Helm themisdb

ThemisDB Helm Chart

A Helm chart for deploying ThemisDB - Multi-Model Database with ACID Transactions on Kubernetes.

Prerequisites

• Kubernetes 1.23+
• Helm 3.8+
• PV provisioner support in the underlying infrastructure (if persistence is enabled)
• Prometheus Operator (optional, required for ServiceMonitor)
• VPA controller (optional, required for VPA)
• Grafana with grafana-sc-dashboard sidecar (optional, required for automatic dashboard import)

Installation

Add the repository (when available)

helm repo add themisdb https://makr-code.github.io/ThemisDB
helm repo update

Install the chart

helm install themisdb themisdb/themisdb

Install from local directory

helm install themisdb ./helm/themisdb

Configuration

See values.yaml for the full list of configurable parameters.

Core parameters

Parameter	Description	Default
replicaCount	Number of replicas	1
image.repository	Container image repository	themisdb/themisdb
image.tag	Container image tag	Chart.AppVersion
service.type	Kubernetes service type	ClusterIP
service.port	HTTP API service port	8080
service.metricsPort	Prometheus metrics port	9091
persistence.enabled	Enable persistent storage	true
persistence.size	PVC size	10Gi
resources.limits.memory	Memory limit	2Gi
resources.limits.cpu	CPU limit	1000m

Autoscaling (HPA)

Parameter	Description	Default
autoscaling.enabled	Enable HPA	false
autoscaling.minReplicas	Minimum replicas	1
autoscaling.maxReplicas	Maximum replicas	10
autoscaling.targetCPUUtilizationPercentage	CPU target	75
autoscaling.targetMemoryUtilizationPercentage	Memory target	80

Vertical Pod Autoscaler (VPA)

Parameter	Description	Default
vpa.enabled	Enable VPA	false
vpa.updateMode	VPA update mode (Off / Initial / Recreate / Auto)	"Off"
vpa.minAllowed.cpu	Minimum CPU recommendation	100m
vpa.minAllowed.memory	Minimum memory recommendation	256Mi
vpa.maxAllowed.cpu	Maximum CPU recommendation	4000m
vpa.maxAllowed.memory	Maximum memory recommendation	8Gi

Metrics & ServiceMonitor

Parameter	Description	Default
metrics.enabled	Enable metrics endpoint	true
metrics.serviceMonitor.enabled	Create ServiceMonitor (requires Prometheus Operator)	false
metrics.serviceMonitor.namespace	Namespace for ServiceMonitor	release namespace
metrics.serviceMonitor.interval	Scrape interval	30s
metrics.serviceMonitor.scrapeTimeout	Scrape timeout	10s

NetworkPolicy

Parameter	Description	Default
networkPolicy.enabled	Enable NetworkPolicy	false
networkPolicy.prometheusNamespace	Namespace allowed to scrape metrics	"monitoring"
networkPolicy.allowAllIngress	Allow all ingress (no podSelector filter)	false
networkPolicy.storageEgressPorts	TCP ports allowed in egress	[8766, 8769]
networkPolicy.allowHttpsEgress	Allow HTTPS (443) egress	false

Grafana Dashboard ConfigMaps

Parameter	Description	Default
grafana.dashboards.enabled	Create Grafana dashboard ConfigMaps	false
grafana.dashboards.namespace	Namespace for ConfigMaps	release namespace
grafana.dashboards.label	Label key for Grafana sidecar discovery	grafana_dashboard
grafana.dashboards.labelValue	Label value	"1"
grafana.dashboards.categories.llm	Include LLM dashboards	true
grafana.dashboards.categories.performance	Include Performance dashboards	true
grafana.dashboards.categories.security	Include Security dashboards	true
grafana.dashboards.categories.operations	Include Operations dashboards	true
grafana.dashboards.categories.compliance	Include Compliance dashboards	true
grafana.dashboards.categories.plugins	Include Plugin dashboards	false
grafana.dashboards.categories.bt4	Include BT4/FLARE dashboards	false

Service Mesh (Istio)

Parameter	Description	Default
serviceMesh.istioInject	Inject Istio sidecar	false
serviceMesh.trustSidecarMTLS	Delegate mTLS to Envoy	false
serviceMesh.drainTimeoutMs	Envoy drain timeout on shutdown	5000

Image

Official community image on Docker Hub: themisdb/themisdb

The chart default already uses this repository. Override image.repository only if you want to deploy from a different registry (for example a private mirror):

image:
  repository: registry.example.com/themisdb/themisdb
  tag: latest

Example: Production values

replicaCount: 3

resources:
  limits:
    cpu: 2000m
    memory: 4Gi
  requests:
    cpu: 500m
    memory: 1Gi

persistence:
  enabled: true
  size: 50Gi
  storageClass: "fast-ssd"

metrics:
  serviceMonitor:
    enabled: true
    namespace: monitoring

grafana:
  dashboards:
    enabled: true
    namespace: monitoring

networkPolicy:
  enabled: true
  prometheusNamespace: monitoring

autoscaling:
  enabled: true
  minReplicas: 2
  maxReplicas: 10

Install with custom values:

helm install themisdb themisdb/themisdb -f custom-values.yaml

Upgrading

helm upgrade themisdb themisdb/themisdb

Upgrade notes

0.1.x → 0.2.x

• service.metricsPort default changed from 4318 to 9091 (Prometheus-compatible). If you relied on the OTel HTTP port 4318 as the scrape target, update your values.yaml accordingly.
• ServiceMonitor now references the named port metrics on the Service. Ensure metrics.serviceMonitor.enabled=true and the Prometheus Operator is installed.
• New optional resources: NetworkPolicy, VPA, Grafana ConfigMaps. All are disabled by default — no action needed on upgrade.

Uninstalling

helm uninstall themisdb

Note: This will not delete the PersistentVolumeClaim. To fully remove the data:

kubectl delete pvc -l app.kubernetes.io/name=themisdb

Dependencies

This chart has no hard Helm dependencies, but the following operators unlock optional features:

Feature	Operator / Component
metrics.serviceMonitor	Prometheus Operator
vpa	VPA controller
grafana.dashboards	Grafana chart with sidecar.dashboards.enabled=true
serviceMesh.istioInject	Istio control plane

License

Apache License 2.0 - See LICENSE for details.

---

ThemisDB 1.9.0-beta · Home · Module-Index · GitHub · Issues