kong

Kong

Chainguard's redistribution of the Kong Helm chart, pre-configured with hardened Chainguard Images.

Prerequisites

Authentication is required. First, authenticate with Chainguard:

chainctl auth login
chainctl auth configure-docker --pull-token --save
helm registry login cgr.dev

Create an image pull secret:

kubectl create secret docker-registry cgr-pull-secret \
  --docker-server=cgr.dev \
  --docker-username="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Username')" \
  --docker-password="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Secret')" \
  --namespace kong

Installation

helm install kong oci://cgr.dev/ORGANIZATION/charts/kong \
  --namespace kong \
  --create-namespace \
  --set image.pullSecrets[0]=cgr-pull-secret

The chart deploys the Kong Gateway alongside the Kong Ingress Controller. To run a controller-only release, disable the gateway deployment:

helm install kong oci://cgr.dev/ORGANIZATION/charts/kong \
  --namespace kong \
  --create-namespace \
  --set image.pullSecrets[0]=cgr-pull-secret \
  --set deployment.kong.enabled=false

About This Chart

This is a redistribution of the upstream Kong Helm chart. All upstream configuration options apply.

The chart installs Kong's custom resource definitions, including KongPlugin, KongClusterPlugin, KongConsumer, KongConsumerGroup, KongIngress, TCPIngress, UDPIngress, IngressClassParameters, KongVault, and KongLicense.

For full documentation, see: https://docs.konghq.com/kubernetes-ingress-controller/