The IBM Community charts repository is both a Helm repository and a repository for Helm chart source code, intended to host community-developed Helm charts meant for use with IBM Cloud Private. It is hosted in GitHub at the following location:
- Chart source: https://github.com/IBM/charts/tree/master/community/
- Helm repository: https://github.com/IBM/charts/tree/master/repo/community
IBM Cloud Private's catalog view displays a set of Helm charts that are available to be deployed by polling a list of Helm repositories. By default, these repositories include the Helm repository that is hosted locally inside the IBM Cloud Private cluster itself, and IBM's chart repository for IBM-developed charts, at https://raw.githubusercontent.com/IBM/charts/master/repo/stable/.
As of IBM Cloud Private 3.1.1, the IBM Community charts repository is also displayed in the catalog by default. If you are using and older version of ICP, users can manually add the repository to their catalog view by navigating to Manage > Helm Repositories in the IBM Cloud Private user interface, and adding https://raw.githubusercontent.com/IBM/charts/master/repo/community/ to the list.
This document is intended to help you develop Helm charts for IBM Cloud Private and contribute them to the IBM Community charts repository.
IBM Cloud Private provides a Kubernetes-based environment for deploying and managing container-based workloads on your own infrastructure. IBM Cloud Private workloads are deployed using Helm, and all IBM Cloud Private clusters include Tiller. Most Helm charts that can be deployed to other Kubernetes-based environments can be deployed to an IBM Cloud Private cluster unmodified.
The guidance in this document is meant to help you build charts that meet the standards for contributions to the IBM Community charts repository, and to build charts that integrate with the IBM Cloud Private platform to provide additional value to your users when deploying on IBM Cloud Private. Keep in mind that charts developed according to these guidelines will remain compatible with other standard Kubernetes environments, but will provide an enhanced user experience on IBM Cloud Private, similar to the experience you see when deploying charts developed and provided by IBM.
IBM provides trial and Community Edition-based offerings for IBM Cloud Private in case you do not have access to the paid version. Links to information regarding these offerings is available from the "Getting Started" section in the README.md.
Rules for contributing to the IBM Community charts repository are covered in CONTRIBUTING.md, which is hosted in the GitHub repository itself.
All contributions must include both chart source and a packaged Helm chart. Chart source must be added to the charts/community directory, and packaged chart .tgz files must be added to the Helm repository directory, charts/repo/community
Additionally, the contribution guidelines specify that all contributed Helm charts must be licensed under the Apache 2.0 License, and that all contributions must include a developer sign-off that certifies your right to contribute the code to this community, according to the Developer Certificate of Origin.
The tables below should be used as a readiness guide for anyone preparing to deliver a Helm chart to the https://github.com/ibm/charts/community directory. Table 1 contains a short list of required standards for all charts contributed to the IBM Community charts repository. Table 2 contains a guidance on how to build charts that further integrate with the platform, and provide a high-quality, consistent user experience on IBM Cloud Private. The guidelines in Table 2 are recommended, but not required. Each item in the chart provides a link to more details on implementation, farther down this page.
These guidelines are intended to augment the Helm best practices and not intended to replace those. If there is no guidance listed below, then it is best to refer to the Helm community best practices.
