Skip to main content

Helm — Kubernetes install

Chart: charts/zoreon. Prefer Compose on a single VM (CUSTOMER.md); use Helm when you already run Kubernetes.

Prerequisites​

  • Kubernetes 1.25+
  • Helm 3
  • Image built and pushed (docker build -t your-registry/zoreon:0.1.0 . && docker push …)

Install (in-cluster Postgres)​

helm upgrade --install zoreon ./charts/zoreon \
  --namespace zoreon --create-namespace \
  --set image.repository=your-registry/zoreon \
  --set image.tag=0.1.0 \
  --set env.BETTER_AUTH_URL=https://zoreon.example.com \
  --set env.ZOREON_BOOTSTRAP_ADMIN_EMAIL=admin@example.com \
  --set secret.BETTER_AUTH_SECRET="$(openssl rand -hex 32)" \
  --set postgresql.auth.password="$(openssl rand -hex 16)" \
  --set ingress.enabled=true \
  --set ingress.hosts[0].host=zoreon.example.com \
  --set ingress.hosts[0].paths[0].path=/ \
  --set ingress.hosts[0].paths[0].pathType=Prefix

In-cluster Postgres is a single StatefulSet — fine for small installs; prefer managed Postgres in production.

External Postgres​

helm upgrade --install zoreon ./charts/zoreon \
  --namespace zoreon --create-namespace \
  --set postgresql.enabled=false \
  --set secret.DATABASE_URL='postgres://zoreon:…@postgres.example.com:5432/zoreon' \
  --set secret.BETTER_AUTH_SECRET='…' \
  --set env.BETTER_AUTH_URL=https://zoreon.example.com \
  --set image.repository=your-registry/zoreon \
  --set image.tag=0.1.0

Existing Secret​

kubectl -n zoreon create secret generic zoreon-secrets \
  --from-literal=BETTER_AUTH_SECRET=… \
  --from-literal=DATABASE_URL=postgres://… \
  --from-literal=MATTERMOST_TOKEN= \
  --from-literal=SMTP_USER= \
  --from-literal=SMTP_PASS= \
  --from-literal=VAPID_PUBLIC_KEY= \
  --from-literal=VAPID_PRIVATE_KEY=

helm upgrade --install zoreon ./charts/zoreon \
  --namespace zoreon --create-namespace \
  --set secret.create=false \
  --set existingSecret=zoreon-secrets \
  --set postgresql.enabled=false \
  --set image.repository=your-registry/zoreon \
  --set image.tag=0.1.0 \
  --set env.BETTER_AUTH_URL=https://zoreon.example.com

Values of note​

KeyPurpose
image.*Container image
env.BETTER_AUTH_URLPublic origin (must match Ingress / TLS)
env.ZOREON_BOOTSTRAP_ADMIN_EMAILFirst workspace admin
postgresql.enabledIn-cluster Postgres StatefulSet
ingress.enabled / ingress.hostsExpose via Ingress
existingSecretUse a cluster Secret instead of chart-managed

Full reference: charts/zoreon/values.yaml. Env semantics: ENV.md.

Verify​

kubectl -n zoreon rollout status deploy/zoreon
kubectl -n zoreon port-forward svc/zoreon 8080:8080
BASE_URL=http://localhost:8080 ./scripts/customer-smoke.sh

Browser checklist: TESTING.md.