Helm Chart configuration reference
Configure and customize your RHDH deployment with Helm Chart.
Abstract
- Preface
- 1. Helm Chart configuration reference
- 1.1. Display a complete list of Helm Chart values with Helm CLI
- 1.2. Global and chart configuration values
- 1.3. Container image values
- 1.4. Application configuration values
- 1.5. Environment and command override values
- 1.6. Dynamic plugins values
- 1.7. Deployment and pod values
- 1.8. Networking values
- 1.9. OpenShift values
- 1.10. Database values
- 1.11. Metrics values
- 1.12. Lightspeed values
- 1.13. Orchestrator values
- 1.14. Test values
- 2. Helm Chart Orchestrator infrastructure reference
Preface
Use Helm Chart values to configure and customize your RHDH deployment with Helm CLI.
Chapter 1. Helm Chart configuration reference
Use the overview of default Helm chart values to configure and customize your RHDH deployment.
The values are organized into the following categories:
- Global and chart configuration
- Container image
- Application configuration
- Environment and command overrides
- Dynamic plugins
- Deployment and pod
- Networking
- OpenShift
- Database
- Metrics
- Red Hat Developer Lightspeed for Red Hat Developer Hub
- Orchestrator
- Test
1.1. Display a complete list of Helm Chart values with Helm CLI
Use the available options to configure Red Hat Developer Hub with Helm Charts: the Helm deployment method specific configuration files.
Procedure
Pull the released RHDH Helm chart, including all its dependencies:
$ helm pull rhdh \ --repo https://charts.openshift.io \ --version 1.10.1 \ --untar
View default values of the RHDH Chart:
$ helm show values rhdh
Optional: View default values of the built-in PostgreSQL Chart, which is a dependency of the RHDH Chart:
ImportantUsing the local PostgreSQL database is not recommended for production, as you should be using your own external database. However, it allows for visibility into the local database. For more information, see Configuring an external PostgreSQL instance using the Helm chart.
$ helm show values rhdh/charts/postgresql
1.2. Global and chart configuration values
You can customize global settings that affect all chart resources, including image registries, storage classes, and resource naming.
| Key | Description | Type | Default |
|---|---|---|---|
|
|
Global container image registry. Overrides per-image registries for all containers. |
string |
|
|
|
Global container image registry secret names. |
list |
|
|
|
Global default StorageClass for PVCs. |
string |
|
|
|
Override the chart name used in resource naming. |
string |
|
|
|
Override the full resource name. |
string |
|
|
|
Labels applied to all chart resources. |
object |
|
|
|
Annotations applied to all chart resources. |
object |
|
|
|
Custom hostname for the RHDH instance. |
string |
|
1.3. Container image values
You can configure the container image used for the main RHDH deployment, including the registry, repository, tag, and pull policy.
| Key | Description | Type | Default |
|---|---|---|---|
|
|
Container image configuration for the main RHDH container. |
object |
See child keys |
|
|
Image registry. |
string |
|
|
|
Image repository. |
string |
|
|
|
Image tag. |
string |
|
|
|
Image pull policy. |
string |
|
|
|
Overrides the image tag with an image digest. |
string |
|
|
|
Secrets for pulling images from private registries. Merged with global |
list |
|
1.4. Application configuration values
You can configure the Backstage application settings and backend service-to-service authentication for your RHDH instance.
| Key | Description | Type | Default |
|---|---|---|---|
|
|
Inline Backstage app-config YAML. Rendered into a ConfigMap and mounted as |
object |
See child keys |
|
|
Authentication providers configuration. |
object |
See child keys |
|
|
Authentication provider settings. |
object |
|
|
|
Base URL for the Backstage front-end application. |
string |
Go template |
|
|
Base URL for the Backstage backend. |
string |
Go template |
|
|
Allowed CORS origin for the backend. |
string |
Go template |
|
|
Database connection host. Resolved from environment variables. |
string |
|
|
|
Database connection port. |
string |
|
|
|
Database connection user. |
string |
|
|
|
Database connection password. |
string |
|
|
|
External access configuration for backend authentication. |
list |
See child keys |
|
|
Additional app-config files from existing ConfigMaps. Each item requires |
list |
|
|
|
Backend service-to-service authentication configuration. |
object |
See child keys |
|
|
Enable backend service-to-service authentication. Generates a random secret unless |
boolean |
|
|
|
Name of an existing Secret containing the backend auth token. When empty, the chart generates one. |
string |
|
|
|
Key within the Secret that holds the backend auth token. |
string |
|
|
|
Use a specific value for the backend auth token instead of generating one. |
string |
|
1.5. Environment and command override values
You can override the default container command, arguments, and environment variables for the main RHDH container. The chart provides both override keys that fully replace system defaults and extra keys that append to them.
