"" |
-| fullnameOverride | | "" |
-| deploymentType | | "" |
-| offlineInstaller | | false |
-| installerVersion | | "" |
-| image.proxies.appscode | r.appscode.com | r.appscode.com |
-| image.proxies.dockerHub | company/bin:tag | "" |
-| image.proxies.dockerLibrary | alpine, nginx etc. | "" |
-| image.proxies.ghcr | ghcr.io/company/bin:tag | ghcr.io |
-| image.proxies.quay | quay.io/company/bin:tag | quay.io |
-| image.proxies.kubernetes | registry.k8s.io/bin:tag | registry.k8s.io |
-| image.proxies.microsoft | | mcr.microsoft.com |
-| image.proxies.oracle | | container-registry.oracle.com |
-| image.proxies.weaviate | | cr.weaviate.io |
-| registry.credentials | | {} |
-| registry.certs | username: "abc" password: "xyz" | {} |
-| registry.imagePullSecrets | ca.crt: "***" | [] |
-| helm.createNamespace | | true |
-| helm.repositories.appscode-charts-oci.url | | oci://ghcr.io/appscode-charts |
-| helm.repositories.appscode-wizards-oci.url | | oci://ghcr.io/appscode-charts |
-| helm.releases.ace.enabled | | false |
-| helm.releases.ace.version | | "v2026.7.10" |
-| helm.releases.acerproxy.enabled | | false |
-| helm.releases.acerproxy.version | | "v2026.7.10" |
-| helm.releases.aceshifter.enabled | | true |
-| helm.releases.aceshifter.version | | "v2026.7.10" |
-| helm.releases.capi-catalog.enabled | | false |
-| helm.releases.capi-catalog.version | | "v2024.10.24" |
-| helm.releases.catalog-manager.enabled | | false |
-| helm.releases.catalog-manager.version | | "v2026.7.10" |
-| helm.releases.cert-manager.enabled | | true |
-| helm.releases.cert-manager.version | | "v1.19.3" |
-| helm.releases.cert-manager-csi-driver-cacerts.enabled | | true |
-| helm.releases.cert-manager-csi-driver-cacerts.version | | "v2026.1.15" |
-| helm.releases.external-dns-operator.enabled | | true |
-| helm.releases.external-dns-operator.version | | "v2026.6.22" |
-| helm.releases.flux2.enabled | | false |
-| helm.releases.flux2.version | | "2.17.0" |
-| helm.releases.gateway-api.enabled | | true |
-| helm.releases.gateway-api.version | | "v2025.3.14" |
-| helm.releases.gateway-api-crds.enabled | | true |
-| helm.releases.gateway-api-crds.version | | v1.4.1 |
-| helm.releases.kubedb.enabled | | true |
-| helm.releases.kubedb.version | | "v2026.6.19" |
-| helm.releases.kubedb.values | | {"kubedb-autoscaler":{"enabled":true},"kubedb-catalog":{"enabled":true},"kubedb-kubestash-catalog":{"enabled":true},"kubedb-metrics":{"enabled":false},"kubedb-ops-manager":{"enabled":true},"kubedb-provisioner":{"enabled":true},"kubedb-schema-manager":{"enabled":false},"sidekick":{"enabled":false}} |
-| helm.releases.kubestash.enabled | | false |
-| helm.releases.kubestash.version | | "v2026.6.19" |
-| helm.releases.kube-ui-server.enabled | | true |
-| helm.releases.kube-ui-server.version | | "v2026.7.10" |
-| helm.releases.license-proxyserver.enabled | | true |
-| helm.releases.license-proxyserver.version | | "v2026.2.16" |
-| helm.releases.opscenter-features.enabled | | true |
-| helm.releases.opscenter-features.version | | "v2026.7.10" |
-| helm.releases.panopticon.enabled | | true |
-| helm.releases.panopticon.version | | "v2026.6.22" |
-| helm.releases.panopticon.values | | {"monitoring":{"agent":"prometheus.io/operator","enabled":true,"serviceMonitor":{"labels":{"release":"kube-prometheus-stack"}}}} |
-| helm.releases.prom-label-proxy.enabled | | false |
-| helm.releases.prom-label-proxy.version | | "v2026.4.30" |
-| helm.releases.reloader.enabled | | true |
-| helm.releases.reloader.version | | "2.2.9" |
-| helm.releases.service-gateway-presets.enabled | | false |
-| helm.releases.service-gateway-presets.version | | "v2026.7.10" |
-| helm.releases.stash-presets.enabled | | false |
-| helm.releases.stash-presets.version | | "v2026.7.10" |
-| helm.releases.cluster-manager-spoke.enabled | | false |
-| helm.releases.cluster-manager-spoke.version | | "v2026.2.16" |
-| helm.releases.spoke-cluster-addons.enabled | | false |
-| helm.releases.spoke-cluster-addons.version | | "v2026.2.16" |
-| helm.releases.vcluster.enabled | | false |
-| helm.releases.vcluster.version | | "0.22.4" |
-| helm.releases.vcluster-plugin-ace.enabled | | false |
-| helm.releases.vcluster-plugin-ace.version | | "v0.0.3" |
-| selfManagement.createCAPICluster | | false |
-| selfManagement.import | | true |
-| selfManagement.targetIPs | | [] |
-| selfManagement.enableFeatures | | [] |
-| selfManagement.disableFeatures | | [] |
-| selfManagement.useGateway | | false |
-| precheck.enabled | | true |
-| precheck.image.registry | Docker registry used to pull app container image | appscode |
-| precheck.image.repository | App container image | b3 |
-| precheck.image.tag | Overrides the image tag whose default is the chart appVersion. | "" |
-| precheck.image.pullPolicy | | Always |
-| precheck.podAnnotations | | {} |
-| precheck.podSecurityContext | | {} |
-| precheck.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
-| precheck.resources | | {} |
-| precheck.nodeSelector | | {} |
-| precheck.tolerations | | [] |
-| precheck.affinity | | {} |
-| tester.image.registry | Docker registry used to pull app container image | appscode |
-| tester.image.repository | App container image | kubectl-nonroot |
-| tester.image.tag | Overrides the image tag whose default is the chart appVersion. | "1.34" |
-| tester.image.pullPolicy | | IfNotPresent |
-| tester.podAnnotations | | {} |
-| tester.podSecurityContext | | {} |
-| tester.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
-| tester.resources | | {} |
-| tester.nodeSelector | | {} |
-| tester.tolerations | | [] |
-| tester.affinity | | {} |
-| regcache.enabled | | true |
-| regcache.replicaCount | | 1 |
-| regcache.nameOverride | | "" |
-| regcache.fullnameOverride | | "" |
-| regcache.registryFQDN | Docker registry fqdn used to pull the registry image. | ghcr.io |
-| regcache.image.registry | Docker registry used to pull the registry image | appscode-images |
-| regcache.image.repository | registry container image | registry |
-| regcache.image.tag | Overrides the image tag | "3.1.1" |
-| regcache.image.pullPolicy | | IfNotPresent |
-| regcache.imagePullSecrets | | [] |
-| regcache.remoteURL | Upstream registry URL that this instance proxies as a pull-through cache. | https://ghcr.io |
-| regcache.ttl | How long a cached blob/manifest is kept before the pull-through cache scheduler purges it. The cache has no capacity-based (LRU) eviction, so the on-disk size is roughly the set of distinct artifacts pulled within this window. Accepts a Go duration (e.g. 24h, 72h, 168h). | "72h" |
-| regcache.username | Optional credentials for authenticating against the upstream registry. Leave empty for anonymous pulls (ghcr.io/appscode-charts is public). | "" |
-| regcache.password | | "" |
-| regcache.podAnnotations | | {} |
-| regcache.podSecurityContext | | {"fsGroup":65534} |
-| regcache.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
-| regcache.service.type | | ClusterIP |
-| regcache.service.port | | 5000 |
-| regcache.persistence.enabled | | true |
-| regcache.persistence.storageClass | StorageClass for the cache PVC. When empty, falls back to infra.storageClass.name below; if that is also unset, the cluster's default StorageClass is used. Use a StorageClass with `allowVolumeExpansion: true` to grow the cache later via a helm upgrade. | "" |
-| regcache.persistence.accessMode | | ReadWriteOnce |
-| regcache.persistence.size | | 10Gi |
-| regcache.resources | | {} |
-| regcache.nodeSelector | | {} |
-| regcache.tolerations | | [] |
-| regcache.affinity | | {} |
-| regcache.infra.storageClass.name | | "" |
-| regcache.distro.openshift | | false |
-| regcache.distro.ubi | | "" |
-| options | | "" |
+| Parameter | Description | Default |
+|-------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| nameOverride | | "" |
+| fullnameOverride | | "" |
+| deploymentType | | "" |
+| offlineInstaller | | false |
+| installerVersion | | "" |
+| image.proxies.appscode | r.appscode.com | r.appscode.com |
+| image.proxies.dockerHub | company/bin:tag | "" |
+| image.proxies.dockerLibrary | alpine, nginx etc. | "" |
+| image.proxies.ghcr | ghcr.io/company/bin:tag | ghcr.io |
+| image.proxies.quay | quay.io/company/bin:tag | quay.io |
