---
updatedAt: 2026-08-10T16:57:07.000Z
agentTools:
  siteIndex: https://docs.jfrog.com/llms.txt
  projectIndex: https://docs.jfrog.com/installation/llms.txt
---

# Advanced Helm Chart Customizations

Advanced Helm chart customizations for JFrog Platform: storage, TLS, HA, plugins, databases, and infrastructure settings.

JFrog Helm charts support a wide range of advanced options beyond the standard installers. The options below are organized by category.

For basic Helm installations, see:

<Cards columns={3}>
  <Card title="Artifactory Installation with Helm Charts" href="helm-charts" icon="fa-solid fa-database">
    Standard single-node Artifactory installation via Helm chart.
  </Card>

  <Card title="Xray Single Node Helm Installation" href="xray-single-node-helm-installation" icon="fa-solid fa-magnifying-glass">
    Standard single-node Xray installation via Helm chart.
  </Card>

  <Card title="Distribution Single Node Helm Installation" href="distribution-single-node-helm-installation" icon="fa-solid fa-share-nodes">
    Standard single-node Distribution installation via Helm chart.
  </Card>
</Cards>

## Advanced Topics

<Cards columns={3}>
  <Card title="All Products - Customization" href="all-products-customization" icon="fa-solid fa-sliders">
    Advanced Helm customizations applicable to all JFrog products, including TLS, JFConnect proxy, custom volumes, sidecars, and init containers.
  </Card>

  <Card title="Artifactory Advanced Options" href="artifactory-advanced-options" icon="fa-solid fa-gear">
    Advanced Helm customizations specific to JFrog Artifactory, including license injection, admin bootstrapping, storage options, and SSL termination.
  </Card>

  <Card title="Artifactory High Availability" href="artifactory-high-availability" icon="fa-solid fa-server">
    Advanced Helm customizations for Artifactory HA deployments, including persistent storage, node affinity, and shared filestore configuration.
  </Card>

  <Card title="Advanced Options for Xray" href="advanced-options-for-xray" icon="fa-solid fa-circle-nodes">
    Configure advanced JFrog Xray options for Helm deployments, including custom certificates, RabbitMQ settings, and external database configuration.
  </Card>

  <Card title="Distribution Custom Volumes" href="distribution-custom-volumes" icon="fa-solid fa-layer-group">
    Add custom volumes to JFrog Distribution Helm deployments by defining volume entries in values.yaml.
  </Card>

  <Card title="Uninstall and Deletion of Helm Installations" href="uninstall-and-deletion-of-helm-installations" icon="fa-solid fa-trash">
    Uninstall or delete JFrog Artifactory and Xray Helm installations, with options to preserve or remove persistent data.
  </Card>
</Cards>

## All Products — Customization

Advanced customizations relevant to all JFrog products:

<Cards columns={3}>
  <Card title="Establish TLS in Artifactory and JFrog Platform" href="establish-tls-in-artifactory-and-jfrog-platform" icon="fa-solid fa-lock">
    Configure TLS termination in Artifactory and the JFrog Platform.
  </Card>

  <Card title="Configure JFConnect Proxy" href="jfconnect-microservice" icon="fa-solid fa-plug">
    Set up proxy configuration for JFConnect in Helm deployments.
  </Card>

  <Card title="Auto-generated Passwords" href="auto-generated-passwords-internal-postgresql" icon="fa-solid fa-key">
    Manage auto-generated passwords for internal PostgreSQL.
  </Card>

  <Card title="Custom Volumes" href="add-custom-volumes-in-helm-installation" icon="fa-solid fa-hard-drive">
    Mount additional volumes in JFrog Helm deployments.
  </Card>

  <Card title="Custom Sidecar Containers" href="add-custom-sidecars-containers-in-helm-installations" icon="fa-solid fa-cubes">
    Add sidecar containers alongside JFrog services.
  </Card>

  <Card title="Custom Init Containers" href="add-custom-init-containers-in-helm-installation" icon="fa-solid fa-play">
    Run initialization containers before JFrog services start.
  </Card>

  <Card title="Custom Secrets" href="use-custom-secrets-in-helm-installation" icon="fa-solid fa-user-secret">
    Use existing Kubernetes secrets in Helm installations.
  </Card>

  <Card title="Unified Secret" href="use-unified-secret-in-helm-installation" icon="fa-solid fa-shield-halved">
    Manage all JFrog secrets through a single unified secret.
  </Card>

  <Card title="Override System YAML" href="override-the-default-system-yaml-file-in-helm-installation" icon="fa-solid fa-file-pen">
    Replace the default system.yaml with a custom configuration.
  </Card>

  <Card title="Distribution Custom Volumes" href="distribution-custom-volumes" icon="fa-solid fa-hard-drive">
    Mount additional volumes in Distribution Helm deployments.
  </Card>