The override keys (for example, commandOverride and envOverride) replace system defaults entirely. When you use an override key, system-injected environment variables such as BACKEND_SECRET and database credentials are not added automatically. Use the extra keys (for example, extraEnv and extraArgs) to add values without replacing the defaults.
| Key | Description | Type | Default |
|---|---|---|---|
|
|
Override the container command. |
list |
|
|
|
Override the container arguments entirely. When set, system config arguments are not added automatically; you must include them yourself. |
list |
|
|
|
Extra arguments appended after the system config flags. |
list |
|
|
|
Override the container environment variables entirely. When set, system env vars ( |
list |
|
|
|
Extra environment variables appended after the system env vars. |
list |
|
|
|
Override the container |
list |
|
|
|
Extra |
list |
|
1.6. Dynamic plugins values
You can configure the dynamic plugins system, including plugin includes, the plugin list, volume settings for the plugins root directory, and the init container that installs plugins at startup. You can also configure the catalog index for plugin discovery in the Extensions UI.
| Key | Description | Type | Default |
|---|---|---|---|
|
|
Dynamic plugins system configuration. |
object |
See child keys |
|
|
Array of YAML files listing dynamic plugins to include. Relative paths are resolved from the working directory of the init container ( |
list |
|
|
|
List of dynamic plugins. Every item defines the plugin |
list |
|
|
|
Maximum uncompressed size (in bytes) of a single dynamic plugin entry. |
integer |
|
|
|
Volume configuration for the dynamic plugins root directory. |
object |
See child keys |
|
|
Volume type: |
string |
|
|
|
StorageClass for the ephemeral volume. When empty, uses |
string |
|
|
|
Access modes for the ephemeral PVC. |
list |
|
|
|
Storage request for the ephemeral PVC. |
string |
|
|
|
Raw Kubernetes emptyDir volume spec. Used when type is |
object |
|
|
|
Name of the PersistentVolumeClaim to use. Used when type is |
string |
|
|
|
Configuration for the |
object |
See child keys |
|
|
Override the default command. |
list |
|
|
|
Override the default arguments. |
list |
|
|
|
Extra arguments appended after the default arguments. Ignored when |
list |
|
|
|
Extra environment variables appended after the system env vars. |
list |
|
|
|
Additional volume mounts appended after the system mounts. |
list |
|
|
|
Resource requests and limits. Defaults: requests cpu=250m, memory=256Mi; limits cpu=1000m, memory=2.5Gi, ephemeral-storage=5Gi. |
object |
See description |
|
|
Security context for the init container. Defaults to the value of |
object |
|
|
|
Plugin catalog index image configuration for plugin discovery in the Extensions UI. |
object |
See child keys |
|
|
Catalog index image registry. |
string |
|
|
|
Catalog index image repository. |
string |
|
|
|
Catalog index image tag. |
string |
|
|
|
Overrides the image tag with an image digest. |
string |
|
|
|
Extra catalog index images for additional plugin discovery. Each item must include |
list |
|
1.7. Deployment and pod values
You can configure deployment settings, pod scheduling, security contexts, resource limits, health probes, extra volumes, and autoscaling for your RHDH instance.
