Skip to content

Update rollout operator usage #673

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kd7lxl merged 4 commits into from
Oct 7, 2026
Merged

Update rollout operator usage #673

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
be2660e
Update rollout-operator usage
timonegk Sep 25, 2026
5f72059
Update changelog
timonegk Sep 25, 2026
c0ecef0
Update Chart.lock
timonegk Sep 28, 2026
eaa3ef0
Update README
timonegk Sep 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,7 @@
## master / unreleased

* [FEATURE] Add trafficDistribution attribute to services #674
* [ENHANCEMENT] Update helm values and documentation for rollout operator #673

## 3.4.0 / 2026-09-21

Expand Down
4 changes: 2 additions & 2 deletions Chart.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,5 +17,5 @@ dependencies:
- name: rollout-operator
repository: https://grafana.github.io/helm-charts
version: 0.51.1
digest: sha256:013d61b48a00c78a79287910088abb6b19d4319d8068e369e2a38dd8cc76f9e4
generated: "2026-09-18T13:17:51.095820924+02:00"
digest: sha256:793039fc6b475263e63f10837328020655816d0b802e7e525098ab9e337d3caa
generated: "2026-09-28T09:38:44.702766819+02:00"
1 change: 1 addition & 0 deletions Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,7 @@ dependencies:
repository: https://charts.bitnami.com/bitnami
condition: memcached-parquet-labels.enabled
- name: rollout-operator
alias: rollout_operator
version: 0.51.1
repository: https://grafana.github.io/helm-charts
condition: rollout_operator.enabled
13 changes: 11 additions & 2 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -91,7 +91,7 @@ Kubernetes: `^1.19.0-0`
| https://charts.bitnami.com/bitnami | memcached-blocks(memcached) | 6.14.0 |
| https://charts.bitnami.com/bitnami | memcached-blocks-metadata(memcached) | 6.14.0 |
| https://charts.bitnami.com/bitnami | memcached-parquet-labels(memcached) | 6.14.0 |
| https://grafana.github.io/helm-charts | rollout-operator | 0.51.1 |
| https://grafana.github.io/helm-charts | rollout_operator(rollout-operator) | 0.51.1 |

## Values

Expand Down Expand Up @@ -811,8 +811,17 @@ Kubernetes: `^1.19.0-0`
| query_scheduler.​terminationGracePeriodSeconds | int | `180` | |
| query_scheduler.​tolerations | list | `[]` | |
| query_scheduler.​topologySpreadConstraints | list | `[]` | |
| rollout_operator.​crds.​enabled | bool | `false` | |
| rollout_operator.​enabled | bool | `false` | |
| rollout_operator.​podSecurityContext.​fsGroup | int | `10001` | |
| rollout_operator.​podSecurityContext.​runAsGroup | int | `10001` | |
| rollout_operator.​podSecurityContext.​runAsNonRoot | bool | `true` | |
| rollout_operator.​podSecurityContext.​runAsUser | int | `10001` | |
| rollout_operator.​podSecurityContext.​seccompProfile.​type | string | `"RuntimeDefault"` | |
| rollout_operator.​securityContext.​allowPrivilegeEscalation | bool | `false` | |
| rollout_operator.​securityContext.​capabilities.​drop[0] | string | `"ALL"` | |
| rollout_operator.​securityContext.​readOnlyRootFilesystem | bool | `true` | |
| rollout_operator.​securityContext.​runAsNonRoot | bool | `true` | |
| rollout_operator.​securityContext.​seccompProfile.​type | string | `"RuntimeDefault"` | |
| rollout_operator.​webhooks.​enabled | bool | `false` | |
| ruler.​affinity | object | `{}` | |
| ruler.​annotations | object | `{}` | |
Expand Down
2 changes: 2 additions & 0 deletions docs/guides/migrate_to_zone_aware_replication.markdown
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,8 @@ Make sure to set the following settings before starting the migration:
It is sufficient to set these settings on the querier using `querier.extraArgs`. Set `distributor.sharding-strategy` to `default` and `distributor.shard-by-all-labels` to `"true"` there.
Warning: This may increase resource usage of the queriers.

To get the rollout-operator running, you will have to install its CRDs. Due to Helm's CRD handling, you have to apply [these manifests](https://github.com/grafana/helm-charts/tree/main/charts/rollout-operator/charts/crds/crds) manually

@kd7lxl kd7lxl Oct 7, 2026

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would prefer to see instructions for deploying rollout-operator independently. This way helm can install the CRDs. An operator in a subchart is messy because of this CRDs issue, and also because you generally only want one, while you may have several cortex instances in a cluster. Without instructions for a standalone rollout-operator installation, users are left to choose which instance of cortex they want to own rollout-operator.


1. Set `ingester.zoneAwareReplication.enabled=true`, `ingester.zoneAwareReplication.migration.enabled=true`, `ingester.zoneAwareReplication.zones` to the desired zones but with `replicas=0`. Set `rollout_operator.enabled=true`. Upgrade the chart.
```yaml
ingester:
Expand Down
17 changes: 15 additions & 2 deletions values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1853,5 +1853,18 @@ rollout_operator:
enabled: false
webhooks:
enabled: false
crds:
enabled: false
podSecurityContext:
fsGroup: 10001
runAsGroup: 10001
runAsNonRoot: true
runAsUser: 10001
seccompProfile:
type: RuntimeDefault
securityContext:
readOnlyRootFilesystem: true
capabilities:
drop: [ALL]
allowPrivilegeEscalation: false
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
Loading