Bitnami package for Grafana Loki

Grafana Loki is a horizontally scalable, highly available, and multi-tenant log aggregation system. It provides real-time long tailing and full persistence to object storage.

Overview of Grafana Loki

Trademarks: This software listing is packaged by Bitnami. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.

TL;DR

helm install my-release oci://REGISTRY_NAME/REPOSITORY_NAME/grafana-loki

Note: You need to substitute the placeholders REGISTRY_NAME and REPOSITORY_NAME with a reference to your Helm chart registry and repository.

Introduction

Bitnami charts for Helm are carefully engineered, actively maintained and are the quickest and easiest way to deploy containers on a Kubernetes cluster that are ready to handle production workloads.

This chart bootstraps a Grafana Loki Deployment in a Kubernetes cluster using the Helm package manager.

Bitnami charts can be used with Kubeapps for deployment and management of Helm Charts in clusters.

Prerequisites

• Kubernetes 1.23+
• Helm 3.8.0+
• PV provisioner support in the underlying infrastructure

Installing the Chart

To install the chart with the release name my-release:

helm install my-release oci://REGISTRY_NAME/REPOSITORY_NAME/grafana-loki

Note: You need to substitute the placeholders REGISTRY_NAME and REPOSITORY_NAME with a reference to your Helm chart registry and repository. For example, in the case of Bitnami, you need to use REGISTRY_NAME=registry-1.docker.io and REPOSITORY_NAME=bitnamicharts.

The command deploys grafana-loki on the Kubernetes cluster in the default configuration. The Parameters section lists the parameters that can be configured during installation.

Tip: List all releases using helm list

Configuration and installation details

Resource requests and limits

Bitnami charts allow setting resource requests and limits for all containers inside the chart deployment. These are inside the resources value (check parameter table). Setting requests is essential for production workloads and these should be adapted to your specific use case.

To make this process easier, the chart contains the resourcesPreset values, which automatically sets the resources section according to different presets. Check these presets in the bitnami/common chart. However, in production workloads using resourcePreset is discouraged as it may not fully adapt to your specific needs. Find more information on container resource management in the official Kubernetes documentation.

Rolling VS Immutable tags

It is strongly recommended to use immutable tags in a production environment. This ensures your deployment does not change automatically if the same tag is updated with a different image.

Bitnami will release a new chart updating its containers if a new version of the main container, significant changes, or critical vulnerabilities exist.

Loki configuration

The loki configuration file loki.yaml is shared across the different components: distributor, compactor, ingester, querier and queryFrontend. This is set in the loki.configuration value. Check the official Loki Grafana documentation for the list of possible configurations.

Additional environment variables

In case you want to add extra environment variables (useful for advanced operations like custom init scripts), you can use the extraEnvVars property inside each of the subsections: distributor, compactor, ingester, querier, queryFrontend and vulture.

compactor:
  extraEnvVars:
    - name: LOG_LEVEL
      value: error

distributor:
  extraEnvVars:
    - name: LOG_LEVEL
      value: error

ingester:
  extraEnvVars:
    - name: LOG_LEVEL
      value: error

querier:
  extraEnvVars:
    - name: LOG_LEVEL
      value: error

queryFrontend:
  extraEnvVars:
    - name: LOG_LEVEL
      value: error

vulture:
  extraEnvVars:
    - name: LOG_LEVEL
      value: error

Alternatively, you can use a ConfigMap or a Secret with the environment variables. To do so, use the extraEnvVarsCM or the extraEnvVarsSecret values.

Sidecars

If additional containers are needed in the same pod as grafana-loki (such as additional metrics or logging exporters), they can be defined using the sidecars parameter inside each of the subsections: distributor, compactor, ingester, querier, queryFrontend and vulture.

sidecars:
- name: your-image-name
  image: your-image
  imagePullPolicy: Always
  ports:
  - name: portname
    containerPort: 1234

If these sidecars export extra ports, extra port definitions can be added using the service.extraPorts parameter (where available), as shown in the example below:

service:
  extraPorts:
  - name: extraPort
    port: 11311
    targetPort: 11311

NOTE: This Helm chart already includes sidecar containers for the Prometheus exporters (where applicable). These can be activated by adding the --enable-metrics=true parameter at deployment time. The sidecars parameter should therefore only be used for any extra sidecar containers.

If additional init containers are needed in the same pod, they can be defined using the initContainers parameter. Here is an example:

initContainers:
  - name: your-image-name
    image: your-image
    imagePullPolicy: Always
    ports:
      - name: portname
        containerPort: 1234

Learn more about sidecar containers and init containers.

Pod affinity

This chart allows you to set your custom affinity using the affinity parameter. Find more information about Pod affinity in the kubernetes documentation.

As an alternative, use one of the preset configurations for pod affinity, pod anti-affinity, and node affinity available at the bitnami/common chart. To do so, set the podAffinityPreset, podAntiAffinityPreset, or nodeAffinityPreset parameters inside each of the subsections: distributor, compactor, ingester, querier, queryFrontend and vulture.

External cache support

You may want to have Grafana Loki connect to an external Memcached rather than installing one inside your cluster. Typical reasons for this are to use a managed cache service, or to share a common cache server for all your applications. To achieve this, the chart allows you to specify credentials for an external database with the externalMemcached parameter. You should also disable the Memcached installation with the memcached.enabled option. Here is an example:

memcached.enabled=false
externalMemcached.host=myexternalhost
externalMemcached.port=11211

Persistence

Limitation

This chart does not function fully when using local filesystem as a persistence store. When using a local filesystem as a persistence store, querying will not be possible (or limited to the ingesters’ in-memory caches). For a fully functional deployment of this helm chart, an object storage backend is required.

Data

The Bitnami grafana-loki image stores the grafana-loki ingester data at the /bitnami path of the container. Persistent Volume Claims are used to keep the data across deployments.

Parameters

Global parameters

Name	Description	Value
global.imageRegistry	Global Docker image registry	""
global.imagePullSecrets	Global Docker registry secret names as an array	[]
global.defaultStorageClass	Global default StorageClass for Persistent Volume(s)	""
global.storageClass	DEPRECATED: use global.defaultStorageClass instead	""
global.compatibility.openshift.adaptSecurityContext	Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation)	auto

Common parameters

Name	Description	Value
kubeVersion	Override Kubernetes version	""
nameOverride	String to partially override common.names.fullname	""
fullnameOverride	String to fully override common.names.fullname	""
commonLabels	Labels to add to all deployed objects	{}
commonAnnotations	Annotations to add to all deployed objects	{}
clusterDomain	Kubernetes cluster domain name	cluster.local
extraDeploy	Array of extra objects to deploy with the release	[]
diagnosticMode.enabled	Enable diagnostic mode (all probes will be disabled and the command will be overridden)	false
diagnosticMode.command	Command to override all containers in the deployments/statefulsets	["sleep"]
diagnosticMode.args	Args to override all containers in the deployments/statefulsets	["infinity"]

Common Grafana Loki Parameters

Name	Description	Value
loki.image.registry	Grafana Loki image registry	REGISTRY_NAME
loki.image.repository	Grafana Loki image repository	REPOSITORY_NAME/grafana-loki
loki.image.digest	Grafana Loki image digest in the way sha256:aa…. Please note this parameter, if set, will override the tag	""
loki.image.pullPolicy	Grafana Loki image pull policy	IfNotPresent
loki.image.pullSecrets	Grafana Loki image pull secrets	[]
loki.configuration	Loki components configuration	""
loki.overrideConfiguration	Loki components configuration override. Values defined here takes precedence over loki.configuration	{}
loki.existingConfigmap	Name of a ConfigMap with the Loki configuration	""
loki.dataDir	path to the Loki data directory	/bitnami/grafana-loki
loki.containerPorts.http	Loki components web container port	3100
loki.containerPorts.grpc	Loki components GRPC container port	9095
loki.containerPorts.gossipRing	Loki components Gossip Ring container port	7946
loki.gossipRing.service.ports.http	Gossip Ring HTTP headless service port	7946
loki.gossipRing.service.annotations	Additional custom annotations for Gossip Ring headless service	{}

Compactor Deployment Parameters

Name	Description	Value
compactor.enabled	Enable Compactor deployment	true
compactor.extraEnvVars	Array with extra environment variables to add to compactor nodes	[]
compactor.extraEnvVarsCM	Name of existing ConfigMap containing extra env vars for compactor nodes	""
compactor.extraEnvVarsSecret	Name of existing Secret containing extra env vars for compactor nodes	""
compactor.command	Override default container command (useful when using custom images)	[]
compactor.args	Override default container args (useful when using custom images)	[]
compactor.extraArgs	Additional container args (will be concatenated to args, unless diagnosticMode is enabled)	[]
compactor.replicaCount	Number of Compactor replicas to deploy	1
compactor.livenessProbe.enabled	Enable livenessProbe on Compactor nodes	true
compactor.livenessProbe.initialDelaySeconds	Initial delay seconds for livenessProbe	60
compactor.livenessProbe.periodSeconds	Period seconds for livenessProbe	10
compactor.livenessProbe.timeoutSeconds	Timeout seconds for livenessProbe	1
compactor.livenessProbe.failureThreshold	Failure threshold for livenessProbe	3
compactor.livenessProbe.successThreshold	Success threshold for livenessProbe	1
compactor.readinessProbe.enabled	Enable readinessProbe on Compactor nodes	true
compactor.readinessProbe.initialDelaySeconds	Initial delay seconds for readinessProbe	60
compactor.readinessProbe.periodSeconds	Period seconds for readinessProbe	10
compactor.readinessProbe.timeoutSeconds	Timeout seconds for readinessProbe	1
compactor.readinessProbe.failureThreshold	Failure threshold for readinessProbe	3
compactor.readinessProbe.successThreshold	Success threshold for readinessProbe	1
compactor.startupProbe.enabled	Enable startupProbe on Compactor containers	false
compactor.startupProbe.initialDelaySeconds	Initial delay seconds for startupProbe	30
compactor.startupProbe.periodSeconds	Period seconds for startupProbe	10
compactor.startupProbe.timeoutSeconds	Timeout seconds for startupProbe	1
compactor.startupProbe.failureThreshold	Failure threshold for startupProbe	15
compactor.startupProbe.successThreshold	Success threshold for startupProbe	1
compactor.customLivenessProbe	Custom livenessProbe that overrides the default one	{}
compactor.customReadinessProbe	Custom readinessProbe that overrides the default one	{}
compactor.customStartupProbe	Custom startupProbe that overrides the default one	{}
compactor.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if compactor.resources is set (compactor.resources is recommended for production).	nano
compactor.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}
compactor.podSecurityContext.enabled	Enabled Compactor pods’ Security Context	true
compactor.podSecurityContext.fsGroupChangePolicy	Set filesystem group change policy	Always
compactor.podSecurityContext.sysctls	Set kernel settings using the sysctl interface	[]
compactor.podSecurityContext.supplementalGroups	Set filesystem extra groups	[]
compactor.podSecurityContext.fsGroup	Set Compactor pod’s Security Context fsGroup	1001
compactor.containerSecurityContext.enabled	Enable containers’ Security Context	true
compactor.containerSecurityContext.seLinuxOptions	Set SELinux options in container	{}
compactor.containerSecurityContext.runAsUser	Set containers’ Security Context runAsUser	1001
compactor.containerSecurityContext.runAsGroup	Set containers’ Security Context runAsGroup	1001
compactor.containerSecurityContext.runAsNonRoot	Set container’s Security Context runAsNonRoot	true
compactor.containerSecurityContext.privileged	Set container’s Security Context privileged	false
compactor.containerSecurityContext.readOnlyRootFilesystem	Set container’s Security Context readOnlyRootFilesystem	true
compactor.containerSecurityContext.allowPrivilegeEscalation	Set container’s Security Context allowPrivilegeEscalation	false
compactor.containerSecurityContext.capabilities.drop	List of capabilities to be dropped	["ALL"]
compactor.containerSecurityContext.seccompProfile.type	Set container’s Security Context seccomp profile	RuntimeDefault
compactor.lifecycleHooks	for the compactor container(s) to automate configuration before or after startup	{}
compactor.automountServiceAccountToken	Mount Service Account token in pod	false
compactor.hostAliases	compactor pods host aliases	[]
compactor.podLabels	Extra labels for compactor pods	{}
compactor.podAnnotations	Annotations for compactor pods	{}
compactor.podAffinityPreset	Pod affinity preset. Ignored if compactor.affinity is set. Allowed values: soft or hard	""
compactor.podAntiAffinityPreset	Pod anti-affinity preset. Ignored if compactor.affinity is set. Allowed values: soft or hard	soft
compactor.nodeAffinityPreset.type	Node affinity preset type. Ignored if compactor.affinity is set. Allowed values: soft or hard	""
compactor.nodeAffinityPreset.key	Node label key to match. Ignored if compactor.affinity is set	""
compactor.nodeAffinityPreset.values	Node label values to match. Ignored if compactor.affinity is set	[]
compactor.affinity	Affinity for Compactor pods assignment	{}
compactor.nodeSelector	Node labels for Compactor pods assignment	{}
compactor.tolerations	Tolerations for Compactor pods assignment	[]
compactor.topologySpreadConstraints	Topology Spread Constraints for pod assignment spread across your cluster among failure-domains	[]
compactor.priorityClassName	Compactor pods’ priorityClassName	""
compactor.schedulerName	Kubernetes pod scheduler registry	""
compactor.updateStrategy.type	Compactor statefulset strategy type	RollingUpdate
compactor.updateStrategy.rollingUpdate	Compactor statefulset rolling update configuration parameters	nil
compactor.extraVolumes	Optionally specify extra list of additional volumes for the Compactor pod(s)	[]
compactor.extraVolumeMounts	Optionally specify extra list of additional volumeMounts for the Compactor container(s)	[]
compactor.sidecars	Add additional sidecar containers to the Compactor pod(s)	[]
compactor.initContainers	Add additional init containers to the Compactor pod(s)	[]
compactor.pdb.create	Enable/disable a Pod Disruption Budget creation	true
compactor.pdb.minAvailable	Minimum number/percentage of pods that should remain scheduled	""
compactor.pdb.maxUnavailable	Maximum number/percentage of pods that may be made unavailable. Defaults to 1 if both compactor.pdb.minAvailable and compactor.pdb.maxUnavailable are empty.	""
compactor.persistence.enabled	Enable persistence in Compactor instances	true
compactor.persistence.existingClaim	Name of an existing PVC to use	""
compactor.persistence.storageClass	PVC Storage Class for Memcached data volume	""
compactor.persistence.accessModes	PVC Access modes	["ReadWriteOnce"]
compactor.persistence.size	PVC Storage Request for Memcached data volume	8Gi
compactor.persistence.annotations	Additional PVC annotations	{}
compactor.persistence.selector	Selector to match an existing Persistent Volume for Compactor’s data PVC	{}
compactor.persistence.dataSource	PVC data source	{}
compactor.enableServiceLinks	Whether information about services should be injected into pod’s environment variable	true