Table 1: Required for all charts contributed to https://github.com/ibm/charts
| Requirement | Description |
|---|---|
| Directory structure | Chart source must be added to the charts/community directory. Chart archives, packaged as a .tgz file using helm package must be added to the charts/repo/community directory, which is a Helm repository. Do not update index.yaml with your contribution. index.yaml is automatically updated by a build process. |
| Chart name | Helm chart names must follow the Helm chart best practices. The chart name must be the same as the directory that contains the chart. Chart contributed by a company or organization may be prefixed with the company or organization name. Only charts contributed by IBM may be prefixed with ibm- |
| Chart file structure | Charts must follow the standard Helm file structure: Chart.yaml, values.yaml, README.md, templates, and templates/NOTES.txt must all exist and have useful contents |
| Chart version | SemVer2 numbering must be used, as per Helm chart best practices, and any update to a chart must include an updated version number, unless the changes are to the README file only. |
| Chart description | All contributed charts must have a chart description in chart.yaml. This will be displayed in the ICP catalog and should be meaningful. |
| Required chart keywords | Chart keywords are used by the IBM Cloud Private user interface, some of which are critical to the user interface's function. |
| Helm lint | The chart must pass the helm lint verification tool with no errors. |
| License | The chart itself be Apache 2.0 licensed, and must contain the Apache 2.0 license in the LICENSE file at the root of the chart. The chart may also package additional license files, such as the license for the product being deployed, in the LICENSES directory. Both the LICENSE file and files in the LICENSES directory will be displayed to the user for agreement when deploying through the IBM Cloud Private user interface. |
| README.md | In the IBM Cloud Private GUI, when a user clicks on a tile corresponding to a chart in the catalog, the README.md for that chart is used to generate the chart's front page. Given the important role that the README.md plays in ICP's user experience, all contributed charts must contain a README.md file, and it must provide all of the information needed for users to understand how to configure, deploy, and otherwise use a chart. Mandatory information includes complete descriptions of all input parameters as well as sections for image and pod security. |
| Support statement | The README.md must include a section labeled Support. This section should provide details and/or links to where users can get support for urgent issues, get help, or submit issues. |
| NOTES.txt | Include NOTES.txt with instructions to display usage notes, next steps, & relevant information. |
| tillerVersion constraint | Add a tillerVersion to Chart.yaml that follows the Semantic Versioning 2.0.0 format (>=MAJOR.MINOR.PATCH); ensure that there is no additional metadata attached to this version number. Set this constraint to the lowest version of Helm that this chart has been verified to work on. |
| Deployment validation | Charts must be validated to deploy successfully and work as expected on the latest version of IBM Cloud Private using both the Helm CLI and the IBM Cloud Private GUI. Available trial and Community Edition install options are listed in the "Getting Started" section in the README.md. |
The following table contains guidance from IBM on how to build workloads that provide a full-featured and consistent user experience on IBM Cloud Private. Unlike the standards above, charts in the IBM Community charts repository are not required to implement these items. Chart developers should consider the items below best practices, and use them as appropriate to provide deeper integration with IBM Cloud Private and enhance the user experience. Some recommendations may not be applicable to all workload types.
| Guideline | Description |
|---|---|
| Shared Configurable Helpers (SCH) | Make use of these helper templates to more easily incorporate IBM's required and recommended chart development practices. |
| Chart icon | Providing a URL to an icon is preferred to embedding a local icon in the chart, to avoid chart size limits when using nested charts. |
| Recommended Chart keywords | In addition to the required keywords described in the previous section, optional keywords can be used to filter your chart into a set of categories recognized by the UI. |
| Chart version / image version | Workloads should maintain image versions/tags separately from chart versions. |
| Images | Image URL should be parameterized, version of image(s) to be deployed should be exposed w/ the latest version as default, reference publicly available images by default when possible. |
| Multi-platform support | IBM Cloud Private supports x86-64, Power, and z hardware architectures. Workloads can reach the largest possible audience by providing images for all three platforms and using a fat manifest. |
| Init container definitions | If using init containers, use spec syntax vs annotations to describe them. These annotations are deprecated in Kubernetes 1.6 and 1.7, and are no longer supported in Kubernetes 1.8. |
| Node affinity | IBM suggests using nodeAffinity to ensure workloads are scheduled on a valid platform in a heterogeneous cluster |
| Storage (persistent volumes / claims) | Do not create persistent volumes in a chart, as allocation is environment-specific and may require permissions the chart deployer doesn't have. A chart should contain a Persistent Volume Claim if persistent storage is required. |