+| image.proxies.kubernetes | registry.k8s.io/bin:tag | registry.k8s.io |
+| image.proxies.microsoft | | mcr.microsoft.com |
+| image.proxies.oracle | | container-registry.oracle.com |
+| image.proxies.weaviate | | cr.weaviate.io |
+| registry.credentials | | {} |
+| registry.certs | username: "abc" password: "xyz" | {} |
+| registry.imagePullSecrets | ca.crt: "***" | [] |
+| helm.createNamespace | | true |
+| helm.repositories.appscode-charts-oci.url | | oci://ghcr.io/appscode-charts |
+| helm.repositories.appscode-wizards-oci.url | | oci://ghcr.io/appscode-charts |
+| helm.releases.ace.enabled | | false |
+| helm.releases.ace.version | | "v2026.7.10" |
+| helm.releases.acerproxy.enabled | | false |
+| helm.releases.acerproxy.version | | "v2026.7.10" |
+| helm.releases.aceshifter.enabled | | true |
+| helm.releases.aceshifter.version | | "v2026.7.10" |
+| helm.releases.capi-catalog.enabled | | false |
+| helm.releases.capi-catalog.version | | "v2024.10.24" |
+| helm.releases.catalog-manager.enabled | | false |
+| helm.releases.catalog-manager.version | | "v2026.7.10" |
+| helm.releases.cert-manager.enabled | | true |
+| helm.releases.cert-manager.version | | "v1.19.3" |
+| helm.releases.cert-manager-csi-driver-cacerts.enabled | | true |
+| helm.releases.cert-manager-csi-driver-cacerts.version | | "v2026.1.15" |
+| helm.releases.external-dns-operator.enabled | | true |
+| helm.releases.external-dns-operator.version | | "v2026.6.22" |
+| helm.releases.flux2.enabled | | false |
+| helm.releases.flux2.version | | "2.17.0" |
+| helm.releases.gateway-api.enabled | | true |
+| helm.releases.gateway-api.version | | "v2025.3.14" |
+| helm.releases.gateway-api-crds.enabled | | true |
+| helm.releases.gateway-api-crds.version | | v1.4.1 |
+| helm.releases.kubedb.enabled | | true |
+| helm.releases.kubedb.version | | "v2026.6.19" |
+| helm.releases.kubedb.values | | {"global":{"featureGates":{"Pgpool":true}},"kubedb-autoscaler":{"enabled":true},"kubedb-catalog":{"enabled":true},"kubedb-kubestash-catalog":{"enabled":true},"kubedb-metrics":{"enabled":false},"kubedb-ops-manager":{"enabled":true},"kubedb-provisioner":{"enabled":true},"kubedb-schema-manager":{"enabled":false},"sidekick":{"enabled":false}} |
+| helm.releases.kubestash.enabled | | false |
+| helm.releases.kubestash.version | | "v2026.6.19" |
+| helm.releases.kube-ui-server.enabled | | true |
+| helm.releases.kube-ui-server.version | | "v2026.7.10" |
+| helm.releases.license-proxyserver.enabled | | true |
+| helm.releases.license-proxyserver.version | | "v2026.2.16" |
+| helm.releases.opscenter-features.enabled | | true |
+| helm.releases.opscenter-features.version | | "v2026.7.10" |
+| helm.releases.panopticon.enabled | | true |
+| helm.releases.panopticon.version | | "v2026.6.22" |
+| helm.releases.panopticon.values | | {"monitoring":{"agent":"prometheus.io/operator","enabled":true,"serviceMonitor":{"labels":{"release":"kube-prometheus-stack"}}}} |
+| helm.releases.prom-label-proxy.enabled | | false |
+| helm.releases.prom-label-proxy.version | | "v2026.4.30" |
+| helm.releases.reloader.enabled | | true |
+| helm.releases.reloader.version | | "2.2.9" |
+| helm.releases.service-gateway-presets.enabled | | false |
+| helm.releases.service-gateway-presets.version | | "v2026.7.10" |
+| helm.releases.stash-presets.enabled | | false |
+| helm.releases.stash-presets.version | | "v2026.7.10" |
+| helm.releases.cluster-manager-spoke.enabled | | false |
+| helm.releases.cluster-manager-spoke.version | | "v2026.2.16" |
+| helm.releases.spoke-cluster-addons.enabled | | false |
+| helm.releases.spoke-cluster-addons.version | | "v2026.2.16" |
+| helm.releases.vcluster.enabled | | false |
+| helm.releases.vcluster.version | | "0.22.4" |
+| helm.releases.vcluster-plugin-ace.enabled | | false |
+| helm.releases.vcluster-plugin-ace.version | | "v0.0.3" |
+| selfManagement.createCAPICluster | | false |
+| selfManagement.import | | true |
+| selfManagement.targetIPs | | [] |
+| selfManagement.enableFeatures | | [] |
+| selfManagement.disableFeatures | | [] |
+| selfManagement.useGateway | | false |
+| precheck.enabled | | true |
+| precheck.image.registry | Docker registry used to pull app container image | appscode |
+| precheck.image.repository | App container image | b3 |
+| precheck.image.tag | Overrides the image tag whose default is the chart appVersion. | "" |
+| precheck.image.pullPolicy | | Always |
+| precheck.podAnnotations | | {} |
+| precheck.podSecurityContext | | {} |
+| precheck.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
+| precheck.resources | | {} |
+| precheck.nodeSelector | | {} |
+| precheck.tolerations | | [] |
+| precheck.affinity | | {} |
+| tester.image.registry | Docker registry used to pull app container image | appscode |
+| tester.image.repository | App container image | kubectl-nonroot |
+| tester.image.tag | Overrides the image tag whose default is the chart appVersion. | "1.34" |
+| tester.image.pullPolicy | | IfNotPresent |
+| tester.podAnnotations | | {} |
+| tester.podSecurityContext | | {} |
+| tester.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
+| tester.resources | | {} |
+| tester.nodeSelector | | {} |
+| tester.tolerations | | [] |
+| tester.affinity | | {} |
+| regcache.enabled | | true |
+| regcache.replicaCount | | 1 |
+| regcache.nameOverride | | "" |
+| regcache.fullnameOverride | | "" |
+| regcache.registryFQDN | Docker registry fqdn used to pull the registry image. | ghcr.io |
+| regcache.image.registry | Docker registry used to pull the registry image | appscode-images |
+| regcache.image.repository | registry container image | registry |
+| regcache.image.tag | Overrides the image tag | "3.1.1" |
+| regcache.image.pullPolicy | | IfNotPresent |
+| regcache.imagePullSecrets | | [] |
+| regcache.remoteURL | Upstream registry URL that this instance proxies as a pull-through cache. | https://ghcr.io |
+| regcache.ttl | How long a cached blob/manifest is kept before the pull-through cache scheduler purges it. The cache has no capacity-based (LRU) eviction, so the on-disk size is roughly the set of distinct artifacts pulled within this window. Accepts a Go duration (e.g. 24h, 72h, 168h). | "72h" |
+| regcache.username | Optional credentials for authenticating against the upstream registry. Leave empty for anonymous pulls (ghcr.io/appscode-charts is public). | "" |
+| regcache.password | | "" |
+| regcache.podAnnotations | | {} |
+| regcache.podSecurityContext | | {"fsGroup":65534} |
+| regcache.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
+| regcache.service.type | | ClusterIP |
+| regcache.service.port | | 5000 |
+| regcache.persistence.enabled | | true |
+| regcache.persistence.storageClass | StorageClass for the cache PVC. When empty, falls back to infra.storageClass.name below; if that is also unset, the cluster's default StorageClass is used. Use a StorageClass with `allowVolumeExpansion: true` to grow the cache later via a helm upgrade. | "" |
+| regcache.persistence.accessMode | | ReadWriteOnce |
+| regcache.persistence.size | | 10Gi |
+| regcache.resources | | {} |
+| regcache.nodeSelector | | {} |
+| regcache.tolerations | | [] |
+| regcache.affinity | | {} |
+| regcache.infra.storageClass.name | | "" |
+| regcache.distro.openshift | | false |
+| regcache.distro.ubi | | "" |
+| options | | "" |
Specify each parameter using the `--set key=value[,key=value]` argument to `helm upgrade -i`. For example:
diff --git a/charts/ace-installer-certified-crds/values.yaml b/charts/ace-installer-certified-crds/values.yaml
index 8965dc522..def09b562 100644
--- a/charts/ace-installer-certified-crds/values.yaml
+++ b/charts/ace-installer-certified-crds/values.yaml
@@ -90,6 +90,9 @@ helm:
enabled: true
version: "v2026.6.19"
values: # +doc-gen:break
+ global:
+ featureGates:
+ Pgpool: true
kubedb-provisioner:
enabled: true
kubedb-catalog:
diff --git a/charts/ace-installer-certified/README.md b/charts/ace-installer-certified/README.md
index 830ccdde7..faa1d76d5 100644
--- a/charts/ace-installer-certified/README.md
+++ b/charts/ace-installer-certified/README.md
@@ -45,140 +45,140 @@ The command removes all the Kubernetes components associated with the chart and
The following table lists the configurable parameters of the `ace-installer-certified` chart and their default values.
