JFrog Helm Charts

This repository hosts the official JFrog Helm Charts for deploying JFrog products to Kubernetes

For older version please refer to https://github.com/jfrog/charts/tree/pre-unified-platform

Tip

Container Image Migration Notice

Migration complete. Container images used by JFrog Helm charts — including the widely adopted JFrog Platform chart and its product dependencies — have moved from our previous image provider to Echo Distroless for faster security updates and a stronger CVE management posture.

Effective from JFrog Platform chart version 11.6.0 and above only — including the service chart versions bundled in that Platform release and later.

You do not need to do anything. Chart upgrades apply the new images automatically. Chart structure and functionality are unchanged — only image bases / repositories (and their tags) have been updated.

Image changes (tags omitted)

Organised by chart under stable/. Service image repository names stay jfrog/...; bases rebuilt on Echo Distroless.

JFrog Service Images

Chart	Services
jfrog-platform	Umbrella chart that deploys the product charts below
artifactory, artifactory-ha, artifactory-oss, artifactory-jcr, artifactory-cpp-ce	Artifactory Pro, Artifactory OSS, Artifactory JCR, Artifactory C++ CE, Frontend, Router, Observability, AppTrust, JFBus, JFMelt, Unified Policy, Evaluation, Platform Federation, Artifactory Federation (RTFS)
xray	Server, Analysis, Indexer, Persist, Policy Enforcer, SBOM, Curation, Reporting, JAS Contextual, JAS Exposures, AI Scanner, Router, Observability
distribution	Distribution, Router, Observability
catalog	Catalog, Router
worker	Worker, Router, Observability

JFrog Dependent Images — Echo targets where migration has landed:

Chart	Role	Echo
artifactory, artifactory-ha, xray, catalog, worker	Init containers	jfrog/echo-mini
artifactory, artifactory-ha, xray, distribution, jfrog-platform	PostgreSQL	echohq/postgres
xray, jfrog-platform	kubectl (migration / upgrade hooks)	echohq/kubectl
xray	Valkey	echohq/valkey, echohq/valkey-sentinel

Other images

• Any images not yet migrated will move to Echo Distroless in upcoming patch releases as each chart rolls forward. No operator action is required.

Questions? Use the issues section.

Install Helm (only V3 is supported)

Get the latest Helm release.

Install Charts

Add JFrog Helm repository

Before installing JFrog helm charts, you need to add the JFrog helm repository to your helm client.

helm repo add jfrog https://charts.jfrog.io
helm repo update

Note: For instructions on how to install a chart follow instructions in its README.md.

Contributing to JFrog Charts

Fork the repo, make changes and then please run make lint to lint charts locally, and at least install the chart to see it is working. :)

On success make a pull request (PR) on to the master branch.

We will take this PR changes internally, review and test.

Upon successful review , someone will give the PR a LGTM (looks good to me) in the review thread.

We will add PR changes in upcoming releases and credit the contributor with PR link in changelog (and also closing the PR raised by contributor).

Linting charts locally

Note: Docker must be running on your Mac/Linux machine. The command will only lint changed charts.

To lint all charts:

make lint

Forcing to lint unchanged charts

Note: Chart version bump check will be ignored.

You can force to lint one chart with --charts flag:

make lint -- --charts stable/artifactory

You can force to lint a list of charts (separated by comma) with --charts flag:

make lint -- --charts stable/artifactory,stable/xray

You can force to lint all charts with --all flag:

make lint -- --all

Manually testing charts with Docker for Mac Kubernetes Cluster

Note: Make sure 'Show system containers (advanced)' is enabled in Preferences/Kubernetes.

On the Mac you can install and test all changed charts in Docker for Mac:

make mac

Forcing to install unchanged charts

You can force to install one chart with --charts flag:

make mac -- --charts stable/artifactory

You can force to install a list of charts (separated by comma) with --charts flag:

make mac -- --charts stable/artifactory,stable/xray

You can force to install all charts with --all flag:

make mac -- --all

Note: It might take a while to run install test for all charts in Docker for Mac.

Manually testing charts with remote GKE cluster

You can install and test changed charts with GKE cluster set in kubeconfig context:

make gke

Forcing to install unchanged charts

You can force to install one chart with --charts flag:

make gke -- --charts stable/artifactory

You can force to install a list of charts (separated by comma) with --charts flag:

make gke -- --charts stable/artifactory,stable/xray

You can force to install all charts with --all flag:

make gke -- --all

Using dedicated GKE cluster for manual charts testing

By default it uses the GKE cluster set in kubeconfig context, you can specify the dedicated cluster (it must be set in the kubeconfig) in the file CLUSTER:

GKE_CLUSTER=gke_my_cluster_context_name

Then store the CLUSTER file in the root folder of the repo. It is also ignored by git.

In such setup your local default cluster can be different from the charts testing one.

Examples

For more detailed examples of each chart values, please refer examples.

Docs

For more information on using Helm, refer to the Helm's documentation.

To get a quick introduction to Charts see this Chart's documentation.