| Parameter grouping and naming | Use common naming conventions (outlined in the onboarding guide) to provide consistent parameters and user experience across charts. |
| Values metadata | Define metadata for fields containing passwords, allowed values, etc. to provide a rich deployment experience in the ICP UI. Metadata format is described in the onboarding guide. |
| Labels and annotations | IBM recommends that all charts to use the standard labels of "heritage, release, chart and app" on all Kubernetes resources. |
| Liveness and Readiness probes | Workloads should enable monitoring of their own health using livenessProbes and readinessProbes. |
| Kind | All Helm templates that define resources must have a Kind. Helm defaults to a pod however we avoid this practice. Helm best practice is to not define multiple resources in a single template file. |
| Container security privileges | Workloads should avoid using escalated security privileges for containers whenever possible. When escalated privileges are required, charts must request the minimum level of privileges needed to achieve the desired functionality. |
| Kubernetes security privileges | Charts should be deployable by a regular user, who does not have an administrative role, such as cluster admin. If an elevated role is required, this must be clearly documented in the chart's README.md |
| Avoid hostPath | Avoid using hostPath storage, as it is not a robust storage solution. |
| Avoid hostNetwork | avoid using hostNetwork as it prevents containers from co-habitating. |
| Document Resource Usage | Charts should be clear about the resources they will consume, documented in the chart's README.md |
| Metering | Charts should include metering annotations so that users can meter usage with the IBM Cloud Private metering service. |
| Logging | Workload containers should write logs to stdout and stderr, so they can be automatically consumed by the IBM Cloud Private logging service (Elasticsearch/Logstash/Kibana.) Workloads are also encouraged to include provide links to relevant Kibana dashboards in README.md, so that users can download them and import them to Kibana. |
| Monitoring | Workloads should integrate with the default IBM Cloud Private monitoring service (Prometheus/Grafana), by exposing Prometheus metrics through a Kubernetes Service and annotating that endpoint so that it will be automatically consumed by the IBM Cloud Private monitoring service. |
| License keys and pricing | If your chart requires a license key to deploy or to otherwise use the workload, this should be stated in the Prerequisites section of the chart's README.md. |
This section contains a list of standards that must be followed by all charts contributed to the IBM Community charts, as outlined in GUIDELINES.md. Charts are expected to adhere to the published Helm best practices from the Helm community, which are not recreated here.
Chart source should be added to the charts/community directory. Chart archives, packaged as a .tgz file using helm package should be added to the charts/repo/community directory, which is a Helm repository.
Do not update charts/repo/community/index.yaml with your contribution. index.yaml is automatically updated by a build process when pull requests are processed.
Helm chart names should follow the Helm chart best practices. The chart name must be the same as the directory that contains the chart source. Charts contributed by a company or organization may be prefixed with the company or organization name. Contributions from the community must not be prefixed with "ibm-".
Charts should follow the standard Helm file structure: Chart.yaml, values.yaml, README.md, templates, and templates/NOTES.txt should all exist and have useful contents.
Chart keywords are used by the IBM Cloud Private user interface for categorization and filtering of charts, and some of these keywords are critical to grant a chart the proper visibility in the catalog. The Chart.yaml must include at least one of these cloud platform keywords and at least one of these architecture keywords to be accepted into this repository:
Cloud Platform Keywords:
ICP- indicates that the chart is supported for use on IBM Cloud PrivateIKS- indicates that the chart is supported for use on IBM Cloud Kubernetes Service
Architecture Keywords:
s390xppc64leamd64
As a supplement to the required keywords, the list of optional keywords offered in the section on recommended chart keywords can be leveraged to provide the chart with additional categorization and catalog visibility.
SemVer2 numbering should be used, as per Helm chart best practices.
All charts must have a chart description in chart.yaml. This will be displayed in the ICP catalog UI and should be meaningful to end users.
All charts must pass the helm lint verification tool with no errors.
The chart itself be Apache 2.0 licensed, and must contain the Apache 2.0 license in the LICENSE file at the root of the chart. The chart may also package additional license files, such as the license for the product being deployed, in the LICENSES directory. Both the LICENSE file and files in the LICENSES directory will be displayed to the user for agreement when deploying through the IBM Cloud Private user interface. Product licenses provided in the chart must align with the licenses in the Docker images.
All contributed charts must contain a useful README.md file with useful information a user would need to deploy the chart. In the IBM Cloud Private GUI, the README.md file is the "front page" that a user will see after clicking on the chart in the catalog. A complete description and explanations of all input parameters are strongly suggested.