Compactor Traffic Exposure Parameters

Name	Description	Value
compactor.service.type	Compactor service type	ClusterIP
compactor.service.ports.http	Compactor HTTP service port	3100
compactor.service.ports.grpc	Compactor gRPC service port	9095
compactor.service.nodePorts.http	Node port for HTTP	""
compactor.service.sessionAffinityConfig	Additional settings for the sessionAffinity	{}
compactor.service.sessionAffinity	Control where client requests go, to the same pod or round-robin	None
compactor.service.clusterIP	Compactor service Cluster IP	""
compactor.service.loadBalancerIP	Compactor service Load Balancer IP	""
compactor.service.loadBalancerSourceRanges	Compactor service Load Balancer sources	[]
compactor.service.externalTrafficPolicy	Compactor service external traffic policy	Cluster
compactor.service.annotations	Additional custom annotations for Compactor service	{}
compactor.service.extraPorts	Extra ports to expose in the Compactor service	[]
compactor.networkPolicy.enabled	Specifies whether a NetworkPolicy should be created	true
compactor.networkPolicy.allowExternal	Don’t require server label for connections	true
compactor.networkPolicy.allowExternalEgress	Allow the pod to access any range of port and all destinations.	true
compactor.networkPolicy.addExternalClientAccess	Allow access from pods with client label set to “true”. Ignored if compactor.networkPolicy.allowExternal is true.	true
compactor.networkPolicy.extraIngress	Add extra ingress rules to the NetworkPolicy	[]
compactor.networkPolicy.extraEgress	Add extra ingress rules to the NetworkPolicy	[]
compactor.networkPolicy.ingressPodMatchLabels	Labels to match to allow traffic from other pods. Ignored if compactor.networkPolicy.allowExternal is true.	{}
compactor.networkPolicy.ingressNSMatchLabels	Labels to match to allow traffic from other namespaces. Ignored if compactor.networkPolicy.allowExternal is true.	{}
compactor.networkPolicy.ingressNSPodMatchLabels	Pod labels to match to allow traffic from other namespaces. Ignored if compactor.networkPolicy.allowExternal is true.	{}

Gateway Deployment Parameters

Name	Description	Value
gateway.enabled	Enable Gateway deployment	true
gateway.image.registry	Nginx image registry	REGISTRY_NAME
gateway.image.repository	Nginx image repository	REPOSITORY_NAME/nginx
gateway.image.digest	Nginx image digest in the way sha256:aa…. Please note this parameter, if set, will override the tag	""
gateway.image.pullPolicy	Nginx image pull policy	IfNotPresent
gateway.image.pullSecrets	Nginx image pull secrets	[]
gateway.image.debug	Enable debugging in the initialization process	false
gateway.extraEnvVars	Array with extra environment variables to add to gateway nodes	[]
gateway.extraEnvVarsCM	Name of existing ConfigMap containing extra env vars for gateway nodes	""
gateway.extraEnvVarsSecret	Name of existing Secret containing extra env vars for gateway nodes	""
gateway.command	Override default container command (useful when using custom images)	[]
gateway.args	Override default container args (useful when using custom images)	[]
gateway.extraArgs	Additional container args (will be concatenated to args, unless diagnosticMode is enabled)	[]
gateway.verboseLogging	Show the gateway access_log	false
gateway.replicaCount	Number of Gateway replicas to deploy	1
gateway.auth.enabled	Enable basic auth	false
gateway.auth.username	Basic auth username	user
gateway.auth.password	Basic auth password	""
gateway.auth.existingSecret	Name of a secret containing the Basic auth password	""
gateway.livenessProbe.enabled	Enable livenessProbe on Gateway nodes	true
gateway.livenessProbe.initialDelaySeconds	Initial delay seconds for livenessProbe	10
gateway.livenessProbe.periodSeconds	Period seconds for livenessProbe	10
gateway.livenessProbe.timeoutSeconds	Timeout seconds for livenessProbe	1
gateway.livenessProbe.failureThreshold	Failure threshold for livenessProbe	3
gateway.livenessProbe.successThreshold	Success threshold for livenessProbe	1
gateway.readinessProbe.enabled	Enable readinessProbe on Gateway nodes	true
gateway.readinessProbe.initialDelaySeconds	Initial delay seconds for readinessProbe	10
gateway.readinessProbe.periodSeconds	Period seconds for readinessProbe	10
gateway.readinessProbe.timeoutSeconds	Timeout seconds for readinessProbe	1
gateway.readinessProbe.failureThreshold	Failure threshold for readinessProbe	3
gateway.readinessProbe.successThreshold	Success threshold for readinessProbe	1
gateway.startupProbe.enabled	Enable startupProbe on Gateway containers	false
gateway.startupProbe.initialDelaySeconds	Initial delay seconds for startupProbe	10
gateway.startupProbe.periodSeconds	Period seconds for startupProbe	10
gateway.startupProbe.timeoutSeconds	Timeout seconds for startupProbe	1
gateway.startupProbe.failureThreshold	Failure threshold for startupProbe	15
gateway.startupProbe.successThreshold	Success threshold for startupProbe	1
gateway.customLivenessProbe	Custom livenessProbe that overrides the default one	{}
gateway.customReadinessProbe	Custom readinessProbe that overrides the default one	{}
gateway.customStartupProbe	Custom startupProbe that overrides the default one	{}
gateway.containerPorts.http	Gateway HTTP port	8080
gateway.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if gateway.resources is set (gateway.resources is recommended for production).	nano
gateway.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}
gateway.podSecurityContext.enabled	Enabled Gateway pods’ Security Context	true
gateway.podSecurityContext.fsGroupChangePolicy	Set filesystem group change policy	Always
gateway.podSecurityContext.sysctls	Set kernel settings using the sysctl interface	[]
gateway.podSecurityContext.supplementalGroups	Set filesystem extra groups	[]
gateway.podSecurityContext.fsGroup	Set Gateway pod’s Security Context fsGroup	1001
gateway.containerSecurityContext.enabled	Enabled containers’ Security Context	true
gateway.containerSecurityContext.seLinuxOptions	Set SELinux options in container	{}
gateway.containerSecurityContext.runAsUser	Set containers’ Security Context runAsUser	1001
gateway.containerSecurityContext.runAsGroup	Set containers’ Security Context runAsGroup	1001
gateway.containerSecurityContext.runAsNonRoot	Set container’s Security Context runAsNonRoot	true
gateway.containerSecurityContext.privileged	Set container’s Security Context privileged	false
gateway.containerSecurityContext.readOnlyRootFilesystem	Set container’s Security Context readOnlyRootFilesystem	true
gateway.containerSecurityContext.allowPrivilegeEscalation	Set container’s Security Context allowPrivilegeEscalation	false
gateway.containerSecurityContext.capabilities.drop	List of capabilities to be dropped	["ALL"]
gateway.containerSecurityContext.seccompProfile.type	Set container’s Security Context seccomp profile	RuntimeDefault
gateway.lifecycleHooks	for the gateway container(s) to automate configuration before or after startup	{}
gateway.automountServiceAccountToken	Mount Service Account token in pod	false
gateway.hostAliases	gateway pods host aliases	[]
gateway.podLabels	Extra labels for gateway pods	{}
gateway.podAnnotations	Annotations for gateway pods	{}
gateway.podAffinityPreset	Pod affinity preset. Ignored if gateway.affinity is set. Allowed values: soft or hard	""
gateway.podAntiAffinityPreset	Pod anti-affinity preset. Ignored if gateway.affinity is set. Allowed values: soft or hard	soft
gateway.nodeAffinityPreset.type	Node affinity preset type. Ignored if gateway.affinity is set. Allowed values: soft or hard	""
gateway.nodeAffinityPreset.key	Node label key to match. Ignored if gateway.affinity is set	""
gateway.nodeAffinityPreset.values	Node label values to match. Ignored if gateway.affinity is set	[]
gateway.affinity	Affinity for Gateway pods assignment	{}
gateway.nodeSelector	Node labels for Gateway pods assignment	{}
gateway.tolerations	Tolerations for Gateway pods assignment	[]
gateway.topologySpreadConstraints	Topology Spread Constraints for pod assignment spread across your cluster among failure-domains	[]
gateway.priorityClassName	Gateway pods’ priorityClassName	""
gateway.schedulerName	Kubernetes pod scheduler registry	""
gateway.updateStrategy.type	Gateway statefulset strategy type	RollingUpdate
gateway.updateStrategy.rollingUpdate	Gateway statefulset rolling update configuration parameters	nil
gateway.extraVolumes	Optionally specify extra list of additional volumes for the Gateway pod(s)	[]
gateway.extraVolumeMounts	Optionally specify extra list of additional volumeMounts for the Gateway container(s)	[]
gateway.sidecars	Add additional sidecar containers to the Gateway pod(s)	[]
gateway.pdb.create	Enable/disable a Pod Disruption Budget creation	true
gateway.pdb.minAvailable	Minimum number/percentage of pods that should remain scheduled	""
gateway.pdb.maxUnavailable	Maximum number/percentage of pods that may be made unavailable. Defaults to 1 if both gateway.pdb.minAvailable and gateway.pdb.maxUnavailable are empty.	""
gateway.initContainers	Add additional init containers to the Gateway pod(s)	[]
gateway.enableServiceLinks	Whether information about services should be injected into pod’s environment variable	true

Gateway Traffic Exposure Parameters

Name	Description	Value
gateway.service.type	Gateway service type	ClusterIP
gateway.service.ports.http	Gateway HTTP service port	80
gateway.service.nodePorts.http	Node port for HTTP	""
gateway.service.sessionAffinityConfig	Additional settings for the sessionAffinity	{}
gateway.service.sessionAffinity	Control where client requests go, to the same pod or round-robin	None
gateway.service.clusterIP	Gateway service Cluster IP	""
gateway.service.loadBalancerIP	Gateway service Load Balancer IP	""
gateway.service.loadBalancerSourceRanges	Gateway service Load Balancer sources	[]
gateway.service.externalTrafficPolicy	Gateway service external traffic policy	Cluster
gateway.service.annotations	Additional custom annotations for Gateway service	{}
gateway.service.extraPorts	Extra ports to expose in the Gateway service	[]
gateway.networkPolicy.enabled	Specifies whether a NetworkPolicy should be created	true
gateway.networkPolicy.allowExternal	Don’t require server label for connections	true
gateway.networkPolicy.allowExternalEgress	Allow the pod to access any range of port and all destinations.	true
gateway.networkPolicy.addExternalClientAccess	Allow access from pods with client label set to “true”. Ignored if gateway.networkPolicy.allowExternal is true.	true
gateway.networkPolicy.extraIngress	Add extra ingress rules to the NetworkPolicy	[]
gateway.networkPolicy.extraEgress	Add extra ingress rules to the NetworkPolicy	[]
gateway.networkPolicy.ingressPodMatchLabels	Labels to match to allow traffic from other pods. Ignored if gateway.networkPolicy.allowExternal is true.	{}
gateway.networkPolicy.ingressNSMatchLabels	Labels to match to allow traffic from other namespaces. Ignored if gateway.networkPolicy.allowExternal is true.	{}
gateway.networkPolicy.ingressNSPodMatchLabels	Pod labels to match to allow traffic from other namespaces. Ignored if gateway.networkPolicy.allowExternal is true.	{}
gateway.ingress.enabled	Enable ingress record generation for Loki Gateway	false
gateway.ingress.pathType	Ingress path type	ImplementationSpecific
gateway.ingress.apiVersion	Force Ingress API version (automatically detected if not set)	""
gateway.ingress.ingressClassName	IngressClass that will be be used to implement the Ingress (Kubernetes 1.18+)	""
gateway.ingress.hostname	Default host for the ingress record	grafana-loki.local
gateway.ingress.path	Default path for the ingress record	/
gateway.ingress.annotations	Additional annotations for the Ingress resource. To enable certificate autogeneration, place here your cert-manager annotations.	{}
gateway.ingress.tls	Enable TLS configuration for the host defined at ingress.hostname parameter	false
gateway.ingress.selfSigned	Create a TLS secret for this ingress record using self-signed certificates generated by Helm	false
gateway.ingress.extraHosts	An array with additional hostname(s) to be covered with the ingress record	[]
gateway.ingress.extraPaths	An array with additional arbitrary paths that may need to be added to the ingress under the main host	[]
gateway.ingress.extraTls	TLS configuration for additional hostname(s) to be covered with this ingress record	[]
gateway.ingress.secrets	Custom TLS certificates as secrets	[]