-| Parameter | Description | Default |
-|-------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
-| nameOverride | | "" |
-| fullnameOverride | | "" |
-| deploymentType | | "" |
-| offlineInstaller | | false |
-| installerVersion | | "" |
-| image.proxies.appscode | r.appscode.com | r.appscode.com |
-| image.proxies.dockerHub | company/bin:tag | "" |
-| image.proxies.dockerLibrary | alpine, nginx etc. | "" |
-| image.proxies.ghcr | ghcr.io/company/bin:tag | ghcr.io |
-| image.proxies.quay | quay.io/company/bin:tag | quay.io |
-| image.proxies.kubernetes | registry.k8s.io/bin:tag | registry.k8s.io |
-| image.proxies.microsoft | | mcr.microsoft.com |
-| image.proxies.oracle | | container-registry.oracle.com |
-| image.proxies.weaviate | | cr.weaviate.io |
-| registry.credentials | | {} |
-| registry.certs | username: "abc" password: "xyz" | {} |
-| registry.imagePullSecrets | ca.crt: "***" | [] |
-| helm.createNamespace | | true |
-| helm.repositories.appscode-charts-oci.url | | oci://ghcr.io/appscode-charts |
-| helm.repositories.appscode-wizards-oci.url | | oci://ghcr.io/appscode-charts |
-| helm.releases.ace.enabled | | false |
-| helm.releases.ace.version | | "v2026.7.10" |
-| helm.releases.acerproxy.enabled | | false |
-| helm.releases.acerproxy.version | | "v2026.7.10" |
-| helm.releases.aceshifter.enabled | | true |
-| helm.releases.aceshifter.version | | "v2026.7.10" |
-| helm.releases.capi-catalog.enabled | | false |
-| helm.releases.capi-catalog.version | | "v2024.10.24" |
-| helm.releases.catalog-manager.enabled | | false |
-| helm.releases.catalog-manager.version | | "v2026.7.10" |
-| helm.releases.cert-manager.enabled | | true |
-| helm.releases.cert-manager.version | | "v1.19.3" |
-| helm.releases.cert-manager-csi-driver-cacerts.enabled | | true |
-| helm.releases.cert-manager-csi-driver-cacerts.version | | "v2026.1.15" |
-| helm.releases.external-dns-operator.enabled | | true |
-| helm.releases.external-dns-operator.version | | "v2026.6.22" |
-| helm.releases.flux2.enabled | | false |
-| helm.releases.flux2.version | | "2.17.0" |
-| helm.releases.gateway-api.enabled | | true |
-| helm.releases.gateway-api.version | | "v2025.3.14" |
-| helm.releases.gateway-api-crds.enabled | | true |
-| helm.releases.gateway-api-crds.version | | v1.4.1 |
-| helm.releases.kubedb.enabled | | true |
-| helm.releases.kubedb.version | | "v2026.6.19" |
-| helm.releases.kubedb.values | | {"kubedb-autoscaler":{"enabled":true},"kubedb-catalog":{"enabled":true},"kubedb-kubestash-catalog":{"enabled":true},"kubedb-metrics":{"enabled":false},"kubedb-ops-manager":{"enabled":true},"kubedb-provisioner":{"enabled":true},"kubedb-schema-manager":{"enabled":false},"sidekick":{"enabled":false}} |
-| helm.releases.kubestash.enabled | | false |
-| helm.releases.kubestash.version | | "v2026.6.19" |
-| helm.releases.kube-ui-server.enabled | | true |
-| helm.releases.kube-ui-server.version | | "v2026.7.10" |
-| helm.releases.license-proxyserver.enabled | | true |
-| helm.releases.license-proxyserver.version | | "v2026.2.16" |
-| helm.releases.opscenter-features.enabled | | true |
-| helm.releases.opscenter-features.version | | "v2026.7.10" |
-| helm.releases.panopticon.enabled | | true |
-| helm.releases.panopticon.version | | "v2026.6.22" |
-| helm.releases.panopticon.values | | {"monitoring":{"agent":"prometheus.io/operator","enabled":true,"serviceMonitor":{"labels":{"release":"kube-prometheus-stack"}}}} |
-| helm.releases.prom-label-proxy.enabled | | false |
-| helm.releases.prom-label-proxy.version | | "v2026.4.30" |
-| helm.releases.reloader.enabled | | true |
-| helm.releases.reloader.version | | "2.2.9" |
-| helm.releases.service-gateway-presets.enabled | | false |
-| helm.releases.service-gateway-presets.version | | "v2026.7.10" |
-| helm.releases.stash-presets.enabled | | false |
-| helm.releases.stash-presets.version | | "v2026.7.10" |
-| helm.releases.cluster-manager-spoke.enabled | | false |
-| helm.releases.cluster-manager-spoke.version | | "v2026.2.16" |
-| helm.releases.spoke-cluster-addons.enabled | | false |
-| helm.releases.spoke-cluster-addons.version | | "v2026.2.16" |
-| helm.releases.vcluster.enabled | | false |
-| helm.releases.vcluster.version | | "0.22.4" |
-| helm.releases.vcluster-plugin-ace.enabled | | false |
-| helm.releases.vcluster-plugin-ace.version | | "v0.0.3" |
-| selfManagement.createCAPICluster | | false |
-| selfManagement.import | | true |
-| selfManagement.targetIPs | | [] |
-| selfManagement.enableFeatures | | [] |
-| selfManagement.disableFeatures | | [] |
-| selfManagement.useGateway | | false |
-| precheck.enabled | | true |
-| precheck.image.registry | Docker registry used to pull app container image | appscode |
-| precheck.image.repository | App container image | b3 |
-| precheck.image.tag | Overrides the image tag whose default is the chart appVersion. | "" |
-| precheck.image.pullPolicy | | Always |
-| precheck.podAnnotations | | {} |
-| precheck.podSecurityContext | | {} |
-| precheck.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
-| precheck.resources | | {} |
-| precheck.nodeSelector | | {} |
-| precheck.tolerations | | [] |
-| precheck.affinity | | {} |
-| tester.image.registry | Docker registry used to pull app container image | appscode |
-| tester.image.repository | App container image | kubectl-nonroot |
-| tester.image.tag | Overrides the image tag whose default is the chart appVersion. | "1.34" |
-| tester.image.pullPolicy | | IfNotPresent |
-| tester.podAnnotations | | {} |
-| tester.podSecurityContext | | {} |
-| tester.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
-| tester.resources | | {} |
-| tester.nodeSelector | | {} |
-| tester.tolerations | | [] |
-| tester.affinity | | {} |
-| regcache.enabled | | true |
-| regcache.replicaCount | | 1 |
-| regcache.nameOverride | | "" |
-| regcache.fullnameOverride | | "" |
-| regcache.registryFQDN | Docker registry fqdn used to pull the registry image. | ghcr.io |
-| regcache.image.registry | Docker registry used to pull the registry image | appscode-images |
-| regcache.image.repository | registry container image | registry |
-| regcache.image.tag | Overrides the image tag | "3.1.1" |
-| regcache.image.pullPolicy | | IfNotPresent |
-| regcache.imagePullSecrets | | [] |
-| regcache.remoteURL | Upstream registry URL that this instance proxies as a pull-through cache. | https://ghcr.io |
-| regcache.ttl | How long a cached blob/manifest is kept before the pull-through cache scheduler purges it. The cache has no capacity-based (LRU) eviction, so the on-disk size is roughly the set of distinct artifacts pulled within this window. Accepts a Go duration (e.g. 24h, 72h, 168h). | "72h" |
-| regcache.username | Optional credentials for authenticating against the upstream registry. Leave empty for anonymous pulls (ghcr.io/appscode-charts is public). | "" |
-| regcache.password | | "" |
-| regcache.podAnnotations | | {} |
-| regcache.podSecurityContext | | {"fsGroup":65534} |
-| regcache.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