| Key | Description | Type | Default |
|---|---|---|---|
|
|
Number of required pods. |
integer |
|
|
|
Number of old ReplicaSets to retain. |
integer |
|
|
|
Deployment update strategy. |
object |
|
|
|
ServiceAccount configuration. |
object |
See child keys |
|
|
Create a ServiceAccount. |
boolean |
|
|
|
Automount the ServiceAccount token. |
boolean |
|
|
|
Additional labels for the ServiceAccount. |
object |
|
|
|
Annotations for the ServiceAccount. |
object |
|
|
|
The name of the service account to use. If not set and |
string |
|
|
|
Annotations to add to the pod. |
object |
|
|
|
Labels to add to the pod. |
object |
|
|
|
Pod-level security context. |
object |
|
|
|
Security context for the main RHDH container (not the Lightspeed sidecar or init containers). |
object |
See child keys |
|
|
Mount the container root filesystem as read-only. |
boolean |
|
|
|
Prevent privilege escalation. |
boolean |
|
|
|
Linux capabilities to drop. |
list |
|
|
|
Run the container as a non-root user. |
boolean |
|
|
|
Seccomp profile type. |
string |
|
|
|
Resource requests and limits for the main RHDH container. |
object |
See child keys |
|
|
CPU request. |
string |
|
|
|
Memory request. |
string |
|
|
|
CPU limit. |
string |
|
|
|
Memory limit. |
string |
|
|
|
Ephemeral storage limit. |
string |
|
|
|
Startup probe configuration. Uses HTTP GET on |
object |
See description |
|
|
Readiness probe configuration. Uses HTTP GET on |
object |
See description |
|
|
Liveness probe configuration. Uses HTTP GET on |
object |
See description |
|
|
Additional volumes to add to the pod. These are appended to the system volumes. |
list |
|
|
|
Additional volume mounts to add to the main container. These are appended to the system mounts. |
list |
|
|
|
Additional sidecar containers. |
list |
|
|
|
Init containers to run before the system init containers. |
list |
|
|
|
Additional init containers. These are added after system init containers. |
list |
|
|
|
Node labels for pod assignment. |
object |
|
|
|
Tolerations for pod assignment. |
list |
|
|
|
Affinity rules for pod assignment. |
object |
|
|
|
Topology spread constraints for pod scheduling. |
list |
|
|
|
Host aliases for |
list |
|
|
|
Annotations for the Deployment resource (not the pod). |
object |
|
|
|
Horizontal Pod Autoscaler configuration. |
object |
See child keys |
|
|
Enable autoscaling. |
boolean |
|
|
|
Minimum number of replicas. |
integer |
|
|
|
Maximum number of replicas. |
integer |
|
|
|
Target CPU use percentage. |
integer |
|
|
|
Pod disruption budget configuration. |
object |
See child keys |
|
|
Create a PodDisruptionBudget. |
boolean |
|
|
|
Minimum number of pods that must be available. |
string |
|
|
|
Maximum number of pods that can be unavailable. |
integer |
|
1.8. Networking values
You can configure the Kubernetes Service, Ingress, and Gateway API HTTPRoute for your RHDH instance.
| Key | Description | Type | Default |
|---|---|---|---|
|
|
Kubernetes Service configuration. |
object |
See child keys |
|
|
Service type. |
string |
|
|
|
Service port. |
integer |
|
|
|
Additional service ports. Default includes |
list |
See description |
|
|
Service annotations. |
object |
|
|
|
NodePort value. Only used when |
string |
|
|
|
Session affinity. |
string |
|
|
|
Static ClusterIP. Set to |
string |
|
|
|
LoadBalancer IP address. |
string |
|
|
|
Allowed source ranges for LoadBalancer. |
list |
|
|
|
External traffic policy. |
string |
|
|
|
IP family policy for dual-stack support. |
string |
|
|
|
IP families for dual-stack support. |
list |
|
|
|
Kubernetes Ingress configuration. |
object |
See child keys |
|
|
Enable Ingress. |
boolean |
|
|
|
Ingress class name. |
string |
|
|
|
Ingress annotations. |
object |
|
|
|
Ingress host rules. Default: one host entry using |
list |
See description |
|
|
TLS configuration for Ingress. |
list |
|
|
|
Gateway API HTTPRoute configuration. |
object |
See child keys |
|
|
Enable HTTPRoute. |
boolean |
|
|
|
Labels for the HTTPRoute. |
object |
|
|
|
Annotations for the HTTPRoute. |
object |
|
|
|
Parent references for the HTTPRoute. |
list |
|
|
|
Hostnames for the HTTPRoute. |
list |
|
|
|
Routing rules for the HTTPRoute. |
list |
|
1.9. OpenShift values
You can configure OpenShift Container Platform-specific settings, including the cluster router base URL and the Route resource for your RHDH instance.
