From 4ae56ec79ec9e70b521050e056d6ac88c52a2e55 Mon Sep 17 00:00:00 2001 From: AJ Emerich Date: Fri, 10 Jul 2026 12:09:09 +0200 Subject: [PATCH 1/2] docs: provide more comprehensive k8s config Part of https://github.com/kestra-io/docs/issues/5123 --- .../02.installation/03.kubernetes/index.md | 49 ++++++++++++++++++- 1 file changed, 48 insertions(+), 1 deletion(-) diff --git a/src/contents/docs/02.installation/03.kubernetes/index.md b/src/contents/docs/02.installation/03.kubernetes/index.md index bdf8627ef52..a3bb5488bbe 100644 --- a/src/contents/docs/02.installation/03.kubernetes/index.md +++ b/src/contents/docs/02.installation/03.kubernetes/index.md @@ -183,6 +183,53 @@ kubectl get pods -l app.kubernetes.io/name=kestra Kestra configuration is provided through Helm values and rendered into ConfigMaps and Secrets. +All Kestra-specific options live under `configurations.application`. The content of this block is identical to what you would put in a standalone `application.yml` — the Helm chart passes it through as-is. Every property documented in the [configuration section](../../configuration/index.mdx) is valid here. + +### Production example + +A typical production `values.yaml` configures the database, storage backend, and secrets manager together: + +```yaml +configurations: + application: + kestra: + storage: + type: s3 + s3: + bucket: my-kestra-bucket + region: us-east-1 + secret: + type: aws-secret-manager + aws-secret-manager: + region: us-east-1 + queue: + type: postgres + repository: + type: postgres + + datasources: + postgres: + url: jdbc:postgresql://postgres:5432/kestra + driverClassName: org.postgresql.Driver + username: kestra + password: ${POSTGRES_PASSWORD} +``` + +Inject credentials from a Kubernetes Secret using `common.extraEnvFrom`: + +```yaml +common: + extraEnvFrom: + - secretRef: + name: postgres-credentials # Secret must contain POSTGRES_PASSWORD +``` + +For the full property reference for each area, see: + +- [Runtime and Storage](../../configuration/02.runtime-and-storage/index.md) — storage backends (S3, GCS, Azure, MinIO, and more) and datasource configuration +- [Security and Secrets](../../configuration/05.security-and-secrets/index.md) — secrets backends +- [Configuration basics](../../configuration/01.configuration-basics/index.md) — queue and repository type selection, environment variables, property naming, and override patterns + ### Minimal example (H2 database for testing only) ```yaml @@ -196,7 +243,7 @@ configurations: storage: type: local local: - basePath: "/app/storage" + base-path: "/app/storage" datasources: h2: From 4156bfcb95f4a42180ea08997af6a2655079b2aa Mon Sep 17 00:00:00 2001 From: AJ Emerich Date: Fri, 10 Jul 2026 12:11:08 +0200 Subject: [PATCH 2/2] Apply suggestion from @aj-emerich --- src/contents/docs/02.installation/03.kubernetes/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/contents/docs/02.installation/03.kubernetes/index.md b/src/contents/docs/02.installation/03.kubernetes/index.md index a3bb5488bbe..f9189c5cd6d 100644 --- a/src/contents/docs/02.installation/03.kubernetes/index.md +++ b/src/contents/docs/02.installation/03.kubernetes/index.md @@ -226,7 +226,7 @@ common: For the full property reference for each area, see: -- [Runtime and Storage](../../configuration/02.runtime-and-storage/index.md) — storage backends (S3, GCS, Azure, MinIO, and more) and datasource configuration +- [Runtime and Storage](../../configuration/02.runtime-and-storage/index.md) — storage backends (S3, GCS, Azure, and more) and datasource configuration - [Security and Secrets](../../configuration/05.security-and-secrets/index.md) — secrets backends - [Configuration basics](../../configuration/01.configuration-basics/index.md) — queue and repository type selection, environment variables, property naming, and override patterns