stakater-reloader
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
Compare:
1
# Generated from deployments/kubernetes/templates/chart/values.yaml.tmpl
2
global:
3
## Reference to one or more secrets to be used when pulling images
4
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
5
##
6
imageRegistry: ""
7
imagePullSecrets: []
8
#imagePullSecrets:
9
# - name: my-pull-secret
10
#imagePullSecrets:
11
# - my-pull-secret
12
kubernetes:
13
host: https://kubernetes.default
14
nameOverride: ""
15
fullnameOverride: ""
16
image:
17
name: stakater/reloader
18
repository: cgr.dev/chainguard-private/stakater-reloader-fips
19
tag: 1.4.22@sha256:30d7b8b9e9ec087c560e40877a2ab0f2e829d44739f6e0fbcf7e1314ec765918
20
# digest: sha256:1234567
21
pullPolicy: IfNotPresent
22
reloader:
23
autoReloadAll: false
24
isArgoRollouts: false
25
isOpenshift: false
26
ignoreSecrets: false
27
ignoreConfigMaps: false
28
# Set to true to exclude Job workloads from automatic reload monitoring
29
# Useful when you don't want Jobs to be restarted when their referenced ConfigMaps/Secrets change
30
ignoreJobs: false
31
# Set to true to exclude CronJob workloads from automatic reload monitoring
32
# Useful when you don't want CronJobs to be restarted when their referenced ConfigMaps/Secrets change
33
ignoreCronJobs: false
34
reloadOnCreate: false
35
reloadOnDelete: false
36
syncAfterRestart: false
37
reloadStrategy: default # Set to default, env-vars or annotations
38
ignoreNamespaces: "" # Comma separated list of namespaces to ignore
39
namespaceSelector: "" # Comma separated list of k8s label selectors for namespaces selection
40
resourceLabelSelector: "" # Comma separated list of k8s label selectors for configmap/secret selection
41
logFormat: "" # json
42
logLevel: info # Log level to use (trace, debug, info, warning, error, fatal and panic)
43
watchGlobally: true
44
# Scoped mode: explicit list of namespaces to watch. When non-empty (and watchGlobally
45
# is false), Reloader watches exactly these namespaces and the chart creates a namespace
46
# scoped Role + RoleBinding in each one — no ClusterRole is created. The release namespace
47
# is always included automatically. Leave empty ([]) for the default single-namespace or
48
# global behavior controlled by watchGlobally.
49
# Accepts either a YAML list (e.g. ["team-a", "team-b"]) or a comma-separated string
50
# (e.g. "team-a,team-b")
51
namespaces: []
52
# Set to true to enable leadership election allowing you to run multiple replicas
53
enableHA: false
54
# Leader election timings, only applied when enableHA is true. Leave empty to keep the
55
# client-go defaults (leaseDuration 15s, renewDeadline 10s, retryPeriod 2s).
56
# leaseDuration must be a whole number of seconds and greater than renewDeadline, and
57
# renewDeadline must be greater than retryPeriod multiplied by the jitter factor (1.2).
58
leaderElection:
59
leaseDuration: ""
60
renewDeadline: ""
61
retryPeriod: ""
62
# Set to true to enable pprof for profiling
63
enablePProf: false
64
enableCSIIntegration: false
65
# Address to start pprof server on. Default is ":6060"
66
pprofAddr: ":6060"
67
# Set to true if you have a pod security policy that enforces readOnlyRootFilesystem
68
readOnlyRootFileSystem: false
69
legacy:
70
rbac: false
71
matchLabels: {}
72
# Set to true to expose a prometheus counter of reloads by namespace (this metric may have high cardinality in clusters with many namespaces)
73
enableMetricsByNamespace: false
74
deployment:
75
# Specifies the deployment DNS configuration.
76
dnsConfig: {}
77
# nameservers:
78
# - 1.2.3.4
79
# searches:
80
# - ns1.svc.cluster-domain.example
81
# - my.dns.search.suffix
82
# options:
83
# - name: ndots
84
# value: "1"
85
# - name: attempts
86
# value: "3"
87
88
# If you wish to run multiple replicas set reloader.enableHA = true
89
replicas: 1
90
revisionHistoryLimit: 2
91
hostUsers: null
92
nodeSelector:
93
# cloud.google.com/gke-nodepool: default-pool
94
95
# An affinity stanza to be applied to the Deployment.
96
# Example:
97
# affinity:
98
# nodeAffinity:
99
# requiredDuringSchedulingIgnoredDuringExecution:
100
# nodeSelectorTerms:
101
# - matchExpressions:
102
# - key: "node-role.kubernetes.io/infra-worker"
103
# operator: "Exists"
104
affinity: {}
105
volumeMounts: []
106
volumes: []
107
securityContext:
108
runAsNonRoot: true
109
runAsUser: 65534
110
seccompProfile:
111
type: RuntimeDefault
112
containerSecurityContext: {}
113
# capabilities:
114
# drop:
115
# - ALL
116
# allowPrivilegeEscalation: false
117
# readOnlyRootFilesystem: true
118
119
# A list of tolerations to be applied to the Deployment.
120
# Example:
121
# tolerations:
122
# - key: "node-role.kubernetes.io/infra-worker"
123
# operator: "Exists"
124
# effect: "NoSchedule"
125
tolerations: []
126
# Topology spread constraints for pod assignment
127
# Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
128
# Example:
129
# topologySpreadConstraints:
130
# - maxSkew: 1
131
# topologyKey: zone
132
# whenUnsatisfiable: DoNotSchedule
133
# labelSelector:
134
# matchLabels:
135
# app.kubernetes.io/instance: my-app
136
topologySpreadConstraints: []
137
annotations: {}
138
labels:
139
provider: stakater
140
group: com.stakater.platform
141
version: v1.4.22
142
# Support for extra environment variables.
143
env:
144
# Open supports Key value pair as environment variables.
145
open:
146
# secret supports Key value pair as environment variables. It gets the values based on keys from default reloader secret if any.
147
secret:
148
# ALERT_ON_RELOAD: <"true"|"false">
149
# ALERT_SINK: <"slack"> # By default it will be a raw text based webhook
150
# ALERT_WEBHOOK_URL: <"webhook_url">
151
# ALERT_ADDITIONAL_INFO: <"Additional Info like Cluster Name if needed">
152
# field supports Key value pair as environment variables. It gets the values from other fields of pod.
153
field:
154
# existing secret, you can specify multiple existing secrets, for each
155
# specify the env var name followed by the key in existing secret that
156
# will be used to populate the env var
157
existing:
158
# existing_secret_name:
159
# ALERT_ON_RELOAD: alert_on_reload_key
160
# ALERT_SINK: alert_sink_key
161
# ALERT_WEBHOOK_URL: alert_webhook_key
162
# ALERT_ADDITIONAL_INFO: alert_additional_info_key
163
# Liveness and readiness probe timeout values.
164
livenessProbe: {}
165
# timeoutSeconds: 5
166
# failureThreshold: 5
167
# periodSeconds: 10
168
# successThreshold: 1
169
readinessProbe: {}
170
# timeoutSeconds: 15
171
# failureThreshold: 5
172
# periodSeconds: 10
173
# successThreshold: 1
174
175
# Specify resource requests/limits for the deployment.
176
# Example:
177
# resources:
178
# limits:
179
# cpu: "100m"
180
# memory: "512Mi"
181
# requests:
182
# cpu: "10m"
183
# memory: "128Mi"
184
resources: {}
185
pod:
186
annotations: {}
187
priorityClassName: ""
188
# Set the runtimeClassName for the pod
189
runtimeClassName: ""
190
# Set the schedulerName for the pod
191
schedulerName: ""
192
# imagePullSecrets:
193
# - name: myregistrykey
194
195
# Put "0" in either to have go runtime ignore the set value.
196
# Otherwise, see https://pkg.go.dev/runtime#hdr-Environment_Variables for GOMAXPROCS and GOMEMLIMIT
197
gomaxprocsOverride: ""
198
gomemlimitOverride: ""
199
service: {}
200
# labels: {}
201
# annotations: {}
202
# port: 9090
203
# For IPv4 and IPv6 dual stack support.
204
# Specify the IP family policy for the service. Supported values are SingleStack, PreferDualStack, and RequireDualStack.
205
# ipFamilyPolicy: "SingleStack"
206
# Specify the IP protocol family or dual-stack preference for the service. Supported values: ["IPv4"], ["IPv6"], ["IPv4","IPv6"], or ["IPv6","IPv4"].
207
# ipFamilies: ["IPv4"]
208
rbac:
209
enabled: true
210
labels: {}
211
# Service account config for the agent pods
212
serviceAccount:
213
# Specifies whether a ServiceAccount should be created
214
create: true
215
labels: {}
216
annotations: {}
217
# The name of the ServiceAccount to use.
218
# If not set and create is true, a name is generated using the fullname template
219
name:
220
# Optional flags to pass to the Reloader entrypoint
221
# Example:
222
# custom_annotations:
223
# configmap: "my.company.com/configmap"
224
# secret: "my.company.com/secret"
225
# ignore: "my.company.com/reloader-ignore"
226
custom_annotations: {}
227
serviceMonitor:
