Background
The splunk-operator Helm chart currently supports deploying Splunk Enterprise components
(Standalone, IndexerCluster, etc.) but has no built-in template for a Universal Forwarder (UF).
Teams that need to deploy a UF alongside their Splunk stack must manage it manually or with
separate tooling.
Problem
There is no universalforwarder Helm template in helm-chart/splunk-enterprise/templates/,
making it harder to manage UF deployments consistently alongside operator-managed resources.
Spike Goal
Explore and validate the design of a Helm template for deploying a Universal Forwarder,
specifically answering:
Spike Output / Definition of Done
- A working prototype template that renders and deploys successfully
- A list of open questions or follow-up tasks for productionizing the template
- Decision on whether to proceed with full implementation
Background
The splunk-operator Helm chart currently supports deploying Splunk Enterprise components
(Standalone, IndexerCluster, etc.) but has no built-in template for a Universal Forwarder (UF).
Teams that need to deploy a UF alongside their Splunk stack must manage it manually or with
separate tooling.
Problem
There is no
universalforwarderHelm template inhelm-chart/splunk-enterprise/templates/,making it harder to manage UF deployments consistently alongside operator-managed resources.
Spike Goal
Explore and validate the design of a Helm template for deploying a Universal Forwarder,
specifically answering:
Spike Output / Definition of Done