| Key | Description | Type | Default |
|---|---|---|---|
|
|
OpenShift Container Platform-specific configuration. |
object |
See child keys |
|
|
Base domain for the OpenShift Container Platform cluster router. Used to construct the default hostname for your RHDH instance. |
string |
|
|
|
OpenShift Container Platform Route configuration. |
object |
See child keys |
|
|
Annotations for the Route. |
object |
|
|
|
Enable the OpenShift Container Platform Route. |
boolean |
|
|
|
Hostname for the Route. Defaults to the value of the |
string |
"{{ .Values.host }}" |
|
|
Path for the Route. |
string |
|
|
|
Wildcard policy for the Route. |
string |
|
|
|
TLS configuration for the Route. |
object |
See child keys |
|
|
Enable TLS on the Route. |
boolean |
|
|
|
TLS termination type. |
string |
|
|
|
TLS certificate. |
string |
|
|
|
TLS private key. |
string |
|
|
|
CA certificate. |
string |
|
|
|
Destination CA certificate for re-encrypt termination. |
string |
|
|
|
Insecure edge termination policy. |
string |
|
1.10. Database values
You can configure the built-in PostgreSQL database or connect to an external PostgreSQL instance for your RHDH deployment.
To use an external PostgreSQL database, set postgresql.enabled to false and configure the externalDatabase values.
| Key | Description | Type | Default |
|---|---|---|---|
|
|
Built-in PostgreSQL database configuration (Bitnami subchart). Enabled by default. |
object |
See child keys |
|
|
Enable the built-in PostgreSQL database. |
boolean |
|
|
|
PostgreSQL data directory. |
string |
|
|
|
Enable service bindings for the PostgreSQL instance. |
boolean |
|
|
|
PostgreSQL image registry. |
string |
|
|
|
PostgreSQL image repository. |
string |
|
|
|
PostgreSQL image tag. |
string |
|
|
|
Overrides the image tag with an image digest. |
string |
|
|
|
Key in the Secret for the PostgreSQL admin password. |
string |
|
|
|
Key in the Secret for the PostgreSQL user password. |
string |
|
|
|
Enable pod security context for the PostgreSQL primary. |
boolean |
|
|
|
Enable container security context for the PostgreSQL primary. |
boolean |
|
|
|
Resource requests and limits. Defaults: requests |
object |
See description |
|
|
Enable persistence for the PostgreSQL primary. |
boolean |
|
|
|
Size of the persistent volume. |
string |
|
|
|
Mount path for the persistent volume. |
string |
|
|
|
External database connection configuration. Used when |
object |
See child keys |
|
|
External database hostname. |
string |
|
|
|
External database port. |
integer |
|
|
|
External database user. |
string |
|
|
|
Name of an existing Secret containing the database password. |
string |
|
|
|
Key within the Secret that holds the database password. |
string |
|
1.11. Metrics values
You can configure Prometheus metrics collection and the ServiceMonitor resource for your RHDH instance.
| Key | Description | Type | Default |
|---|---|---|---|
|
|
Metrics and monitoring configuration. |
object |
See child keys |
|
|
Prometheus ServiceMonitor configuration. |
object |
See child keys |
|
|
Enable the ServiceMonitor resource. |
boolean |
|
|
|
Metrics endpoint path. |
string |
|
|
|
Name of the Service port to scrape. |
string |
|
|
|
Scrape interval. When empty, uses the Prometheus default. |
string |
|
|
|
Labels for the ServiceMonitor. Use these to match the Prometheus operator’s |
object |
|
|
|
Annotations for the ServiceMonitor. |
object |
|
1.12. Lightspeed values
You can configure Red Hat Developer Lightspeed for Red Hat Developer Hub, the AI assistant, as a first-class feature of your RHDH instance, including the dynamic plugins, configuration files, Retrieval-Augmented Generation (RAG) init container, and core sidecar.
