Helm chart reference for Lumi Enterprise on OpenShift

info

This information applies to Imply Lumi Enterprise deployments on OpenShift.
Lumi Enterprise on OpenShift is an early access feature.

This topic documents the values.yaml fields you can configure when deploying Lumi Enterprise on OpenShift bare metal, grouped by functional area.

Database connection

MySQL database for the control plane.

Field	Type	Default	Description
database.host	string	""	Hostname of the control plane metadata store database. MySQL 8.0 or newer.
database.port	int	3306	Port of the control plane metadata store database.
database.username	string	""	Username for the control plane metadata store database
database.password	string	""	Password for the control plane metadata store database
database.dataPlane	object	{}	Gives the data plane its own metadata store database. Accepts the same host, port, username, and password keys. Fields left empty fall back to the control plane values above.

Deployment identity

Imply-provided identifiers that link your deployment with your account.

Field	Type	Default	Description
tenantId	string	""	Tenant ID provided by Imply
apiKey	string	""	API key provided by Imply
customerId	string	""	Customer ID provided by Imply

Cluster nodes

Compute and storage settings for each AApache® Druid node type in your cluster.

Field	Type	Default	Description
broker.instanceType	string	m7g.xlarge	Instance type for the broker node
broker.resources	object	{}	Explicit resource requests and limits for the broker node
broker.count	int	2	Number of broker nodes to deploy
broker.storageVolume	object	{}	Scratch volume for the broker node. Each entry takes a maxSize and a volume.
coordinator.instanceType	string	m7g.xlarge	Instance type for the coordinator node
coordinator.resources	object	{}	Explicit resource requests and limits for the coordinator node
coordinator.count	int	2	Number of coordinator nodes to deploy
data.instanceType	string	i3en.2xlarge	Instance type for the data node
data.resources	object	{}	Explicit resource requests and limits for the data node. Requires storageVolumes and tmpStorageVolume to be set.
data.count	int	1	Number of data nodes to deploy
data.storageVolumes	list	[]	Segment cache volumes for the data node. Required when resources is set. Each entry takes a maxSize and a volumeClaimTemplate or a volume.
data.tmpStorageVolume	object	{}	Scratch volume for the data node. Required when resources is set. Each entry takes a maxSize and a volume.
virtual	object	{}	Stub historical tier. Required when virtualCompute.enabled is true; unused otherwise. Accepts the same keys as data.
ingest.instanceType	string	peon-xlarge	Instance type for the ingestion node
ingest.resources	object	{}	Explicit resource requests and limits for the ingestion node. Requires storageVolume to be set.
ingest.storageVolume	object	{}	Scratch volume for the ingestion node. Each entry takes a maxSize and a volume. Required when resources is set.
ingest.schedulerName	string	""	Scheduler for ingestion task pods. Uses the default scheduler if left empty.

Virtual compute

Virtual compute resources that scale up to serve queries against data outside the hot tier on demand.

Field	Type	Default	Description
workerPools	list	[]	Worker pools for virtual compute pools. Each entry takes a unique name, plus the same resources and storageVolume keys as ingest.
virtualCompute.enabled	boolean	false	Enables virtual compute pools. Requires a virtual tier and at least one tshirtSizes entry.
virtualCompute.tshirtSizes	list	[]	Custom t-shirt sizes for virtual compute worker pools. Required if virtualCompute.enabled is true. Each entry takes a unique size, a nodeCount, a workerPool matching a workerPools name, and optionally a name and maxConcurrency.

Object storage

Deep storage settings for your Druid segments.

Field	Type	Default	Description
objectStore.s3.accessKey	string	""	Access key for the deep storage bucket
objectStore.s3.secretKey	string	""	Secret key for the deep storage bucket
objectStore.s3.bucket	string	""	Bucket used for deep storage
objectStore.s3.prefix	string	""	Key prefix within the deep storage bucket
objectStore.s3.endpoint	string	""	Overrides the URL for the S3 endpoint
objectStore.s3.region	string	""	Overrides the AWS region. Required for non-AWS, self-hosted object stores.
objectStore.s3.usePathStyle	boolean	false	Use path-style S3 addressing instead of virtual-hosted style.

Ingress

Base domain for Lumi. DNS and any TLS certificates must also cover *.lumi.example.com to include the per-service hostnames.

Field	Type	Default	Description
ingress.host	string	""	Base domain name to serve Lumi from. For example, if set to lumi.example.com, Lumi is served from lumi.example.com and its services from subdomains of it.
ingress.className	string	kong	Ingress class for Lumi gateway. Set a unique value only if this cluster already runs its own Kong.

Gateway

Expose the gateway to external traffic, including its service type, ingress, and autoscaling.

Field	Type	Default	Description
gateway.service.type	string	ClusterIP	Service type for the Lumi gateway. One of ClusterIP, LoadBalancer, or NodePort.
gateway.service.annotations	object	{}	Annotations for the Lumi gateway service
gateway.ingress.enabled	boolean	false	Create an ingress for the Lumi gateway
gateway.ingress.className	string	""	Ingress class for the Lumi gateway ingress
gateway.ingress.annotations	object	{}	Annotations for the Lumi gateway ingress
gateway.ingress.hosts	list	[<ingress.host>, *.<ingress.host>, *.spl.<ingress.host>]	Hosts for the Lumi gateway ingress
gateway.autoscaling.enabled	boolean	true	Enable autoscaling for the Lumi gateway
gateway.autoscaling.minReplicas	int	2	Minimum number of Lumi gateway replicas for autoscaling
gateway.autoscaling.maxReplicas	int	10	Maximum number of Lumi gateway replicas for autoscaling
gateway.autoscaling.metrics	list	[]	HPA metrics for the Lumi gateway. Uses the iow-gateway chart default if empty.
gateway.autoscaling.behavior	object	{}	HPA scaling behavior for the Lumi gateway. Uses the iow-gateway chart default if empty.