-| regcache.service.type | | ClusterIP |
-| regcache.service.port | | 5000 |
-| regcache.persistence.enabled | | true |
-| regcache.persistence.storageClass | StorageClass for the cache PVC. When empty, falls back to infra.storageClass.name below; if that is also unset, the cluster's default StorageClass is used. Use a StorageClass with `allowVolumeExpansion: true` to grow the cache later via a helm upgrade. | "" |
-| regcache.persistence.accessMode | | ReadWriteOnce |
-| regcache.persistence.size | | 10Gi |
-| regcache.resources | | {} |
-| regcache.nodeSelector | | {} |
-| regcache.tolerations | | [] |
-| regcache.affinity | | {} |
-| regcache.infra.storageClass.name | | "" |
-| regcache.distro.openshift | | false |
-| regcache.distro.ubi | | "" |
-| options | | "" |
+| Parameter | Description | Default |
+|-------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| nameOverride | | "" |
+| fullnameOverride | | "" |
+| deploymentType | | "" |
+| offlineInstaller | | false |
+| installerVersion | | "" |
+| image.proxies.appscode | r.appscode.com | r.appscode.com |
+| image.proxies.dockerHub | company/bin:tag | "" |
+| image.proxies.dockerLibrary | alpine, nginx etc. | "" |
+| image.proxies.ghcr | ghcr.io/company/bin:tag | ghcr.io |
+| image.proxies.quay | quay.io/company/bin:tag | quay.io |
+| image.proxies.kubernetes | registry.k8s.io/bin:tag | registry.k8s.io |
+| image.proxies.microsoft | | mcr.microsoft.com |
+| image.proxies.oracle | | container-registry.oracle.com |
+| image.proxies.weaviate | | cr.weaviate.io |
+| registry.credentials | | {} |
+| registry.certs | username: "abc" password: "xyz" | {} |
+| registry.imagePullSecrets | ca.crt: "***" | [] |
+| helm.createNamespace | | true |
+| helm.repositories.appscode-charts-oci.url | | oci://ghcr.io/appscode-charts |
+| helm.repositories.appscode-wizards-oci.url | | oci://ghcr.io/appscode-charts |
+| helm.releases.ace.enabled | | false |
+| helm.releases.ace.version | | "v2026.7.10" |
+| helm.releases.acerproxy.enabled | | false |
+| helm.releases.acerproxy.version | | "v2026.7.10" |
+| helm.releases.aceshifter.enabled | | true |
+| helm.releases.aceshifter.version | | "v2026.7.10" |
+| helm.releases.capi-catalog.enabled | | false |
+| helm.releases.capi-catalog.version | | "v2024.10.24" |
+| helm.releases.catalog-manager.enabled | | false |
+| helm.releases.catalog-manager.version | | "v2026.7.10" |
+| helm.releases.cert-manager.enabled | | true |
+| helm.releases.cert-manager.version | | "v1.19.3" |
+| helm.releases.cert-manager-csi-driver-cacerts.enabled | | true |
+| helm.releases.cert-manager-csi-driver-cacerts.version | | "v2026.1.15" |
+| helm.releases.external-dns-operator.enabled | | true |
+| helm.releases.external-dns-operator.version | | "v2026.6.22" |
+| helm.releases.flux2.enabled | | false |
+| helm.releases.flux2.version | | "2.17.0" |
+| helm.releases.gateway-api.enabled | | true |
+| helm.releases.gateway-api.version | | "v2025.3.14" |
+| helm.releases.gateway-api-crds.enabled | | true |
+| helm.releases.gateway-api-crds.version | | v1.4.1 |
+| helm.releases.kubedb.enabled | | true |
+| helm.releases.kubedb.version | | "v2026.6.19" |
+| helm.releases.kubedb.values | | {"global":{"featureGates":{"Pgpool":true}},"kubedb-autoscaler":{"enabled":true},"kubedb-catalog":{"enabled":true},"kubedb-kubestash-catalog":{"enabled":true},"kubedb-metrics":{"enabled":false},"kubedb-ops-manager":{"enabled":true},"kubedb-provisioner":{"enabled":true},"kubedb-schema-manager":{"enabled":false},"sidekick":{"enabled":false}} |
+| helm.releases.kubestash.enabled | | false |
+| helm.releases.kubestash.version | | "v2026.6.19" |
+| helm.releases.kube-ui-server.enabled | | true |
+| helm.releases.kube-ui-server.version | | "v2026.7.10" |
+| helm.releases.license-proxyserver.enabled | | true |
+| helm.releases.license-proxyserver.version | | "v2026.2.16" |
+| helm.releases.opscenter-features.enabled | | true |
+| helm.releases.opscenter-features.version | | "v2026.7.10" |
+| helm.releases.panopticon.enabled | | true |
+| helm.releases.panopticon.version | | "v2026.6.22" |
+| helm.releases.panopticon.values | | {"monitoring":{"agent":"prometheus.io/operator","enabled":true,"serviceMonitor":{"labels":{"release":"kube-prometheus-stack"}}}} |
+| helm.releases.prom-label-proxy.enabled | | false |
+| helm.releases.prom-label-proxy.version | | "v2026.4.30" |
+| helm.releases.reloader.enabled | | true |
+| helm.releases.reloader.version | | "2.2.9" |
+| helm.releases.service-gateway-presets.enabled | | false |
+| helm.releases.service-gateway-presets.version | | "v2026.7.10" |
+| helm.releases.stash-presets.enabled | | false |
+| helm.releases.stash-presets.version | | "v2026.7.10" |
+| helm.releases.cluster-manager-spoke.enabled | | false |
+| helm.releases.cluster-manager-spoke.version | | "v2026.2.16" |
+| helm.releases.spoke-cluster-addons.enabled | | false |
+| helm.releases.spoke-cluster-addons.version | | "v2026.2.16" |
+| helm.releases.vcluster.enabled | | false |
+| helm.releases.vcluster.version | | "0.22.4" |
+| helm.releases.vcluster-plugin-ace.enabled | | false |
+| helm.releases.vcluster-plugin-ace.version | | "v0.0.3" |
+| selfManagement.createCAPICluster | | false |
+| selfManagement.import | | true |
+| selfManagement.targetIPs | | [] |
+| selfManagement.enableFeatures | | [] |
+| selfManagement.disableFeatures | | [] |
+| selfManagement.useGateway | | false |
+| precheck.enabled | | true |
+| precheck.image.registry | Docker registry used to pull app container image | appscode |
+| precheck.image.repository | App container image | b3 |
+| precheck.image.tag | Overrides the image tag whose default is the chart appVersion. | "" |
+| precheck.image.pullPolicy | | Always |
+| precheck.podAnnotations | | {} |
+| precheck.podSecurityContext | | {} |
+| precheck.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
+| precheck.resources | | {} |
+| precheck.nodeSelector | | {} |
+| precheck.tolerations | | [] |
+| precheck.affinity | | {} |
+| tester.image.registry | Docker registry used to pull app container image | appscode |
+| tester.image.repository | App container image | kubectl-nonroot |
+| tester.image.tag | Overrides the image tag whose default is the chart appVersion. | "1.34" |
+| tester.image.pullPolicy | | IfNotPresent |
+| tester.podAnnotations | | {} |
+| tester.podSecurityContext | | {} |
+| tester.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
+| tester.resources | | {} |
+| tester.nodeSelector | | {} |
+| tester.tolerations | | [] |
+| tester.affinity | | {} |
+| regcache.enabled | | true |
+| regcache.replicaCount | | 1 |
+| regcache.nameOverride | | "" |
+| regcache.fullnameOverride | | "" |
+| regcache.registryFQDN | Docker registry fqdn used to pull the registry image. | ghcr.io |
+| regcache.image.registry | Docker registry used to pull the registry image | appscode-images |
+| regcache.image.repository | registry container image | registry |
+| regcache.image.tag | Overrides the image tag | "3.1.1" |
