Wallaroo Helm Reference Details


This hook runs when you do helm uninstall unless … - you give –no-hooks to helm - you set the enable flag to False at INSTALL time.


Registry and Tag portion of Wallaroo images. Third party images are not included. Tag is computed at runtime and overridden. In online Helm installs, these should not be touched; in airgap Helm installs imageRegistry must be overridden to local registry.


If true, generate random secrets for several services at install time. If false, use the generic defaults listed here, which can also be overridden by caller.


This is a (currently) Dashboard-specific feature flag to control the display of Assays.


To provide TLS certificates, (1) set deploymentStage to “cust”, then (2) provide EITHER the name of an existing Kubernetes TLS secret in custTlsSecret OR provide base64 encoded secrets in custTlsCert and custTlsKey.


DNS specification for our named external service endpoints. To form URLs, we concatenate the optional domainPrefix, the service name in question, and then the domainSuffix. Their values are based on license, type, and customer config inputs. They MUST be overriden per install via helm values, or by Replicated.


prefix/suffix in license

domainPrefix domainSuffix dashboard_fqdn thing_fqdn (thing = jup, kc, etc)
"" wallaroo.community (never) (never)
cust123 wallaroo.community cust123.wallaroo.community cust123.thing.wallaroo.community

Enterprise et al

prefix/suffix from config

domainPrefix domainSuffix dashboard_fqdn thing_fqdn (thing = jup, kc, etc)
"" wl.bigco wl.bigco thing.wl.bigco
cust123 wl.bigco cust123.wl.bigco cust123.thing.wl.bigco


In online Helm installs, an image pull secret is created and this is its name. The secret allows the Kubernetes node to pull images from proxy.replicated.com. In airgap Helm installs, a local Secret of type docker-registry must be created and this value set to its name.


If the customer has specified a private model container registry, the enable flag will reflect and the secret will be populated. registry, username, and password are mandatory. email is optional. registry is of the form “hostname:port”.


Main ingress LB for Wallaroo services. The Kubernetes Ingress object is not used, instead we deploy a single Envoy load balancer with a single IP in all cases, which serves: TLS termination, authentication (JWT) checking, and both host based and path based application routing. Customer should be aware of two values in particular. api.serviceType defaults to ClusterIP. If api.serviceType is set to LoadBalancer, cloud services will allocate a hosted LB service, in which case the apilb.annotations should be provided, in order to pass configuration such as “internal” or “external” to the cloud service. Example: apilb: serviceType: LoadBalancer annotations: service.beta.kubernetes.io/aws-load-balancer-internal: “true”


Plateau is a low-profile fixed-footprint log processor / event store for fast storage of inference results. The amount of disk space provisioned is adjustable. Smaller than “100Gi” is not recommended for performance reasons.


Model conversion is an optional service that allows converting non-onnx models (keras, sklearn, and xgboost) to onnx and adding them to your pipeline, without extensive manual conversion or processing steps. This allows more rapid iteration over models or experiments.