Helm Charts for Advanced Use Cases
Advanced Helm chart customizations for JFrog Platform: storage, TLS, HA, plugins, databases, and infrastructure settings.
JFrog Helm charts support a wide range of advanced options beyond the standard installers. The options below are organized by category.
For basic Helm installations, see:
Artifactory Installation with Helm Charts
Standard single-node Artifactory installation via Helm chart.
Xray Single Node Helm Installation
Standard single-node Xray installation via Helm chart.
Distribution Single Node Helm Installation
Standard single-node Distribution installation via Helm chart.
Advanced Topics
All Products - Customization
Advanced Helm customizations applicable to all JFrog products, including TLS, JFConnect proxy, custom volumes, sidecars, and init containers.
Artifactory Advanced Options
Advanced Helm customizations specific to JFrog Artifactory, including license injection, admin bootstrapping, storage options, and SSL termination.
Artifactory High Availability
Advanced Helm customizations for Artifactory HA deployments, including persistent storage, node affinity, and shared filestore configuration.
Advanced Options for Xray
Configure advanced JFrog Xray options for Helm deployments, including custom certificates, RabbitMQ settings, and external database configuration.
Distribution Custom Volumes
Add custom volumes to JFrog Distribution Helm deployments by defining volume entries in values.yaml.
Uninstall and Deletion of Helm Installations
Uninstall or delete JFrog Artifactory and Xray Helm installations, with options to preserve or remove persistent data.
All Products — Customization
Advanced customizations relevant to all JFrog products:
Establish TLS in Artifactory and JFrog Platform
Configure TLS termination in Artifactory and the JFrog Platform.
Configure JFConnect Proxy
Set up proxy configuration for JFConnect in Helm deployments.
Auto-generated Passwords
Manage auto-generated passwords for internal PostgreSQL.
Custom Volumes
Mount additional volumes in JFrog Helm deployments.
Custom Sidecar Containers
Add sidecar containers alongside JFrog services.
Custom Init Containers
Run initialization containers before JFrog services start.
Custom Secrets
Use existing Kubernetes secrets in Helm installations.
Unified Secret
Manage all JFrog secrets through a single unified secret.
Override System YAML
Replace the default system.yaml with a custom configuration.
Distribution Custom Volumes
Mount additional volumes in Distribution Helm deployments.
Circle of Trust Certificates
Add trusted CA certificates to the JFrog Platform trust store.
Artifactory Advanced Options
Customizations specific to Artifactory:
Add Licenses Using Secrets
Inject Artifactory license keys via Kubernetes secrets.
Security-related Issues
Address common security configurations in Artifactory Helm charts.
Run Ingress Behind Load Balancer
Configure Ingress when Artifactory sits behind an external load balancer.
Log Analytics
Integrate Artifactory logs with external analytics platforms.
Advanced Storage Options
Configure S3, GCS, Azure Blob, or NFS storage backends.
Add Extensions
Load custom extensions and plugins into Artifactory.
Infrastructure Customization
Customize resource limits, node selectors, tolerations, and affinity rules.
ConfigMaps for Non-confidential Data
Store non-sensitive configuration in Kubernetes ConfigMaps.
External Database
Connect Artifactory Helm to an external PostgreSQL or other database.
Bootstrap Artifactory
Pre-configure repositories, permissions, and settings during first boot.
Monitoring and Logging
Set up monitoring, alerting, and log collection for Helm deployments.
Nginx with SSL Termination
Install Artifactory HA with Nginx and terminate SSL at the load balancer.
Read-only Root Filesystem
Configure readOnlyRootFilesystem for Artifactory containers.
HPA Memory Target
Add memory-based autoscaling triggers using Horizontal Pod Autoscaler.
Artifactory High Availability
Customizations specific to Artifactory HA:
Artifactory Storage
Configure persistent storage for Artifactory HA nodes.
Add HA Licenses
Inject license keys for Artifactory HA Helm deployments.
Scale the HA Cluster
Scale Artifactory HA nodes up or down in your Helm cluster.
Existing Volume Claim
Use a pre-existing PVC for Artifactory HA data storage.
Existing Shared Volume Claim
Use a pre-existing shared PVC across Artifactory HA nodes.
Advanced Options for Xray
Customizations specific to Xray:
Enable TLS in RabbitMQ (Xray Chart)
Enable TLS for RabbitMQ in the standalone Xray Helm chart.
RabbitMQ TLS Configuration for Xray (Platform Helm)
Enable TLS for RabbitMQ when Xray runs within the JFrog Platform chart.
Disable TLS in RabbitMQ for Xray in JFrog Platform Chart
Disable TLS for RabbitMQ when Xray runs within the JFrog Platform chart.
Uninstall and Deletion
Procedures for removing Artifactory and Xray Helm installations:
Artifactory Helm Uninstallation
Uninstall the Artifactory Helm release while preserving data.
Artifactory Helm Deletion
Fully delete the Artifactory Helm installation and associated resources.
Xray Helm Deletion
Fully delete the Xray Helm installation and associated resources.
Frequently Asked Questions
Q: What types of storage backends does Artifactory support in Helm deployments?
A: JFrog Artifactory Helm charts support a wide range of storage backends, including file-system, NFS, Google Cloud Storage, AWS S3, and Azure Blob Storage. You configure the backend using artifactory.persistence.type in your values.yaml. For full details, see Advanced Storage Options.
Q: How do I configure TLS between JFrog Platform nodes in a Helm deployment?
A: Enable TLS by setting security.tls: true under the accessConfig section in Artifactory's values.yaml. When TLS is enabled, JFrog Access acts as the Certificate Authority and signs certificates for encrypted communication between JFrog products. For step-by-step instructions, see Establish TLS in Artifactory and JFrog Platform.
Q: How do I use an external database instead of the bundled PostgreSQL in a Helm installation?
A: Set postgresql.enabled=false in your values.yaml and then configure the database.type, database.driver, database.url, database.user, and database.password parameters. Without setting postgresql.enabled=false, the chart ignores the database.* parameters entirely. See External Database for Artifactory Helm Installation.
Q: Can I pre-configure Artifactory admin credentials and repositories before the first startup?
A: Yes. You can bootstrap the admin password by providing artifactory.admin.ip, artifactory.admin.username, and artifactory.admin.password in a values file and applying it with helm upgrade --install. Global and security configuration can also be bootstrapped using a Kubernetes ConfigMap passed via artifactory.configMapName. See Artifactory Bootstrap.
Q: Where should I start for a standard, non-advanced Helm installation of Artifactory or Xray?
A: For a standard single-node installation, use the base Helm chart guides: Artifactory Installation with Helm Charts for Artifactory, or Xray Single Node Helm Installation for Xray. The advanced options on this page are intended for use cases that go beyond the standard installers.
Updated 4 days ago