DirectorySecurity AdvisoriesPricing
Sign in
Directory
kafka-ui logoHELM

kafka-ui

Helm chart
Last changed
Request a free trial

Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.

Overview
Chart versions
Default values
Chart metadata
Images

Tag:
Compare:

1
## @section Common
2
## @param replicaCount Number of Kafka-UI replicas to deploy
3
replicaCount: 1
4
## @param image.registry [string] image registry
5
## @param image.repository [string] image repository
6
## @param image.pullPolicy [string] image pull policy
7
## @param image.tag [string] image tag (immutable tags are recommended)
8
image:
9
registry: cgr.dev
10
repository: chainguard-private/kafbat-ui-fips
11
pullPolicy: IfNotPresent
12
# Overrides the image tag whose default is the chart appVersion.
13
tag: 1.5.0-r7@sha256:9dbfbb2b7f8888335affe9c3ae647cb9fa4eaf3b761c41321682167b40ecca66
14
## @param imagePullSecrets Docker registry secret names as an array
15
imagePullSecrets: []
16
## @param nameOverride String to partially override chart name
17
nameOverride: ""
18
## @param fullnameOverride String to fully override app name
19
fullnameOverride: ""
20
## @section ServiceAccount configuration
21
serviceAccount:
22
## @param serviceAccount.name The name of the ServiceAccount to use.
23
name: ""
24
## @param serviceAccount.create Specifies whether a ServiceAccount should be created
25
create: true
26
## @param serviceAccount.annotations Additional Service Account annotations
27
annotations: {}
28
# The name of the service account to use.
29
# If not set and create is true, a name is generated using the fullname template
30
## @section Application configuration
31
## @param existingConfigMap [string] Name of the existing ConfigMap with kafbat-ui environment variables
32
existingConfigMap: ""
33
## @param yamlApplicationConfig Kafbat-UI config in Yaml format
34
yamlApplicationConfig: {}
35
# kafka:
36
# clusters:
37
# - name: yaml
38
# bootstrapServers: kafka-service:9092
39
# spring:
40
# security:
41
# oauth2:
42
# auth:
43
# type: disabled
44
# management:
45
# health:
46
# ldap:
47
# enabled: false
48
## @param yamlApplicationConfigConfigMap Map with name and keyName keys, name refers to the existing ConfigMap, keyName refers to the ConfigMap key with Kafbat-UI config in Yaml format
49
yamlApplicationConfigConfigMap: {}
50
# keyName: config.yml
51
# name: configMapName
52
## @param yamlApplicationConfigSecret Secret with name and keyName keys, name refers to the existing ConfigMap, keyName refers to the ConfigMap key with Kafbat-UI config in Yaml format
53
yamlApplicationConfigSecret: {}
54
# keyName: config.yml
55
# name: secretName
56
## @param existingSecret Name of the existing Secret with Kafbat-UI environment variables
57
existingSecret: ""
58
### @section Environment variables from
59
envs:
60
## @param envs.secret Set of the sensitive environment variables to pass to Kafbat-UI
61
secret: {}
62
## @param envs.config Set of the environment variables to pass to Kafbat-UI
63
config: {}
64
## @param envs.secretMappings The mapping of existing secret to env variable.
65
secretMappings: {}
66
#ENV_NAME:
67
# name: kubernetes-secret-name
68
# keyName: kubernetes-secret-key
69
## @param envs.configMappings The mapping of configmap and keyName to get env variable.
70
configMappings: {}
71
#ENV_NAME:
72
# name: kubernetes-configmap-name
73
# keyName: kubernetes-configmap-key
74
## @param env [object] Envs to be added to the Kafka-UI container
75
env: []
76
## @param resources Set Kafka-UI container requests and limits for different resources like CPU or memory (essential for production workloads)
77
resources: {}
78
# limits:
79
# cpu: 200m
80
# memory: 512Mi
81
# requests:
82
# cpu: 200m
83
# memory: 256Mi
84
85
## @param initContainers Add additional init containers to the Kafka-UI pods
86
## ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
87
## e.g:
88
initContainers: []
89
## @param volumeMounts [object] Optionally specify additional volumeMounts for the kafka-UI container
90
volumeMounts: []
91
## @param volumes [object] Optionally specify additional volumes for the Kafka-UI pods
92
volumes: []
93
## @param hostAliases [object] Kafka-UI pods host aliases
94
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
95
##
96
hostAliases: []
97
## @param extraContainers Specify additional containers in extraContainers.
98
## For example, to add an authentication proxy to a kafka-ui pod.
99
extraContainers: ""
100
# - name: proxy
101
# image: quay.io/gambol99/keycloak-proxy:latest
102
# args:
103
# - -provider=github
104
# - -client-id=
105
# - -client-secret=
106
# - -github-org=<ORG_NAME>
107
# - -email-domain=*
108
# - -cookie-secret=
109
# - -http-address=http://0.0.0.0:4181
110
# - -upstream-url=http://127.0.0.1:3000
111
# ports:
112
# - name: proxy-web
113
# containerPort: 4181
114
115
## @section Network Policies
116
## Ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/
117
##
118
networkPolicy:
119
## @param networkPolicy.enabled Specifies whether a NetworkPolicy should be created
120
enabled: false
121
## @skip networkPolicy.egressRules
122
egressRules:
123
## Additional custom egress rules
124
## e.g:
125
## customRules:
126
## - to:
127
## - namespaceSelector:
128
## matchLabels:
129
## label: example
130
customRules: []
131
## @skip networkPolicy.ingressRules
132
ingressRules:
133
## Additional custom ingress rules
134
## e.g:
135
## customRules:
136
## - from:
137
## - namespaceSelector:
138
## matchLabels:
139
## label: example
140
customRules: []
141
## @param podAnnotations Annotations for Kafka-UI pods
142
podAnnotations: {}
143