index-gateway Deployment Parameters

Name	Description	Value
indexGateway.enabled	Enable index-gateway deployment	false
indexGateway.extraEnvVars	Array with extra environment variables to add to indexGateway nodes	[]
indexGateway.extraEnvVarsCM	Name of existing ConfigMap containing extra env vars for indexGateway nodes	""
indexGateway.extraEnvVarsSecret	Name of existing Secret containing extra env vars for indexGateway nodes	""
indexGateway.command	Override default container command (useful when using custom images)	[]
indexGateway.args	Override default container args (useful when using custom images)	[]
indexGateway.extraArgs	Additional container args (will be concatenated to args, unless diagnosticMode is enabled)	[]
indexGateway.replicaCount	Number of index-gateway replicas to deploy	1
indexGateway.podManagementPolicy	podManagementPolicy to manage scaling operation	""
indexGateway.livenessProbe.enabled	Enable livenessProbe on index-gateway nodes	true
indexGateway.livenessProbe.initialDelaySeconds	Initial delay seconds for livenessProbe	60
indexGateway.livenessProbe.periodSeconds	Period seconds for livenessProbe	10
indexGateway.livenessProbe.timeoutSeconds	Timeout seconds for livenessProbe	1
indexGateway.livenessProbe.failureThreshold	Failure threshold for livenessProbe	3
indexGateway.livenessProbe.successThreshold	Success threshold for livenessProbe	1
indexGateway.readinessProbe.enabled	Enable readinessProbe on index-gateway nodes	true
indexGateway.readinessProbe.initialDelaySeconds	Initial delay seconds for readinessProbe	60
indexGateway.readinessProbe.periodSeconds	Period seconds for readinessProbe	10
indexGateway.readinessProbe.timeoutSeconds	Timeout seconds for readinessProbe	1
indexGateway.readinessProbe.failureThreshold	Failure threshold for readinessProbe	3
indexGateway.readinessProbe.successThreshold	Success threshold for readinessProbe	1
indexGateway.startupProbe.enabled	Enable startupProbe on index-gateway containers	false
indexGateway.startupProbe.initialDelaySeconds	Initial delay seconds for startupProbe	30
indexGateway.startupProbe.periodSeconds	Period seconds for startupProbe	10
indexGateway.startupProbe.timeoutSeconds	Timeout seconds for startupProbe	1
indexGateway.startupProbe.failureThreshold	Failure threshold for startupProbe	15
indexGateway.startupProbe.successThreshold	Success threshold for startupProbe	1
indexGateway.customLivenessProbe	Custom livenessProbe that overrides the default one	{}
indexGateway.customReadinessProbe	Custom readinessProbe that overrides the default one	{}
indexGateway.customStartupProbe	Custom startupProbe that overrides the default one	{}
indexGateway.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if indexGateway.resources is set (indexGateway.resources is recommended for production).	nano
indexGateway.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}
indexGateway.podSecurityContext.enabled	Enabled index-gateway pods’ Security Context	true
indexGateway.podSecurityContext.fsGroupChangePolicy	Set filesystem group change policy	Always
indexGateway.podSecurityContext.sysctls	Set kernel settings using the sysctl interface	[]
indexGateway.podSecurityContext.supplementalGroups	Set filesystem extra groups	[]
indexGateway.podSecurityContext.fsGroup	Set index-gateway pod’s Security Context fsGroup	1001
indexGateway.containerSecurityContext.enabled	Enabled containers’ Security Context	true
indexGateway.containerSecurityContext.seLinuxOptions	Set SELinux options in container	{}
indexGateway.containerSecurityContext.runAsUser	Set containers’ Security Context runAsUser	1001
indexGateway.containerSecurityContext.runAsGroup	Set containers’ Security Context runAsGroup	1001
indexGateway.containerSecurityContext.runAsNonRoot	Set container’s Security Context runAsNonRoot	true
indexGateway.containerSecurityContext.privileged	Set container’s Security Context privileged	false
indexGateway.containerSecurityContext.readOnlyRootFilesystem	Set container’s Security Context readOnlyRootFilesystem	true
indexGateway.containerSecurityContext.allowPrivilegeEscalation	Set container’s Security Context allowPrivilegeEscalation	false
indexGateway.containerSecurityContext.capabilities.drop	List of capabilities to be dropped	["ALL"]
indexGateway.containerSecurityContext.seccompProfile.type	Set container’s Security Context seccomp profile	RuntimeDefault
indexGateway.lifecycleHooks	for the indexGateway container(s) to automate configuration before or after startup	{}
indexGateway.automountServiceAccountToken	Mount Service Account token in pod	false
indexGateway.hostAliases	indexGateway pods host aliases	[]
indexGateway.podLabels	Extra labels for indexGateway pods	{}
indexGateway.podAnnotations	Annotations for indexGateway pods	{}
indexGateway.podAffinityPreset	Pod affinity preset. Ignored if indexGateway.affinity is set. Allowed values: soft or hard	""
indexGateway.podAntiAffinityPreset	Pod anti-affinity preset. Ignored if indexGateway.affinity is set. Allowed values: soft or hard	soft
indexGateway.nodeAffinityPreset.type	Node affinity preset type. Ignored if indexGateway.affinity is set. Allowed values: soft or hard	""
indexGateway.nodeAffinityPreset.key	Node label key to match. Ignored if indexGateway.affinity is set	""
indexGateway.nodeAffinityPreset.values	Node label values to match. Ignored if indexGateway.affinity is set	[]
indexGateway.affinity	Affinity for index-gateway pods assignment	{}
indexGateway.nodeSelector	Node labels for index-gateway pods assignment	{}
indexGateway.tolerations	Tolerations for index-gateway pods assignment	[]
indexGateway.topologySpreadConstraints	Topology Spread Constraints for pod assignment spread across your cluster among failure-domains	[]
indexGateway.priorityClassName	index-gateway pods’ priorityClassName	""
indexGateway.schedulerName	Kubernetes pod scheduler registry	""
indexGateway.updateStrategy.type	index-gateway statefulset strategy type	RollingUpdate
indexGateway.updateStrategy.rollingUpdate	index-gateway statefulset rolling update configuration parameters	nil
indexGateway.extraVolumes	Optionally specify extra list of additional volumes for the index-gateway pod(s)	[]
indexGateway.extraVolumeMounts	Optionally specify extra list of additional volumeMounts for the index-gateway container(s)	[]
indexGateway.sidecars	Add additional sidecar containers to the index-gateway pod(s)	[]
indexGateway.initContainers	Add additional init containers to the index-gateway pod(s)	[]
indexGateway.enableServiceLinks	Whether information about services should be injected into pod’s environment variable	true
indexGateway.pdb.create	Enable/disable a Pod Disruption Budget creation	true
indexGateway.pdb.minAvailable	Minimum number/percentage of pods that should remain scheduled	""
indexGateway.pdb.maxUnavailable	Maximum number/percentage of pods that may be made unavailable. Defaults to 1 if both indexGateway.pdb.minAvailable and indexGateway.pdb.maxUnavailable are empty.	""

index-gateway Persistence Parameters

Name	Description	Value
indexGateway.persistence.enabled	Enable persistence in index-gateway instances	false
indexGateway.persistence.storageClass	PVC Storage Class for index-gateway’s data volume	""
indexGateway.persistence.subPath	The subdirectory of the volume to mount to	""
indexGateway.persistence.accessModes	PVC Access modes	["ReadWriteOnce"]
indexGateway.persistence.size	PVC Storage Request for index-gateway’s data volume	8Gi
indexGateway.persistence.annotations	Additional PVC annotations	{}
indexGateway.persistence.selector	Selector to match an existing Persistent Volume for index-gateway’s data PVC	{}

index-gateway Traffic Exposure Parameters

Name	Description	Value
indexGateway.service.type	index-gateway service type	ClusterIP
indexGateway.service.ports.http	index-gateway HTTP service port	3100
indexGateway.service.ports.grpc	index-gateway GRPC service port	9095
indexGateway.service.nodePorts.http	Node port for HTTP	""
indexGateway.service.nodePorts.grpc	Node port for GRPC	""
indexGateway.service.sessionAffinityConfig	Additional settings for the sessionAffinity	{}
indexGateway.service.sessionAffinity	Control where client requests go, to the same pod or round-robin	None
indexGateway.service.clusterIP	index-gateway service Cluster IP	""
indexGateway.service.loadBalancerIP	index-gateway service Load Balancer IP	""
indexGateway.service.loadBalancerSourceRanges	index-gateway service Load Balancer sources	[]
indexGateway.service.externalTrafficPolicy	index-gateway service external traffic policy	Cluster
indexGateway.service.annotations	Additional custom annotations for index-gateway service	{}
indexGateway.service.extraPorts	Extra ports to expose in the index-gateway service	[]
indexGateway.networkPolicy.enabled	Specifies whether a NetworkPolicy should be created	true
indexGateway.networkPolicy.allowExternal	Don’t require server label for connections	true
indexGateway.networkPolicy.allowExternalEgress	Allow the pod to access any range of port and all destinations.	true
indexGateway.networkPolicy.addExternalClientAccess	Allow access from pods with client label set to “true”. Ignored if indexGateway.networkPolicy.allowExternal is true.	true
indexGateway.networkPolicy.extraIngress	Add extra ingress rules to the NetworkPolicy	[]
indexGateway.networkPolicy.extraEgress	Add extra ingress rules to the NetworkPolicy	[]
indexGateway.networkPolicy.ingressPodMatchLabels	Labels to match to allow traffic from other pods. Ignored if indexGateway.networkPolicy.allowExternal is true.	{}
indexGateway.networkPolicy.ingressNSMatchLabels	Labels to match to allow traffic from other namespaces. Ignored if indexGateway.networkPolicy.allowExternal is true.	{}
indexGateway.networkPolicy.ingressNSPodMatchLabels	Pod labels to match to allow traffic from other namespaces. Ignored if indexGateway.networkPolicy.allowExternal is true.	{}

Distributor Deployment Parameters

Name	Description	Value
distributor.extraEnvVars	Array with extra environment variables to add to distributor nodes	[]
distributor.extraEnvVarsCM	Name of existing ConfigMap containing extra env vars for distributor nodes	""
distributor.extraEnvVarsSecret	Name of existing Secret containing extra env vars for distributor nodes	""
distributor.command	Override default container command (useful when using custom images)	[]
distributor.args	Override default container args (useful when using custom images)	[]
distributor.extraArgs	Additional container args (will be concatenated to args, unless diagnosticMode is enabled)	[]
distributor.replicaCount	Number of Distributor replicas to deploy	1
distributor.livenessProbe.enabled	Enable livenessProbe on Distributor nodes	true
distributor.livenessProbe.initialDelaySeconds	Initial delay seconds for livenessProbe	10
distributor.livenessProbe.periodSeconds	Period seconds for livenessProbe	10
distributor.livenessProbe.timeoutSeconds	Timeout seconds for livenessProbe	1
distributor.livenessProbe.failureThreshold	Failure threshold for livenessProbe	3
distributor.livenessProbe.successThreshold	Success threshold for livenessProbe	1
distributor.readinessProbe.enabled	Enable readinessProbe on Distributor nodes	true
distributor.readinessProbe.initialDelaySeconds	Initial delay seconds for readinessProbe	10
distributor.readinessProbe.periodSeconds	Period seconds for readinessProbe	10
distributor.readinessProbe.timeoutSeconds	Timeout seconds for readinessProbe	1
distributor.readinessProbe.failureThreshold	Failure threshold for readinessProbe	3
distributor.readinessProbe.successThreshold	Success threshold for readinessProbe	1
distributor.startupProbe.enabled	Enable startupProbe on Distributor containers	false
distributor.startupProbe.initialDelaySeconds	Initial delay seconds for startupProbe	30
distributor.startupProbe.periodSeconds	Period seconds for startupProbe	10
distributor.startupProbe.timeoutSeconds	Timeout seconds for startupProbe	1
distributor.startupProbe.failureThreshold	Failure threshold for startupProbe	15
distributor.startupProbe.successThreshold	Success threshold for startupProbe	1
distributor.customLivenessProbe	Custom livenessProbe that overrides the default one	{}
distributor.customReadinessProbe	Custom readinessProbe that overrides the default one	{}
distributor.customStartupProbe	Custom startupProbe that overrides the default one	{}
distributor.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if distributor.resources is set (distributor.resources is recommended for production).	nano
distributor.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}
distributor.podSecurityContext.enabled	Enabled Distributor pods’ Security Context	true
distributor.podSecurityContext.fsGroupChangePolicy	Set filesystem group change policy	Always
distributor.podSecurityContext.sysctls	Set kernel settings using the sysctl interface	[]
distributor.podSecurityContext.supplementalGroups	Set filesystem extra groups	[]
distributor.podSecurityContext.fsGroup	Set Distributor pod’s Security Context fsGroup	1001
distributor.containerSecurityContext.enabled	Enabled containers’ Security Context	true
distributor.containerSecurityContext.seLinuxOptions	Set SELinux options in container	{}
distributor.containerSecurityContext.runAsUser	Set containers’ Security Context runAsUser	1001
distributor.containerSecurityContext.runAsGroup	Set containers’ Security Context runAsGroup	1001
distributor.containerSecurityContext.runAsNonRoot	Set container’s Security Context runAsNonRoot	true
distributor.containerSecurityContext.privileged	Set container’s Security Context privileged	false
distributor.containerSecurityContext.readOnlyRootFilesystem	Set container’s Security Context readOnlyRootFilesystem	true
distributor.containerSecurityContext.allowPrivilegeEscalation	Set container’s Security Context allowPrivilegeEscalation	false
distributor.containerSecurityContext.capabilities.drop	List of capabilities to be dropped	["ALL"]
distributor.containerSecurityContext.seccompProfile.type	Set container’s Security Context seccomp profile	RuntimeDefault
distributor.lifecycleHooks	for the distributor container(s) to automate configuration before or after startup	{}
distributor.automountServiceAccountToken	Mount Service Account token in pod	false
distributor.hostAliases	distributor pods host aliases	[]
distributor.podLabels	Extra labels for distributor pods	{}
distributor.podAnnotations	Annotations for distributor pods	{}
distributor.podAffinityPreset	Pod affinity preset. Ignored if distributor.affinity is set. Allowed values: soft or hard	""
distributor.podAntiAffinityPreset	Pod anti-affinity preset. Ignored if distributor.affinity is set. Allowed values: soft or hard	soft
distributor.nodeAffinityPreset.type	Node affinity preset type. Ignored if distributor.affinity is set. Allowed values: soft or hard	""
distributor.nodeAffinityPreset.key	Node label key to match. Ignored if distributor.affinity is set	""
distributor.nodeAffinityPreset.values	Node label values to match. Ignored if distributor.affinity is set	[]
distributor.affinity	Affinity for Distributor pods assignment	{}
distributor.nodeSelector	Node labels for Distributor pods assignment	{}
distributor.tolerations	Tolerations for Distributor pods assignment	[]
distributor.topologySpreadConstraints	Topology Spread Constraints for pod assignment spread across your cluster among failure-domains	[]
distributor.priorityClassName	Distributor pods’ priorityClassName	""
distributor.schedulerName	Kubernetes pod scheduler registry	""
distributor.updateStrategy.type	Distributor statefulset strategy type	RollingUpdate
distributor.updateStrategy.rollingUpdate	Distributor statefulset rolling update configuration parameters	nil
distributor.extraVolumes	Optionally specify extra list of additional volumes for the Distributor pod(s)	[]
distributor.extraVolumeMounts	Optionally specify extra list of additional volumeMounts for the Distributor container(s)	[]
distributor.sidecars	Add additional sidecar containers to the Distributor pod(s)	[]
distributor.initContainers	Add additional init containers to the Distributor pod(s)	[]
distributor.enableServiceLinks	Whether information about services should be injected into pod’s environment variable	true
distributor.pdb.create	Enable/disable a Pod Disruption Budget creation	true
distributor.pdb.minAvailable	Minimum number/percentage of pods that should remain scheduled	""
distributor.pdb.maxUnavailable	Maximum number/percentage of pods that may be made unavailable. Defaults to 1 if both distributor.pdb.minAvailable and distributor.pdb.maxUnavailable are empty.	""