228
# Deprecated: Service monitor will be removed in future releases of reloader in favour of Pod monitor
229
# Enabling this requires service to be enabled as well, or no endpoints will be found
230
enabled: false
231
# Set the namespace the ServiceMonitor should be deployed
232
# namespace: monitoring
233
234
# Fallback to the prometheus default unless specified
235
# interval: 10s
236
237
## scheme: HTTP scheme to use for scraping. Can be used with `tlsConfig` for example if using istio mTLS.
238
# scheme: ""
239
240
## tlsConfig: TLS configuration to use when scraping the endpoint. For example if using istio mTLS.
241
## Of type: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#tlsconfig
242
# tlsConfig: {}
243
244
# bearerTokenFile:
245
# Fallback to the prometheus default unless specified
246
# timeout: 30s
247
248
## Used to pass Labels that are used by the Prometheus installed in your cluster to select Service Monitors to work with
249
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#prometheusspec
250
labels: {}
251
## Used to pass annotations that are used by the Prometheus installed in your cluster to select Service Monitors to work with
252
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#prometheusspec
253
annotations: {}
254
# Retain the job and instance labels of the metrics pushed to the Pushgateway
255
# [Scraping Pushgateway](https://github.com/prometheus/pushgateway#configure-the-pushgateway-as-a-target-to-scrape)
256
honorLabels: true
257
## Metric relabel configs to apply to samples before ingestion.
258
## [Metric Relabeling](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs)
259
metricRelabelings: []
260
# - action: keep
261
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
262
# sourceLabels: [__name__]
263
264
## Relabel configs to apply to samples before ingestion.
265
## [Relabeling](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config)
266
relabelings: []
267
# - sourceLabels: [__meta_kubernetes_pod_node_name]
268
# separator: ;
269
# regex: ^(.*)$
270
# targetLabel: nodename
271
# replacement: $1
272
# action: replace
273
274
targetLabels: []
275
podMonitor:
276
enabled: false
277
# Set the namespace the podMonitor should be deployed
278
# namespace: monitoring
279
280
# Fallback to the prometheus default unless specified
281
# interval: 10s
282
283
## scheme: HTTP scheme to use for scraping. Can be used with `tlsConfig` for example if using istio mTLS.
284
# scheme: ""
285
286
## tlsConfig: TLS configuration to use when scraping the endpoint. For example if using istio mTLS.
287
## Of type: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#tlsconfig
288
# tlsConfig: {}
289
290
# bearerTokenSecret:
291
# Fallback to the prometheus default unless specified
292
# timeout: 30s
293
294
## Used to pass Labels that are used by the Prometheus installed in your cluster to select Service Monitors to work with
295
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#prometheusspec
296
labels: {}
297
## Used to pass annotations that are used by the Prometheus installed in your cluster to select Service Monitors to work with
298
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#prometheusspec
299
annotations: {}
300
# Retain the job and instance labels of the metrics pushed to the Pushgateway
301
# [Scraping Pushgateway](https://github.com/prometheus/pushgateway#configure-the-pushgateway-as-a-target-to-scrape)
302
honorLabels: true
303
## Metric relabel configs to apply to samples before ingestion.
304
## [Metric Relabeling](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs)
305
metricRelabelings: []
306
# - action: keep
307
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
308
# sourceLabels: [__name__]
309
310
## Relabel configs to apply to samples before ingestion.
311
## [Relabeling](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config)
312
relabelings: []
313
# - sourceLabels: [__meta_kubernetes_pod_node_name]
314
# separator: ;
315
# regex: ^(.*)$
316
# targetLabel: nodename
317
# replacement: $1
318
# action: replace
319
320
podTargetLabels: []
321
podDisruptionBudget:
322
enabled: false
323
# Set the minimum available replicas
324
# minAvailable: 1
325
# OR Set the maximum unavailable replicas
326
# maxUnavailable: 1
327
# If both defined only maxUnavailable will be used
328
netpol:
329
enabled: false
330
from: []
331
# - podSelector:
332
# matchLabels:
333
# app.kubernetes.io/name: prometheus
334
to: []
335
# Enable vertical pod autoscaler
336
verticalPodAutoscaler:
337
enabled: false
338
# Recommender responsible for generating recommendation for the object.
339
# List should be empty (then the default recommender will generate the recommendation)
340
# or contain exactly one recommender.
341
# recommenders:
342
# - name: custom-recommender-performance
343
344
# List of resources that the vertical pod autoscaler can control. Defaults to cpu and memory
345
controlledResources: []
346
# Specifies which resource values should be controlled: RequestsOnly or RequestsAndLimits.
347
# controlledValues: RequestsAndLimits
348
349
# Define the max allowed resources for the pod
350
maxAllowed: {}
351
# cpu: 200m
352
# memory: 100Mi
353
# Define the min allowed resources for the pod
354
minAllowed: {}
355
# cpu: 200m
356
# memory: 100Mi
357
358
updatePolicy:
359
# Specifies minimal number of replicas which need to be alive for VPA Updater to attempt pod eviction
360
# minReplicas: 1
361
# Specifies whether recommended updates are applied when a Pod is started and whether recommended updates
362
# are applied during the life of a Pod. Possible values are "Off", "Initial", "Recreate", and "Auto".
363
updateMode: Auto
364
webhookUrl: ""
365
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.