  <Card title="Circle of Trust Certificates" href="add-circle-of-trust-certificates" icon="fa-solid fa-certificate">
    Add trusted CA certificates to the JFrog Platform trust store.
  </Card>
</Cards>

## Artifactory Advanced Options

Customizations specific to Artifactory:

<Cards columns={3}>
  <Card title="Add Licenses Using Secrets" href="add-licenses-using-secrets" icon="fa-solid fa-id-card">
    Inject Artifactory license keys via Kubernetes secrets.
  </Card>

  <Card title="Security-related Issues" href="security-related-issues" icon="fa-solid fa-shield-halved">
    Address common security configurations in Artifactory Helm charts.
  </Card>

  <Card title="Run Ingress Behind Load Balancer" href="run-ingress-behind-another-load-balancer" icon="fa-solid fa-scale-balanced">
    Configure Ingress when Artifactory sits behind an external load balancer.
  </Card>

  <Card title="NGINX Ingress Controller" href="install-jfrog-platform-with-nginx-ingress-controller" icon="fa-solid fa-network-wired">
    Expose the JFrog Platform through your own NGINX Ingress Controller, with TLS and Docker subdomain options.
  </Card>

  <Card title="Kubernetes Gateway API" href="expose-artifactory-using-kubernetes-gateway-api" icon="fa-solid fa-route">
    Route external traffic using Gateway and HTTPRoute resources as an alternative to Ingress.
  </Card>

  <Card title="Log Analytics" href="log-analytics" icon="fa-solid fa-chart-line">
    Integrate Artifactory logs with external analytics platforms.
  </Card>

  <Card title="Advanced Storage Options" href="advanced-storage-options" icon="fa-solid fa-folder-open">
    Configure S3, GCS, Azure Blob, or NFS storage backends.
  </Card>

  <Card title="Add Extensions" href="add-extensions" icon="fa-solid fa-puzzle-piece">
    Load custom extensions and plugins into Artifactory.
  </Card>

  <Card title="Infrastructure Customization" href="infrastructure-customization" icon="fa-solid fa-gears">
    Customize resource limits, node selectors, tolerations, and affinity rules.
  </Card>

  <Card title="ConfigMaps for Non-confidential Data" href="use-configmaps-to-store-non-confidential-data" icon="fa-solid fa-file-lines">
    Store non-sensitive configuration in Kubernetes ConfigMaps.
  </Card>

  <Card title="External Database" href="use-an-external-database-with-artifactory-helm-installation" icon="fa-solid fa-database">
    Connect Artifactory Helm to an external PostgreSQL or other database.
  </Card>

  <Card title="Bootstrap Artifactory" href="bootstraps-artifactory" icon="fa-solid fa-rocket">
    Pre-configure repositories, permissions, and settings during first boot.
  </Card>

  <Card title="Monitoring and Logging" href="monitoring-and-logging-in-artifactory-helm-installation" icon="fa-solid fa-desktop">
    Set up monitoring, alerting, and log collection for Helm deployments.
  </Card>

  <Card title="Nginx with SSL Termination" href="install-artifactory-and-artifactory-ha-with-nginx-and-terminate-ssl-in-nginx-service-load-balancer" icon="fa-solid fa-lock">
    Install Artifactory HA with Nginx and terminate SSL at the load balancer.
  </Card>

  <Card title="Read-only Root Filesystem" href="configure-readonlyrootfilesystem-in-artifactory-containers" icon="fa-solid fa-lock">
    Configure readOnlyRootFilesystem for Artifactory containers.
  </Card>

  <Card title="HPA Memory Target" href="add-memory-target-trigger-to-artifactory-charts-using-hpa" icon="fa-solid fa-gauge-high">
    Add memory-based autoscaling triggers using Horizontal Pod Autoscaler.
  </Card>
</Cards>

## Artifactory High Availability

Customizations specific to Artifactory HA:

<Cards columns={3}>
  <Card title="Artifactory Storage" href="artifactory-storage" icon="fa-solid fa-hard-drive">
    Configure persistent storage for Artifactory HA nodes.
  </Card>

  <Card title="Add HA Licenses" href="add-licenses-with-artifactory-ha-helm-installation" icon="fa-solid fa-id-card">
    Inject license keys for Artifactory HA Helm deployments.
  </Card>

  <Card title="Scale the HA Cluster" href="scale-the-artifactory-ha-helm-installation-cluster" icon="fa-solid fa-arrows-left-right">
    Scale Artifactory HA nodes up or down in your Helm cluster.
  </Card>

  <Card title="Existing Volume Claim" href="use-an-existing-volume-claim-for-artifactory-ha-helm-installation" icon="fa-solid fa-hard-drive">
    Use a pre-existing PVC for Artifactory HA data storage.
  </Card>