Authentication

Initial admin user and the key pair Lumi uses to sign OIDC tokens.

Field	Type	Default	Description
auth.username	string	""	Email address for the initial admin user. Used as the admin username to log in to Lumi.
auth.password	string	""	Password for the initial admin user. Lumi uses this as the system admin password. Password reset is not yet supported.
auth.rsa.privateKey	string	""	RSA private key used to sign auth tokens
auth.rsa.publicKey	string	""	RSA public key used to verify auth tokens
auth.autoscaling.minReplicas	int	2	Minimum number of auth service replicas for autoscaling
auth.autoscaling.maxReplicas	int	10	Maximum number of auth service replicas for autoscaling
auth.autoscaling.metrics	list	[]	HPA metrics for the auth service
auth.autoscaling.behavior	object	{}	HPA scaling behavior for the auth service

Registry and pull secrets

Location for Lumi container images and Helm charts.

Field	Type	Default	Description
registry.pullSecret	string	""	Name of an existing image pull secret for registry.containerRepo and registry.chartRepo
registry.containerRepo	string	registry-1.docker.io/imply	Registry and repository the container images are pulled from
registry.chartRepo	string	oci://registry-1.docker.io/imply	Registry the subcharts are pulled from
registry.helmChartSuffix	string	-chart	Suffix appended to subchart names in registry.chartRepo
bootstrap.image.repository	string	iow-bootstrap	Repository for the bootstrap image, relative to registry.containerRepo
bootstrap.image.tag	string	Chart.AppVersion	Tag for the bootstrap image
updateClient.image.repository	string	iow-update-client	Repository for the update-client image, relative to registry.containerRepo
updateClient.image.tag	string	20260715.4265.0	Tag for the update-client image

Kafka

Streaming ingestion settings.

Field	Type	Default	Description
kafka.bootstrap.servers	string	""	Bootstrap servers for the Kafka cluster backing ingestion
kafka.security.protocol	string	SASL_SSL	Security protocol used to connect to the Kafka cluster
kafka.sasl.mechanism	string	SCRAM-SHA-512	SASL mechanism used to authenticate against the Kafka cluster
kafka.sasl.username	string	""	SASL username for the Kafka cluster
kafka.sasl.password	string	""	SASL password for the Kafka cluster

Event collector

Splunk-facing ingestion endpoint for events sent into Lumi.

Field	Type	Default	Description
eventCollector.s2s.service.type	string	ClusterIP	Service type for the event collector S2S listener. One of ClusterIP, LoadBalancer, or NodePort.
eventCollector.s2s.service.annotations	object	{}	Annotations for the event collector S2S service
eventCollector.s2s.service.labels	object	{}	Labels for the event collector S2S service
eventCollector.s2s.tls.secretName	string	""	Name of a kubernetes.io/tls secret. Uses plain TCP if not set.
eventCollector.resources	object	{"limits":{"cpu":"1500m","memory":"3G"},"requests":{"cpu":"1500m","memory":"3G"}}	Resource requests and limits for the event collector service
eventCollector.autoscaling.minReplicas	int	2	Minimum number of event collector replicas for autoscaling
eventCollector.autoscaling.maxReplicas	int	50	Maximum number of event collector replicas for autoscaling
eventCollector.autoscaling.metrics	list	[]	HPA metrics for the event collector service
eventCollector.autoscaling.behavior	object	{}	HPA scaling behavior for the event collector service

Manager

Resource settings for the service that manages your Druid cluster's lifecycle.

Field	Type	Default	Description
manager.replicaCount	int	2	Number of manager service replicas
manager.resources	object	{"requests":{"cpu":"300m","memory":"500M"}}	Resource requests and limits for the manager service

RBAC

Kubernetes ClusterRole and ClusterRoleBinding created for Lumi.

Field	Type	Default	Description
rbac.create	boolean	true	Create the ClusterRole and ClusterRoleBinding
rbac.annotations	object	{}	Annotations for the RBAC resources
rbac.labels	object	{}	Labels for the RBAC resources
rbac.name	string	""	Name of the ClusterRoleBinding to use. If not set and rbac.create is true, a name is generated using the fullname template.

Service account

The Kubernetes service account for Lumi pods.

Field	Type	Default	Description
serviceAccount.create	boolean	true	Create the service account
serviceAccount.annotations	object	{}	Annotations for the service account
serviceAccount.labels	object	{}	Labels for the service account
serviceAccount.name	string	""	Name of the service account. If not set and serviceAccount.create is true, a name is generated using the fullname template.

Learn more

See the following topics for more information:

• Install Lumi Enterprise to learn how to install, upgrade, and uninstall Lumi Enterprise.
• Send events to Lumi for details on sending events to Lumi.
• Search Lumi events for options to search events in Lumi.