opensearch-dashboards
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
1
# Copyright OpenSearch Contributors
2
# SPDX-License-Identifier: Apache-2.0
3
4
# Default values for opensearch-dashboards.
5
# This is a YAML-formatted file.
6
# Declare variables to be passed into your templates.
7
8
opensearchHosts: "https://opensearch-cluster-master:9200"
9
replicaCount: 1
10
image:
11
repository: chainreg.biz/chainguard-private/opensearch-dashboards
12
# override image tag, which is .Chart.AppVersion by default
13
tag: latest@sha256:2f569e4a419cc82a2da7cab12a830ae600988cad5d5e7aeeeae02771c6b7816e
14
pullPolicy: "IfNotPresent"
15
startupProbe:
16
tcpSocket:
17
port: 5601
18
periodSeconds: 10
19
timeoutSeconds: 5
20
failureThreshold: 20
21
successThreshold: 1
22
initialDelaySeconds: 10
23
livenessProbe:
24
tcpSocket:
25
port: 5601
26
periodSeconds: 20
27
timeoutSeconds: 5
28
failureThreshold: 10
29
successThreshold: 1
30
initialDelaySeconds: 10
31
readinessProbe:
32
tcpSocket:
33
port: 5601
34
periodSeconds: 20
35
timeoutSeconds: 5
36
failureThreshold: 10
37
successThreshold: 1
38
initialDelaySeconds: 10
39
imagePullSecrets: []
40
nameOverride: ""
41
fullnameOverride: ""
42
serviceAccount:
43
# Specifies whether a service account should be created
44
create: true
45
# Annotations to add to the service account
46
annotations: {}
47
# The name of the service account to use.
48
# If not set and create is true, a name is generated using the fullname template
49
name: ""
50
# Controls whether the ServiceAccount API token is automatically mounted on pod
51
automountServiceAccountToken: true
52
rbac:
53
create: true
54
# A list of secrets and their paths to mount inside the pod
55
# This is useful for mounting certificates for security and for mounting
56
# the X-Pack license
57
secretMounts: []
58
# - name: certs
59
# secretName: dashboard-certs
60
# path: /usr/share/dashboards/certs
61
62
podAnnotations: {}
63
# Deployment annotations
64
dashboardAnnotations: {}
65
extraEnvs: []
66
# - name: "NODE_OPTIONS"
67
# value: "--max-old-space-size=1800"
68
69
envFrom: []
70
extraVolumes: []
71
# - name: extras
72
# emptyDir: {}
73
74
extraVolumeMounts: []
75
# - name: extras
76
# mountPath: /usr/share/extras
77
# readOnly: true
78
79
extraInitContainers: ""
80
extraContainers: ""
81
podSecurityContext: {}
82
securityContext:
83
capabilities:
84
drop:
85
- ALL
86
# readOnlyRootFilesystem: true
87
runAsNonRoot: true
88
runAsUser: 1000
89
config: {}
90
# Default OpenSearch Dashboards configuration from docker image of Dashboards
91
92
# opensearch_dashboards.yml: |
93
# server:
94
# name: dashboards
95
# host: "{{ .Values.serverHost }}"
96
97
# opensearch_dashboards.yml:
98
# server:
99
# name: dashboards
100
# host: "{{ .Values.serverHost }}"
101
102
# Dashboards TLS Config (Ensure the cert files are present before enabling SSL
103
# ssl:
104
# enabled: true
105
# key: /usr/share/opensearch-dashboards/certs/dashboards-key.pem
106
# certificate: /usr/share/opensearch-dashboards/certs/dashboards-crt.pem
107
108
# determines how dashboards will verify certificates (needs to be none for default opensearch certificates to work)
109
# opensearch:
110
# ssl:
111
# certificateAuthorities: /usr/share/opensearch-dashboards/certs/dashboards-root-ca.pem
112
# if utilizing custom CA certs for connection to opensearch, provide the CA here
113
opensearchDashboardsYml:
114
defaultMode:
115
# value should be 0-0777
116
priorityClassName: ""
117
opensearchAccount:
118
secret: ""
119
keyPassphrase:
120
enabled: false
121
labels: {}
122
hostAliases: []
123
# - ip: "127.0.0.1"
124
# hostnames:
125
# - "foo.local"
126
# - "bar.local"
127
128
serverHost: "0.0.0.0"
129
service:
130
type: ClusterIP
131
# The IP family and IP families options are to set the behaviour in a dual-stack environment
132
# Omitting these values will let the service fall back to whatever the CNI dictates the defaults
133
# should be
134
#
135
# ipFamilyPolicy: SingleStack
136
# ipFamilies:
137
# - IPv4
138
port: 5601
139
metricsPort: 9601
140
