Official Helm chart for deploying LogTide on Kubernetes.
LogTide is an open-source log management and SIEM platform featuring:
- High-performance log ingestion (10,000+ logs/sec)
- Real-time log streaming via SSE
- Advanced search and filtering
- Sigma-based security detection
- SIEM dashboard with incident management
- MITRE ATT&CK mapping
- Kubernetes 1.25+
- Helm 3.10+
- PV provisioner support (for persistence)
helm repo add logtide https://logtide-dev.github.io/logtide-helm-chart
helm repo update# Create namespace
kubectl create namespace logtide
# Install with default values
helm install logtide logtide/logtide \
--namespace logtide \
--set timescaledb.auth.password=<your-db-password> \
--set timescaledb.auth.postgresPassword=<your-postgres-password> \
--set redis.auth.password=<your-redis-password>git clone https://github.com/logtide-dev/logtide-helm-chart.git
cd logtide-helm-chart
helm install logtide ./charts/logtide \
--namespace logtide \
--create-namespace \
--set timescaledb.auth.password=<your-db-password> \
--set timescaledb.auth.postgresPassword=<your-postgres-password> \
--set redis.auth.password=<your-redis-password>See values.yaml for the full list of configurable parameters.
| Parameter | Description | Default |
|---|---|---|
config.apiKeySecret |
API key encryption secret (32+ chars) | Auto-generated |
config.jwtSecret |
JWT authentication secret | Auto-generated |
config.sessionSecret |
Session encryption secret | Auto-generated |
backend.replicaCount |
Number of backend replicas | 2 |
backend.autoscaling.enabled |
Enable HPA for backend | true |
frontend.replicaCount |
Number of frontend replicas | 2 |
worker.replicaCount |
Number of worker replicas | 2 |
timescaledb.enabled |
Deploy embedded TimescaleDB | true |
timescaledb.persistence.size |
Database storage size | 50Gi |
redis.enabled |
Deploy embedded Redis | true |
ingress.enabled |
Enable Ingress | false |
timescaledb:
enabled: false
externalDatabase:
host: my-timescaledb.example.com
port: 5432
database: logtide
username: logtide
password: secret
# Or use existing secret:
# existingSecret: my-db-secret
# existingSecretPasswordKey: passwordredis:
enabled: false
externalRedis:
host: my-redis.example.com
port: 6379
password: secretingress:
enabled: true
className: nginx
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
hosts:
- host: logtide.example.com
paths:
- path: /
pathType: Prefix
service: frontend
- path: /api
pathType: Prefix
service: backend
- path: /v1
pathType: Prefix
service: backend
tls:
- secretName: logtide-tls
hosts:
- logtide.example.commetrics:
enabled: true
serviceMonitor:
enabled: true
interval: 30sglobal:
storageClass: gp3
ingress:
enabled: true
className: alb
annotations:
alb.ingress.kubernetes.io/scheme: internet-facing
alb.ingress.kubernetes.io/target-type: ip
alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:...
timescaledb:
persistence:
storageClass: gp3
redis:
persistence:
storageClass: gp3global:
storageClass: standard-rwo
ingress:
enabled: true
className: gce
annotations:
kubernetes.io/ingress.global-static-ip-name: logtide-ip
timescaledb:
persistence:
storageClass: standard-rwoglobal:
storageClass: managed-premium
ingress:
enabled: true
className: azure-application-gateway
annotations:
appgw.ingress.kubernetes.io/ssl-redirect: "true"
timescaledb:
persistence:
storageClass: managed-premiumhelm repo update
helm upgrade logtide logtide/logtide --namespace logtideNo breaking changes. Standard upgrade process applies.
helm uninstall logtide --namespace logtide
# If you want to delete PVCs as well:
kubectl delete pvc -l app.kubernetes.io/instance=logtide -n logtideCheck pod events:
kubectl describe pod -l app.kubernetes.io/instance=logtide -n logtideCheck logs:
kubectl logs -l app.kubernetes.io/instance=logtide -n logtide --all-containersVerify database secret:
kubectl get secret logtide-timescaledb -n logtide -o jsonpath="{.data.password}" | base64 -dTest connection:
kubectl run pg-test --rm -it --image=postgres:15 --restart=Never -- \
psql -h logtide-timescaledb -U logtide -d logtideCheck Ingress status:
kubectl describe ingress logtide -n logtideVerify services:
kubectl get svc -n logtide- Fork the repository
- Create a feature branch
- Make your changes
- Run
helm lint charts/logtide - Submit a pull request
MIT License - see LICENSE for details.
