databasus/deploy/helm/README.md

Databasus Helm Chart

Installation

Install directly from the OCI registry (no need to clone the repository):

helm install databasus oci://ghcr.io/databasus/charts/databasus \
  -n databasus --create-namespace

The -n databasus --create-namespace flags control which namespace the chart is installed into. You can use any namespace name you prefer.

Accessing Databasus

By default, the chart creates a ClusterIP service. Use port-forward to access:

kubectl port-forward svc/databasus-service 4005:4005 -n databasus

Then open http://localhost:4005 in your browser.

Configuration

Main Parameters

Parameter	Description	Default Value
image.repository	Docker image	databasus/databasus
image.tag	Image tag	latest
image.pullPolicy	Image pull policy	Always
imagePullSecrets	Image pull secrets	[]
replicaCount	Number of replicas	1

Custom Root CA

Parameter	Description	Default Value
customRootCA	Name of Secret containing CA certificate	""

To trust a custom CA certificate (e.g., for internal services with self-signed certificates):

1. Create a Secret with your CA certificate:

kubectl create secret generic my-root-ca \
  --from-file=ca.crt=./path/to/ca-certificate.crt

2. Reference it in values:

customRootCA: my-root-ca

The certificate will be mounted to /etc/ssl/certs/custom-root-ca.crt and the SSL_CERT_FILE environment variable will be set automatically.

Service

Parameter	Description	Default Value
service.type	Service type	ClusterIP
service.port	Service port	4005
service.targetPort	Container port	4005
service.headless.enabled	Enable headless service	true

Storage

Parameter	Description	Default Value
persistence.enabled	Enable persistent storage	true
persistence.storageClassName	Storage class	"" (cluster default)
persistence.accessMode	Access mode	ReadWriteOnce
persistence.size	Storage size	10Gi
persistence.mountPath	Mount path	/databasus-data

Resources

Parameter	Description	Default Value
resources.requests.memory	Memory request	1Gi
resources.requests.cpu	CPU request	500m
resources.limits.memory	Memory limit	1Gi
resources.limits.cpu	CPU limit	500m

External Access Options

Option 1: Port Forward (Default)

Best for development or quick access:

kubectl port-forward svc/databasus-service 4005:4005 -n databasus

Access at http://localhost:4005

Option 2: NodePort

For direct access via node IP:

# nodeport-values.yaml
service:
  type: NodePort
  port: 4005
  targetPort: 4005
  nodePort: 30080

helm install databasus oci://ghcr.io/databasus/charts/databasus \
  -n databasus --create-namespace \
  -f nodeport-values.yaml

Access at http://<NODE-IP>:30080

Option 3: LoadBalancer

For cloud environments with load balancer support:

# loadbalancer-values.yaml
service:
  type: LoadBalancer
  port: 80
  targetPort: 4005

helm install databasus oci://ghcr.io/databasus/charts/databasus \
  -n databasus --create-namespace \
  -f loadbalancer-values.yaml

Get the external IP:

kubectl get svc -n databasus

Access at http://<EXTERNAL-IP>

Option 4: Ingress

For domain-based access with TLS:

# ingress-values.yaml
ingress:
  enabled: true
  className: nginx
  annotations:
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
  hosts:
    - host: backup.example.com
      paths:
        - path: /
          pathType: Prefix
  tls:
    - secretName: backup-example-com-tls
      hosts:
        - backup.example.com

helm install databasus oci://ghcr.io/databasus/charts/databasus \
  -n databasus --create-namespace \
  -f ingress-values.yaml

Option 5: HTTPRoute (Gateway API)

For clusters using Istio, Envoy Gateway, Cilium, or other Gateway API implementations:

# httproute-values.yaml
route:
  enabled: true
  hostnames:
    - backup.example.com
  parentRefs:
    - name: my-gateway
      namespace: istio-system

helm install databasus oci://ghcr.io/databasus/charts/databasus \
  -n databasus --create-namespace \
  -f httproute-values.yaml

Ingress Configuration

Parameter	Description	Default Value
ingress.enabled	Enable Ingress	false
ingress.className	Ingress class	nginx
ingress.hosts[0].host	Hostname	databasus.example.com
ingress.tls	TLS configuration	[]

HTTPRoute Configuration

Parameter	Description	Default Value
route.enabled	Enable HTTPRoute	false
route.apiVersion	Gateway API version	gateway.networking.k8s.io/v1
route.hostnames	Hostnames for the route	["databasus.example.com"]
route.parentRefs	Gateway references	[]

Health Checks

Parameter	Description	Default Value
livenessProbe.enabled	Enable liveness probe	true
readinessProbe.enabled	Enable readiness probe	true

Custom Storage Size

# storage-values.yaml
persistence:
  size: 50Gi
  storageClassName: "fast-ssd"

helm install databasus oci://ghcr.io/databasus/charts/databasus \
  -n databasus --create-namespace \
  -f storage-values.yaml

Upgrade

helm upgrade databasus oci://ghcr.io/databasus/charts/databasus -n databasus

Uninstall

helm uninstall databasus -n databasus