

393

# "Aggregator" role.

394

# storageClassName: default

395

396

# persistence.retentionPolicy -- Configure a [PersistentVolumeClaimRetentionPolicy](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#persistentvolumeclaim-retention)

397

# for Vector's PersistentVolumeClaims. Valid for the "Aggregator" role.

398

retentionPolicy: {}

399

# whenDeleted: Retain

400

# whenScaled: Retain

401

402

# persistence.annotations -- Set annotations on the PersistentVolumeClaims created by the StatefulSet.

403

annotations: {}

404

# persistence.accessModes -- Specifies the accessModes for PersistentVolumeClaims. Valid for the "Aggregator" role.

405

accessModes:

406

- ReadWriteOnce

407

# persistence.size -- Specifies the size of PersistentVolumeClaims. Valid for the "Aggregator" role.

408

size: 10Gi

409

# persistence.finalizers -- Specifies the finalizers of PersistentVolumeClaims. Valid for the "Aggregator" role.

410

finalizers:

411

- kubernetes.io/pvc-protection

412

# persistence.selectors -- Specifies the selectors for PersistentVolumeClaims. Valid for the "Aggregator" role.

413

selectors: {}

414

hostPath:

415

# persistence.hostPath.enabled -- If true, use hostPath persistence. Valid for the "Agent" role, if it's disabled

416

# the "Agent" role will use emptyDir.

417

enabled: true

418

# persistence.hostPath.path -- Override path used for hostPath persistence. Valid for the "Agent" role, persistence

419

# is always used for the "Agent" role.

420

path: "/var/lib/vector"

421

# dnsPolicy -- Specify the [dnsPolicy](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-s-dns-policy)

422

# for Vector Pods.

423

dnsPolicy: ClusterFirst

424

# dnsConfig -- Specify the [dnsConfig](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config)

425

# options for Vector Pods.

426

dnsConfig: {}

427

# nameservers:

428

# - 1.2.3.4

429

# searches:

430

# - ns1.svc.cluster-domain.example

431

# - my.dns.search.suffix

432

# options:

433

# - name: ndots

434

# value: "2"

435

# - name: edns0

436

437

# shareProcessNamespace -- Specify the [shareProcessNamespace](https://kubernetes.io/docs/tasks/configure-pod-container/share-process-namespace/)

438

# options for Vector Pods.

439

shareProcessNamespace: false

440

# livenessProbe -- Override default liveness probe settings. If customConfig is used, requires customConfig.api.enabled

441

# to be set to true. `grpc` is recommended once the cluster is on Vector 0.55+; the `httpGet /health` probe is kept

442

# for backwards compatibility with older Vector versions.

443

livenessProbe: {}

444

# Option 1: gRPC probe (uses grpc.health.v1.Health/Check, requires Vector 0.55+)

445

# grpc:

446

# port: 8686

447

448

# Option 2: HTTP probe

449

# httpGet:

450

# path: /health

451

# port: 8686

452

453

# readinessProbe -- Override default readiness probe settings. If not set, this chart applies an

454

# `httpGet /health` readinessProbe on port `8686` for chart-managed default configs. If customConfig is used,

455

# requires customConfig.api.enabled to be set to true. `grpc` is recommended once the cluster is on Vector 0.55+;

456

# the `httpGet /health` probe is kept for backwards compatibility with older Vector versions.

457

readinessProbe: {}

458

# Option 1: gRPC probe (uses grpc.health.v1.Health/Check, requires Vector 0.55+)

459

# grpc:

460

# port: 8686

461

462

# Option 2: HTTP probe

463

# httpGet:

464

# path: /health

465

# port: 8686

466

467

# startupProbe -- Override default startup probe settings. If customConfig is used,

468

# requires customConfig.api.enabled to be set to true. `grpc` is recommended once the cluster is on Vector 0.55+;

469

# the `httpGet /health` probe is kept for backwards compatibility with older Vector versions.

470

startupProbe: {}

471

# Option 1: gRPC probe (uses grpc.health.v1.Health/Check, requires Vector 0.55+)

472

# grpc:

473

# port: 8686

474

475

# Option 2: HTTP probe

476

# httpGet:

477

# path: /health

478

# port: 8686

479

480

# Configure a PodMonitor for Vector, requires the PodMonitor CRD to be installed.

481

podMonitor:

482

# podMonitor.enabled -- If true, create a PodMonitor for Vector.

483

enabled: false

484

# podMonitor.jobLabel -- Override the label to retrieve the job name from.

485

jobLabel: app.kubernetes.io/name

486

# podMonitor.port -- Override the port to scrape.

487

port: prom-exporter

488

# podMonitor.path -- Override the path to scrape.

489

path: /metrics

490

# podMonitor.interval -- Override the interval at which metrics should be scraped.

491

interval:

492

# podMonitor.scrapeTimeout -- Override the timeout after which the scrape is ended.

493

scrapeTimeout:

494

# podMonitor.relabelings -- [RelabelConfigs](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config)

495

# to apply to samples before scraping.

496

relabelings: []

497

# podMonitor.metricRelabelings -- [MetricRelabelConfigs](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs)

498

# to apply to samples before ingestion.

499

metricRelabelings: []

500

# podMonitor.podTargetLabels -- [podTargetLabels](https://prometheus-operator.dev/docs/operator/api/#monitoring.coreos.com/v1.PodMonitorSpec)

501

# transfers labels on the Kubernetes Pod onto the target.

502

podTargetLabels: []

503

# podMonitor.additionalLabels -- Adds additional labels to the PodMonitor.

504

additionalLabels: {}

505

# podMonitor.honorLabels -- If true, honor_labels is set to true in the [scrape config](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#scrape_config).

506

honorLabels: false

507

# podMonitor.honorTimestamps -- If true, honor_timestamps is set to true in the [scrape config](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#scrape_config).

508

honorTimestamps: true

509

# Log level for Vector.

510

logLevel: "info"

511

# Optional built-in HAProxy load balancer.

512

haproxy:

513

# haproxy.enabled -- If true, create a HAProxy load balancer.

514

enabled: false

515

# Define the HAProxy image to use.

516

image:

517

# haproxy.image.repository -- Override default registry and name for HAProxy.

518

repository: cgr.dev/chainguard-private/haproxy

519

# haproxy.image.pullPolicy -- HAProxy image pullPolicy.

520

pullPolicy: IfNotPresent

521

# haproxy.image.pullSecrets -- The [imagePullSecrets](https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod)

522

# to reference for the HAProxy Pods.

523

pullSecrets: []

524

# haproxy.image.tag -- The tag to use for HAProxy's image.

525

tag: latest@sha256:06702f6810166025afab5d149ced791574094227df73cc8fdb086ffba3042ee6

526

# haproxy.rollWorkload -- Add a checksum of the generated ConfigMap to the HAProxy Deployment.

527

rollWorkload: true

528

# haproxy.replicas -- Set the number of HAProxy Pods to create.

529

replicas: 1

530

serviceAccount:

531

# haproxy.serviceAccount.create -- If true, create a HAProxy ServiceAccount.

532

create: true

533

# haproxy.serviceAccount.annotations -- Annotations to add to the HAProxy ServiceAccount.

534

annotations: {}

535

# haproxy.serviceAccount.name -- The name of the HAProxy ServiceAccount to use. If not set and create is true, a

536

# name is generated using the fullname template.

537

name:

538

# haproxy.serviceAccount.automountToken -- Automount API credentials for the HAProxy ServiceAccount.

539

automountToken: true

540

# haproxy.strategy -- Customize the [strategy](https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/deployment-v1/)

541

# used to replace HAProxy Pods.

542

strategy: {}

543

# rollingUpdate:

544

# maxSurge: 25%

545

# maxUnavailable: 25%

546

# type: RollingUpdate

547

548

# haproxy.terminationGracePeriodSeconds -- Override HAProxy's terminationGracePeriodSeconds.

549

terminationGracePeriodSeconds: 60

550

# haproxy.podAnnotations -- Set annotations on HAProxy Pods.

551

podAnnotations: {}

552

# haproxy.podLabels -- Set labels on HAProxy Pods.

553

podLabels: {}

554

# haproxy.podPriorityClassName -- Set the priorityClassName on HAProxy Pods.

555

podPriorityClassName: ""

556

# haproxy.podSecurityContext -- Allows you to overwrite the default PodSecurityContext for HAProxy.

557

podSecurityContext: {}

558

# fsGroup: 2000

559

560

# haproxy.securityContext -- Specify securityContext on HAProxy containers.

561

securityContext: {}

562

# capabilities:

563

# drop:

564

# - ALL

565

# readOnlyRootFilesystem: true

566

# runAsNonRoot: true

567

# runAsUser: 1000

568

569

# haproxy.containerPorts -- Manually define HAProxy's containerPorts, overrides automated generation of containerPorts.

570

containerPorts: []

571

# HAProxy's Service configuration.

572

service:

573

# haproxy.service.type -- Set type of HAProxy's Service.

574

type: ClusterIP

575

# haproxy.service.annotations -- Set annotations on HAProxy's Service.

576

annotations: {}

577

# haproxy.service.topologyKeys -- Specify the [topologyKeys](https://kubernetes.io/docs/concepts/services-networking/service-topology/#using-service-topology)

578

# field on HAProxy's Service spec.

579

topologyKeys: []

580

# - "kubernetes.io/hostname"

581

# - "topology.kubernetes.io/zone"

582

# - "topology.kubernetes.io/region"

583

# - "*"

584

# haproxy.service.ports -- Manually set HAPRoxy's Service ports, overrides automated generation of Service ports.

585

ports: []

586

# haproxy.service.externalTrafficPolicy -- Specify the [externalTrafficPolicy](https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip).

