Generic

A multi-purpose Helm chart for Kubernetes workloads that need a reusable platform contract instead of application-specific templates. It supports Deployments, StatefulSets, DaemonSets, Jobs, CronJobs, multiple containers, Services, Ingress, storage, security resources, observability hooks, autoscaling, Gateway API, and arbitrary extra manifests rendered through Helm tpl.

Key Features

• Workloads — Deployment, StatefulSet, DaemonSet, Job, and CronJob.
• Images — pinned default image, digest support, per-container overrides, and global.imageRegistry.
• Networking — primary Service, additional Services, headless Service mode, Ingress custom backends, and HTTPRoute.
• Security — ServiceAccount token control, Secrets, ExternalSecret, SealedSecret, RBAC, and NetworkPolicy.
• Security presets — opt-in baseline and restricted pod/container contexts when explicit contexts are absent.
• Storage — legacy persistence.storage[], declarative PVCs, explicit opt-in PVs, and StatefulSet claim templates.
• Observability — ServiceMonitor, PodMonitor, PrometheusRule, HPA, VPA, and KEDA.
• Rollout control — explicit rollout.restartAt and optional ConfigMap/Secret checksums.
• Extensibility — extraManifests[] supports Helm templating with tpl.

Installation

helm repo add helmforge https://repo.helmforge.dev
helm repo update
helm install my-app helmforge/generic -f values.yaml

helm install my-app oci://ghcr.io/helmforgedev/helm/generic -f values.yaml

Examples

workload:
  enabled: true
  type: Deployment

image:
  repository: docker.io/library/nginx
  tag: '1.27.5'
  pullPolicy: IfNotPresent

containers:
  - name: app
    ports:
      - name: http
        containerPort: 80

service:
  enabled: true
  port: 80
  targetPort: 80

ingress:
  enabled: true
  hosts:
    - host: app.example.com
      paths:
        - path: /
          pathType: Prefix

workload:
  enabled: true
  type: StatefulSet
  podManagementPolicy: Parallel
  persistentVolumeClaimRetentionPolicy:
    whenDeleted: Retain
    whenScaled: Retain
  volumeClaimTemplates:
    - metadata:
        name: data
      spec:
        accessModes: ['ReadWriteOnce']
        resources:
          requests:
            storage: 10Gi

service:
  headless:
    enabled: true

serviceAccount:
  create: true
  automountServiceAccountToken: false

secrets:
  - name: app
    stringData:
      password: change-me

rbac:
  create: true
  rules:
    - apiGroups: ['']
      resources: ['configmaps']
      verbs: ['get', 'list']

networkPolicy:
  enabled: true
  defaultDeny: true
  ingress:
    - from:
        - podSelector: {}
      ports:
        - protocol: TCP
          port: 80

workload:
  enabled: false

service:
  enabled: false

jobs:
  - name: db-migrate
    image:
      repository: docker.io/my-org/my-app
      tag: '1.0.0'
    command: ['./bin/migrate']
    backoffLimit: 2
    hooks:
      enabled: true
      events: ['pre-install', 'pre-upgrade']
      deletePolicy: before-hook-creation,hook-succeeded

cronjobs:
  - name: cleanup
    schedule: '0 2 * * *'
    timeZone: America/Sao_Paulo
    image:
      repository: docker.io/my-org/my-app
      tag: '1.0.0'
    command: ['./bin/cleanup']
    concurrencyPolicy: Forbid

rollout:
  restartAt: ''
  checksum:
    enabled: true
    configMaps: true
    secrets: true

podMonitor:
  enabled: true
  podMetricsEndpoints:
    - port: http
      path: /metrics

prometheusRule:
  enabled: true
  groups:
    - name: generic.rules
      rules:
        - alert: GenericDown
          expr: up == 0

gatewayApi:
  enabled: true
  httpRoutes:
    - name: web
      parentRefs:
        - name: public
      hostnames:
        - app.example.com
      rules:
        - matches:
            - path:
                type: PathPrefix
                value: /

Configuration Reference

This section covers the Generic chart values surface used by operators. For nested Kubernetes-native shapes, such as container probes, affinity, tolerations, Ingress backends, HTTPRoute matches, and KEDA triggers, use the upstream Kubernetes or operator API fields inside the corresponding value.

Core and Image

Networking

Security and Storage

Scheduling and Rollout

Observability and Autoscaling

Deployment and StatefulSet HPA resources use the Kubernetes autoscaling/v2 API. StatefulSet scaling should be enabled only after validating the workload’s identity, storage, and clustering behavior. KEDA ScaledObjects target the chart-managed Deployment or StatefulSet; use ScaledJobs for event-driven batch releases without a long-running workload. KEDA, VPA, PodMonitor, and PrometheusRule remain disabled by default and require their CRDs before installation.

Batch

Upgrade Notes

• Replace any inherited latest assumptions with an explicit tag or digest.
• Set service.enabled: false for batch-only releases that should not render a Service.
• Set hpa.maxReplicas whenever hpa.enabled: true.
• Configure exactly one of pdb.minAvailable or pdb.maxUnavailable when enabling PDB.
• Use rollout.restartAt or checksum settings instead of relying on render-time timestamps.

More Information

• Blog guide: Migrating to the Generic Chart Breaking Platform Contract
• Blog guide: Kubernetes 1.34 and Short Image Names
• HelmForge Generic Chart Source
• Kubernetes Documentation