Skip to main content

Registry Server Helm values

Configure the Registry Server chart with these Helm values.

This reference lists values declared in the chart's default values.yaml. Templates can also accept optional settings and inherited global values.

Chart: toolhive-registry-server. Chart version: 0.24.0. Generated from the platform source at v0.24.0.

Values​

ha​

Type: object

Default: {"podDisruptionBudget":{"minAvailable":1}}

High availability for the registry server. Set the replica count with upstream.replicaCount; every replica serves the API, and a PodDisruptionBudget renders only above one replica.

ha.podDisruptionBudget.minAvailable​

Type: int

Default: 1

Minimum number of registry-server pods that must remain available.

upstream.affinity​

Type: object

Default value
podAntiAffinity:
  preferredDuringSchedulingIgnoredDuringExecution:
    - podAffinityTerm:
        labelSelector:
          matchLabels:
            app.kubernetes.io/component: registry-api
            app.kubernetes.io/name: upstream
        topologyKey: kubernetes.io/hostname
      weight: 100
    - podAffinityTerm:
        labelSelector:
          matchLabels:
            app.kubernetes.io/component: registry-api
            app.kubernetes.io/name: upstream
        topologyKey: topology.kubernetes.io/zone
      weight: 50

Preferred spread of registry-server replicas across nodes and zones. Your own upstream.affinity merges with this; set podAntiAffinity: null to drop it. Selector labels must match the upstream pods (upstream alias name; component excludes toolhive-operator pods, which share it).

upstream.fullnameOverride​

Type: string

Default: "registry-api"

Override the upstream Registry Server resource names. The default gives the deployment and Service the name registry-api.

upstream.image.registryServerUrl​

Type: string

Default value
image-proxy.stacklok.com/proxy/stacklok-enterprise/ghcr.io/stacklok/stacklok-enterprise/registry-api:0.24.0

Container image used by the standalone Stacklok Enterprise Registry Server.

upstream.imagePullSecrets​

Type: list

Default: [{"name":"enterprise-pull-secret"}]

Image pull Secrets for the Registry Server pod. The default authenticates to the Replicated image proxy with enterprise-pull-secret.

networkPolicy.enabled​

Type: bool

Default: false

Enable a NetworkPolicy for the registry-api pod.

networkPolicy.allowExternalEgress​

Type: bool

Default: true

Allow all egress. NetworkPolicies are additive, so true GRANTS allow-all egress and overrides a cluster default-deny. Set false and populate egress to lock the pod down.

networkPolicy.egress​

Type: list

Default: []

Egress rules (NetworkPolicyEgressRule shape) used when allowExternalEgress is false. Must cover DNS, PostgreSQL, and every sync source; a missing one fails silently.