  <Card title="Existing Shared Volume Claim" href="use-an-existing-shared-volume-claim-with-artifactory-ha-helm-installation" icon="fa-solid fa-share-nodes">
    Use a pre-existing shared PVC across Artifactory HA nodes.
  </Card>
</Cards>

## Advanced Options for Xray

Customizations specific to Xray:

<Cards columns={2}>
  <Card title="Enable TLS in RabbitMQ (Xray Chart)" href="enable-tls-in-rabbitmq-in-xray-helm-chart" icon="fa-solid fa-lock">
    Enable TLS for RabbitMQ in the standalone Xray Helm chart.
  </Card>

  <Card title="RabbitMQ TLS Configuration for Xray (Platform Helm)" href="enable-tls-in-rabbitmq-for-xray-in-jfrog-platform-chart" icon="fa-solid fa-lock">
    Enable TLS for RabbitMQ when Xray runs within the JFrog Platform chart.
  </Card>

  <Card title="Disable TLS in RabbitMQ for Xray in JFrog Platform Chart" href="disable-tls-in-rabbitmq-for-xray-in-jfrog-platform-chart" icon="fa-solid fa-unlock">
    Disable TLS for RabbitMQ when Xray runs within the JFrog Platform chart.
  </Card>
</Cards>

## Uninstall and Deletion

Procedures for removing Artifactory and Xray Helm installations:

<Cards columns={3}>
  <Card title="Artifactory Helm Uninstallation" href="uninstall-artifactory-helm-installation" icon="fa-solid fa-circle-minus">
    Uninstall the Artifactory Helm release while preserving data.
  </Card>

  <Card title="Artifactory Helm Deletion" href="delete-artifactory-helm-installation" icon="fa-solid fa-trash-can">
    Fully delete the Artifactory Helm installation and associated resources.
  </Card>

  <Card title="Xray Helm Deletion" href="delete-xray-helm-installation" icon="fa-solid fa-trash-can">
    Fully delete the Xray Helm installation and associated resources.
  </Card>
</Cards>

## Related Topics

* [Install JFrog Platform via Helm Quick Start](install-jfrog-platform-via-helm-quick-start)
* [Install the JFrog Platform Using Helm Chart](install-the-jfrog-platform-using-helm-chart)
* [Helm Charts](helm-charts)
* [Upgrade Helm Charts](upgrade-helm-charts)
* [Uninstall and Deletion of Helm Installations](uninstall-and-deletion-of-helm-installations)

## Frequently Asked Questions

This section provides answers to frequently asked questions.

<Accordion title="FAQs" icon="plus">

##### Q: What types of storage backends does Artifactory support in Helm deployments?

**A:** JFrog Artifactory Helm charts support a wide range of storage backends, including file-system, NFS, Google Cloud Storage, AWS S3, and Azure Blob Storage. You configure the backend using `artifactory.persistence.type` in your `values.yaml`. For full details, see [Advanced Storage Options](advanced-storage-options).

##### Q: How do I configure TLS between JFrog Platform nodes in a Helm deployment?

**A:** Enable TLS by setting `security.tls: true` under the `accessConfig` section in Artifactory's `values.yaml`. When TLS is enabled, JFrog Access acts as the Certificate Authority and signs certificates for encrypted communication between JFrog products. For step-by-step instructions, see [Establish TLS in Artifactory and JFrog Platform](establish-tls-in-artifactory-and-jfrog-platform).

##### Q: How do I use an external database instead of the bundled PostgreSQL in a Helm installation?

**A:** Set `postgresql.enabled=false` in your `values.yaml` and then configure the `database.type`, `database.driver`, `database.url`, `database.user`, and `database.password` parameters. Without setting `postgresql.enabled=false`, the chart ignores the `database.*` parameters entirely. See [External Database for Artifactory Helm Installation](use-an-external-database-with-artifactory-helm-installation).

##### Q: Can I pre-configure Artifactory admin credentials and repositories before the first startup?

**A:** Yes. You can bootstrap the admin password by providing `artifactory.admin.ip`, `artifactory.admin.username`, and `artifactory.admin.password` in a values file and applying it with `helm upgrade --install`. Global and security configuration can also be bootstrapped using a Kubernetes ConfigMap passed via `artifactory.configMapName`. See [Artifactory Bootstrap](bootstraps-artifactory).

##### Q: Where should I start for a standard, non-advanced Helm installation of Artifactory or Xray?

**A:** For a standard single-node installation, use the base Helm chart guides: [Artifactory Installation with Helm Charts](helm-charts) for Artifactory, or [Xray Single Node Helm Installation](xray-single-node-helm-installation) for Xray. The advanced options on this page are intended for use cases that go beyond the standard installers.

</Accordion>