Distributor Traffic Exposure Parameters

Name	Description	Value
distributor.service.type	Distributor service type	ClusterIP
distributor.service.ports.http	Distributor HTTP service port	3100
distributor.service.ports.grpc	Distributor GRPC service port	9095
distributor.service.nodePorts.http	Node port for HTTP	""
distributor.service.nodePorts.grpc	Node port for GRPC	""
distributor.service.sessionAffinityConfig	Additional settings for the sessionAffinity	{}
distributor.service.sessionAffinity	Control where client requests go, to the same pod or round-robin	None
distributor.service.clusterIP	Distributor service Cluster IP	""
distributor.service.loadBalancerIP	Distributor service Load Balancer IP	""
distributor.service.loadBalancerSourceRanges	Distributor service Load Balancer sources	[]
distributor.service.externalTrafficPolicy	Distributor service external traffic policy	Cluster
distributor.service.annotations	Additional custom annotations for Distributor service	{}
distributor.service.extraPorts	Extra ports to expose in the Distributor service	[]
distributor.networkPolicy.enabled	Specifies whether a NetworkPolicy should be created	true
distributor.networkPolicy.allowExternal	Don’t require server label for connections	true
distributor.networkPolicy.allowExternalEgress	Allow the pod to access any range of port and all destinations.	true
distributor.networkPolicy.addExternalClientAccess	Allow access from pods with client label set to “true”. Ignored if distributor.networkPolicy.allowExternal is true.	true
distributor.networkPolicy.extraIngress	Add extra ingress rules to the NetworkPolicy	[]
distributor.networkPolicy.extraEgress	Add extra ingress rules to the NetworkPolicy	[]
distributor.networkPolicy.ingressPodMatchLabels	Labels to match to allow traffic from other pods. Ignored if distributor.networkPolicy.allowExternal is true.	{}
distributor.networkPolicy.ingressNSMatchLabels	Labels to match to allow traffic from other namespaces. Ignored if distributor.networkPolicy.allowExternal is true.	{}
distributor.networkPolicy.ingressNSPodMatchLabels	Pod labels to match to allow traffic from other namespaces. Ignored if distributor.networkPolicy.allowExternal is true.	{}

Ingester Deployment Parameters

Name	Description	Value
ingester.extraEnvVars	Array with extra environment variables to add to ingester nodes	[]
ingester.extraEnvVarsCM	Name of existing ConfigMap containing extra env vars for ingester nodes	""
ingester.extraEnvVarsSecret	Name of existing Secret containing extra env vars for ingester nodes	""
ingester.command	Override default container command (useful when using custom images)	[]
ingester.args	Override default container args (useful when using custom images)	[]
ingester.extraArgs	Additional container args (will be concatenated to args, unless diagnosticMode is enabled)	[]
ingester.replicaCount	Number of Ingester replicas to deploy	1
ingester.livenessProbe.enabled	Enable livenessProbe on Ingester nodes	true
ingester.livenessProbe.initialDelaySeconds	Initial delay seconds for livenessProbe	10
ingester.livenessProbe.periodSeconds	Period seconds for livenessProbe	10
ingester.livenessProbe.timeoutSeconds	Timeout seconds for livenessProbe	1
ingester.livenessProbe.failureThreshold	Failure threshold for livenessProbe	3
ingester.livenessProbe.successThreshold	Success threshold for livenessProbe	1
ingester.readinessProbe.enabled	Enable readinessProbe on Ingester nodes	true
ingester.readinessProbe.initialDelaySeconds	Initial delay seconds for readinessProbe	10
ingester.readinessProbe.periodSeconds	Period seconds for readinessProbe	10
ingester.readinessProbe.timeoutSeconds	Timeout seconds for readinessProbe	1
ingester.readinessProbe.failureThreshold	Failure threshold for readinessProbe	3
ingester.readinessProbe.successThreshold	Success threshold for readinessProbe	1
ingester.startupProbe.enabled	Enable startupProbe on Ingester containers	false
ingester.startupProbe.initialDelaySeconds	Initial delay seconds for startupProbe	30
ingester.startupProbe.periodSeconds	Period seconds for startupProbe	10
ingester.startupProbe.timeoutSeconds	Timeout seconds for startupProbe	1
ingester.startupProbe.failureThreshold	Failure threshold for startupProbe	15
ingester.startupProbe.successThreshold	Success threshold for startupProbe	1
ingester.customLivenessProbe	Custom livenessProbe that overrides the default one	{}
ingester.customReadinessProbe	Custom readinessProbe that overrides the default one	{}
ingester.customStartupProbe	Custom startupProbe that overrides the default one	{}
ingester.lifecycleHooks	for the ingester container(s) to automate configuration before or after startup	{}
ingester.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if ingester.resources is set (ingester.resources is recommended for production).	micro
ingester.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}
ingester.podSecurityContext.enabled	Enabled Ingester pods’ Security Context	true
ingester.podSecurityContext.fsGroupChangePolicy	Set filesystem group change policy	Always
ingester.podSecurityContext.sysctls	Set kernel settings using the sysctl interface	[]
ingester.podSecurityContext.supplementalGroups	Set filesystem extra groups	[]
ingester.podSecurityContext.fsGroup	Set Ingester pod’s Security Context fsGroup	1001
ingester.containerSecurityContext.enabled	Enabled containers’ Security Context	true
ingester.containerSecurityContext.seLinuxOptions	Set SELinux options in container	{}
ingester.containerSecurityContext.runAsUser	Set containers’ Security Context runAsUser	1001
ingester.containerSecurityContext.runAsGroup	Set containers’ Security Context runAsGroup	1001
ingester.containerSecurityContext.runAsNonRoot	Set container’s Security Context runAsNonRoot	true
ingester.containerSecurityContext.privileged	Set container’s Security Context privileged	false
ingester.containerSecurityContext.readOnlyRootFilesystem	Set container’s Security Context readOnlyRootFilesystem	true
ingester.containerSecurityContext.allowPrivilegeEscalation	Set container’s Security Context allowPrivilegeEscalation	false
ingester.containerSecurityContext.capabilities.drop	List of capabilities to be dropped	["ALL"]
ingester.containerSecurityContext.seccompProfile.type	Set container’s Security Context seccomp profile	RuntimeDefault
ingester.automountServiceAccountToken	Mount Service Account token in pod	false
ingester.hostAliases	ingester pods host aliases	[]
ingester.podLabels	Extra labels for ingester pods	{}
ingester.podAnnotations	Annotations for ingester pods	{}
ingester.podAffinityPreset	Pod affinity preset. Ignored if ingester.affinity is set. Allowed values: soft or hard	""
ingester.podAntiAffinityPreset	Pod anti-affinity preset. Ignored if ingester.affinity is set. Allowed values: soft or hard	soft
ingester.nodeAffinityPreset.type	Node affinity preset type. Ignored if ingester.affinity is set. Allowed values: soft or hard	""
ingester.nodeAffinityPreset.key	Node label key to match. Ignored if ingester.affinity is set	""
ingester.nodeAffinityPreset.values	Node label values to match. Ignored if ingester.affinity is set	[]
ingester.affinity	Affinity for ingester pods assignment	{}
ingester.nodeSelector	Node labels for Ingester pods assignment	{}
ingester.tolerations	Tolerations for Ingester pods assignment	[]
ingester.topologySpreadConstraints	Topology Spread Constraints for pod assignment spread across your cluster among failure-domains	[]
ingester.podManagementPolicy	podManagementPolicy to manage scaling operation	""
ingester.priorityClassName	Ingester pods’ priorityClassName	""
ingester.schedulerName	Kubernetes pod scheduler registry	""
ingester.updateStrategy.type	Ingester statefulset strategy type	RollingUpdate
ingester.updateStrategy.rollingUpdate	Ingester statefulset rolling update configuration parameters	nil
ingester.extraVolumes	Optionally specify extra list of additional volumes for the Ingester pod(s)	[]
ingester.extraVolumeMounts	Optionally specify extra list of additional volumeMounts for the ingester container(s)	[]
ingester.sidecars	Add additional sidecar containers to the Ingester pod(s)	[]
ingester.initContainers	Add additional init containers to the Ingester pod(s)	[]
ingester.enableServiceLinks	Whether information about services should be injected into pod’s environment variable	true
ingester.pdb.create	Enable/disable a Pod Disruption Budget creation	true
ingester.pdb.minAvailable	Minimum number/percentage of pods that should remain scheduled	""
ingester.pdb.maxUnavailable	Maximum number/percentage of pods that may be made unavailable. Defaults to 1 if both ingester.pdb.minAvailable and ingester.pdb.maxUnavailable are empty.	""

Ingester Persistence Parameters

Name	Description	Value
ingester.persistence.enabled	Enable persistence in Ingester instances	true
ingester.persistence.storageClass	PVC Storage Class for Memcached data volume	""
ingester.persistence.subPath	The subdirectory of the volume to mount to	""
ingester.persistence.accessModes	PVC Access modes	["ReadWriteOnce"]
ingester.persistence.size	PVC Storage Request for Memcached data volume	8Gi
ingester.persistence.annotations	Additional PVC annotations	{}
ingester.persistence.selector	Selector to match an existing Persistent Volume for Ingester’s data PVC	{}

Ingester Traffic Exposure Parameters

Name	Description	Value
ingester.service.type	Ingester service type	ClusterIP
ingester.service.ports.http	Ingester HTTP service port	3100
ingester.service.ports.grpc	Ingester GRPC service port	9095
ingester.service.nodePorts.http	Node port for HTTP	""
ingester.service.nodePorts.grpc	Node port for GRPC	""
ingester.service.sessionAffinityConfig	Additional settings for the sessionAffinity	{}
ingester.service.sessionAffinity	Control where client requests go, to the same pod or round-robin	None
ingester.service.clusterIP	Ingester service Cluster IP	""
ingester.service.loadBalancerIP	Ingester service Load Balancer IP	""
ingester.service.loadBalancerSourceRanges	Ingester service Load Balancer sources	[]
ingester.service.externalTrafficPolicy	Ingester service external traffic policy	Cluster
ingester.service.annotations	Additional custom annotations for Ingester service	{}
ingester.service.extraPorts	Extra ports to expose in the Ingester service	[]
ingester.networkPolicy.enabled	Specifies whether a NetworkPolicy should be created	true
ingester.networkPolicy.allowExternal	Don’t require server label for connections	true
ingester.networkPolicy.allowExternalEgress	Allow the pod to access any range of port and all destinations.	true
ingester.networkPolicy.addExternalClientAccess	Allow access from pods with client label set to “true”. Ignored if ingester.networkPolicy.allowExternal is true.	true
ingester.networkPolicy.extraIngress	Add extra ingress rules to the NetworkPolicy	[]
ingester.networkPolicy.extraEgress	Add extra ingress rules to the NetworkPolicy	[]
ingester.networkPolicy.ingressPodMatchLabels	Labels to match to allow traffic from other pods. Ignored if ingester.networkPolicy.allowExternal is true.	{}
ingester.networkPolicy.ingressNSMatchLabels	Labels to match to allow traffic from other namespaces. Ignored if ingester.networkPolicy.allowExternal is true.	{}
ingester.networkPolicy.ingressNSPodMatchLabels	Pod labels to match to allow traffic from other namespaces. Ignored if ingester.networkPolicy.allowExternal is true.	{}

Querier Deployment Parameters

Name	Description	Value
querier.replicaCount	Number of Querier replicas to deploy	1
querier.extraEnvVars	Array with extra environment variables to add to Querier nodes	[]
querier.extraEnvVarsCM	Name of existing ConfigMap containing extra env vars for Querier nodes	""
querier.extraEnvVarsSecret	Name of existing Secret containing extra env vars for Querier nodes	""
querier.command	Override default container command (useful when using custom images)	[]
querier.args	Override default container args (useful when using custom images)	[]
querier.extraArgs	Additional container args (will be concatenated to args, unless diagnosticMode is enabled)	[]
querier.podManagementPolicy	podManagementPolicy to manage scaling operation	""
querier.livenessProbe.enabled	Enable livenessProbe on Querier nodes	true
querier.livenessProbe.initialDelaySeconds	Initial delay seconds for livenessProbe	10
querier.livenessProbe.periodSeconds	Period seconds for livenessProbe	10
querier.livenessProbe.timeoutSeconds	Timeout seconds for livenessProbe	1
querier.livenessProbe.failureThreshold	Failure threshold for livenessProbe	3
querier.livenessProbe.successThreshold	Success threshold for livenessProbe	1
querier.readinessProbe.enabled	Enable readinessProbe on Querier nodes	true
querier.readinessProbe.initialDelaySeconds	Initial delay seconds for readinessProbe	10
querier.readinessProbe.periodSeconds	Period seconds for readinessProbe	10
querier.readinessProbe.timeoutSeconds	Timeout seconds for readinessProbe	1
querier.readinessProbe.failureThreshold	Failure threshold for readinessProbe	3
querier.readinessProbe.successThreshold	Success threshold for readinessProbe	1
querier.startupProbe.enabled	Enable startupProbe on Querier containers	false
querier.startupProbe.initialDelaySeconds	Initial delay seconds for startupProbe	30
querier.startupProbe.periodSeconds	Period seconds for startupProbe	10
querier.startupProbe.timeoutSeconds	Timeout seconds for startupProbe	1
querier.startupProbe.failureThreshold	Failure threshold for startupProbe	15
querier.startupProbe.successThreshold	Success threshold for startupProbe	1
querier.customLivenessProbe	Custom livenessProbe that overrides the default one	{}
querier.customReadinessProbe	Custom readinessProbe that overrides the default one	{}
querier.customStartupProbe	Custom startupProbe that overrides the default one	{}
querier.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if querier.resources is set (querier.resources is recommended for production).	nano
querier.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}
querier.podSecurityContext.enabled	Enabled Querier pods’ Security Context	true
querier.podSecurityContext.fsGroupChangePolicy	Set filesystem group change policy	Always
querier.podSecurityContext.sysctls	Set kernel settings using the sysctl interface	[]
querier.podSecurityContext.supplementalGroups	Set filesystem extra groups	[]
querier.podSecurityContext.fsGroup	Set Querier pod’s Security Context fsGroup	1001
querier.containerSecurityContext.enabled	Enabled containers’ Security Context	true
querier.containerSecurityContext.seLinuxOptions	Set SELinux options in container	{}
querier.containerSecurityContext.runAsUser	Set containers’ Security Context runAsUser	1001
querier.containerSecurityContext.runAsGroup	Set containers’ Security Context runAsGroup	1001
querier.containerSecurityContext.runAsNonRoot	Set container’s Security Context runAsNonRoot	true
querier.containerSecurityContext.privileged	Set container’s Security Context privileged	false
querier.containerSecurityContext.readOnlyRootFilesystem	Set container’s Security Context readOnlyRootFilesystem	true
querier.containerSecurityContext.allowPrivilegeEscalation	Set container’s Security Context allowPrivilegeEscalation	false
querier.containerSecurityContext.capabilities.drop	List of capabilities to be dropped	["ALL"]
querier.containerSecurityContext.seccompProfile.type	Set container’s Security Context seccomp profile	RuntimeDefault
querier.lifecycleHooks	for the Querier container(s) to automate configuration before or after startup	{}
querier.automountServiceAccountToken	Mount Service Account token in pod	false
querier.hostAliases	querier pods host aliases	[]
querier.podLabels	Extra labels for querier pods	{}
querier.podAnnotations	Annotations for querier pods	{}
querier.podAffinityPreset	Pod affinity preset. Ignored if querier.affinity is set. Allowed values: soft or hard	""
querier.podAntiAffinityPreset	Pod anti-affinity preset. Ignored if querier.affinity is set. Allowed values: soft or hard	soft
querier.nodeAffinityPreset.type	Node affinity preset type. Ignored if querier.affinity is set. Allowed values: soft or hard	""
querier.nodeAffinityPreset.key	Node label key to match. Ignored if querier.affinity is set	""
querier.nodeAffinityPreset.values	Node label values to match. Ignored if querier.affinity is set	[]
querier.affinity	Affinity for Querier pods assignment	{}
querier.nodeSelector	Node labels for Querier pods assignment	{}
querier.tolerations	Tolerations for Querier pods assignment	[]
querier.topologySpreadConstraints	Topology Spread Constraints for pod assignment spread across your cluster among failure-domains	[]
querier.priorityClassName	Querier pods’ priorityClassName	""
querier.schedulerName	Kubernetes pod scheduler registry	""
querier.updateStrategy.type	Querier statefulset strategy type	RollingUpdate
querier.updateStrategy.rollingUpdate	Querier statefulset rolling update configuration parameters	nil
querier.extraVolumes	Optionally specify extra list of additional volumes for the Querier pod(s)	[]
querier.extraVolumeMounts	Optionally specify extra list of additional volumeMounts for the querier container(s)	[]
querier.sidecars	Add additional sidecar containers to the Querier pod(s)	[]
querier.initContainers	Add additional init containers to the Querier pod(s)	[]
querier.enableServiceLinks	Whether information about services should be injected into pod’s environment variable	true
querier.pdb.create	Enable/disable a Pod Disruption Budget creation	true
querier.pdb.minAvailable	Minimum number/percentage of pods that should remain scheduled	""
querier.pdb.maxUnavailable	Maximum number/percentage of pods that may be made unavailable. Defaults to 1 if both querier.pdb.minAvailable and querier.pdb.maxUnavailable are empty.	""

