← Back to reference

Helm Reference

Chart Structure

denpex-platform/
├── Chart.yaml
├── values.yaml
├── templates/
│   ├── control-plane/
│   │   ├── deployment.yaml
│   │   ├── service.yaml
│   │   └── hpa.yaml
│   ├── agent/
│   │   ├── daemonset.yaml
│   │   └── configmap.yaml
│   ├── remediator/
│   │   └── deployment.yaml
│   ├── platform/
│   │   ├── statefulset.yaml
│   │   └── pvc.yaml
│   ├── crds/
│   │   ├── denpex-noderemediation.yaml
│   │   ├── denpex-cluster.yaml
│   │   ├── denpex-policy.yaml
│   │   └── denpex-rbacbinding.yaml
│   ├── rbac/
│   │   ├── clusterrole.yaml
│   │   ├── clusterrolebinding.yaml
│   │   └── serviceaccount.yaml
│   └── networkpolicies/
│       └── default-deny.yaml

Required Values

controlPlane:
  image: denpex/control-plane:0.7.0
  replicas: 3
  resources:
    requests: { cpu: "2", memory: "4Gi" }
    limits:   { cpu: "8", memory: "16Gi" }
agent:
  image: denpex/agent:0.7.0
remediator:
  image: denpex/remediator:0.7.0
objectStore:
  size: 1Ti
  storageClass: gp3
kms:
  mode: external
  provider: aws
airgapped: false

Common Overrides

Enable RBAC

rbac:
  enabled: true
  defaultTenant: acme

Restrict CPU/Memory

controlPlane:
  resources:
    limits:
      memory: "32Gi"

Add Pod Security

podSecurityProfile: restricted
runAsNonRoot: true
seccompProfile: RuntimeDefault

Air-Gapped Override

airgapped: true
imageRegistry: registry.example.com
objectStore:
  mode: local
  endpoint: http://minio.denpex-system:9000

Validation

helm template denpex denpex/denpex-platform > rendered.yaml
helm lint denpex/denpex-platform

Upgrade Path

docs/upgrade-guide.md covers the in-place upgrade process.