loadBalancerIP: ""
141
nodePort: ""
142
labels: {}
143
annotations: {}
144
loadBalancerSourceRanges: []
145
# 0.0.0.0/0
146
httpPortName: http
147
metricsPortName: metrics
148
ingress:
149
enabled: false
150
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
151
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
152
# ingressClassName: nginx
153
annotations: {}
154
# kubernetes.io/ingress.class: nginx
155
# kubernetes.io/tls-acme: "true"
156
labels: {}
157
hosts:
158
- host: chart-example.local
159
paths:
160
- path: /
161
backend:
162
serviceName: ""
163
servicePort: ""
164
tls: []
165
# - secretName: chart-example-tls
166
# hosts:
167
# - chart-example.local
168
resources:
169
requests:
170
cpu: "100m"
171
memory: "512M"
172
limits:
173
cpu: "100m"
174
memory: "512M"
175
autoscaling:
176
# This requires metrics server to be installed, to install use kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yaml
177
# See https://github.com/kubernetes-sigs/metrics-server
178
enabled: false
179
minReplicas: 1
180
maxReplicas: 10
181
# The legacy `targetCPUUtilizationPercentage` key has been deprecated in favor of `targetCPU`
182
targetCPU: "80"
183
targetMemory: "80"
184
updateStrategy:
185
type: "Recreate"
186
nodeSelector: {}
187
tolerations: []
188
affinity: {}
189
# This is the pod topology spread constraints
190
# https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
191
topologySpreadConstraints: []
192
# -- Array of extra K8s manifests to deploy
193
extraObjects: []
194
# - apiVersion: secrets-store.csi.x-k8s.io/v1
195
# kind: SecretProviderClass
196
# metadata:
197
# name: argocd-secrets-store
198
# spec:
199
# provider: aws
200
# parameters:
201
# objects: |
202
# - objectName: "argocd"
203
# objectType: "secretsmanager"
204
# jmesPath:
205
# - path: "client_id"
206
# objectAlias: "client_id"
207
# - path: "client_secret"
208
# objectAlias: "client_secret"
209
# secretObjects:
210
# - data:
211
# - key: client_id
212
# objectName: client_id
213
# - key: client_secret
214
# objectName: client_secret
215
# secretName: argocd-secrets-store
216
# type: Opaque
217
# labels:
218
# app.kubernetes.io/part-of: argocd
219
# - |
220
# apiVersion: policy/v1
221
# kind: PodDisruptionBudget
222
# metadata:
223
# name: {{ template "opensearch-dashboards.fullname" . }}
224
# labels:
225
# {{- include "opensearch-dashboards.labels" . | nindent 4 }}
226
# spec:
227
# minAvailable: 1
228
# selector:
229
# matchLabels:
230
# {{- include "opensearch-dashboards.selectorLabels" . | nindent 6 }}
231
232
# pod lifecycle policies as outlined here:
233
# https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
234
lifecycle: {}
235
# preStop:
236
# exec:
237
# command: ["/bin/sh", "-c", "echo Hello from the postStart handler > /usr/share/message"]
238
# postStart:
239
# exec:
240
# command:
241
# - bash
242
# - -c
243
# - |
244
# #!/bin/bash
245
# curl -I "http://admin:admin@127.0.0.1:5601/status -H "kbn-xsrf: true" -H 'kbn-xsrf: true' -H "Content-Type: application/json"
246
247
## Enable to add 3rd Party / Custom plugins not offered in the default OpenSearchDashboards image.
248
plugins:
249
enabled: false
250
installList: []
251
# - example-fake-plugin-downloadable-url
252
removeList: []
253
# - examplePluginName
254
# ServiceMonitor Configuration for Prometheus
255
# Enabling this option will create a ServiceMonitor resource that allows Prometheus to scrape metrics from the OpenSearch service.
256
serviceMonitor:
257
# Set to true to enable the ServiceMonitor resource for OpenSearch Dashboards
258
enabled: false
259
# HTTP path where metrics are exposed by OpenSearch Dashboards.
260
# Ensure this path is correctly set in your service.
261
path: /_prometheus/metrics
262
# Frequency at which Prometheus will scrape metrics.
263
# Modify as needed for your monitoring requirements.
264
interval: 10s
265
# additional labels to be added to the ServiceMonitor
266
# labels:
267
# k8s.example.com/prometheus: kube-prometheus
268
labels: {}
269
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.