The README must also indicate which images need to be added to IBM Cloud Private's list of trusted image registries, since container image security is enabled by default beginning with IBM Cloud Private 3.1.
The README must also include a statement on the pod security policy required to deploy the chart. As of ICP 3.1.1, pod security is enabled by default. Charts can reference one of the pre-defined pod security policies from ICP or describe a custom pod security policy, if needed. The intent is for users to understand the required security requirements for the chart.
The README.md must include a section labeled Support. This section should provide details and/or links to where users can get support for urgent issues with the product, get help, or submit issues.
All charts must include NOTES.txt with instructions to display usage notes, next steps, & relevant information. NOTES.txt is displayed by the IBM Cloud Private user interface after deployment.
Add a tillerVersion to Chart.yaml that follows the Semantic Versioning 2.0.0 format (>>=MAJOR.MINOR.PATCH); ensure that there is no additional metadata attached to this version number. Set this constraint to the lowest version of Helm that this chart has been verified to work on.
Before creating a pull request to add a chart to the IBM Community charts repository, chart owners must verify that the chart deploys as expected on the latest version of IBM Cloud Private, using both the IBM Cloud Private user interface and the Helm command line. Keep in mind ICP environments are typically air-gapped, without access to the public internet. Any configurations supported by the command line install of the helm chart must also be supported via the UI installation. In addition, if there are any versions of IBM Cloud Private known to not work with the chart, those details should be clearly specified in the README.md under a section such as Limitations. For example: This chart is only supported on IBM Cloud Private version 3.1.0 and above.
For a list of the available trial and Community Edition-based offerings, refer to the "Getting Started" section in the README.md.
This section contains a list of suggestions that will provide your end users with added value on IBM Cloud Private, by taking advantage of the features and services provided by the platform. They are not required for contributions to the IBM Community charts repository, but implementing them is strongly recommended, as they will provide an enhanced experience similar to that provided in charts developed by IBM.
IBM now officially provides the Helm template helpers used for its content standardization practices for inclusion in your charts. More information on how teams can take advantage of these helpers can be found on SCH's README in the IBM/charts repo.
Helm charts should specify a link to an icon using the icon attribute in Chart.yaml. A default icon will be shown in the catalog UI for any chart that does not include an icon reference.
Including a link to an icon on the public internet is preferred, rather than including an icon file directly in your chart, to keep chart files small. Helm charts have a maximum size of 1MB, and while your individual chart may not approach that limit, users may build a chart that includes your chart as a subchart, so external links are the preferred approach.
If the icon is an .svg hosted on GitHub file, append ?sanitize=true to the end of the URL for proper rendering in the ICP UI. For example:
icon: https://raw.githubusercontent.com/ot4i/ace-helm/master/appconnect_enterprise_logo.svg?sanitize=true
In addition to the previously mentioned required keywords, the following category and classification keywords should be included in the Chart.yaml's keywords where applicable to grant the chart additional visibility in the IBM Cloud Private catalog UI.
| Category Label: | keywords |
|---|---|
| AI & Watson: | Watson, AI |
| Blockchain: | blockchain |
| Business Automation: | businessrules, Automation |
| Data: | database |
| Data Science & Analytics: | Data Science, Analytics |
| DevOps: | DevOps, deploy, Development, IDE, Pipeline, ci, build |
| IoT: | IoT |
| Operations: | Operations |
| Integration: | Integration, message queue |
| Network: | Network |
| Runtimes & Frameworks: | runtime, framework |
| Storage: | Storage |
| Security: | Security |
| Tools: | Tools |
| Classification Label: | keywords |
|---|---|
| Beta | Beta |
| Commercial Use | Commercial |
| Limited Use | Limited |
| Open Source | OpenSource |
| Tech Preview | Tech |
Workloads should maintain image versions/tags separately from chart versions.
Image URL should be a parameterized reference to values.yaml, and the version of the image(s) to be deployed should be exposed w/ the latest version as default, reference publicly available images by default.
IBM Cloud Private supports x86-64, ppc64le, and z (s390) hardware architectures. Workloads can reach the largest possible audience by providing images for all three platforms and using a fat manifest.
