Check https://github.com/apache/incubator-devlake-helm-chart to contribute!
To install the chart with release name devlake:
helm repo add devlake https://apache.github.io/incubator-devlake-helm-chart helm repo update ENCRYPTION_SECRET=$(openssl rand -base64 2000 | tr -dc 'A-Z' | fold -w 128 | head -n 1) helm install devlake devlake/devlake --version=1.0.0-beta11 --set lake.encryptionSecret.secret=$ENCRYPTION_SECRET
Visit your devlake from the node port (32001 by default): http://YOUR-NODE-IP:32001.
Notes for mac users with minikube:
kubectl port-forward svc/devlake-ui 4000:4000http://YOUR-NODE-IP:4000/http://YOUR-NODE-IP:4000/grafana/Note:
If you're upgrading from DevLake v0.17.x or earlier versions to v0.18.x or later versions:
Copy the ENCODE_KEY value from /app/config/.env of the lake pod (e.g. devlake-lake-0), and replace the <ENCRYPTION_SECRET> in the upgrade command below.
You may encounter the below error when upgrading because the built-in grafana has been replaced by the official grafana dependency. So you may need to delete the grafana deployment first.
Error: UPGRADE FAILED: cannot patch “devlake-grafana” with kind Deployment: Deployment.apps “devlake-grafana” is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{“app.kubernetes.io/instance”:“devlake”, “app.kubernetes.io/name”:“grafana”}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable
helm repo update helm upgrade devlake devlake/devlake --version=1.0.0-beta11 --set lake.encryptionSecret.secret=<ENCRYPTION_SECRET>
If you're upgrading from DevLake v0.18.x or later versions:
helm repo update helm upgrade devlake devlake/devlake --version=1.0.0-beta11
To uninstall/delete the devlake release:
helm uninstall devlake
Conditions:
ENCRYPTION_SECRET=$(openssl rand -base64 2000 | tr -dc 'A-Z' | fold -w 128 | head -n 1) helm install devlake devlake/devlake --set service.uiPort=30000 --set lake.encryptionSecret.secret=$ENCRYPTION_SECRET
After deployed, visit devlake: http://192.168.0.6:30000
Conditions:
ENCRYPTION_SECRET=$(openssl rand -base64 2000 | tr -dc 'A-Z' | fold -w 128 | head -n 1) helm install devlake devlake/devlake --set "ingress.enabled=true,ingress.hostname=devlake.example.com,lake.encryptionSecret.secret=$ENCRYPTION_SECRET"
After deployed, visit devlake: http://devlake.example.com, and grafana at http://devlake.example.com/grafana
Conditions:
cert.pem and key.pemFirst, create the secret:
kubectl create secret tls ssl-certificate --cert cert.pem --key secret.pem
Then, deploy the devlake:
ENCRYPTION_SECRET=$(openssl rand -base64 2000 | tr -dc 'A-Z' | fold -w 128 | head -n 1)
helm install devlake devlake/devlake \
--set "ingress.enabled=true,ingress.enableHttps=true,ingress.hostname=devlake-0.example.com" \
--set "ingress.className=nginx,ingress.httpsPort=8443" \
--set "ingress.tlsSecretName=ssl-certificate"
--set "lake.encryptionSecret.secret=$ENCRYPTION_SECRET"
After deployed, visit devlake: https://devlake-0.example.com:8443, and grafana at https://devlake-0.example.com:8443/grafana
ENCRYPTION_SECRET=$(openssl rand -base64 2000 | tr -dc 'A-Z' | fold -w 128 | head -n 1) helm install devlake devlake/devlake \ --set grafana.adminPassword=<your password> \ --set lake.encryptionSecret.secret=$ENCRYPTION_SECRET
Some useful parameters for the chart, you could also check them in values.yaml
| Parameter | Description | Default |
|---|---|---|
| replicaCount | Replica Count for devlake, currently not used | 1 |
| imageTag | The version tag for all images | see Values.yaml |
| imagePullSecrets | Name of the Secret for accessing private image registries | [] |
| commonEnvs | The common envs for all pods except grafana | {TZ: “UTC”} |
| mysql.useExternal | If use external mysql server, set true | false |
| mysql.externalServer | External mysql server address | 127.0.0.1 |
| mysql.externalPort | External mysql server port | 3306 |
| mysql.username | username for mysql | merico |
| mysql.password | password for mysql | merico |
| mysql.database | database for mysql | lake |
| mysql.rootPassword | root password for mysql | admin |
| mysql.storage.type | storage type, pvc or hostpath | pvc |
| mysql.storage.class | storage class for mysql's volume | "" |
| mysql.storage.size | volume size for mysql's data | 5Gi |
| mysql.storage.hostPath | the host path if mysql.storage.type is hostpath | /devlake/mysql/data |
| mysql.image.repository | repository for mysql's image | mysql |
| mysql.image.tag | image tag for mysql's image | 8 |
| mysql.image.pullPolicy | pullPolicy for mysql's image | IfNotPresent |
| mysql.initContainers | init containers to run to complete before mysql | [] |
| mysql.extraLabels | extra labels for mysql's statefulset | {} |
| mysql.securityContext | pod security context values | {} |
| mysql.containerSecurityContext | container security context values | {} |
| mysql.service.type | mysql service type | ClusterIP |
| mysql.service.nodePort | specify mysql nodeport | "" |
| grafana | dashboard, datasource, etc. settings for grafana, installed by grafana official chart | |
| lake.image.repository | repository for lake's image | apache/devlake |
| lake.image.pullPolicy | pullPolicy for lake's image | Always |
| lake.port | the port of devlake backend | 8080 |
| lake.envs | initial envs for lake | see Values.yaml |
| lake.extraEnvsFromSecret | existing secret name of extra envs | "" |
| lake.encryptionSecret.secretName | the k8s secret name for ENCRYPTION_SECRET | "" |