Querier Persistence Parameters

Name	Description	Value
querier.persistence.enabled	Enable persistence in Querier instances	true
querier.persistence.storageClass	PVC Storage Class for Memcached data volume	""
querier.persistence.subPath	The subdirectory of the volume to mount to	""
querier.persistence.accessModes	PVC Access modes	["ReadWriteOnce"]
querier.persistence.size	PVC Storage Request for Memcached data volume	8Gi
querier.persistence.annotations	Additional PVC annotations	{}
querier.persistence.selector	Selector to match an existing Persistent Volume for Querier’s data PVC	{}

Querier Traffic Exposure Parameters

Name	Description	Value
querier.service.type	Querier service type	ClusterIP
querier.service.ports.http	Querier HTTP service port	3100
querier.service.ports.grpc	Querier GRPC service port	9095
querier.service.nodePorts.http	Node port for HTTP	""
querier.service.nodePorts.grpc	Node port for GRPC	""
querier.service.sessionAffinityConfig	Additional settings for the sessionAffinity	{}
querier.service.sessionAffinity	Control where client requests go, to the same pod or round-robin	None
querier.service.clusterIP	Querier service Cluster IP	""
querier.service.loadBalancerIP	Querier service Load Balancer IP	""
querier.service.loadBalancerSourceRanges	Querier service Load Balancer sources	[]
querier.service.externalTrafficPolicy	Querier service external traffic policy	Cluster
querier.service.annotations	Additional custom annotations for Querier service	{}
querier.service.extraPorts	Extra ports to expose in the Querier service	[]
querier.networkPolicy.enabled	Specifies whether a NetworkPolicy should be created	true
querier.networkPolicy.allowExternal	Don’t require server label for connections	true
querier.networkPolicy.allowExternalEgress	Allow the pod to access any range of port and all destinations.	true
querier.networkPolicy.addExternalClientAccess	Allow access from pods with client label set to “true”. Ignored if querier.networkPolicy.allowExternal is true.	true
querier.networkPolicy.extraIngress	Add extra ingress rules to the NetworkPolicy	[]
querier.networkPolicy.extraEgress	Add extra ingress rules to the NetworkPolicy	[]
querier.networkPolicy.ingressPodMatchLabels	Labels to match to allow traffic from other pods. Ignored if querier.networkPolicy.allowExternal is true.	{}
querier.networkPolicy.ingressNSMatchLabels	Labels to match to allow traffic from other namespaces. Ignored if querier.networkPolicy.allowExternal is true.	{}
querier.networkPolicy.ingressNSPodMatchLabels	Pod labels to match to allow traffic from other namespaces. Ignored if querier.networkPolicy.allowExternal is true.	{}

Query Frontend Deployment Parameters

Name	Description	Value
queryFrontend.extraEnvVars	Array with extra environment variables to add to queryFrontend nodes	[]
queryFrontend.extraEnvVarsCM	Name of existing ConfigMap containing extra env vars for queryFrontend nodes	""
queryFrontend.extraEnvVarsSecret	Name of existing Secret containing extra env vars for queryFrontend nodes	""
queryFrontend.command	Override default container command (useful when using custom images)	[]
queryFrontend.args	Override default container args (useful when using custom images)	[]
queryFrontend.extraArgs	Additional container args (will be concatenated to args, unless diagnosticMode is enabled)	[]
queryFrontend.replicaCount	Number of queryFrontend replicas to deploy	1
queryFrontend.livenessProbe.enabled	Enable livenessProbe on queryFrontend nodes	true
queryFrontend.livenessProbe.initialDelaySeconds	Initial delay seconds for livenessProbe	10
queryFrontend.livenessProbe.periodSeconds	Period seconds for livenessProbe	10
queryFrontend.livenessProbe.timeoutSeconds	Timeout seconds for livenessProbe	1
queryFrontend.livenessProbe.failureThreshold	Failure threshold for livenessProbe	3
queryFrontend.livenessProbe.successThreshold	Success threshold for livenessProbe	1
queryFrontend.readinessProbe.enabled	Enable readinessProbe on queryFrontend nodes	true
queryFrontend.readinessProbe.initialDelaySeconds	Initial delay seconds for readinessProbe	10
queryFrontend.readinessProbe.periodSeconds	Period seconds for readinessProbe	10
queryFrontend.readinessProbe.timeoutSeconds	Timeout seconds for readinessProbe	1
queryFrontend.readinessProbe.failureThreshold	Failure threshold for readinessProbe	3
queryFrontend.readinessProbe.successThreshold	Success threshold for readinessProbe	1
queryFrontend.startupProbe.enabled	Enable startupProbe on queryFrontend containers	false
queryFrontend.startupProbe.initialDelaySeconds	Initial delay seconds for startupProbe	30
queryFrontend.startupProbe.periodSeconds	Period seconds for startupProbe	10
queryFrontend.startupProbe.timeoutSeconds	Timeout seconds for startupProbe	1
queryFrontend.startupProbe.failureThreshold	Failure threshold for startupProbe	15
queryFrontend.startupProbe.successThreshold	Success threshold for startupProbe	1
queryFrontend.customLivenessProbe	Custom livenessProbe that overrides the default one	{}
queryFrontend.customReadinessProbe	Custom readinessProbe that overrides the default one	{}
queryFrontend.customStartupProbe	Custom startupProbe that overrides the default one	{}
queryFrontend.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if queryFrontend.resources is set (queryFrontend.resources is recommended for production).	nano
queryFrontend.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}
queryFrontend.podSecurityContext.enabled	Enabled queryFrontend pods’ Security Context	true
queryFrontend.podSecurityContext.fsGroupChangePolicy	Set filesystem group change policy	Always
queryFrontend.podSecurityContext.sysctls	Set kernel settings using the sysctl interface	[]
queryFrontend.podSecurityContext.supplementalGroups	Set filesystem extra groups	[]
queryFrontend.podSecurityContext.fsGroup	Set queryFrontend pod’s Security Context fsGroup	1001
queryFrontend.containerSecurityContext.enabled	Enabled containers’ Security Context	true
queryFrontend.containerSecurityContext.seLinuxOptions	Set SELinux options in container	{}
queryFrontend.containerSecurityContext.runAsUser	Set containers’ Security Context runAsUser	1001
queryFrontend.containerSecurityContext.runAsGroup	Set containers’ Security Context runAsGroup	1001
queryFrontend.containerSecurityContext.runAsNonRoot	Set container’s Security Context runAsNonRoot	true
queryFrontend.containerSecurityContext.privileged	Set container’s Security Context privileged	false
queryFrontend.containerSecurityContext.readOnlyRootFilesystem	Set container’s Security Context readOnlyRootFilesystem	true
queryFrontend.containerSecurityContext.allowPrivilegeEscalation	Set container’s Security Context allowPrivilegeEscalation	false
queryFrontend.containerSecurityContext.capabilities.drop	List of capabilities to be dropped	["ALL"]
queryFrontend.containerSecurityContext.seccompProfile.type	Set container’s Security Context seccomp profile	RuntimeDefault
queryFrontend.lifecycleHooks	for the queryFrontend container(s) to automate configuration before or after startup	{}
queryFrontend.automountServiceAccountToken	Mount Service Account token in pod	false
queryFrontend.hostAliases	queryFrontend pods host aliases	[]
queryFrontend.podLabels	Extra labels for queryFrontend pods	{}
queryFrontend.podAnnotations	Annotations for queryFrontend pods	{}
queryFrontend.podAffinityPreset	Pod affinity preset. Ignored if queryFrontend.affinity is set. Allowed values: soft or hard	""
queryFrontend.podAntiAffinityPreset	Pod anti-affinity preset. Ignored if queryFrontend.affinity is set. Allowed values: soft or hard	soft
queryFrontend.nodeAffinityPreset.type	Node affinity preset type. Ignored if queryFrontend.affinity is set. Allowed values: soft or hard	""
queryFrontend.nodeAffinityPreset.key	Node label key to match. Ignored if queryFrontend.affinity is set	""
queryFrontend.nodeAffinityPreset.values	Node label values to match. Ignored if queryFrontend.affinity is set	[]
queryFrontend.affinity	Affinity for queryFrontend pods assignment	{}
queryFrontend.nodeSelector	Node labels for queryFrontend pods assignment	{}
queryFrontend.tolerations	Tolerations for queryFrontend pods assignment	[]
queryFrontend.topologySpreadConstraints	Topology Spread Constraints for pod assignment spread across your cluster among failure-domains	[]
queryFrontend.priorityClassName	queryFrontend pods’ priorityClassName	""
queryFrontend.schedulerName	Kubernetes pod scheduler registry	""
queryFrontend.updateStrategy.type	queryFrontend statefulset strategy type	RollingUpdate
queryFrontend.updateStrategy.rollingUpdate	queryFrontend statefulset rolling update configuration parameters	nil
queryFrontend.extraVolumes	Optionally specify extra list of additional volumes for the queryFrontend pod(s)	[]
queryFrontend.extraVolumeMounts	Optionally specify extra list of additional volumeMounts for the queryFrontend container(s)	[]
queryFrontend.sidecars	Add additional sidecar containers to the queryFrontend pod(s)	[]
queryFrontend.initContainers	Add additional init containers to the queryFrontend pod(s)	[]
queryFrontend.enableServiceLinks	Whether information about services should be injected into pod’s environment variable	true
queryFrontend.pdb.create	Enable/disable a Pod Disruption Budget creation	true
queryFrontend.pdb.minAvailable	Minimum number/percentage of pods that should remain scheduled	""
queryFrontend.pdb.maxUnavailable	Maximum number/percentage of pods that may be made unavailable. Defaults to 1 if both queryFrontend.pdb.minAvailable and queryFrontend.pdb.maxUnavailable are empty.	""

Query Frontend Traffic Exposure Parameters

Name	Description	Value
queryFrontend.service.type	queryFrontend service type	ClusterIP
queryFrontend.service.ports.http	queryFrontend HTTP service port	3100
queryFrontend.service.ports.grpc	queryFrontend GRPC service port	9095
queryFrontend.service.nodePorts.http	Node port for HTTP	""
queryFrontend.service.nodePorts.grpc	Node port for GRPC	""
queryFrontend.service.sessionAffinityConfig	Additional settings for the sessionAffinity	{}
queryFrontend.service.sessionAffinity	Control where client requests go, to the same pod or round-robin	None
queryFrontend.service.clusterIP	queryFrontend service Cluster IP	""
queryFrontend.service.loadBalancerIP	queryFrontend service Load Balancer IP	""
queryFrontend.service.loadBalancerSourceRanges	queryFrontend service Load Balancer sources	[]
queryFrontend.service.externalTrafficPolicy	queryFrontend service external traffic policy	Cluster
queryFrontend.service.annotations	Additional custom annotations for queryFrontend service	{}
queryFrontend.service.extraPorts	Extra ports to expose in the queryFrontend service	[]
queryFrontend.service.headless.annotations	Annotations for the headless service.	{}
queryFrontend.networkPolicy.enabled	Specifies whether a NetworkPolicy should be created	true
queryFrontend.networkPolicy.allowExternal	Don’t require server label for connections	true
queryFrontend.networkPolicy.allowExternalEgress	Allow the pod to access any range of port and all destinations.	true
queryFrontend.networkPolicy.addExternalClientAccess	Allow access from pods with client label set to “true”. Ignored if queryFrontend.networkPolicy.allowExternal is true.	true
queryFrontend.networkPolicy.extraIngress	Add extra ingress rules to the NetworkPolicy	[]
queryFrontend.networkPolicy.extraEgress	Add extra ingress rules to the NetworkPolicy	[]
queryFrontend.networkPolicy.ingressPodMatchLabels	Labels to match to allow traffic from other pods. Ignored if queryFrontend.networkPolicy.allowExternal is true.	{}
queryFrontend.networkPolicy.ingressNSMatchLabels	Labels to match to allow traffic from other namespaces. Ignored if queryFrontend.networkPolicy.allowExternal is true.	{}
queryFrontend.networkPolicy.ingressNSPodMatchLabels	Pod labels to match to allow traffic from other namespaces. Ignored if queryFrontend.networkPolicy.allowExternal is true.	{}