## @param podLabels Extra labels for Kafka-UI pods
144
podLabels: {}
145
## @param annotations [object] Annotations to be added to kafka-ui Deployment
146
annotations: {}
147
## @param labels [object] Labels to be added to kafka-ui Deployment
148
labels: {}
149
## @param probes.useHttpsScheme Set field schema as HTTPS for readines and liveness probe
150
##
151
probes:
152
useHttpsScheme: false
153
liveness:
154
## @param probes.liveness.initialDelaySeconds Initial delay seconds for liveness probe
155
initialDelaySeconds: 10
156
## @param probes.liveness.periodSeconds Period seconds for liveness probe
157
periodSeconds: 30
158
## @param probes.liveness.timeoutSeconds Timeout seconds for liveness probe
159
timeoutSeconds: 10
160
readiness:
161
## @param probes.readiness.initialDelaySeconds Initial delay seconds for readiness probe
162
initialDelaySeconds: 10
163
## @param probes.readiness.periodSeconds Period seconds for readiness probe
164
periodSeconds: 30
165
## @param probes.readiness.timeoutSeconds Timeout seconds for readiness probe
166
timeoutSeconds: 10
167
startup:
168
## @param probes.startup.failureThreshold Failure threshold for startup probe
169
failureThreshold: 5
170
## @param probes.startup.periodSeconds Period seconds for startup probe
171
periodSeconds: 40
172
## @param probes.startup.timeoutSeconds Timeout seconds for startup probe
173
timeoutSeconds: 10
174
## @section Security Context
175
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
176
## @param podSecurityContext [object] The security settings that you specify for a Pod apply to all Containers in the Pod
177
podSecurityContext:
178
fsGroup: 2000
179
## @param securityContext [object] The security settings that you specify for a Kafka-UI container
180
securityContext:
181
allowPrivilegeEscalation: false
182
capabilities:
183
drop:
184
- ALL
185
readOnlyRootFilesystem: false # https://github.com/kafbat/kafka-ui/issues/78
186
runAsGroup: 2000
187
runAsNonRoot: true
188
runAsUser: 1000
189
seccompProfile:
190
type: RuntimeDefault
191
## @section Traffic Exposure Parameters
192
## Kafka-UI service parameters
193
##
194
service:
195
## @param service.labels [object] Labels for the Service
196
labels: {}
197
## @param service.type Kafka-UI service type
198
type: ClusterIP
199
## @param service.port Kafka-UI pod port number
200
port: 80
201
# In case of service type LoadBalancer, you can specify reserved static IP
202
# loadBalancerIP: 10.11.12.13
203
# if you want to force a specific nodePort. Must be use with service.type=NodePort
204
# nodePort:
205
## Kafka-UI Ingress configuration
206
## ref: http://kubernetes.io/docs/concepts/services-networking/ingress/
207
##
208
ingress:
209
## @param ingress.enabled [string] Enable ingress record generation for Kafka-UI
210
enabled: false
211
## @param ingress.annotations [object] Additional annotations for the Ingress resource. To enable certificate autogeneration, place here your cert-manager annotations.
212
annotations: {}
213
## @param ingress.labels [object] Labels for the Ingress
214
labels: {}
215
## @param ingress.ingressClassName IngressClass that will be be used to implement the Ingress (Kubernetes 1.18+)
216
## This is supported in Kubernetes 1.18+ and required if you have more than one IngressClass marked as the default for your cluster .
217
## ref: https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/
218
##
219
ingressClassName: ""
220
## @param ingress.path Default path for the ingress record
221
## NOTE: You may need to set this to '/*' in order to use this with ALB ingress controllers
222
##
223
path: "/"
224
## @param ingress.pathType Ingress path type
225
pathType: "Prefix"
226
## @param ingress.host Default hostname for the ingress record
227
host: ""
228
# configs for Ingress TLS
229
tls:
230
# Enable TLS termination for the Ingress
231
## @param ingress.tls.enabled Enable TLS configuration for the host defined at `ingress.host` parameter
232
enabled: false
233
## @param ingress.tls.secretName [string] The name of a pre-created Secret containing a TLS private key and certificate
234
secretName: ""
235
## @param ingress.precedingPaths [array] HTTP paths to add to the Ingress before the default path
236
precedingPaths: []
237
## @param ingress.succeedingPaths [array] Http paths to add to the Ingress after the default path
238
succeedingPaths: []
239
## @param resources [object] Set Kafka-UI pod requests and limits for different resources like CPU or memory (essential for production workloads)
240
241
## @section Scheduling
242
243
## Autoscaling configuration
244
## ref: https://kubernetes.io/docs/concepts/workloads/autoscaling/
245
## @skip autoscaling
246
autoscaling:
247
enabled: false
248
minReplicas: 1
249
maxReplicas: 100
250
# targetCPUUtilizationPercentage: 80
251
# targetMemoryUtilizationPercentage: 80
252
## @param nodeSelector Node labels for Kafka-UI pods assignment
253
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/
254
##
255
nodeSelector: {}
256
## @param tolerations Tolerations for Kafka-UI pods assignment
257
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
258
##
259
tolerations: []
260
## @param affinity Affinity for Kafka-UI pods assignment
261
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
262
## NOTE: `podAffinityPreset`, `podAntiAffinityPreset`, and `nodeAffinityPreset` will be ignored when it's set
263
##
264
affinity: {}
265
## @param revisionHistoryLimit [nullable] Specify how many old ReplicaSets for this Deployment you want to retain
266
revisionHistoryLimit: null
267

The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.