| lake.encryptionSecret.secret | the secret for ENCRYPTION_SECRET | "" |
| lake.encryptionSecret.autoCreateSecret | whether let the helm chart create the secret | true |
| lake.extraLabels | extra labels for lake's deployment template | {} |
| lake.securityContext | pod security context values | {} |
| lake.strategy | pod update strategy | {} |
| lake.containerSecurityContext | container security context values | {} |
| lake.livenessProbe | container livenessprobe | see Values.yaml |
| lake.readinessProbe | container readinessProbe | see Values.yaml |
| lake.deployment.extraLabels | extra labels for lake's deployment metadata | {} |
| ui.image.repository | repository for ui's image | apache/devlake-config-ui |
| ui.image.pullPolicy | pullPolicy for ui's image | Always |
| ui.basicAuth.enabled | If the basic auth in ui is enabled | false |
| ui.basicAuth.user | The user name for the basic auth | “admin” |
| ui.basicAuth.password | The password for the basic auth | “admin” |
| ui.basicAuth.autoCreateSecret | If let the helm chart create the secret | true |
| ui.basicAuth.secretName | The basic auth secret name | "" |
| ui.extraLabels | extra labels for ui's deployment template | {} |
| ui.securityContext | pod security context values | {} |
| ui.strategy | pod update strategy | {} |
| ui.containerSecurityContext | container security context values | {} |
| ui.livenessProbe | container livenessprobe | see Values.yaml |
| ui.readinessProbe | container readinessProbe | see Values.yaml |
| ui.deployment.extraLabels | extra labels for ui's deployment metadata | {} |
| service.type | Service type for exposed service | NodePort |
| service.uiPort | Node port for config ui | 32001 |
| ingress.enabled | If enable ingress | false |
| ingress.enableHttps | If enable https | false |
| ingress.useDefaultNginx | If use nginx ingress controller | true |
| ingress.className | Name for ingressClass. leave empty for using default | "" |
| ingress.annotations | The ingress annotations | {} |
| ingress.hostname | The hostname/domainname for ingress | localhost |
| ingress.prefix | The prefix for endpoints, currently not used | / |
| ingress.tlsSecretName | The secret name for tls's certificate for https | "" |
| ingress.httpPort | The http port for ingress | 80 |
| ingress.httpsPort | The https port for ingress | 443 |
| ingress.extraPaths | The extra paths for ingress | [] |
| option.database | The database type, valids: mysql | mysql |
| option.connectionSecretName | The database connection details secret name | devlake-mysql-auth |
| option.autoCreateSecret | If let the helm chart create the secret | true |
Yes, it just set useExternal value to true while you deploy devlake with helm chart. Below we'll use MySQL on AWS RDS as an example.
a. (Optional) Create a MySQL instance on AWS RDS following this doc, skip this step if you'd like to use an existing instance b. Proviede below values while install from helm:
- `mysql.useExternal`: this should be `true` - `mysql.externalServer`: use your RDS instance's IP address or domain name. - `mysql.externalPort`: use your RDS instance's database port. - `mysql.username`: use your `username` for access RDS instance's DB - `mysql.password`: use your `password` for access RDS instance's DB - `mysql.database`: use your RDS instance's DB name, you may need to create a database first with `CREATE DATABASE <DB name>;`
Here is the example:
helm repo add devlake https://apache.github.io/incubator-devlake-helm-chart helm repo update ENCRYPTION_SECRET=$(openssl rand -base64 2000 | tr -dc 'A-Z' | fold -w 128 | head -n 1) helm install devlake devlake/devlake \ --set mysql.useExternal=true \ --set mysql.externalServer=db.example.com \ --set mysql.externalPort=3306 \ --set mysql.username=admin \ --set mysql.password=password_4_admin \ --set mysql.database=devlake --set lake.encryptionSecret.secret=$ENCRYPTION_SECRET
Yes, to do so, you need to have a secret in your Kubernetes Cluster that contains the following values:
MYSQL_USER: The user to connect to your DB.MYSQL_PASSWORD: The password to connect to your DB.MYSQL_DATABASE: The database to connect to your DB.MYSQL_ROOT_PASSWORD: The root password to connect to your DB.DB_URL: mysql://username:password@dbserver:port/database?charset=utf8mb4&parseTime=TrueThe secret name needs to be the same as the value option.connectionSecretName
Yes, the devlake helm chart supports using an external Grafana. You can set the following values while installing from helm:
grafana.enabled: this should be falsegrafana.external.url: use your Grafana's URL, e.g. https://grafana.example.comHere is the example:
helm repo add devlake https://apache.github.io/incubator-devlake-helm-chart helm repo update ENCRYPTION_SECRET=$(openssl rand -base64 2000 | tr -dc 'A-Z' | fold -w 128 | head -n 1) helm install devlake devlake/devlake \ --set grafana.enabled=false \ --set grafana.external.url=https://grafana.example.com --set lake.encryptionSecret.secret=$ENCRYPTION_SECRET
grafana.adminPassword: your passwordHere is the example:
helm repo add devlake https://apache.github.io/incubator-devlake-helm-chart helm repo update ENCRYPTION_SECRET=$(openssl rand -base64 2000 | tr -dc 'A-Z' | fold -w 128 | head -n 1) helm install devlake devlake/devlake \ --set grafana.adminPassword=<your password> \ --set lake.encryptionSecret.secret=$ENCRYPTION_SECRET
If you run into any problem, please check the Troubleshooting or create an issue