prometheus-adapter
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
Compare:
1
affinity: {}
2
topologySpreadConstraints: []
3
# Override the name of the chart
4
nameOverride: ""
5
# Override the full name of the release
6
fullnameOverride: ""
7
image:
8
repository: cgr.dev/chainguard-private/prometheus-adapter
9
# if not set appVersion field from Chart.yaml is used
10
tag: 0.12.0-r45@sha256:2b3dba0ec7a42f623592c0fb67d2d0c84cfb1108ed49c0339e87054218d2fc7f
11
pullPolicy: IfNotPresent
12
pullSecrets: []
13
# - foo
14
logLevel: 4
15
metricsRelistInterval: 1m
16
listenPort: 6443
17
nodeSelector: {}
18
priorityClassName: ""
19
## Set the schedulerName for prometheus-adapter pods
20
schedulerName: ""
21
## Set the runtimeClassName for prometheus-adapter pods
22
runtimeClassName: ""
23
## Override the release namespace (for multi-namespace deployments in combined charts)
24
namespaceOverride: ""
25
## Additional annotations to add to all resources
26
customAnnotations: {}
27
# role: custom-metrics
28
29
## Additional labels to add to all resources
30
customLabels: {}
31
# monitoring: prometheus-adapter
32
33
# Url to access prometheus
34
prometheus:
35
# Value is templated
36
url: http://prometheus.default.svc
37
port: 9090
38
path: ""
39
replicas: 1
40
# k8s 1.21 needs fsGroup to be set for non root deployments
41
# ref: https://github.com/kubernetes/kubernetes/issues/70679
42
podSecurityContext:
43
fsGroup: 10001
44
# SecurityContext of the container
45
# ref. https://kubernetes.io/docs/tasks/configure-pod-container/security-context
46
securityContext:
47
allowPrivilegeEscalation: false
48
capabilities:
49
drop: ["ALL"]
50
readOnlyRootFilesystem: true
51
runAsNonRoot: true
52
runAsUser: 10001
53
seccompProfile:
54
type: RuntimeDefault
55
rbac:
56
# Specifies whether RBAC resources should be created
57
create: true
58
# Specifies if a Cluster Role should be used for the Auth Reader
59
useAuthReaderClusterRole: false
60
externalMetrics:
61
resources: ["*"]
62
customMetrics:
63
resources: ["*"]
64
# If false then the user will opt out of automounting API credentials.
65
automountServiceAccountToken: true
66
serviceAccount:
67
# Specifies whether a service account should be created
68
create: true
69
# The name of the service account to use.
70
# If not set and create is true, a name is generated using the fullname template
71
name:
72
# ServiceAccount annotations.
73
# Use case: AWS EKS IAM roles for service accounts
74
# ref: https://docs.aws.amazon.com/eks/latest/userguide/specify-service-account-role.html
75
annotations: {}
76
# If false then the user will opt out of automounting API credentials.
77
automountServiceAccountToken: true
78
# Custom DNS configuration to be added to prometheus-adapter pods
79
dnsConfig: {}
80
# nameservers:
81
# - 1.2.3.4
82
# searches:
83
# - ns1.svc.cluster-domain.example
84
# - my.dns.search.suffix
85
# options:
86
# - name: ndots
87
# value: "2"
88
# - name: edns0
89
90
resources: {}
91
# requests:
92
# cpu: 100m
93
# memory: 128Mi
94
# limits:
95
# cpu: 100m
96
# memory: 128Mi
97
98
# Configure liveness probe
99
# https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#Probe
100
livenessProbe:
101
httpGet:
102
path: /healthz
103
port: https
104
scheme: HTTPS
105
initialDelaySeconds: 30
106
timeoutSeconds: 5
107
# Configure readiness probe
108
readinessProbe:
109
httpGet:
110
path: /healthz
111
port: https
112
scheme: HTTPS
113
initialDelaySeconds: 30
114
timeoutSeconds: 5
115
# Configure startup probe
116
# Use if prometheus-adapter takes a long time to finish startup e.g. polling a lot of API versions in cluster
117
startupProbe: {}
118
rules:
119
default: true
120
custom: []
121
# - seriesQuery: '{__name__=~"^some_metric_count$"}'
122
# resources:
123
# template: <<.Resource>>
124
# name:
125
# matches: ""
126
# as: "my_custom_metric"
127
# metricsQuery: sum(<<.Series>>{<<.LabelMatchers>>}) by (<<.GroupBy>>)
128
129
# Mounts a configMap with pre-generated rules for use. Overrides the
130
# default, custom, external and resource entries
131
existing:
132
external: []
133
# resource:
134
# cpu:
135
# containerQuery: |
136
# sum by (<<.GroupBy>>) (
137