587

externalTrafficPolicy: ""

588

# haproxy.service.loadBalancerIP -- Specify the [loadBalancerIP](https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer).

589

loadBalancerIP: ""

590

# haproxy.service.ipFamilyPolicy -- Configure [IPv4/IPv6 dual-stack](https://kubernetes.io/docs/concepts/services-networking/dual-stack/).

591

ipFamilyPolicy: ""

592

# haproxy.service.ipFamilies -- Configure [IPv4/IPv6 dual-stack](https://kubernetes.io/docs/concepts/services-networking/dual-stack/).

593

ipFamilies: []

594

# haproxy.existingConfigMap -- Use this existing ConfigMap for HAProxy's configuration instead of creating a new one.

595

# Additionally, haproxy.containerPorts and haproxy.service.ports should be specified based on your supplied

596

# configuration. If set, this parameter takes precedence over customConfig and the chart's default configs.

597

existingConfigMap: ""

598

# haproxy.customConfig -- Override HAProxy's default configs, if used **all** options need to be specified.

599

# This parameter supports using Helm templates to insert values dynamically. By default, this chart will parse

600

# Vector's configuration from customConfig to generate HAProxy's config, which can be overwritten with

601

# haproxy.customConfig.

602

customConfig: ""

603

# haproxy.extraVolumes -- Additional Volumes to use with HAProxy Pods.

604

extraVolumes: []

605

# haproxy.extraVolumeMounts -- Additional Volume to mount into HAProxy Containers.

606

extraVolumeMounts: []

607

# haproxy.initContainers -- Init Containers to be added to the HAProxy Pods.

608

# This also supports template content, which will eventually be converted to yaml.

609

initContainers: []

610

# haproxy.extraContainers -- Extra Containers to be added to the HAProxy Pods.

611

# This also supports template content, which will eventually be converted to yaml.

612

extraContainers: []

613

autoscaling:

614

# haproxy.autoscaling.enabled -- Create a HorizontalPodAutoscaler for HAProxy.

615

enabled: false

616

# haproxy.autoscaling.external -- HAProxy is controlled by an external HorizontalPodAutoscaler.

617

external: false

618

# haproxy.autoscaling.minReplicas -- Minimum replicas for HAProxy's HPA.

619

minReplicas: 1

620

# haproxy.autoscaling.maxReplicas -- Maximum replicas for HAProxy's HPA.

621

maxReplicas: 10

622

# haproxy.autoscaling.targetCPUUtilizationPercentage -- Target CPU utilization for HAProxy's HPA.

623

targetCPUUtilizationPercentage: 80

624

# haproxy.autoscaling.targetMemoryUtilizationPercentage -- (int) Target memory utilization for HAProxy's HPA.

625

targetMemoryUtilizationPercentage:

626

# haproxy.autoscaling.customMetric -- Target a custom metric for autoscaling.

627

customMetric: {}

628

# - type: Pods

629

# pods:

630

# metric:

631

# name: utilization

632

# target:

633

# type: AverageValue

634

# averageValue: 95

635

# haproxy.resources -- Set HAProxy resource requests and limits.

636

resources: {}

637

# limits:

638

# cpu: 100m

639

# memory: 128Mi

640

# requests:

641

# cpu: 100m

642

# memory: 128Mi

643

644

# haproxy.livenessProbe -- Override default HAProxy liveness probe settings.

645

livenessProbe:

646

tcpSocket:

647

port: 1024

648

# haproxy.readinessProbe -- Override default HAProxy readiness probe settings.

649

readinessProbe:

650

tcpSocket:

651

port: 1024

652

# haproxy.nodeSelector -- Configure a [nodeSelector](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector)

653

# for HAProxy Pods

654

nodeSelector: {}

655

# haproxy.tolerations -- Configure HAProxy Pods to be scheduled on [tainted](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/)

656

# nodes.

657

tolerations: []

658

# haproxy.affinity -- Configure [affinity](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity)

659

# rules for HAProxy Pods.

660

affinity: {}

661

# extraObjects -- Create extra manifests via values. Would be passed through `tpl` for templating.

662

extraObjects: []

663

# - apiVersion: v1

664

# kind: ConfigMap

665

# metadata:

666

# name: vector-dashboards

667

# labels:

668

# grafana_dashboard: "1"

669

# data:

670

# vector.json: |

671

# {{ .Files.Get "dashboards/vector.json" | fromJson | toJson }}

672

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.

vector

The trusted source for open source

Product

Solutions

Customers

Resources

Company