Query Scheduler Deployment Parameters

Name	Description	Value
queryScheduler.extraEnvVars	Array with extra environment variables to add to queryScheduler nodes	[]
queryScheduler.extraEnvVarsCM	Name of existing ConfigMap containing extra env vars for queryScheduler nodes	""
queryScheduler.extraEnvVarsSecret	Name of existing Secret containing extra env vars for queryScheduler nodes	""
queryScheduler.command	Override default container command (useful when using custom images)	[]
queryScheduler.args	Override default container args (useful when using custom images)	[]
queryScheduler.extraArgs	Additional container args (will be concatenated to args, unless diagnosticMode is enabled)	[]
queryScheduler.replicaCount	Number of queryScheduler replicas to deploy	1
queryScheduler.livenessProbe.enabled	Enable livenessProbe on queryScheduler nodes	true
queryScheduler.livenessProbe.initialDelaySeconds	Initial delay seconds for livenessProbe	10
queryScheduler.livenessProbe.periodSeconds	Period seconds for livenessProbe	10
queryScheduler.livenessProbe.timeoutSeconds	Timeout seconds for livenessProbe	1
queryScheduler.livenessProbe.failureThreshold	Failure threshold for livenessProbe	3
queryScheduler.livenessProbe.successThreshold	Success threshold for livenessProbe	1
queryScheduler.minReadySeconds	Minimum time to wait before performing readiness check	10
queryScheduler.readinessProbe.enabled	Enable readinessProbe on queryScheduler nodes	true
queryScheduler.readinessProbe.initialDelaySeconds	Initial delay seconds for readinessProbe	10
queryScheduler.readinessProbe.periodSeconds	Period seconds for readinessProbe	10
queryScheduler.readinessProbe.timeoutSeconds	Timeout seconds for readinessProbe	1
queryScheduler.readinessProbe.failureThreshold	Failure threshold for readinessProbe	3
queryScheduler.readinessProbe.successThreshold	Success threshold for readinessProbe	1
queryScheduler.startupProbe.enabled	Enable startupProbe on queryScheduler containers	false
queryScheduler.startupProbe.initialDelaySeconds	Initial delay seconds for startupProbe	30
queryScheduler.startupProbe.periodSeconds	Period seconds for startupProbe	10
queryScheduler.startupProbe.timeoutSeconds	Timeout seconds for startupProbe	1
queryScheduler.startupProbe.failureThreshold	Failure threshold for startupProbe	15
queryScheduler.startupProbe.successThreshold	Success threshold for startupProbe	1
queryScheduler.customLivenessProbe	Custom livenessProbe that overrides the default one	{}
queryScheduler.customReadinessProbe	Custom readinessProbe that overrides the default one	{}
queryScheduler.customStartupProbe	Custom startupProbe that overrides the default one	{}
queryScheduler.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if queryScheduler.resources is set (queryScheduler.resources is recommended for production).	nano
queryScheduler.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}
queryScheduler.podSecurityContext.enabled	Enabled queryScheduler pods’ Security Context	true
queryScheduler.podSecurityContext.fsGroupChangePolicy	Set filesystem group change policy	Always
queryScheduler.podSecurityContext.sysctls	Set kernel settings using the sysctl interface	[]
queryScheduler.podSecurityContext.supplementalGroups	Set filesystem extra groups	[]
queryScheduler.podSecurityContext.fsGroup	Set queryScheduler pod’s Security Context fsGroup	1001
queryScheduler.containerSecurityContext.enabled	Enabled containers’ Security Context	true
queryScheduler.containerSecurityContext.seLinuxOptions	Set SELinux options in container	{}
queryScheduler.containerSecurityContext.runAsUser	Set containers’ Security Context runAsUser	1001
queryScheduler.containerSecurityContext.runAsGroup	Set containers’ Security Context runAsGroup	1001
queryScheduler.containerSecurityContext.runAsNonRoot	Set container’s Security Context runAsNonRoot	true
queryScheduler.containerSecurityContext.privileged	Set container’s Security Context privileged	false
queryScheduler.containerSecurityContext.readOnlyRootFilesystem	Set container’s Security Context readOnlyRootFilesystem	true
queryScheduler.containerSecurityContext.allowPrivilegeEscalation	Set container’s Security Context allowPrivilegeEscalation	false
queryScheduler.containerSecurityContext.capabilities.drop	List of capabilities to be dropped	["ALL"]
queryScheduler.containerSecurityContext.seccompProfile.type	Set container’s Security Context seccomp profile	RuntimeDefault
queryScheduler.lifecycleHooks	for the queryScheduler container(s) to automate configuration before or after startup	{}
queryScheduler.automountServiceAccountToken	Mount Service Account token in pod	false
queryScheduler.hostAliases	queryScheduler pods host aliases	[]
queryScheduler.podLabels	Extra labels for queryScheduler pods	{}
queryScheduler.podAnnotations	Annotations for queryScheduler pods	{}
queryScheduler.podAffinityPreset	Pod affinity preset. Ignored if queryScheduler.affinity is set. Allowed values: soft or hard	""
queryScheduler.podAntiAffinityPreset	Pod anti-affinity preset. Ignored if queryScheduler.affinity is set. Allowed values: soft or hard	soft
queryScheduler.nodeAffinityPreset.type	Node affinity preset type. Ignored if queryScheduler.affinity is set. Allowed values: soft or hard	""
queryScheduler.nodeAffinityPreset.key	Node label key to match. Ignored if queryScheduler.affinity is set	""
queryScheduler.nodeAffinityPreset.values	Node label values to match. Ignored if queryScheduler.affinity is set	[]
queryScheduler.affinity	Affinity for queryScheduler pods assignment	{}
queryScheduler.nodeSelector	Node labels for queryScheduler pods assignment	{}
queryScheduler.tolerations	Tolerations for queryScheduler pods assignment	[]
queryScheduler.topologySpreadConstraints	Topology Spread Constraints for pod assignment spread across your cluster among failure-domains	[]
queryScheduler.priorityClassName	queryScheduler pods’ priorityClassName	""
queryScheduler.schedulerName	Kubernetes pod scheduler registry	""
queryScheduler.updateStrategy.type	queryScheduler statefulset strategy type	RollingUpdate
queryScheduler.updateStrategy.rollingUpdate	queryScheduler statefulset rolling update configuration parameters	nil
queryScheduler.extraVolumes	Optionally specify extra list of additional volumes for the queryScheduler pod(s)	[]
queryScheduler.extraVolumeMounts	Optionally specify extra list of additional volumeMounts for the queryScheduler container(s)	[]
queryScheduler.sidecars	Add additional sidecar containers to the queryScheduler pod(s)	[]
queryScheduler.initContainers	Add additional init containers to the queryScheduler pod(s)	[]
queryScheduler.enableServiceLinks	Whether information about services should be injected into pod’s environment variable	true
queryScheduler.pdb.create	Enable/disable a Pod Disruption Budget creation	true
queryScheduler.pdb.minAvailable	Minimum number/percentage of pods that should remain scheduled	""
queryScheduler.pdb.maxUnavailable	Maximum number/percentage of pods that may be made unavailable. Defaults to 1 if both queryScheduler.pdb.minAvailable and queryScheduler.pdb.maxUnavailable are empty.	""

Query Scheduler Traffic Exposure Parameters

Name	Description	Value
queryScheduler.service.type	queryScheduler service type	ClusterIP
queryScheduler.service.ports.http	queryScheduler HTTP service port	3100
queryScheduler.service.ports.grpc	queryScheduler GRPC service port	9095
queryScheduler.service.nodePorts.http	Node port for HTTP	""
queryScheduler.service.nodePorts.grpc	Node port for GRPC	""
queryScheduler.service.sessionAffinityConfig	Additional settings for the sessionAffinity	{}
queryScheduler.service.sessionAffinity	Control where client requests go, to the same pod or round-robin	None
queryScheduler.service.clusterIP	queryScheduler service Cluster IP	""
queryScheduler.service.loadBalancerIP	queryScheduler service Load Balancer IP	""
queryScheduler.service.loadBalancerSourceRanges	queryScheduler service Load Balancer sources	[]
queryScheduler.service.externalTrafficPolicy	queryScheduler service external traffic policy	Cluster
queryScheduler.service.annotations	Additional custom annotations for queryScheduler service	{}
queryScheduler.service.extraPorts	Extra ports to expose in the queryScheduler service	[]
queryScheduler.networkPolicy.enabled	Specifies whether a NetworkPolicy should be created	true
queryScheduler.networkPolicy.allowExternal	Don’t require server label for connections	true
queryScheduler.networkPolicy.allowExternalEgress	Allow the pod to access any range of port and all destinations.	true
queryScheduler.networkPolicy.addExternalClientAccess	Allow access from pods with client label set to “true”. Ignored if queryScheduler.networkPolicy.allowExternal is true.	true
queryScheduler.networkPolicy.extraIngress	Add extra ingress rules to the NetworkPolicy	[]
queryScheduler.networkPolicy.extraEgress	Add extra ingress rules to the NetworkPolicy	[]
queryScheduler.networkPolicy.ingressPodMatchLabels	Labels to match to allow traffic from other pods. Ignored if queryScheduler.networkPolicy.allowExternal is true.	{}
queryScheduler.networkPolicy.ingressNSMatchLabels	Labels to match to allow traffic from other namespaces. Ignored if queryScheduler.networkPolicy.allowExternal is true.	{}
queryScheduler.networkPolicy.ingressNSPodMatchLabels	Pod labels to match to allow traffic from other namespaces. Ignored if queryScheduler.networkPolicy.allowExternal is true.	{}

Ruler Deployment Parameters

Name	Description	Value
ruler.enabled	Deploy ruler component	false
ruler.extraEnvVars	Array with extra environment variables to add to ruler nodes	[]
ruler.extraEnvVarsCM	Name of existing ConfigMap containing extra env vars for ruler nodes	""
ruler.extraEnvVarsSecret	Name of existing Secret containing extra env vars for ruler nodes	""
ruler.command	Override default container command (useful when using custom images)	[]
ruler.args	Override default container args (useful when using custom images)	[]
ruler.extraArgs	Additional container args (will be concatenated to args, unless diagnosticMode is enabled)	[]
ruler.podManagementPolicy	podManagementPolicy to manage scaling operation	""
ruler.replicaCount	Number of Ruler replicas to deploy	1
ruler.livenessProbe.enabled	Enable livenessProbe on Ruler nodes	true
ruler.livenessProbe.initialDelaySeconds	Initial delay seconds for livenessProbe	10
ruler.livenessProbe.periodSeconds	Period seconds for livenessProbe	10
ruler.livenessProbe.timeoutSeconds	Timeout seconds for livenessProbe	1
ruler.livenessProbe.failureThreshold	Failure threshold for livenessProbe	3
ruler.livenessProbe.successThreshold	Success threshold for livenessProbe	1
ruler.readinessProbe.enabled	Enable readinessProbe on Ruler nodes	true
ruler.readinessProbe.initialDelaySeconds	Initial delay seconds for readinessProbe	10
ruler.readinessProbe.periodSeconds	Period seconds for readinessProbe	10
ruler.readinessProbe.timeoutSeconds	Timeout seconds for readinessProbe	1
ruler.readinessProbe.failureThreshold	Failure threshold for readinessProbe	3
ruler.readinessProbe.successThreshold	Success threshold for readinessProbe	1
ruler.startupProbe.enabled	Enable startupProbe on Ruler containers	false
ruler.startupProbe.initialDelaySeconds	Initial delay seconds for startupProbe	30
ruler.startupProbe.periodSeconds	Period seconds for startupProbe	10
ruler.startupProbe.timeoutSeconds	Timeout seconds for startupProbe	1
ruler.startupProbe.failureThreshold	Failure threshold for startupProbe	15
ruler.startupProbe.successThreshold	Success threshold for startupProbe	1
ruler.customLivenessProbe	Custom livenessProbe that overrides the default one	{}
ruler.customReadinessProbe	Custom readinessProbe that overrides the default one	{}
ruler.customStartupProbe	Custom startupProbe that overrides the default one	{}
ruler.lifecycleHooks	for the ruler container(s) to automate configuration before or after startup	{}
ruler.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if ruler.resources is set (ruler.resources is recommended for production).	nano
ruler.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}
ruler.podSecurityContext.enabled	Enabled Ruler pods’ Security Context	true
ruler.podSecurityContext.fsGroupChangePolicy	Set filesystem group change policy	Always
ruler.podSecurityContext.sysctls	Set kernel settings using the sysctl interface	[]
ruler.podSecurityContext.supplementalGroups	Set filesystem extra groups	[]
ruler.podSecurityContext.fsGroup	Set Ruler pod’s Security Context fsGroup	1001
ruler.containerSecurityContext.enabled	Enabled containers’ Security Context	true
ruler.containerSecurityContext.seLinuxOptions	Set SELinux options in container	{}
ruler.containerSecurityContext.runAsUser	Set containers’ Security Context runAsUser	1001
ruler.containerSecurityContext.runAsGroup	Set containers’ Security Context runAsGroup	1001
ruler.containerSecurityContext.runAsNonRoot	Set container’s Security Context runAsNonRoot	true
ruler.containerSecurityContext.privileged	Set container’s Security Context privileged	false
ruler.containerSecurityContext.readOnlyRootFilesystem	Set container’s Security Context readOnlyRootFilesystem	true
ruler.containerSecurityContext.allowPrivilegeEscalation	Set container’s Security Context allowPrivilegeEscalation	false
ruler.containerSecurityContext.capabilities.drop	List of capabilities to be dropped	["ALL"]
ruler.containerSecurityContext.seccompProfile.type	Set container’s Security Context seccomp profile	RuntimeDefault
ruler.automountServiceAccountToken	Mount Service Account token in pod	false
ruler.hostAliases	ruler pods host aliases	[]
ruler.podLabels	Extra labels for ruler pods	{}
ruler.podAnnotations	Annotations for ruler pods	{}
ruler.podAffinityPreset	Pod affinity preset. Ignored if ruler.affinity is set. Allowed values: soft or hard	""
ruler.podAntiAffinityPreset	Pod anti-affinity preset. Ignored if ruler.affinity is set. Allowed values: soft or hard	soft
ruler.nodeAffinityPreset.type	Node affinity preset type. Ignored if ruler.affinity is set. Allowed values: soft or hard	""
ruler.nodeAffinityPreset.key	Node label key to match. Ignored if ruler.affinity is set	""
ruler.nodeAffinityPreset.values	Node label values to match. Ignored if ruler.affinity is set	[]
ruler.affinity	Affinity for ruler pods assignment	{}
ruler.nodeSelector	Node labels for Ruler pods assignment	{}
ruler.tolerations	Tolerations for Ruler pods assignment	[]
ruler.topologySpreadConstraints	Topology Spread Constraints for pod assignment spread across your cluster among failure-domains	[]
ruler.priorityClassName	Ruler pods’ priorityClassName	""
ruler.schedulerName	Kubernetes pod scheduler registry	""
ruler.updateStrategy.type	Ruler statefulset strategy type	RollingUpdate
ruler.updateStrategy.rollingUpdate	Ruler statefulset rolling update configuration parameters	nil
ruler.extraVolumes	Optionally specify extra list of additional volumes for the Ruler pod(s)	[]
ruler.extraVolumeMounts	Optionally specify extra list of additional volumeMounts for the ruler container(s)	[]
ruler.sidecars	Add additional sidecar containers to the Ruler pod(s)	[]
ruler.initContainers	Add additional init containers to the Ruler pod(s)	[]
ruler.enableServiceLinks	Whether information about services should be injected into pod’s environment variable	true
ruler.pdb.create	Enable/disable a Pod Disruption Budget creation	true
ruler.pdb.minAvailable	Minimum number/percentage of pods that should remain scheduled	""
ruler.pdb.maxUnavailable	Maximum number/percentage of pods that may be made unavailable. Defaults to 1 if both ruler.pdb.minAvailable and ruler.pdb.maxUnavailable are empty.	""

