Helm Values Reference

All configuration is done via Helm values. Here’s the complete reference.

Agent

agent:
  image:
    repository: ghcr.io/outcept/klarsicht/agent
    tag: latest
    pullPolicy: Always
  replicas: 1

  # Namespaces to watch (empty = all)
  watchNamespaces: []

  # Prometheus/Mimir endpoint for metrics queries
  # Prometheus: http://prometheus.monitoring.svc:9090
  # Mimir: http://mimir.monitoring.svc:9009/prometheus
  metricsEndpoint: ""

  # LLM configuration
  llmProvider: anthropic    # anthropic, openai, or ollama
  llmApiKey: ""             # API key (set via --set, not in values file)

  resources:
    requests:
      cpu: 100m
      memory: 256Mi
    limits:
      cpu: "1"
      memory: 512Mi

Dashboard

dashboard:
  image:
    repository: ghcr.io/outcept/klarsicht/dashboard
    tag: latest
  replicas: 1
  ingress:
    enabled: false
    className: ""           # nginx, haproxy, traefik
    host: ""                # klarsicht.example.com
    tls: []

PostgreSQL

postgres:
  enabled: true             # false to use external DB
  image:
    repository: postgres
    tag: "16"
  storage: 5Gi
  storageClassName: ""      # default storage class if empty
  password: ""              # auto-generated if empty

# External database (when postgres.enabled=false)
externalDatabase:
  url: ""                   # postgresql://user:pass@host:5432/klarsicht

Grafana

grafana:
  webhookPath: /alert
  webhookSecret: ""         # HMAC-SHA256 shared secret (optional)

Environment variables

The agent reads configuration from environment variables with the KLARSICHT_ prefix:

VariableDescription
KLARSICHT_LLM_API_KEYLLM API key
KLARSICHT_LLM_PROVIDERanthropic, openai, or ollama
KLARSICHT_MIMIR_ENDPOINTPrometheus/Mimir URL
KLARSICHT_WATCH_NAMESPACESComma-separated namespace list
KLARSICHT_WEBHOOK_SECRETHMAC shared secret
KLARSICHT_DATABASE_URLPostgreSQL connection string