+| regcache.image.pullPolicy | | IfNotPresent |
+| regcache.imagePullSecrets | | [] |
+| regcache.remoteURL | Upstream registry URL that this instance proxies as a pull-through cache. | https://ghcr.io |
+| regcache.ttl | How long a cached blob/manifest is kept before the pull-through cache scheduler purges it. The cache has no capacity-based (LRU) eviction, so the on-disk size is roughly the set of distinct artifacts pulled within this window. Accepts a Go duration (e.g. 24h, 72h, 168h). | "72h" |
+| regcache.username | Optional credentials for authenticating against the upstream registry. Leave empty for anonymous pulls (ghcr.io/appscode-charts is public). | "" |
+| regcache.password | | "" |
+| regcache.podAnnotations | | {} |
+| regcache.podSecurityContext | | {"fsGroup":65534} |
+| regcache.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
+| regcache.service.type | | ClusterIP |
+| regcache.service.port | | 5000 |
+| regcache.persistence.enabled | | true |
+| regcache.persistence.storageClass | StorageClass for the cache PVC. When empty, falls back to infra.storageClass.name below; if that is also unset, the cluster's default StorageClass is used. Use a StorageClass with `allowVolumeExpansion: true` to grow the cache later via a helm upgrade. | "" |
+| regcache.persistence.accessMode | | ReadWriteOnce |
+| regcache.persistence.size | | 10Gi |
+| regcache.resources | | {} |
+| regcache.nodeSelector | | {} |
+| regcache.tolerations | | [] |
+| regcache.affinity | | {} |
+| regcache.infra.storageClass.name | | "" |
+| regcache.distro.openshift | | false |
+| regcache.distro.ubi | | "" |
+| options | | "" |
Specify each parameter using the `--set key=value[,key=value]` argument to `helm upgrade -i`. For example:
diff --git a/charts/ace-installer-certified/values.yaml b/charts/ace-installer-certified/values.yaml
index 8965dc522..def09b562 100644
--- a/charts/ace-installer-certified/values.yaml
+++ b/charts/ace-installer-certified/values.yaml
@@ -90,6 +90,9 @@ helm:
enabled: true
version: "v2026.6.19"
values: # +doc-gen:break
+ global:
+ featureGates:
+ Pgpool: true
kubedb-provisioner:
enabled: true
kubedb-catalog:
diff --git a/charts/ace-installer/README.md b/charts/ace-installer/README.md
index cc78c5f0a..793153484 100644
--- a/charts/ace-installer/README.md
+++ b/charts/ace-installer/README.md
@@ -45,140 +45,140 @@ The command removes all the Kubernetes components associated with the chart and
The following table lists the configurable parameters of the `ace-installer` chart and their default values.
-| Parameter | Description | Default |
-|-------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
-| nameOverride | | "" |
-| fullnameOverride | | "" |
-| deploymentType | | "" |
-| offlineInstaller | | false |
-| installerVersion | | "" |
-| image.proxies.appscode | r.appscode.com | r.appscode.com |
-| image.proxies.dockerHub | company/bin:tag | "" |
-| image.proxies.dockerLibrary | alpine, nginx etc. | "" |
-| image.proxies.ghcr | ghcr.io/company/bin:tag | ghcr.io |
-| image.proxies.quay | quay.io/company/bin:tag | quay.io |
-| image.proxies.kubernetes | registry.k8s.io/bin:tag | registry.k8s.io |
-| image.proxies.microsoft | | mcr.microsoft.com |
-| image.proxies.oracle | | container-registry.oracle.com |
-| image.proxies.weaviate | | cr.weaviate.io |
-| registry.credentials | | {} |
-| registry.certs | username: "abc" password: "xyz" | {} |
-| registry.imagePullSecrets | ca.crt: "***" | [] |
-| helm.createNamespace | | true |
-| helm.repositories.appscode-charts-oci.url | | oci://ghcr.io/appscode-charts |
-| helm.repositories.appscode-wizards-oci.url | | oci://ghcr.io/appscode-charts |
-| helm.releases.ace.enabled | | false |
-| helm.releases.ace.version | | "v2026.7.10" |
-| helm.releases.acerproxy.enabled | | false |
-| helm.releases.acerproxy.version | | "v2026.7.10" |
-| helm.releases.aceshifter.enabled | | true |
-| helm.releases.aceshifter.version | | "v2026.7.10" |
-| helm.releases.capi-catalog.enabled | | false |
-| helm.releases.capi-catalog.version | | "v2024.10.24" |
-| helm.releases.catalog-manager.enabled | | false |
-| helm.releases.catalog-manager.version | | "v2026.7.10" |
-| helm.releases.cert-manager.enabled | | true |
-| helm.releases.cert-manager.version | | "v1.19.3" |
-| helm.releases.cert-manager-csi-driver-cacerts.enabled | | true |
-| helm.releases.cert-manager-csi-driver-cacerts.version | | "v2026.1.15" |
-| helm.releases.external-dns-operator.enabled | | true |
-| helm.releases.external-dns-operator.version | | "v2026.6.22" |
-| helm.releases.flux2.enabled | | false |
-| helm.releases.flux2.version | | "2.17.0" |
-| helm.releases.gateway-api.enabled | | true |
-| helm.releases.gateway-api.version | | "v2025.3.14" |
-| helm.releases.gateway-api-crds.enabled | | true |
-| helm.releases.gateway-api-crds.version | | v1.4.1 |
-| helm.releases.kubedb.enabled | | true |
-| helm.releases.kubedb.version | | "v2026.6.19" |
-| helm.releases.kubedb.values | | {"kubedb-autoscaler":{"enabled":true},"kubedb-catalog":{"enabled":true},"kubedb-kubestash-catalog":{"enabled":true},"kubedb-metrics":{"enabled":false},"kubedb-ops-manager":{"enabled":true},"kubedb-provisioner":{"enabled":true},"kubedb-schema-manager":{"enabled":false},"sidekick":{"enabled":false}} |
-| helm.releases.kubestash.enabled | | false |
-| helm.releases.kubestash.version | | "v2026.6.19" |
-| helm.releases.kube-ui-server.enabled | | true |
-| helm.releases.kube-ui-server.version | | "v2026.7.10" |
-| helm.releases.license-proxyserver.enabled | | true |
-| helm.releases.license-proxyserver.version | | "v2026.2.16" |
-| helm.releases.opscenter-features.enabled | | true |
-| helm.releases.opscenter-features.version | | "v2026.7.10" |
-| helm.releases.panopticon.enabled | | true |
-| helm.releases.panopticon.version | | "v2026.6.22" |
-| helm.releases.panopticon.values | | {"monitoring":{"agent":"prometheus.io/operator","enabled":true,"serviceMonitor":{"labels":{"release":"kube-prometheus-stack"}}}} |
-| helm.releases.prom-label-proxy.enabled | | false |
-| helm.releases.prom-label-proxy.version | | "v2026.4.30" |
-| helm.releases.reloader.enabled | | true |
-| helm.releases.reloader.version | | "2.2.9" |
-| helm.releases.service-gateway-presets.enabled | | false |
-| helm.releases.service-gateway-presets.version | | "v2026.7.10" |
-| helm.releases.stash-presets.enabled | | false |
-| helm.releases.stash-presets.version | | "v2026.7.10" |
-| helm.releases.cluster-manager-spoke.enabled | | false |
-| helm.releases.cluster-manager-spoke.version | | "v2026.2.16" |
-| helm.releases.spoke-cluster-addons.enabled | | false |
-| helm.releases.spoke-cluster-addons.version | | "v2026.2.16" |
-| helm.releases.vcluster.enabled | | false |
-| helm.releases.vcluster.version | | "0.22.4" |
-| helm.releases.vcluster-plugin-ace.enabled | | false |
-| helm.releases.vcluster-plugin-ace.version | | "v0.0.3" |
-| selfManagement.createCAPICluster | | false |
-| selfManagement.import | | true |