Ruler Persistence Parameters

Name	Description	Value
ruler.persistence.enabled	Enable persistence in Ruler instances	true
ruler.persistence.storageClass	PVC Storage Class for Memcached data volume	""
ruler.persistence.subPath	The subdirectory of the volume to mount to	""
ruler.persistence.accessModes	PVC Access modes	["ReadWriteOnce"]
ruler.persistence.size	PVC Storage Request for Memcached data volume	8Gi
ruler.persistence.annotations	Additional PVC annotations	{}
ruler.persistence.selector	Selector to match an existing Persistent Volume for Ruler’s data PVC	{}

Ruler Traffic Exposure Parameters

Name	Description	Value
ruler.service.type	Ruler service type	ClusterIP
ruler.service.ports.http	Ruler HTTP service port	3100
ruler.service.ports.grpc	Ruler GRPC service port	9095
ruler.service.nodePorts.http	Node port for HTTP	""
ruler.service.nodePorts.grpc	Node port for GRPC	""
ruler.service.sessionAffinityConfig	Additional settings for the sessionAffinity	{}
ruler.service.sessionAffinity	Control where client requests go, to the same pod or round-robin	None
ruler.service.clusterIP	Ruler service Cluster IP	""
ruler.service.loadBalancerIP	Ruler service Load Balancer IP	""
ruler.service.loadBalancerSourceRanges	Ruler service Load Balancer sources	[]
ruler.service.externalTrafficPolicy	Ruler service external traffic policy	Cluster
ruler.service.annotations	Additional custom annotations for Ruler service	{}
ruler.service.extraPorts	Extra ports to expose in the Ruler service	[]
ruler.networkPolicy.enabled	Specifies whether a NetworkPolicy should be created	true
ruler.networkPolicy.allowExternal	Don’t require server label for connections	true
ruler.networkPolicy.allowExternalEgress	Allow the pod to access any range of port and all destinations.	true
ruler.networkPolicy.addExternalClientAccess	Allow access from pods with client label set to “true”. Ignored if ruler.networkPolicy.allowExternal is true.	true
ruler.networkPolicy.extraIngress	Add extra ingress rules to the NetworkPolicy	[]
ruler.networkPolicy.extraEgress	Add extra ingress rules to the NetworkPolicy	[]
ruler.networkPolicy.ingressPodMatchLabels	Labels to match to allow traffic from other pods. Ignored if ruler.networkPolicy.allowExternal is true.	{}
ruler.networkPolicy.ingressNSMatchLabels	Labels to match to allow traffic from other namespaces. Ignored if ruler.networkPolicy.allowExternal is true.	{}
ruler.networkPolicy.ingressNSPodMatchLabels	Pod labels to match to allow traffic from other namespaces. Ignored if ruler.networkPolicy.allowExternal is true.	{}

table-manager Deployment Parameters

Name	Description	Value
tableManager.enabled	Deploy table-manager	false
tableManager.extraEnvVars	Array with extra environment variables to add to tableManager nodes	[]
tableManager.extraEnvVarsCM	Name of existing ConfigMap containing extra env vars for tableManager nodes	""
tableManager.extraEnvVarsSecret	Name of existing Secret containing extra env vars for tableManager nodes	""
tableManager.command	Override default container command (useful when using custom images)	[]
tableManager.args	Override default container args (useful when using custom images)	[]
tableManager.extraArgs	Additional container args (will be concatenated to args, unless diagnosticMode is enabled)	[]
tableManager.replicaCount	Number of table-manager replicas to deploy	1
tableManager.livenessProbe.enabled	Enable livenessProbe on table-manager nodes	true
tableManager.livenessProbe.initialDelaySeconds	Initial delay seconds for livenessProbe	10
tableManager.livenessProbe.periodSeconds	Period seconds for livenessProbe	10
tableManager.livenessProbe.timeoutSeconds	Timeout seconds for livenessProbe	1
tableManager.livenessProbe.failureThreshold	Failure threshold for livenessProbe	3
tableManager.livenessProbe.successThreshold	Success threshold for livenessProbe	1
tableManager.readinessProbe.enabled	Enable readinessProbe on table-manager nodes	true
tableManager.readinessProbe.initialDelaySeconds	Initial delay seconds for readinessProbe	10
tableManager.readinessProbe.periodSeconds	Period seconds for readinessProbe	10
tableManager.readinessProbe.timeoutSeconds	Timeout seconds for readinessProbe	1
tableManager.readinessProbe.failureThreshold	Failure threshold for readinessProbe	3
tableManager.readinessProbe.successThreshold	Success threshold for readinessProbe	1
tableManager.startupProbe.enabled	Enable startupProbe on table-manager containers	false
tableManager.startupProbe.initialDelaySeconds	Initial delay seconds for startupProbe	30
tableManager.startupProbe.periodSeconds	Period seconds for startupProbe	10
tableManager.startupProbe.timeoutSeconds	Timeout seconds for startupProbe	1
tableManager.startupProbe.failureThreshold	Failure threshold for startupProbe	15
tableManager.startupProbe.successThreshold	Success threshold for startupProbe	1
tableManager.customLivenessProbe	Custom livenessProbe that overrides the default one	{}
tableManager.customReadinessProbe	Custom readinessProbe that overrides the default one	{}
tableManager.customStartupProbe	Custom startupProbe that overrides the default one	{}
tableManager.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if tableManager.resources is set (tableManager.resources is recommended for production).	nano
tableManager.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}
tableManager.podSecurityContext.enabled	Enabled table-manager pods’ Security Context	true
tableManager.podSecurityContext.fsGroupChangePolicy	Set filesystem group change policy	Always
tableManager.podSecurityContext.sysctls	Set kernel settings using the sysctl interface	[]
tableManager.podSecurityContext.supplementalGroups	Set filesystem extra groups	[]
tableManager.podSecurityContext.fsGroup	Set table-manager pod’s Security Context fsGroup	1001
tableManager.containerSecurityContext.enabled	Enabled containers’ Security Context	true
tableManager.containerSecurityContext.seLinuxOptions	Set SELinux options in container	{}
tableManager.containerSecurityContext.runAsUser	Set containers’ Security Context runAsUser	1001
tableManager.containerSecurityContext.runAsGroup	Set containers’ Security Context runAsGroup	1001
tableManager.containerSecurityContext.runAsNonRoot	Set container’s Security Context runAsNonRoot	true
tableManager.containerSecurityContext.privileged	Set container’s Security Context privileged	false
tableManager.containerSecurityContext.readOnlyRootFilesystem	Set container’s Security Context readOnlyRootFilesystem	true
tableManager.containerSecurityContext.allowPrivilegeEscalation	Set container’s Security Context allowPrivilegeEscalation	false
tableManager.containerSecurityContext.capabilities.drop	List of capabilities to be dropped	["ALL"]
tableManager.containerSecurityContext.seccompProfile.type	Set container’s Security Context seccomp profile	RuntimeDefault
tableManager.lifecycleHooks	for the tableManager container(s) to automate configuration before or after startup	{}
tableManager.automountServiceAccountToken	Mount Service Account token in pod	false
tableManager.hostAliases	tableManager pods host aliases	[]
tableManager.podLabels	Extra labels for tableManager pods	{}
tableManager.podAnnotations	Annotations for tableManager pods	{}
tableManager.podAffinityPreset	Pod affinity preset. Ignored if tableManager.affinity is set. Allowed values: soft or hard	""
tableManager.podAntiAffinityPreset	Pod anti-affinity preset. Ignored if tableManager.affinity is set. Allowed values: soft or hard	soft
tableManager.nodeAffinityPreset.type	Node affinity preset type. Ignored if tableManager.affinity is set. Allowed values: soft or hard	""
tableManager.nodeAffinityPreset.key	Node label key to match. Ignored if tableManager.affinity is set	""
tableManager.nodeAffinityPreset.values	Node label values to match. Ignored if tableManager.affinity is set	[]
tableManager.affinity	Affinity for table-manager pods assignment	{}
tableManager.nodeSelector	Node labels for table-manager pods assignment	{}
tableManager.tolerations	Tolerations for table-manager pods assignment	[]
tableManager.topologySpreadConstraints	Topology Spread Constraints for pod assignment spread across your cluster among failure-domains	[]
tableManager.priorityClassName	table-manager pods’ priorityClassName	""
tableManager.schedulerName	Kubernetes pod scheduler registry	""
tableManager.updateStrategy.type	table-manager statefulset strategy type	RollingUpdate
tableManager.updateStrategy.rollingUpdate	table-manager statefulset rolling update configuration parameters	nil
tableManager.extraVolumes	Optionally specify extra list of additional volumes for the table-manager pod(s)	[]
tableManager.extraVolumeMounts	Optionally specify extra list of additional volumeMounts for the table-manager container(s)	[]
tableManager.sidecars	Add additional sidecar containers to the table-manager pod(s)	[]
tableManager.initContainers	Add additional init containers to the table-manager pod(s)	[]
tableManager.enableServiceLinks	Whether information about services should be injected into pod’s environment variable	true
tableManager.pdb.create	Enable/disable a Pod Disruption Budget creation	true
tableManager.pdb.minAvailable	Minimum number/percentage of pods that should remain scheduled	""
tableManager.pdb.maxUnavailable	Maximum number/percentage of pods that may be made unavailable. Defaults to 1 if both tableManager.pdb.minAvailable and tableManager.pdb.maxUnavailable are empty.	""

table-manager Traffic Exposure Parameters

Name	Description	Value
tableManager.service.type	table-manager service type	ClusterIP
tableManager.service.ports.http	table-manager HTTP service port	3100
tableManager.service.ports.grpc	table-manager GRPC service port	9095
tableManager.service.nodePorts.http	Node port for HTTP	""
tableManager.service.nodePorts.grpc	Node port for GRPC	""
tableManager.service.sessionAffinityConfig	Additional settings for the sessionAffinity	{}
tableManager.service.sessionAffinity	Control where client requests go, to the same pod or round-robin	None
tableManager.service.clusterIP	table-manager service Cluster IP	""
tableManager.service.loadBalancerIP	table-manager service Load Balancer IP	""
tableManager.service.loadBalancerSourceRanges	table-manager service Load Balancer sources	[]
tableManager.service.externalTrafficPolicy	table-manager service external traffic policy	Cluster
tableManager.service.annotations	Additional custom annotations for table-manager service	{}
tableManager.service.extraPorts	Extra ports to expose in the table-manager service	[]
tableManager.networkPolicy.enabled	Specifies whether a NetworkPolicy should be created	true
tableManager.networkPolicy.allowExternal	Don’t require server label for connections	true
tableManager.networkPolicy.allowExternalEgress	Allow the pod to access any range of port and all destinations.	true
tableManager.networkPolicy.addExternalClientAccess	Allow access from pods with client label set to “true”. Ignored if tableManager.networkPolicy.allowExternal is true.	true
tableManager.networkPolicy.extraIngress	Add extra ingress rules to the NetworkPolicy	[]
tableManager.networkPolicy.extraEgress	Add extra ingress rules to the NetworkPolicy	[]
tableManager.networkPolicy.ingressPodMatchLabels	Labels to match to allow traffic from other pods. Ignored if tableManager.networkPolicy.allowExternal is true.	{}
tableManager.networkPolicy.ingressNSMatchLabels	Labels to match to allow traffic from other namespaces. Ignored if tableManager.networkPolicy.allowExternal is true.	{}
tableManager.networkPolicy.ingressNSPodMatchLabels	Pod labels to match to allow traffic from other namespaces. Ignored if tableManager.networkPolicy.allowExternal is true.	{}