For more information on developing images for the ppc64le platform refer to the IBM Cloud Private on Power and Docker on IBM Power Systems sites on developer.ibm.com
For more information on developing images for the z platform refer to the IBM Knowledge Center for Linux on IBM Systems
An individual container image contains binaries that have been compiled for a specific architecture. Using the concept known as a ‘fat manifest’, you can build a manifest list that makes it possible to serve multiple architectures from a single image reference. When the Docker daemon accesses such an image, it will automatically redirect to the image which matches the currently running platform architecture.
To use this capability, a Docker image must be pushed to the registry for each architecture, followed by the fat manifest.
The recommended method of deploying a fat manifest is to use docker tooling, namely the manifest sub-command. It is still currently in the PR review process, but can be easily used to create a multi-arch image and push it to any docker registry.
The docker-cli tool can be downloaded for various platforms here: https://github.com/clnperez/cli/releases/tag/v0.1
For example, to build a fat manifest for the web-terminal component using the following image names:
mycluster.icp:8500/default/ibmcom/web-terminal:2.8.1- name of the multi-arch imagemycluster.icp:8500/default/ibmcom/web-terminal:2.8.1-x86_64- name of the x86_64 imagemycluster.icp:8500/default/ibmcom//web-terminal:2.8.1-ppc64le- name of the Power imagemycluster.icp:8500/default/ibmcom/web-terminal:2.8.1-s390- name of the Z image
./docker-linux-amd64 manifest create mycluster.icp:8500/default/ibmcom/web-terminal:2.8.1 mycluster.icp:8500/default/ibmcom/web-terminal:2.8.1-86_64 mycluster.icp:8500/default/ibmcom/web-terminal:2.8.1-ppc64le mycluster.icp:8500/default/ibmcom/web-terminal:2.8.1-s390x
./docker-linux-amd64 manifest annotate mycluster.icp:8500/default/ibmcom/web-terminal:2.8.1 mycluster.icp:8500/default/ibmcom/web-terminal:2.8.1-x86_64 --os linux --arch amd64
./docker-linux-amd64 manifest annotate mycluster.icp:8500/default/ibmcom/web-terminal:2.8.1 mycluster.icp:8500/default/ibmcom/web-terminal:2.8.1-ppc64le --os linux --arch ppc64le
./docker-linux-amd64 manifest annotate mycluster.icp:8500/default/ibmcom/web-terminal:2.8.1 mycluster.icp:8500/default/s390x/web-terminal:2.8.1-s390x --os linux --arch s390x
./docker-linux-amd64 manifest inspect mycluster.icp:8500/default/ibmcom/web-terminal:2.8.1
./docker-linux-amd64 manifest push mycluster.icp:8500/default/ibmcom/web-terminal:2.8.1
Note: Pushing a multi-arch image to a registry does not push the image layers. It only pushes a list of pointers to accessible images. This is why it is better to think of a multi-arch image as what it really is: a manifest list. In addition, when creating the fat manifest you must make sure all your platform specific docker images have been pre-imported into the registry otherwise you will get an error saying cannot use source images from a different registry than the target image: docker.io != mycluster.icp:8500.
After you have pushed your manifest list to a registry, you use it just as you would have previously used an image name.
Note: If you want to keep your local copy of the manifest list, remove the –purge flag. It is recommended to use it because if left, manifest inspect will return the local copy and not the registry copy, which could be confusing.
init containers can be useful for a variety of reasons, including packaging utilities that you may not want to package with an application container, or for including startup ordering logic for workloads where all containers should not be started in parallel.
If using init containers, use the spec syntax instead of annotations to describe them, as described in the kubernetes documentation. The annotations are deprecated in Kubernetes 1.6 and 1.7, and are no longer supported in Kubernetes 1.8.
IBM suggests using nodeAffinity to schedule chart installation on a valid platform.
Node affinity provides the ability to constrain which nodes a pod will run on, based on their architecture. In a heterogeneous cluster, a user can choose if they want a particular workload to run only on nodes with a particular hardware architecture.
IBM suggests adding an arch parameter to values.yaml and referring to that parameter to set nodeAffinity for your pods as shown in the ibm-odm-dev chart, for example.