-| selfManagement.targetIPs | | [] |
-| selfManagement.enableFeatures | | [] |
-| selfManagement.disableFeatures | | [] |
-| selfManagement.useGateway | | false |
-| precheck.enabled | | true |
-| precheck.image.registry | Docker registry used to pull app container image | appscode |
-| precheck.image.repository | App container image | b3 |
-| precheck.image.tag | Overrides the image tag whose default is the chart appVersion. | "" |
-| precheck.image.pullPolicy | | Always |
-| precheck.podAnnotations | | {} |
-| precheck.podSecurityContext | | {} |
-| precheck.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
-| precheck.resources | | {} |
-| precheck.nodeSelector | | {} |
-| precheck.tolerations | | [] |
-| precheck.affinity | | {} |
-| tester.image.registry | Docker registry used to pull app container image | appscode |
-| tester.image.repository | App container image | kubectl-nonroot |
-| tester.image.tag | Overrides the image tag whose default is the chart appVersion. | "1.34" |
-| tester.image.pullPolicy | | IfNotPresent |
-| tester.podAnnotations | | {} |
-| tester.podSecurityContext | | {} |
-| tester.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
-| tester.resources | | {} |
-| tester.nodeSelector | | {} |
-| tester.tolerations | | [] |
-| tester.affinity | | {} |
-| regcache.enabled | | true |
-| regcache.replicaCount | | 1 |
-| regcache.nameOverride | | "" |
-| regcache.fullnameOverride | | "" |
-| regcache.registryFQDN | Docker registry fqdn used to pull the registry image. | ghcr.io |
-| regcache.image.registry | Docker registry used to pull the registry image | appscode-images |
-| regcache.image.repository | registry container image | registry |
-| regcache.image.tag | Overrides the image tag | "3.1.1" |
-| regcache.image.pullPolicy | | IfNotPresent |
-| regcache.imagePullSecrets | | [] |
-| regcache.remoteURL | Upstream registry URL that this instance proxies as a pull-through cache. | https://ghcr.io |
-| regcache.ttl | How long a cached blob/manifest is kept before the pull-through cache scheduler purges it. The cache has no capacity-based (LRU) eviction, so the on-disk size is roughly the set of distinct artifacts pulled within this window. Accepts a Go duration (e.g. 24h, 72h, 168h). | "72h" |
-| regcache.username | Optional credentials for authenticating against the upstream registry. Leave empty for anonymous pulls (ghcr.io/appscode-charts is public). | "" |
-| regcache.password | | "" |
-| regcache.podAnnotations | | {} |
-| regcache.podSecurityContext | | {"fsGroup":65534} |
-| regcache.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
-| regcache.service.type | | ClusterIP |
-| regcache.service.port | | 5000 |
-| regcache.persistence.enabled | | true |
-| regcache.persistence.storageClass | StorageClass for the cache PVC. When empty, falls back to infra.storageClass.name below; if that is also unset, the cluster's default StorageClass is used. Use a StorageClass with `allowVolumeExpansion: true` to grow the cache later via a helm upgrade. | "" |
-| regcache.persistence.accessMode | | ReadWriteOnce |
-| regcache.persistence.size | | 10Gi |
-| regcache.resources | | {} |
-| regcache.nodeSelector | | {} |
-| regcache.tolerations | | [] |
-| regcache.affinity | | {} |
-| regcache.infra.storageClass.name | | "" |
-| regcache.distro.openshift | | false |
-| regcache.distro.ubi | | "" |
-| options | | "" |
+| Parameter | Description | Default |
+|-------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| nameOverride | | "" |
+| fullnameOverride | | "" |
+| deploymentType | | "" |
+| offlineInstaller | | false |
+| installerVersion | | "" |
+| image.proxies.appscode | r.appscode.com | r.appscode.com |
+| image.proxies.dockerHub | company/bin:tag | "" |
+| image.proxies.dockerLibrary | alpine, nginx etc. | "" |
+| image.proxies.ghcr | ghcr.io/company/bin:tag | ghcr.io |
+| image.proxies.quay | quay.io/company/bin:tag | quay.io |
+| image.proxies.kubernetes | registry.k8s.io/bin:tag | registry.k8s.io |
+| image.proxies.microsoft | | mcr.microsoft.com |
+| image.proxies.oracle | | container-registry.oracle.com |
+| image.proxies.weaviate | | cr.weaviate.io |
+| registry.credentials | | {} |
+| registry.certs | username: "abc" password: "xyz" | {} |
+| registry.imagePullSecrets | ca.crt: "***" | [] |
+| helm.createNamespace | | true |
+| helm.repositories.appscode-charts-oci.url | | oci://ghcr.io/appscode-charts |
+| helm.repositories.appscode-wizards-oci.url | | oci://ghcr.io/appscode-charts |
+| helm.releases.ace.enabled | | false |
+| helm.releases.ace.version | | "v2026.7.10" |
+| helm.releases.acerproxy.enabled | | false |
+| helm.releases.acerproxy.version | | "v2026.7.10" |
+| helm.releases.aceshifter.enabled | | true |
+| helm.releases.aceshifter.version | | "v2026.7.10" |
+| helm.releases.capi-catalog.enabled | | false |
+| helm.releases.capi-catalog.version | | "v2024.10.24" |
+| helm.releases.catalog-manager.enabled | | false |
+| helm.releases.catalog-manager.version | | "v2026.7.10" |
+| helm.releases.cert-manager.enabled | | true |
+| helm.releases.cert-manager.version | | "v1.19.3" |
+| helm.releases.cert-manager-csi-driver-cacerts.enabled | | true |
+| helm.releases.cert-manager-csi-driver-cacerts.version | | "v2026.1.15" |
+| helm.releases.external-dns-operator.enabled | | true |
+| helm.releases.external-dns-operator.version | | "v2026.6.22" |
+| helm.releases.flux2.enabled | | false |
+| helm.releases.flux2.version | | "2.17.0" |
+| helm.releases.gateway-api.enabled | | true |
+| helm.releases.gateway-api.version | | "v2025.3.14" |
+| helm.releases.gateway-api-crds.enabled | | true |
+| helm.releases.gateway-api-crds.version | | v1.4.1 |
+| helm.releases.kubedb.enabled | | true |
+| helm.releases.kubedb.version | | "v2026.6.19" |
+| helm.releases.kubedb.values | | {"global":{"featureGates":{"Pgpool":true}},"kubedb-autoscaler":{"enabled":true},"kubedb-catalog":{"enabled":true},"kubedb-kubestash-catalog":{"enabled":true},"kubedb-metrics":{"enabled":false},"kubedb-ops-manager":{"enabled":true},"kubedb-provisioner":{"enabled":true},"kubedb-schema-manager":{"enabled":false},"sidekick":{"enabled":false}} |
+| helm.releases.kubestash.enabled | | false |
+| helm.releases.kubestash.version | | "v2026.6.19" |
+| helm.releases.kube-ui-server.enabled | | true |
+| helm.releases.kube-ui-server.version | | "v2026.7.10" |
+| helm.releases.license-proxyserver.enabled | | true |
+| helm.releases.license-proxyserver.version | | "v2026.2.16" |
+| helm.releases.opscenter-features.enabled | | true |
+| helm.releases.opscenter-features.version | | "v2026.7.10" |
+| helm.releases.panopticon.enabled | | true |
+| helm.releases.panopticon.version | | "v2026.6.22" |
+| helm.releases.panopticon.values | | {"monitoring":{"agent":"prometheus.io/operator","enabled":true,"serviceMonitor":{"labels":{"release":"kube-prometheus-stack"}}}} |
+| helm.releases.prom-label-proxy.enabled | | false |
+| helm.releases.prom-label-proxy.version | | "v2026.4.30" |
+| helm.releases.reloader.enabled | | true |