Promtail Deployment Parameters

Name	Description	Value
promtail.enabled	Deploy promtail	true
promtail.image.registry	Grafana Promtail image registry	REGISTRY_NAME
promtail.image.repository	Grafana Promtail image repository	REPOSITORY_NAME/promtail
promtail.image.digest	Grafana Promtail image digest in the way sha256:aa…. Please note this parameter, if set, will override the tag	""
promtail.image.pullPolicy	Grafana Promtail image pull policy	IfNotPresent
promtail.image.pullSecrets	Grafana Promtail image pull secrets	[]
promtail.extraEnvVars	Array with extra environment variables to add to promtail nodes	[]
promtail.extraEnvVarsCM	Name of existing ConfigMap containing extra env vars for promtail nodes	""
promtail.extraEnvVarsSecret	Name of existing Secret containing extra env vars for promtail nodes	""
promtail.command	Override default container command (useful when using custom images)	[]
promtail.args	Override default container args (useful when using custom images)	[]
promtail.extraArgs	Additional container args (will be concatenated to args, unless diagnosticMode is enabled)	[]
promtail.containerPorts.http	Promtail HTTP port	8080
promtail.containerPorts.grpc	Promtail HTTP port	9095
promtail.livenessProbe.enabled	Enable livenessProbe on Promtail nodes	true
promtail.livenessProbe.initialDelaySeconds	Initial delay seconds for livenessProbe	10
promtail.livenessProbe.periodSeconds	Period seconds for livenessProbe	10
promtail.livenessProbe.timeoutSeconds	Timeout seconds for livenessProbe	1
promtail.livenessProbe.failureThreshold	Failure threshold for livenessProbe	3
promtail.livenessProbe.successThreshold	Success threshold for livenessProbe	1
promtail.readinessProbe.enabled	Enable readinessProbe on Promtail nodes	true
promtail.readinessProbe.initialDelaySeconds	Initial delay seconds for readinessProbe	10
promtail.readinessProbe.periodSeconds	Period seconds for readinessProbe	10
promtail.readinessProbe.timeoutSeconds	Timeout seconds for readinessProbe	1
promtail.readinessProbe.failureThreshold	Failure threshold for readinessProbe	3
promtail.readinessProbe.successThreshold	Success threshold for readinessProbe	1
promtail.startupProbe.enabled	Enable startupProbe on Promtail containers	false
promtail.startupProbe.initialDelaySeconds	Initial delay seconds for startupProbe	30
promtail.startupProbe.periodSeconds	Period seconds for startupProbe	10
promtail.startupProbe.timeoutSeconds	Timeout seconds for startupProbe	1
promtail.startupProbe.failureThreshold	Failure threshold for startupProbe	15
promtail.startupProbe.successThreshold	Success threshold for startupProbe	1
promtail.customLivenessProbe	Custom livenessProbe that overrides the default one	{}
promtail.customReadinessProbe	Custom readinessProbe that overrides the default one	{}
promtail.customStartupProbe	Custom startupProbe that overrides the default one	{}
promtail.lifecycleHooks	for the promtail container(s) to automate configuration before or after startup	{}
promtail.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if promtail.resources is set (promtail.resources is recommended for production).	nano
promtail.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}
promtail.podSecurityContext.enabled	Enabled Promtail pods’ Security Context	true
promtail.podSecurityContext.fsGroupChangePolicy	Set filesystem group change policy	Always
promtail.podSecurityContext.sysctls	Set kernel settings using the sysctl interface	[]
promtail.podSecurityContext.supplementalGroups	Set filesystem extra groups	[]
promtail.podSecurityContext.fsGroup	Set Promtail pod’s Security Context fsGroup	0
promtail.containerSecurityContext.enabled	Enabled containers’ Security Context	true
promtail.containerSecurityContext.seLinuxOptions	Set SELinux options in container	{}
promtail.containerSecurityContext.runAsUser	Set containers’ Security Context runAsUser	0
promtail.containerSecurityContext.runAsGroup	Set containers’ Security Context runAsGroup	0
promtail.containerSecurityContext.runAsNonRoot	Set container’s Security Context runAsNonRoot	false
promtail.containerSecurityContext.privileged	Set container’s Security Context privileged	false
promtail.containerSecurityContext.readOnlyRootFilesystem	Set container’s Security Context readOnlyRootFilesystem	true
promtail.containerSecurityContext.allowPrivilegeEscalation	Set container’s Security Context allowPrivilegeEscalation	false
promtail.containerSecurityContext.capabilities.drop	List of capabilities to be dropped	["ALL"]
promtail.containerSecurityContext.seccompProfile.type	Set container’s Security Context seccomp profile	RuntimeDefault
promtail.automountServiceAccountToken	Mount Service Account token in pod	true
promtail.hostAliases	promtail pods host aliases	[]
promtail.podLabels	Extra labels for promtail pods	{}
promtail.podAnnotations	Annotations for promtail pods	{}
promtail.podAffinityPreset	Pod affinity preset. Ignored if promtail.affinity is set. Allowed values: soft or hard	""
promtail.podAntiAffinityPreset	Pod anti-affinity preset. Ignored if promtail.affinity is set. Allowed values: soft or hard	soft
promtail.nodeAffinityPreset.type	Node affinity preset type. Ignored if promtail.affinity is set. Allowed values: soft or hard	""
promtail.nodeAffinityPreset.key	Node label key to match. Ignored if promtail.affinity is set	""
promtail.nodeAffinityPreset.values	Node label values to match. Ignored if promtail.affinity is set	[]
promtail.affinity	Affinity for promtail pods assignment	{}
promtail.nodeSelector	Node labels for Promtail pods assignment	{}
promtail.tolerations	Tolerations for Promtail pods assignment	[]
promtail.topologySpreadConstraints	Topology Spread Constraints for pod assignment spread across your cluster among failure-domains	[]
promtail.priorityClassName	Promtail pods’ priorityClassName	""
promtail.schedulerName	Kubernetes pod scheduler registry	""
promtail.updateStrategy.type	Promtail statefulset strategy type	RollingUpdate
promtail.updateStrategy.rollingUpdate	Promtail statefulset rolling update configuration parameters	nil
promtail.extraVolumes	Optionally specify extra list of additional volumes for the Promtail pod(s)	[]
promtail.extraVolumeMounts	Optionally specify extra list of additional volumeMounts for the promtail container(s)	[]
promtail.sidecars	Add additional sidecar containers to the Promtail pod(s)	[]
promtail.initContainers	Add additional init containers to the Promtail pod(s)	[]
promtail.enableServiceLinks	Whether information about services should be injected into pod’s environment variable	true
promtail.configuration	Promtail configuration	""
promtail.existingSecret	Name of a Secret that contains the Promtail configuration	""
promtail.logLevel	Promtail logging level	info

Promtail Traffic Exposure Parameters

Name	Description	Value
promtail.service.type	Promtail service type	ClusterIP
promtail.service.ports.http	Promtail HTTP service port	3100
promtail.service.ports.grpc	Promtail gRPC service port	9095
promtail.service.nodePorts.http	Node port for HTTP	""
promtail.service.sessionAffinityConfig	Additional settings for the sessionAffinity	{}
promtail.service.sessionAffinity	Control where client requests go, to the same pod or round-robin	None
promtail.service.clusterIP	Promtail service Cluster IP	""
promtail.service.loadBalancerIP	Promtail service Load Balancer IP	""
promtail.service.loadBalancerSourceRanges	Promtail service Load Balancer sources	[]
promtail.service.externalTrafficPolicy	Promtail service external traffic policy	Cluster
promtail.service.annotations	Additional custom annotations for Promtail service	{}
promtail.service.extraPorts	Extra ports to expose in the Promtail service	[]
promtail.networkPolicy.enabled	Specifies whether a NetworkPolicy should be created	true
promtail.networkPolicy.allowExternal	Don’t require server label for connections	true
promtail.networkPolicy.allowExternalEgress	Allow the pod to access any range of port and all destinations.	true
promtail.networkPolicy.addExternalClientAccess	Allow access from pods with client label set to “true”. Ignored if promtail.networkPolicy.allowExternal is true.	true
promtail.networkPolicy.kubeAPIServerPorts	List of possible endpoints to kube-apiserver (limit to your cluster settings to increase security)	[]
promtail.networkPolicy.extraIngress	Add extra ingress rules to the NetworkPolicy	[]
promtail.networkPolicy.extraEgress	Add extra ingress rules to the NetworkPolicy	[]
promtail.networkPolicy.ingressPodMatchLabels	Labels to match to allow traffic from other pods. Ignored if promtail.networkPolicy.allowExternal is true.	{}
promtail.networkPolicy.ingressNSMatchLabels	Labels to match to allow traffic from other namespaces. Ignored if promtail.networkPolicy.allowExternal is true.	{}
promtail.networkPolicy.ingressNSPodMatchLabels	Pod labels to match to allow traffic from other namespaces. Ignored if promtail.networkPolicy.allowExternal is true.	{}
promtail.rbac.create	Create RBAC rules	true
promtail.serviceAccount.create	Enable creation of ServiceAccount for Promtail pods	true
promtail.serviceAccount.name	The name of the ServiceAccount to use	""
promtail.serviceAccount.automountServiceAccountToken	Allows auto mount of ServiceAccountToken on the promtail.serviceAccount.created	false
promtail.serviceAccount.annotations	Additional custom annotations for the ServiceAccount	{}

Init Container Parameters

Name	Description	Value
volumePermissions.enabled	Enable init container that changes the owner/group of the PV mount point to runAsUser:fsGroup	false
volumePermissions.image.registry	OS Shell + Utility image registry	REGISTRY_NAME
volumePermissions.image.repository	OS Shell + Utility image repository	REPOSITORY_NAME/os-shell
volumePermissions.image.digest	OS Shell + Utility image digest in the way sha256:aa…. Please note this parameter, if set, will override the tag	""
volumePermissions.image.pullPolicy	OS Shell + Utility image pull policy	IfNotPresent
volumePermissions.image.pullSecrets	OS Shell + Utility image pull secrets	[]
volumePermissions.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if volumePermissions.resources is set (volumePermissions.resources is recommended for production).	nano
volumePermissions.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}
volumePermissions.containerSecurityContext.seLinuxOptions	Set SELinux options in container	{}
volumePermissions.containerSecurityContext.runAsUser	Set init container’s Security Context runAsUser	0
volumePermissions.containerSecurityContext.seccompProfile.type	Set container’s Security Context seccomp profile	RuntimeDefault

Other Parameters

Name	Description	Value
serviceAccount.create	Enable creation of ServiceAccount for Loki pods	true
serviceAccount.name	The name of the ServiceAccount to use	""
serviceAccount.automountServiceAccountToken	Allows auto mount of ServiceAccountToken on the serviceAccount created	false
serviceAccount.annotations	Additional custom annotations for the ServiceAccount	{}

Metrics Parameters

Name	Description	Value
metrics.enabled	Enable metrics	false
metrics.serviceMonitor.enabled	Create ServiceMonitor Resource for scraping metrics using Prometheus Operator	false
metrics.serviceMonitor.namespace	Namespace for the ServiceMonitor Resource (defaults to the Release Namespace)	""
metrics.serviceMonitor.interval	Interval at which metrics should be scraped.	""
metrics.serviceMonitor.scrapeTimeout	Timeout after which the scrape is ended	""
metrics.serviceMonitor.labels	Additional labels that can be used so ServiceMonitor will be discovered by Prometheus	{}
metrics.serviceMonitor.selector	Prometheus instance selector labels	{}
metrics.serviceMonitor.relabelings	RelabelConfigs to apply to samples before scraping	[]
metrics.serviceMonitor.metricRelabelings	MetricRelabelConfigs to apply to samples before ingestion	[]
metrics.serviceMonitor.honorLabels	Specify honorLabels parameter to add the scrape endpoint	false
metrics.serviceMonitor.jobLabel	The name of the label on the target service to use as the job name in prometheus.	""

External Memcached (Chunks) Parameters

Name	Description	Value
externalMemcachedChunks.host	Host of a running external memcached instance	""
externalMemcachedChunks.port	Port of a running external memcached instance	11211

Memcached Sub-chart Parameters (Chunks)

Name	Description	Value
memcachedchunks.enabled	Deploy memcached sub-chart	true
memcachedchunks.nameOverride	override the subchart name	""
memcachedchunks.architecture	Memcached architecture	high-availability
memcachedchunks.service.ports.memcached	Memcached service port	11211
memcachedchunks.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if resources is set (resources is recommended for production).	nano
memcachedchunks.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}

External Memcached (Frontend) Parameters

Name	Description	Value
externalMemcachedFrontend.host	Host of a running external memcached instance	""
externalMemcachedFrontend.port	Port of a running external memcached instance	11211

Memcached Sub-chart Parameters (Frontend)

Name	Description	Value
memcachedfrontend.enabled	Deploy memcached sub-chart	true
memcachedfrontend.architecture	Memcached architecture	high-availability
memcachedfrontend.nameOverride	override the subchart name	""
memcachedfrontend.service.ports.memcached	Memcached service port	11211
memcachedfrontend.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if resources is set (resources is recommended for production).	nano
memcachedfrontend.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}

External Memcached (Index-Queries) Parameters

Name	Description	Value
externalMemcachedIndexQueries.host	Host of a running external memcached instance	""
externalMemcachedIndexQueries.port	Port of a running external memcached instance	11211

Memcached Sub-chart Parameters (Index-Queries)

Name	Description	Value
memcachedindexqueries.enabled	Deploy memcached sub-chart	false
memcachedindexqueries.architecture	Memcached architecture	high-availability
memcachedindexqueries.nameOverride	override the subchart name	""
memcachedindexqueries.service.ports.memcached	Memcached service port	11211
memcachedindexqueries.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if resources is set (resources is recommended for production).	nano
memcachedindexqueries.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}

External Memcached (IndexWrites) Parameters

Name	Description	Value
externalMemcachedIndexWrites.host	Host of a running external memcached instance	""
externalMemcachedIndexWrites.port	Port of a running external memcached instance	11211

Memcached Sub-chart Parameters (Index-Writes)

Name	Description	Value
memcachedindexwrites.enabled	Deploy memcached sub-chart	false
memcachedindexwrites.architecture	Memcached architecture	high-availability
memcachedindexwrites.nameOverride	override the subchart name	""
memcachedindexwrites.service.ports.memcached	Memcached service port	11211
memcachedindexwrites.resourcesPreset	Set container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if resources is set (resources is recommended for production).	nano
memcachedindexwrites.resources	Set container requests and limits for different resources like CPU or memory (essential for production workloads)	{}

See https://github.com/bitnami/readme-generator-for-helm to create the table.

The above parameters map to the env variables defined in bitnami/grafana-loki. For more information please refer to the bitnami/grafana-loki image documentation.

Specify each parameter using the --set key=value[,key=value] argument to helm install. For example,

helm install my-release \
  --set loki.traces.jaeger.grpc=true \
  oci://REGISTRY_NAME/REPOSITORY_NAME/grafana-loki

Note: You need to substitute the placeholders REGISTRY_NAME and REPOSITORY_NAME with a reference to your Helm chart registry and repository. For example, in the case of Bitnami, you need to use REGISTRY_NAME=registry-1.docker.io and REPOSITORY_NAME=bitnamicharts.

The above command enables the Jaeger GRPC traces.

Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart. For example,

helm install my-release -f values.yaml oci://REGISTRY_NAME/REPOSITORY_NAME/grafana-loki

Note: You need to substitute the placeholders REGISTRY_NAME and REPOSITORY_NAME with a reference to your Helm chart registry and repository. For example, in the case of Bitnami, you need to use REGISTRY_NAME=registry-1.docker.io and REPOSITORY_NAME=bitnamicharts. Tip: You can use the default values.yaml

Troubleshooting

Find more information about how to deal with common errors related to Bitnami’s Helm charts in this troubleshooting guide.

Upgrading

To 4.0.0

This major bumps the Grafana Loki version to its newest major, 3.x.x. This version includes a new storage schema, among other features like structured metadata support. These changes could potentially break your deployments. Please refer to the official release notes and documentation website for further details.

To 3.0.0

This major bump changes the following security defaults:

• runAsGroup is changed from 0 to 1001
• readOnlyRootFilesystem is set to true
• resourcesPreset is changed from none to the minimum size working in our test suites (NOTE: resourcesPreset is not meant for production usage, but resources adapted to your use case).
• global.compatibility.openshift.adaptSecurityContext is changed from disabled to auto.

This could potentially break any customization or init scripts used in your deployment. If this is the case, change the default values to the previous ones.

To 1.0.0

This major release renames several values in this chart and adds missing features, in order to be inline with the rest of assets in the Bitnami charts repository.

• loki.containerPort, loki.grpcContainerPort and loki.gossipRing.containerPort have been regrouped under the loki.containerPorts map.
• queryFrontend.query.jaegerMetricsContainerPort and queryFrontend.query.jaegerUIContainerPort have been regrouped under the queryFrontend.query.containerPorts map.
• vulture.containerPort has been regrouped under the vulture.containerPorts map.
• XXX.service.port and XXX.service.grpcPort have been regrouped under the XXX.service.ports map.

Additionally updates the Memcached subchart to its newest major 6.x.x, which contains similar changes.

License

Copyright © 2024 Broadcom. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.

Licensed under the Apache License, Version 2.0 (the “License”); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an “AS IS” BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.