operator Helm chart

Status-mirror operator bridging sandbox runtime truth into the product database. Source chart version 0.1.0. Published OCI artifacts use the immutable version from the deployment release record:

helm install operator oci://<your-registry>/charts/operator \
  --version "${PUBLISHED_CHART_VERSION:?set to the immutable OCI version for this release}"

Values

Keys marked * are required. Defaults are the chart’s values.yaml; the deployment sets the rest.

Key	Type	Default	Description
`affinity`	`object`	`{}`
`containerSecurityContext`	`object`	`{"privileged": false, "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "capabilities": {"drop": ["ALL"]}}`
`database.existingSecret` *	`string`	`""`
`database.secretKey` *	`string`	`"database_url"`	(non-empty)
`disruptionClass`		`"singleton-controller"`
`disruptionOverrides.justification`	`string`	`""`
`enabled`	`boolean`	—	Umbrella condition flag (the hiloop chart’s Chart.yaml condition operator.enabled). Has no effect in a standalone install.
`fullnameOverride`	`string`	`""`
`global.imagePullSecrets`	`array`	`[]`
`global.imageRegistry`	`string`	`""`
`global.sizing`	`small` \| `medium` \| `large` \| `xlarge`	`"medium"`
`image.digest` *	`string`	`""`
`image.pullPolicy` *	`Always` \| `IfNotPresent` \| `Never`	`"IfNotPresent"`
`image.repository` *	`string`	`"ACCOUNT.dkr.ecr.REGION.amazonaws.com/hiloop/operator"`	(non-empty)
`nameOverride`	`string`	`""`
`nodeSelector`	`object`	`{}`
`observability.enabled` *	`boolean`	`true`
`observability.otlpEndpoint`	`string`	`"http://otel-collector-agent.monitoring.svc.cluster.local:4317"`
`observability.resourceAttributes`	`string`	`"service.namespace=hiloop"`
`podAnnotations`	`object`	`{}`
`podLabels`	`object`	`{}`
`podSecurityContext`	`object`	`{"runAsNonRoot": true, "runAsUser": 65532, "runAsGroup": 65532, "fsGroup": 65532, "fsGroupChangePolicy": "OnRootMismatch", "seccompProfile": {"type": "RuntimeDefault"}}`
`rbac.create`	`boolean`	`true`
`replicaCount`		`null`
`resources`		`null`
`serviceAccount.annotations`	`object`	`{}`
`serviceAccount.create`	`boolean`	`true`
`serviceAccount.name`	`string`	`""`	Name of the ServiceAccount. With create=true it overrides the generated name; with create=false it is REQUIRED and names the existing ServiceAccount to reuse, because the chart’s RoleBindings are rendered against it.
`sizing`	“ \| `small` \| `medium` \| `large` \| `xlarge`	`""`
`sizingPresets`		`{"small": {"replicaCount": 1, "resources": {"requests": {"cpu": "50m", "memory": "64Mi"}, "limits": {"memory": "128Mi"}}}, "medium": {"replicaCount": 1, "resources": {"requests": {"cpu": "100m", "memory": "128Mi"}, "limits": {"memory": "256Mi"}}}, "large": {"replicaCount": 2, "resources": {"requests": {"cpu": "250m", "memory": "256Mi"}, "limits": {"memory": "512Mi"}}}, "xlarge": {"replicaCount": 2, "resources": {"requests": {"cpu": "500m", "memory": "512Mi"}, "limits": {"memory": "1Gi"}}}}`
`terminationGracePeriodSeconds`	`integer`	`30`	(min 0)
`tolerations`	`array`	`[]`

​Values

Values