| Key | Description | Type | Default |
|---|---|---|---|
|
|
Lightspeed AI assistant configuration. |
object |
See child keys |
|
|
Enable Lightspeed. |
boolean |
|
|
|
Dynamic plugin definitions for Lightspeed. Default includes the front-end and back-end plugins from |
list |
See description |
|
|
Configuration files for Lightspeed. |
object |
See child keys |
|
|
Name of an existing ConfigMap containing the Lightspeed stack configuration. |
string |
|
|
|
Key within the ConfigMap. |
string |
|
|
|
Name of an existing ConfigMap containing the Lightspeed server configuration. |
string |
|
|
|
Key within the ConfigMap. |
string |
|
|
|
Name of an existing ConfigMap containing the Lightspeed profile configuration. |
string |
|
|
|
Key within the ConfigMap. |
string |
|
|
|
Name of an existing Secret containing the Lightspeed credentials. |
string |
|
|
|
Volume for the Lightspeed runtime data. |
object |
See child keys |
|
|
Volume type: |
string |
|
|
|
Raw Kubernetes emptyDir volume spec. |
object |
|
|
|
Raw Kubernetes PVC volume spec. |
object |
|
|
|
RAG (Retrieval-Augmented Generation) init container configuration. |
object |
See child keys |
|
|
RAG init container image registry. |
string |
|
|
|
RAG init container image repository. |
string |
|
|
|
RAG init container image tag. |
string |
(version-specific) |
|
|
Overrides the image tag with an image digest. |
string |
|
|
|
Image pull policy for the RAG init container. |
string |
|
|
|
Override the default command. |
list |
|
|
|
Override the default arguments. |
list |
|
|
|
Extra arguments appended after the defaults. |
list |
|
|
|
Extra environment variables. |
list |
|
|
|
Additional volume mounts. |
list |
|
|
|
Resource requests and limits. Defaults: requests cpu=50m, memory=150Mi; limits cpu=100m, memory=500Mi. |
object |
See description |
|
|
Security context. Default: readOnlyRootFilesystem=true, allowPrivilegeEscalation=false, runAsNonRoot=true, seccompProfile type=RuntimeDefault, drop ALL capabilities. |
object |
See description |
|
|
Lightspeed core sidecar container configuration. |
object |
See child keys |
|
|
Core sidecar image registry. |
string |
|
|
|
Core sidecar image repository. |
string |
|
|
|
Core sidecar image tag. |
string |
|
|
|
Overrides the image tag with an image digest. |
string |
|
|
|
Image pull policy for the core sidecar. |
string |
|
|
|
Override the default command. |
list |
|
|
|
Override the default arguments. |
list |
|
|
|
Extra arguments. |
list |
|
|
|
Extra environment variables. |
list |
|
|
|
Additional volume mounts. |
list |
|
|
|
Resource requests and limits. Defaults: requests cpu=100m, memory=512Mi; limits cpu=1000m, memory=2Gi. |
object |
See description |
|
|
Security context. Default: readOnlyRootFilesystem=true, allowPrivilegeEscalation=false, runAsNonRoot=true, seccompProfile type=RuntimeDefault, drop ALL capabilities. |
object |
See description |
1.13. Orchestrator values
You can configure the Orchestrator serverless workflow feature, including the SonataFlow platform, eventing, external database connections, and dynamic plugins for your RHDH instance.