+| helm.releases.reloader.version | | "2.2.9" |
+| helm.releases.service-gateway-presets.enabled | | false |
+| helm.releases.service-gateway-presets.version | | "v2026.7.10" |
+| helm.releases.stash-presets.enabled | | false |
+| helm.releases.stash-presets.version | | "v2026.7.10" |
+| helm.releases.cluster-manager-spoke.enabled | | false |
+| helm.releases.cluster-manager-spoke.version | | "v2026.2.16" |
+| helm.releases.spoke-cluster-addons.enabled | | false |
+| helm.releases.spoke-cluster-addons.version | | "v2026.2.16" |
+| helm.releases.vcluster.enabled | | false |
+| helm.releases.vcluster.version | | "0.22.4" |
+| helm.releases.vcluster-plugin-ace.enabled | | false |
+| helm.releases.vcluster-plugin-ace.version | | "v0.0.3" |
+| selfManagement.createCAPICluster | | false |
+| selfManagement.import | | true |
+| selfManagement.targetIPs | | [] |
+| selfManagement.enableFeatures | | [] |
+| selfManagement.disableFeatures | | [] |
+| selfManagement.useGateway | | false |
+| precheck.enabled | | true |
+| precheck.image.registry | Docker registry used to pull app container image | appscode |
+| precheck.image.repository | App container image | b3 |
+| precheck.image.tag | Overrides the image tag whose default is the chart appVersion. | "" |
+| precheck.image.pullPolicy | | Always |
+| precheck.podAnnotations | | {} |
+| precheck.podSecurityContext | | {} |
+| precheck.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
+| precheck.resources | | {} |
+| precheck.nodeSelector | | {} |
+| precheck.tolerations | | [] |
+| precheck.affinity | | {} |
+| tester.image.registry | Docker registry used to pull app container image | appscode |
+| tester.image.repository | App container image | kubectl-nonroot |
+| tester.image.tag | Overrides the image tag whose default is the chart appVersion. | "1.34" |
+| tester.image.pullPolicy | | IfNotPresent |
+| tester.podAnnotations | | {} |
+| tester.podSecurityContext | | {} |
+| tester.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
+| tester.resources | | {} |
+| tester.nodeSelector | | {} |
+| tester.tolerations | | [] |
+| tester.affinity | | {} |
+| regcache.enabled | | true |
+| regcache.replicaCount | | 1 |
+| regcache.nameOverride | | "" |
+| regcache.fullnameOverride | | "" |
+| regcache.registryFQDN | Docker registry fqdn used to pull the registry image. | ghcr.io |
+| regcache.image.registry | Docker registry used to pull the registry image | appscode-images |
+| regcache.image.repository | registry container image | registry |
+| regcache.image.tag | Overrides the image tag | "3.1.1" |
+| regcache.image.pullPolicy | | IfNotPresent |
+| regcache.imagePullSecrets | | [] |
+| regcache.remoteURL | Upstream registry URL that this instance proxies as a pull-through cache. | https://ghcr.io |
+| regcache.ttl | How long a cached blob/manifest is kept before the pull-through cache scheduler purges it. The cache has no capacity-based (LRU) eviction, so the on-disk size is roughly the set of distinct artifacts pulled within this window. Accepts a Go duration (e.g. 24h, 72h, 168h). | "72h" |
+| regcache.username | Optional credentials for authenticating against the upstream registry. Leave empty for anonymous pulls (ghcr.io/appscode-charts is public). | "" |
+| regcache.password | | "" |
+| regcache.podAnnotations | | {} |
+| regcache.podSecurityContext | | {"fsGroup":65534} |
+| regcache.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} |
+| regcache.service.type | | ClusterIP |
+| regcache.service.port | | 5000 |
+| regcache.persistence.enabled | | true |
+| regcache.persistence.storageClass | StorageClass for the cache PVC. When empty, falls back to infra.storageClass.name below; if that is also unset, the cluster's default StorageClass is used. Use a StorageClass with `allowVolumeExpansion: true` to grow the cache later via a helm upgrade. | "" |
+| regcache.persistence.accessMode | | ReadWriteOnce |
+| regcache.persistence.size | | 10Gi |
+| regcache.resources | | {} |
+| regcache.nodeSelector | | {} |
+| regcache.tolerations | | [] |
+| regcache.affinity | | {} |
+| regcache.infra.storageClass.name | | "" |
+| regcache.distro.openshift | | false |
+| regcache.distro.ubi | | "" |
+| options | | "" |
Specify each parameter using the `--set key=value[,key=value]` argument to `helm upgrade -i`. For example:
diff --git a/charts/ace-installer/values.yaml b/charts/ace-installer/values.yaml
index 8965dc522..def09b562 100644
--- a/charts/ace-installer/values.yaml
+++ b/charts/ace-installer/values.yaml
@@ -90,6 +90,9 @@ helm:
enabled: true
version: "v2026.6.19"
values: # +doc-gen:break
+ global:
+ featureGates:
+ Pgpool: true
kubedb-provisioner:
enabled: true
kubedb-catalog:
diff --git a/charts/ace/README.md b/charts/ace/README.md
index f829925b1..62c157ea7 100644
--- a/charts/ace/README.md
+++ b/charts/ace/README.md
@@ -139,6 +139,14 @@ The following table lists the configurable parameters of the `ace` chart and the
| settings.db.auth.username | | postgres |
| settings.db.auth.password | | "xyz" |
| settings.db.logSQL | | false |
+| settings.pgpool.enabled | | true |
+| settings.pgpool.replicas | | 1 |
+| settings.pgpool.config.num_init_children | | "25" |
+| settings.pgpool.config.max_pool | | "15" |
+| settings.pgpool.config.client_idle_limit | | "60" |
+| settings.pgpool.resources.limits.memory | | 512Mi |
+| settings.pgpool.resources.requests.memory | | 256Mi |
+| settings.pgpool.resources.requests.cpu | | 250m |
| settings.cache.version | | "7.2.4" |
| settings.cache.cacheInterval | | 60 |
| settings.cache.persistence.size | | 10Gi |
diff --git a/charts/ace/templates/_helpers.tpl b/charts/ace/templates/_helpers.tpl
index f1560fba6..ef7444458 100644
--- a/charts/ace/templates/_helpers.tpl
+++ b/charts/ace/templates/_helpers.tpl
@@ -173,8 +173,12 @@ Returns the ServiceMonitor labels
Determine database host name
*/}}
{{- define "settings.database.host" -}}
+{{- if .Values.settings.pgpool.enabled -}}
+{{- printf "%s-pgpool.%s.svc:9999" (include "ace.fullname" .) .Release.Namespace -}}
+{{- else -}}
{{- printf "%s-db.%s.svc:5432" (include "ace.fullname" .) .Release.Namespace -}}
{{- end -}}
+{{- end -}}
{{- define "settings.oauth2JWTSecret" -}}
{{ .Values.settings.security.oauth2JWTSecret | default (randAlphaNum 43) }}
diff --git a/charts/ace/templates/db/db-config.yaml b/charts/ace/templates/db/db-config.yaml
index eb78464f7..d3967d9e4 100644
--- a/charts/ace/templates/db/db-config.yaml
+++ b/charts/ace/templates/db/db-config.yaml
@@ -12,7 +12,7 @@ metadata:
type: Opaque
stringData:
user.conf: |
- max_connections=110
+ max_connections=400
{{- if .Values.pgoutbox.enabled }}
wal_level=logical
max_wal_senders=50
diff --git a/charts/ace/templates/db/pgpool-wait.yaml b/charts/ace/templates/db/pgpool-wait.yaml
new file mode 100644
index 000000000..d8995b434
--- /dev/null
+++ b/charts/ace/templates/db/pgpool-wait.yaml
@@ -0,0 +1,115 @@
+{{- if .Values.settings.pgpool.enabled }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ include "appscode.serviceAccountName" . }}-pgpool-wait
