unleash
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
1
# Default values for unleash.
2
# This is a YAML-formatted file.
3
# Declare variables to be passed into your templates.
4
5
affinity: {}
6
# podAntiAffinity:
7
# preferredDuringSchedulingIgnoredDuringExecution:
8
# - podAffinityTerm:
9
# labelSelector:
10
# matchExpressions:
11
# - key: app.kubernetes.io/instance
12
# operator: In
13
# values:
14
# - unleash
15
# topologyKey: failure-domain.beta.kubernetes.io/zone
16
# weight: 100
17
18
# HorizontalPodAutoscaler
19
# https://kubernetes.io/de/docs/tasks/run-application/horizontal-pod-autoscale/
20
21
# Unleash v4 comes with basic username/password and API tokens.
22
#
23
# To login the first time use the following:
24
# username: admin
25
# password: unleash4all
26
#
27
# You can also add your own custom auth:
28
# See https://github.com/Unleash/unleash-examples/tree/main/v4 for an example index.js configmap. Do be aware that since 6.0.0 of Unleash OSS, it no longer bundles passport libraries, so the v4 examples are no longer valid.
29
# If you want SSO, you can use images from our community repos. There are prebuilt images for Google, Azure and OIDC.
30
# Update your image.repository setting in your custom values.yaml file to use the image from the [community repo](https://github.com/Unleash/unleash-docker-community?tab=readme-ov-file#looking-for-sso-and-coming-from-httpsgithubcomunleashhelm-charts-), then configure the environment variables for the image as documented in the community repo.
31
configMaps: {}
32
containerPort: 4242
33
dbConfig:
34
# if postgres dependency chart is used, this needs to be the same value as postgresql.auth.database
35
# Will be used to set DATABASE_NAME as an environment variable.
36
database: unleash
37
# Defaults to 'public'
38
schema: ""
39
host: postgres
40
# if postgres dependency chart is used, this needs to be the same value as postgresql.auth.password
41
# this should be change to something more secure or use an existing secret
42
pass: unleash
43
port: 5432
44
useExistingSecret:
45
name: ""
46
key: ""
47
# if postgres dependency chart is used, this needs to be the same value as postgresql.auth.username
48
user: unleash
49
# ssl value must be a stringified JSON object https://docs.getunleash.io/reference/deploy/configuring-unleash#dbssl-vs-database_ssl-options
50
# ssl: { rejectUnauthorized: false }
51
# sslConfigFile can be a path to a json file containing the keys listed in https://docs.getunleash.io/reference/deploy/configuring-unleash#dbssl-vs-database_ssl-options
52
# sslConfigFile:
53
# sslCaFile should be a path to a CA file in pem format
54
# sslCaFile:
55
# sslCertFile should be a path to the cert file in pem format to use to connect to postgres
56
# sslCertFile:
57
# sslKeyFile should be a path to the key file in pem format to use to connect to postgres
58
# sslKeyFile:
59
# sslRejectUnauthorized can be set to true|false. Don't set this to false in production, it will void any security you get from using SSL to connect
60
# sslRejectUnauthorized
61
# adds DATABASE_ host, port, username and password environment vars from a secrets file for use with Crossplane RDSInstance
62
databaseSecrets: []
63
# - name: DATABASE_HOST
64
# valueFrom:
65
# secretKeyRef:
66
# name: db-conn
67
# key: endpoint
68
# - name: DATABASE_PORT
69
# valueFrom:
70
# secretKeyRef:
71
# name: db-conn
72
# key: port
73
# - name: DATABASE_USERNAME
74
# valueFrom:
75
# secretKeyRef:
76
# name: db-conn
77
# key: username
78
# - name: DATABASE_PASSWORD
79
# valueFrom:
80
# secretKeyRef:
81
# name: db-conn
82
# key: password
83
84
env: []
85
# - name: GOOGLE_CLIENT_ID
86
# value: 999999999999-999z99zz9zzzzzz99z9zz9z9zzzzzz9z.apps.googleusercontent.com
87
# - name: GOOGLE_CALLBACK_URL
88
# value: https://unleash.example.com/api/auth/callback
89
90
# adds environmentvars for existing secrets to the container via tpl function
91
existingSecrets: []
92
# - name: GOOGLE_CLIENT_SECRET
93
# valueFrom:
94
# secretKeyRef:
95
# name: secretname
96
# key: secretkey
97
98
fullnameOverride: ""
99
image:
100
repository: cgr.dev/chainguard-private/unleash-server
101
# Obtained from .Chart.AppVersion, up to date tags available at https://hub.docker.com/r/unleashorg/unleash-server/tags
102
tag: 8.2.0-r1@sha256:f1cecab21c502cc4fbb62f059d6e75ac505c29d8c2c68ba4a0c948155dce603c
103
pullPolicy: Always
104
imagePullSecrets: []
105
serviceAccount:
106
# Specifies whether a service account should be created
107
create: true
108
# Annotations to add to the service account
109
annotations: {}
110
# The name of the service account to use.
111
# If not set and create is true, a name is generated using the fullname template
112
name: ""
113
ingress:
114
enabled: false
115
className: ""
116
annotations: {}
117
# kubernetes.io/ingress.class: nginx
118
# kubernetes.io/tls-acme: "true"
119
labels: {}
120
hosts:
121
- host: chart-example.local
122
paths:
123
- path: /
124
pathType: ImplementationSpecific
125
tls: []
126
# - secretName: chart-example-tls
127
# hosts:
128
# - chart-example.local
129
# Gateway API HTTPRoute configuration
130
# Ref: https://gateway-api.sigs.k8s.io/api-types/httproute/
131
httproute:
132
# -- Enable HTTPRoute resource (Gateway API)
133
enabled: false
134
# -- Additional HTTPRoute labels
135
labels: {}
136
# -- Additional HTTPRoute annotations
137
annotations: {}
138
# -- Gateway API parentRefs for the HTTPRoute
139
# Must reference an existing Gateway resource
140
parentRefs: []
141
# - name: example-gateway
142
# namespace: example-gateway-namespace
143
# sectionName: https
144
# -- List of hostnames for the HTTPRoute
145
hostnames: []
146
# - unleash.example.com
147
# -- HTTPRoute rules configuration
148
# Note: backendRefs in custom rules will be ignored;
149
# the chart service is always used as the backend.
150
rules:
151
- matches:
152
- path:
153
type: PathPrefix
154
value: /
155
# filters: []
156
# - type: RequestHeaderModifier
157
# requestHeaderModifier:
158
# add:
159
# - name: X-Custom-Header
160
# value: custom-value
161
# timeouts:
162
# request: 10s
163
# backendRequest: 2s
164
initContainers: []
165
extraContainers: []
166
livenessProbe:
167
enabled: true
168
path: /health
169
initialDelaySeconds: 30
170
timeoutSeconds: 10
171
nameOverride: ""
172
nodeSelector: {}
173
deploymentAnnotations: {}
174
podAnnotations: {}
175
readinessProbe:
176
enabled: true
177
path: /health
178
initialDelaySeconds: 30
179
timeoutSeconds: 10
180
periodSeconds: 10
181
successThreshold: 5
182
replicaCount: 2
183
resources: {}
184
# We usually recommend not to specify default resources and to leave this as a conscious
185
# choice for the user. If you do want to specify resources, uncomment the following
186
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
187
# limits:
188
# cpu: 1000m
189
# memory: 768Mi
190
# requests:
191
# cpu: 100m
192
# memory: 384Mi
193
194
# The key value pairs under secrets will be included in a Kubernetes Secret,
195
# and they will generate environment variables that use `valueFrom` to refer to
196
# the secrets in the Kubernetes Secret.
197
secrets: {}
198
# SHARED_SECRET: 999z9z9z99https://meet.google.com/rtk-rbjr-tkv99zzz9
199
# GOOGLE_CLIENT_SECRET: zzzZZz9ZZzZzZzz9Z9zZZZZZ
200
201
service:
202
# Supported types: ClusterIP, NodePort, LoadBalancer
203
type: ClusterIP
204
port: 4242
205
# target port will be set to port if not set
206
targetPort: ""
207
# nodePort is optional and only used when service.type is NodePort or LoadBalancer
208
nodePort: ""
209
annotations: {}
210
## Load Balancer sources
211
## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service
212
## Example:
213
## loadBalancerSourceRanges:
214
## - 10.10.10.0/24
215
## loadBalancerIP: ""
216
loadBalancerSourceRanges: []
217
loadBalancerIP: ""
218
tolerations: []
219
# VerticalPodAutoscaler
220
vpa:
221
enabled: false
222
# postgresql dependency chart config
223
# https://github.com/bitnami/charts/blob/master/bitnami/postgresql/values.yaml
224
postgresql:
225
enabled: true
226
fullnameOverride: "unleash-postgresql"
227
image:
228
registry: docker.io
229
repository: postgres
230
tag: 18-alpine
231
auth:
232
username: unleash
233
# this should be changed to something more secure or use an existing secret
234
password: unleash
235
database: unleash
236
podSecurityContext: {}
237
# fsGroup: 2000
238
239
securityContext: {}
240
# capabilities:
241
# drop:
242
# - ALL
243
# readOnlyRootFilesystem: true
244
# runAsNonRoot: true
245
# runAsUser: 1000
246
247
# Autoscaling
248
# https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
249
# Allows Unleash to setup HPA
250
autoscaling:
251
enabled: false
252
minReplicas: 0
253
maxReplicas: 0
254
targetCPUUtilizationPercentage: 70
255
targetMemoryUtilizationPercentage: 70
256
extraObjects: []
257
# - apiVersion: mumoshu.github.io/v1alpha1
258
# kind: AWSSecret
259
# metadata:
260
# name: unleash-secret
261
# spec:
262
# stringDataFrom:
263
# secretsManagerSecretRef:
264
# secretId: unleash-secret-production
265
# versionId: 00000000-1111-2222-3333-444444444444
266
267
# CloudSQL in GKE
268
cloudsql:
269
# If you enable cloudsql, ensure that serviceAccount.annotations is populated with associated GKE workload identity:
270
# e.g. iam.gke.io/gcp-service-account: airflow@gcp-project.iam.gserviceaccount.com
271
enabled: false
272
# Set CloudSQL instance: 'project:zone:instancename'
273
instance: ""
274
image:
275
repository: cgr.dev/chainguard-private/cloud-sql-proxy
276
tag: 2.25.4-r1@sha256:abca1a9582bc1a9b2ebb4bf7295398469df452f054fcbccf1a6a0eac3252d78f
277
pullPolicy: IfNotPresent
278
resources: {}
279
# We usually recommend not to specify default resources and to leave this as a conscious
280
# choice for the user. This also increases chances charts run on environments with little
281
# resources, such as Minikube. If you do want to specify resources, uncomment the following
282
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
283
# limits:
284
# cpu: 10m
285
# memory: 128Mi
286
# requests:
287
# cpu: 100m
288
# memory: 256Mi
289
# Additional flags to pass to cloudsql
290
flags: []
291
podDisruptionBudget:
292
enabled: false
293
minAvailable:
294
maxUnavailable: 1
295
topologySpreadConstraints: {}
296
# - maxSkew: 1
297
# topologyKey: topology.kubernetes.io/zone
298
# whenUnsatisfiable: DoNotSchedule
299
300
# Add additional volumes and mounts, for example to read other secrets.
301
volumes: []
302
volumeMounts: []
303
serviceMonitor:
304
enabled: false
305
extraLabels: {}
306
extraSelectorLabels: {}
307
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.