| Key | Description | Type | Default |
|---|---|---|---|
|
|
Orchestrator serverless workflow configuration. |
object |
See child keys |
|
|
Enable the Orchestrator feature. |
boolean |
|
|
|
Enable the Serverless Logic Operator. |
boolean |
|
|
|
Enable the Serverless Operator. |
boolean |
|
|
|
SonataFlow platform configuration. |
object |
See child keys |
|
|
Enable monitoring for the SonataFlow platform. |
boolean |
|
|
|
Name of the eventing broker. |
string |
|
|
|
Namespace of the eventing broker. |
string |
|
|
|
Resource requests and limits. Defaults: requests memory=64Mi, cpu=250m; limits memory=1Gi, cpu=500m. |
object |
See description |
|
|
Name of an existing Secret for the external database credentials. |
string |
|
|
|
External database name. |
string |
|
|
|
External database host. |
string |
|
|
|
External database port. |
string |
|
|
|
Database creation job configuration. |
object |
See child keys |
|
|
Number of retries before the job is considered failed. |
integer |
|
|
|
Time-to-live after job completion. |
string |
(not set) |
|
|
Maximum time (seconds) for the job to run. |
integer |
|
|
|
Image for the database creation job. Defaults to the PostgreSQL image values. |
object |
See description |
|
|
Data Index service image. Registry, repository, tag, and digest all default to empty strings. |
object |
See description |
|
|
Job Service image. Registry, repository, tag, and digest all default to empty strings. |
object |
See description |
|
|
Dynamic plugin definitions for the Orchestrator. Default includes the back-end, form widgets, front-end, and scaffolder back-end module plugins from |
list |
See description |
1.14. Test values
You can configure the Helm test pod used to verify that your RHDH instance is running correctly.
| Key | Description | Type | Default |
|---|---|---|---|
|
|
Helm test pod configuration. |
object |
See child keys |
|
|
Enable the Helm test pod. |
boolean |
|
|
|
Image for the test pod. |
object |
See child keys |
|
|
Test image registry. |
string |
|
|
|
Test image repository. |
string |
|
|
|
Test image tag. |
string |
|
|
|
Overrides the image tag with an image digest. |
string |
|
|
|
Image pull policy. |
string |
|
|
|
Security context for the test pod. Default: allowPrivilegeEscalation=false, readOnlyRootFilesystem=true, drop ALL capabilities. |
object |
See description |
Chapter 2. Helm Chart Orchestrator infrastructure reference
Use the overview of default Helm Chart values to configure and customize your Orchestrator infrastructure on OpenShift Container Platform.
2.1. Display a complete list of Orchestrator infrastructure values with Helm CLI
Use the available options to configure Orchestrator infrastructure with Helm Chart: the Helm deployment method specific configuration files.
Procedure
Pull the released RHDH Orchestrator Infrastructure Helm Chart, including all its dependencies:
helm pull redhat-developer-hub-orchestrator-infra --repo https://charts.openshift.io --version 1.10.1
Display the configurable infrastructure values from the chart:
helm show values redhat-developer-hub-orchestrator-infra \ --repo https://charts.openshift.io \ --version 1.10.1
2.2. Orchestrator infrastructure Helm Chart values
Use these Helm Chart values to deploy the Orchestrator infrastructure on OpenShift Container Platform.
| Key | Description | Type | Default |
|---|---|---|---|
|
|
Specifies if operator is deployed by the Helm chart. |
bool |
|
|
|
Specifies the namespace where the operator is deployed. |
string |
|
|
|
Specifies the channel of an operator package to subscribe to. |
string |
|
|
|
Specifies if update should be installed automatically. |
string |
|
|
|
Name of the operator package. |
string |
|
|
|
Name of the catalog source. |
string |
|
|
|
Name of the catalog source namespace. |
string |
|
|
|
Specifies the initial version of the operator. Important The version must match the custom resource definitions (CRDs) installed by the chart. |
string |
|
|
|
Specifies if the operator is deployed by the chart. |
bool |
|
|
|
Specifies the namespace where the operator is deployed. |
string |
|
|
|
Specifies the channel of an operator package to subscribe to. |
string |
|
|
|
Specifies if the update is installed automatically. |
string |
|
|
|
Name of the operator package. |
string |
|
|
|
Name of the catalog source. |
string |
|
|
|
Name of the catalog source namespace. |
string |
|
|
|
Specifies if the test pod used for testing the release with helm test is created. |
bool |
|
|
|
Test pod image. |
string |
|