# rate(container_cpu_usage_seconds_total{container!="",<<.LabelMatchers>>}[3m])
138
# )
139
# nodeQuery: |
140
# sum by (<<.GroupBy>>) (
141
# rate(node_cpu_seconds_total{mode!="idle",mode!="iowait",mode!="steal",<<.LabelMatchers>>}[3m])
142
# )
143
# resources:
144
# overrides:
145
# node:
146
# resource: node
147
# namespace:
148
# resource: namespace
149
# pod:
150
# resource: pod
151
# containerLabel: container
152
# memory:
153
# containerQuery: |
154
# sum by (<<.GroupBy>>) (
155
# avg_over_time(container_memory_working_set_bytes{container!="",<<.LabelMatchers>>}[3m])
156
# )
157
# nodeQuery: |
158
# sum by (<<.GroupBy>>) (
159
# avg_over_time(node_memory_MemTotal_bytes{<<.LabelMatchers>>}[3m])
160
# -
161
# avg_over_time(node_memory_MemAvailable_bytes{<<.LabelMatchers>>}[3m])
162
# )
163
# resources:
164
# overrides:
165
# node:
166
# resource: node
167
# namespace:
168
# resource: namespace
169
# pod:
170
# resource: pod
171
# containerLabel: container
172
# window: 3m
173
service:
174
annotations: {}
175
port: 443
176
type: ClusterIP
177
# clusterIP: 1.2.3.4
178
ipDualStack:
179
enabled: false
180
ipFamilies: ["IPv6", "IPv4"]
181
ipFamilyPolicy: "PreferDualStack"
182
tls:
183
enable: false
184
ca: |-
185
# Public CA file that signed the APIService
186
key: |-
187
# Private key of the APIService
188
certificate: |-
189
# Public key of the APIService
190
# Set environment variables from secrets, configmaps or by setting them as name/value
191
env: []
192
# - name: TMP_DIR
193
# value: /tmp
194
# - name: PASSWORD
195
# valueFrom:
196
# secretKeyRef:
197
# name: mysecret
198
# key: password
199
# optional: false
200
201
# Any extra arguments
202
extraArguments: []
203
# - --tls-private-key-file=/etc/tls/tls.key
204
# - --tls-cert-file=/etc/tls/tls.crt
205
206
# Additional containers to add to the pod
207
extraContainers: []
208
# Any extra volumes
209
extraVolumes: []
210
# - name: example-name
211
# hostPath:
212
# path: /path/on/host
213
# type: DirectoryOrCreate
214
# - name: ssl-certs
215
# hostPath:
216
# path: /etc/ssl/certs/ca-bundle.crt
217
# type: File
218
219
# Any extra volume mounts
220
extraVolumeMounts: []
221
# - name: example-name
222
# mountPath: /path/in/container
223
# - name: ssl-certs
224
# mountPath: /etc/ssl/certs/ca-certificates.crt
225
# readOnly: true
226
227
tolerations: []
228
# Labels added to the pod
229
podLabels: {}
230
# Annotations added to the pod
231
podAnnotations: {}
232
# Annotations added to the deployment
233
deploymentAnnotations: {}
234
hostNetwork:
235
# Specifies if prometheus-adapter should be started in hostNetwork mode.
236
#
237
# You would require this enabled if you use alternate overlay networking for pods and
238
# API server unable to communicate with metrics-server. As an example, this is required
239
# if you use Weave network on EKS. See also dnsPolicy
240
enabled: false
241
# When hostNetwork is enabled, you probably want to set this to ClusterFirstWithHostNet
242
# dnsPolicy: ClusterFirstWithHostNet
243
244
# Deployment strategy type
245
strategy:
246
type: RollingUpdate
247
rollingUpdate:
248
maxUnavailable: 25%
249
maxSurge: 25%
250
podDisruptionBudget:
251
# Specifies if PodDisruptionBudget should be enabled
252
# When enabled, minAvailable or maxUnavailable should also be defined.
253
enabled: false
254
minAvailable:
255
maxUnavailable: 1
256
# See https://kubernetes.io/docs/tasks/run-application/configure-pdb/#unhealthy-pod-eviction-policy for possible values
257
unhealthyPodEvictionPolicy:
258
certManager:
259
enabled: false
260
caCertDuration: 43800h0m0s
261
certDuration: 8760h0m0s
262
# -- Set the revisionHistoryLimit on the Certificates. See
263
# https://cert-manager.io/docs/reference/api-docs/#cert-manager.io/v1.CertificateSpec
264
# Defaults to nil.
265
caCertRevisionHistoryLimit:
266
certRevisionHistoryLimit:
267
## Extra manifests to deploy as an array
268
extraManifests: []
269
# - apiVersion: v1
270
# kind: ConfigMap
271
# metadata:
272
# labels:
273
# name: prometheus-extra
274
# data:
275
# extra-data: "value"
276
277
# Optional: set revisionHistoryLimit for the Deployment
278
revisionHistoryLimit: 10
279
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.