IBM does not recommend creating persistent volumes in a chart, as allocation is environment-specific and may require permissions the chart deployer doesn't have. A chart should contain a Persistent Volume Claim, as described in the kubernetes documentation if persistent storage is required.
Any required persistent volumes or storage classes that an administrator must pre-create for deployment should be clearly documented in README.md.
The Helm Best Practices for Values contains guidelines for Naming Conventions, Usage (maps, not arrays), YAML Formatting, and Clarifying types. The guidelines below build upon these to provide a consistent user experience across charts by using common names, values, and grouping. A nested structure has been defined with a grouping as the first token if multiple instances exist (e.g., when multiple PersistentVolumeClaims are required, parameters should be nested under grouping tokens such as pvc1, pvc2, …).
-
Parameter(s) should consist of 1 or more tokens with nested values separated by
.. Reading from left to right the tokens should consistently be in the following order and naming (if the parameter is applicable to given chart) :- Grouping / naming token (If multiple instances - i.e. pvc1, pvc2)
- Qualifier (i.e. persistence)
- Parameter (i.e. enabled)
-
Global parameter(s) are recommended for fields that would commonly be set as a group across charts. This will enable usage of your charts as subcharts without modification. A common example is
global.image.secretNamewhich if set isimagePullSecret:Excerpt from values.yaml :
global: image: secretName: "docker-secret"Excerpt from Pod :
{{- if .Values.global.image.secretName }} imagePullSecrets: - name: {{ .Values.global.image.secretName }} {{- end }}
Common IBM Cloud Private parameters:
| Parameter | Definition | Values |
|---|---|---|
| image.pullPolicy | Kubernetes image pull policy | Always, Never, or IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. |
| image.repository | Name of image, including repository prefix (if required) | see Extended description of Docker tags |
| image.tag | Docker image tag | see Docker tag description |
| persistence.enabled | Persistence Volume (PV) enabled | true, false |
| persistence.storageClassName or [volume].storageClassName | StorageClass pre-created by the Kubernetes sysadmin. | |
| persistence.existingClaimName or [volume].existingClaimName | Name of specific pre-created Persistence Volume Claim (PVC) | |
| persistence.size or[volume].size | Amount of storage applications requires (Gi, Mi) | |
| resources.limits.cpu | Describes the maximum amount of CPU allowed. | see Kubernetes - meaning of CPU |
| resources.limits.memory | Describes the maximum amount of memory allowed. | see Kubernetes - meaning of Memory |
| resources.requests.cpu | Describes the minimum amount of CPU required - if not specified will default to limit (if specified) or otherwise implementation-defined value. | see Kubernetes - meaning of CPU |
| resources.requests.memory | Describes the minimum amount of memory required - if not specified will default to limit (if specified) or otherwise implementation-defined value. | see Kubernetes - meaning of Memory |
| service.type | Specify type of service | Valid options are ExternalName, ClusterIP, NodePort, and LoadBalancer. see Publishing services - service types |
Additional guidance:
- Quote strings to avoid type conversion
IBM Cloud Private supports defining metadata for fields containing hidden fields, rendering booleans as checkboxes, checkboxes, specifying allowed values, etc. to provide a rich deployment experience in the IBM Cloud Private GUI. This metadata is defined within a chart by using a file named values-metadata.yaml. For an example of how to use this file, refer to the sample chart in this repository or the many IBM-provided charts in the charts repository
Helm defines a set of best practices regarding the creation of labels and annotations. Concepts covered in this document focus on metadata that can identify resources and provide queryable labels for tools like Operators. Therefore, the labels on a resource collectively should be unique. In addition, the Best Practices link describes the set of common labels that Helm charts use.
IBM recommends that all charts to use the standard labels of "heritage, release, chart and app" on all Kubernetes resources defined in your charts.
Workloads should enable monitoring of their own health using livenessProbes and readinessProbes. |
All helm templates that define resources should have a single "kind" defined. The Helm best practice is to avoid defining multiple resources in a single template file.
Workloads should avoid using escalated security privileges for containers whenever possible. When escalated privileges are required, charts must request the minimum level of privileges needed to achieve the desired functionality.