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "ace.labels" . | nindent 4 }}
+ annotations:
+ "helm.sh/hook": post-install,post-upgrade
+ "helm.sh/hook-weight": "0"
+ "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ name: {{ include "ace.fullname" . }}-pgpool-wait
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "ace.labels" . | nindent 4 }}
+ annotations:
+ "helm.sh/hook": post-install,post-upgrade
+ "helm.sh/hook-weight": "0"
+ "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+rules:
+# wait for the Postgres database to become Ready before creating the Pgpool
+- apiGroups:
+ - kubedb.com
+ resources:
+ - postgreses
+ verbs: ["get", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: {{ include "ace.fullname" . }}-pgpool-wait
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "ace.labels" . | nindent 4 }}
+ annotations:
+ "helm.sh/hook": post-install,post-upgrade
+ "helm.sh/hook-weight": "0"
+ "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: {{ include "ace.fullname" . }}-pgpool-wait
+subjects:
+- kind: ServiceAccount
+ name: {{ include "appscode.serviceAccountName" . }}-pgpool-wait
+ namespace: {{ .Release.Namespace }}
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: {{ include "ace.fullname" . }}-pgpool-wait
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "ace.labels" . | nindent 4 }}
+ annotations:
+ "helm.sh/hook": post-install,post-upgrade
+ "helm.sh/hook-weight": "1"
+ "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+spec:
+ activeDeadlineSeconds: 21600
+ backoffLimit: 3
+ template:
+ spec:
+ {{- include "appscode.imagePullSecrets" . | nindent 6 }}
+ serviceAccountName: {{ include "appscode.serviceAccountName" . }}-pgpool-wait
+ automountServiceAccountToken: true
+ {{- if eq "true" ( include "distro.openshift" . ) }}
+ securityContext:
+ {{- toYaml (omit .Values.podSecurityContext "runAsUser" "runAsGroup" "fsGroup" "supplementalGroups") | nindent 8 }}
+ {{- else }}
+ securityContext:
+ {{- toYaml .Values.podSecurityContext | nindent 8 }}
+ {{- end }}
+ containers:
+ - name: kubectl
+ {{- if eq "true" ( include "distro.openshift" . ) }}
+ securityContext:
+ {{- toYaml (omit .Values.securityContext "runAsUser" "runAsGroup" "fsGroup" "supplementalGroups") | nindent 12 }}
+ {{- else }}
+ securityContext:
+ {{- toYaml .Values.securityContext | nindent 12 }}
+ {{- end }}
+ image: "{{ include "kubectl.registry" . }}/{{ .Values.kubectl.repository }}:{{ .Values.kubectl.tag | default .Chart.AppVersion }}"
+ imagePullPolicy: {{ .Values.kubectl.pullPolicy }}
+ command:
+ - /bin/sh
+ - -c
+ - |
+ echo "Waiting for Postgres {{ include "ace.fullname" . }}-db to become Ready..."
+ until [ "$(kubectl get pg {{ include "ace.fullname" . }}-db -n {{ .Release.Namespace }} -o jsonpath='{.status.phase}' 2>/dev/null)" = "Ready" ]; do
+ echo "Postgres {{ include "ace.fullname" . }}-db is not Ready yet. Retrying in 10s..."
+ sleep 10
+ done
+ echo "Postgres {{ include "ace.fullname" . }}-db is Ready. Proceeding to create Pgpool."
+ resources:
+ {{- toYaml .Values.resources | nindent 12 }}
+ {{- with .Values.nodeSelector }}
+ nodeSelector:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.tolerations }}
+ tolerations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ restartPolicy: Never
+{{- end }}
\ No newline at end of file
diff --git a/charts/ace/templates/db/pgpool.yaml b/charts/ace/templates/db/pgpool.yaml
new file mode 100644
index 000000000..545bfa0c1
--- /dev/null
+++ b/charts/ace/templates/db/pgpool.yaml
@@ -0,0 +1,62 @@
+{{- if .Values.settings.pgpool.enabled }}
+apiVersion: kubedb.com/v1alpha2
+kind: Pgpool
+metadata:
+ name: {{ include "ace.fullname" . }}-pgpool
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "ace.labels" . | nindent 4 }}
+ annotations:
+ # Create the Pgpool only after the referenced Postgres is Ready. The
+ # pgpool-wait hook (weight 1) blocks until the DB reports phase=Ready, so
+ # this higher-weighted hook runs afterwards.
+ "helm.sh/hook": post-install,post-upgrade
+ "helm.sh/hook-weight": "2"
+ "helm.sh/hook-delete-policy": before-hook-creation
+spec:
+ version: "4.6.0"
+ replicas: {{ .Values.settings.pgpool.replicas }}
+ postgresRef:
+ name: {{ include "ace.fullname" . }}-db
+ namespace: {{ .Release.Namespace }}
+ syncUsers: true
+ deletionPolicy: {{ .Values.settings.db.deletionPolicy }}
+ {{- if .Values.settings.pgpool.config }}
+ configuration:
+ inline:
+ pgpool.conf: |
+ {{- range $k, $v := .Values.settings.pgpool.config }}
+ {{ $k }}={{ $v }}
+ {{- end }}
+ {{- end }}
+ podTemplate:
+ spec:
+ containers:
+ - name: pgpool
+ resources:
+ {{- toYaml .Values.settings.pgpool.resources | nindent 10 }}
+ {{- if eq (include "distro.openshift" $) "true" }}
+ securityContext:
+ runAsGroup: {{ .Values.securityContext.runAsUser }}
+ runAsUser: {{ .Values.securityContext.runAsUser }}
+ capabilities:
+ drop:
+ - ALL
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ securityContext:
+ fsGroup: {{ .Values.securityContext.runAsUser }}
+ runAsUser: {{ .Values.securityContext.runAsUser }}
+ runAsGroup: {{ .Values.securityContext.runAsUser }}
+ {{- end }}
+{{- if .Values.global.monitoring }}
+ monitor:
+ agent: {{ .Values.global.monitoring.agent }}
+ prometheus:
+ serviceMonitor:
+ interval: 30s
+ labels:
+ {{- toYaml .Values.global.monitoring.serviceMonitor.labels | nindent 10 }}
+{{- end }}
+{{- end }}
diff --git a/charts/ace/values.openapiv3_schema.yaml b/charts/ace/values.openapiv3_schema.yaml
index 3c0652810..53fde534a 100644
--- a/charts/ace/values.openapiv3_schema.yaml
+++ b/charts/ace/values.openapiv3_schema.yaml
@@ -24690,6 +24690,54 @@ properties:
required:
- encryptionKey
type: object
+ pgpool:
+ properties:
+ config:
+ additionalProperties:
+ type: string
+ type: object
+ enabled:
+ type: boolean
+ replicas:
+ type: integer
+ resources:
+ properties:
+ claims:
+ items:
+ properties:
+ name:
+ type: string
+ request:
+ type: string
+ required:
+ - name
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - name
+ x-kubernetes-list-type: map
+ limits:
+ additionalProperties:
+ anyOf:
+ - type: integer
+ - type: string
+ pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+ x-kubernetes-int-or-string: true
+ type: object
+ requests:
+ additionalProperties:
+ anyOf:
+ - type: integer
+ - type: string
+ pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+ x-kubernetes-int-or-string: true
+ type: object
+ type: object
+ required:
+ - enabled
+ - replicas
+ - resources
+ type: object
platform:
properties:
appName:
diff --git a/charts/ace/values.yaml b/charts/ace/values.yaml
index 5b8f0c42b..b19e62b3e 100644
--- a/charts/ace/values.yaml
+++ b/charts/ace/values.yaml
@@ -292,6 +292,19 @@ settings:
username: postgres
password: "xyz"
logSQL: false
+ pgpool:
+ enabled: true
+ replicas: 1
+ config:
+ num_init_children: "25"
+ max_pool: "15"
+ client_idle_limit: "60"
+ resources:
+ limits:
+ memory: 512Mi
+ requests:
+ memory: 256Mi
+ cpu: 250m
cache:
version: "7.2.4"
cacheInterval: 60