IBM recommends avoiding the use of privileged: true or capabilities: add: ["ALL"] in your securityContext. If some elevated privileges are required, IBM recommends only adding the minimum set of privileges that are required to implement the desired functionality.
Charts should be deployable by a regular user, who does not have an administrative role, such as cluster admin. If an elevated Kubernetes role is required, this must be clearly documented in the chart's README.md.
Avoid using hostPath storage, as it is not a robust storage solution. hostPath does not support dynamic provisioning, redundancy, or the ability to move pods across nodes.
When a pod is configured with hostNetwork: true, the applications running in such a pod can directly see the network interfaces of the worker node where the pod was started. This means the application will be accessible on all network interfaces of the host machine.
This prevents two pods from using the same port, and introduces a dependency on the IP address of a given node.
Host networking is not a good way to make your applications accessible from outside of the cluster. IBM suggested using NodePort or Ingress to accomplish this.
IBM recommends avoiding hostNetwork unless you are building a chart that requires direct access to host-level networking, like a network monitor or ingress controller.
Charts should clearly document the minimum CPU, memory, and storage resources they require, and the amount of CPU, memory, and storage that they request by default in README.md.
The IBM Cloud Private metering service collects usage information for containers running on IBM Cloud Private based on virtual processor cores available, capped, and/or utilized by the containerized components that make up the running workload.
Virtual core information is automatically collected by a metering daemon running in the IBM Cloud Private cluster. Workloads should identify themselves to this daemon so that the appropriate metrics can be gathered and attributed to the running offering.
The metadata is used to associate metrics gathered for metering purposes with the offering deployed. The metering service simply measures metrics for the running offering, and provides historical usage data to the user through the UI and as downloadable CSV-formatted data.
Workloads should specify their product ID, product name and product version for the meter reader using metadata annotations on the pods. This is defined in the spec template section of the helm chart for a specific deployment.
- A Product Name (
productName) is the human-readable name for the offering - A Product Identifier (
productID) uniquely identifies the offering (please namespace with your company or organization name to ensure uniqueness) - A Product version identifier (
productVersion) specifies the version of the offering
kind: Deployment
spec:
template:
metadata:
annotations:
productName: IBM Sample Chart
productID: com.ibm.chartscommunity.samplechart.0.1.2
productVersion: 0.1.2
IBM Cloud Private nodes are instrumented to automatically gather log data written to the stdout and stderr streams and forward it to the integrated logging service (Elasticsearch/Logstash/Kibana.)
Workload containers should write log data to stdout and stderr, rather than discrete log files, so they can be automatically consumed by the IBM Cloud Private logging service. Workloads are also encouraged to include provide links to relevant Kibana dashboards in README.md, so that users can download them and import them to Kibana.
Workloads should integrate with the default IBM Cloud Private monitoring service (Prometheus/Grafana), by exposing Prometheus metrics through a Kubernetes Service and annotating that endpoint so that it will be automatically consumed by the IBM Cloud Private monitoring service. IBM recommends integrating with the platform's monitoring service, rather than packaging your own instances of Prometheus or Grafana. This enables users to get all data from a central instance, and reduces overhead.
To expose your Prometheus endpoint to the IBM Cloud Private monitoring service, use the annotation prometheus.io/scrape: 'true' as shown in the example below.
apiVersion: v1
kind: Service
metadata:
annotations:
prometheus.io/scrape: 'true'
labels:
app: {{ template "fullname" . }}
name: {{ template "fullname" . }}-metrics
spec:
ports:
- name: {{ .Values.service.name }}-metrics
targetPort: 9157
port: 9157
protocol: TCP
selector:
app: {{ template "fullname" . }}
type: ClusterIP
Individual metric names should be prefixed with the name of the workload, (e.g., ibmmq_object_mqput_bytes).
If your chart requires a license key to deploy or to otherwise use the workload, this should be stated in the Prerequisites section of the chart's README.md. Additionally, instructions on how to acquire keys and information on pricing and trials should also be included or linked to alongside this statement so that users can readily and easily obtain the keys needed to install the chart and use the workload.