https://github.com/hashicorp/boundary-worker-helm
https://github.com/hashicorp/boundary-worker-helm
doormat-managed
Last synced: 7 days ago
JSON representation
- Host: GitHub
- URL: https://github.com/hashicorp/boundary-worker-helm
- Owner: hashicorp
- License: mpl-2.0
- Created: 2026-03-17T14:16:41.000Z (3 months ago)
- Default Branch: main
- Last Pushed: 2026-06-17T22:13:49.000Z (9 days ago)
- Last Synced: 2026-06-18T00:10:55.187Z (9 days ago)
- Topics: doormat-managed
- Language: Shell
- Homepage:
- Size: 306 KB
- Stars: 1
- Watchers: 0
- Forks: 0
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project
README
# Boundary Worker Helm Chart
Boundary workers are the data-plane component of Boundary. They proxy session traffic between users and targets and register with Boundary controllers.
This chart packages the Kubernetes resources required to run one self-managed Boundary worker in Kubernetes.
## What The Chart Deploys
By default, this chart deploys:
- One Deployment with one worker replica
- Two Services:
- Proxy Service (`boundary-worker-proxy`) on port 9202
- Ops Service (`boundary-worker-ops`) on port 9203
- One ConfigMap for `worker.config`
- Two optional PVCs:
- Auth storage PVC
- Recording storage PVC
## Prerequisites
### Version Requirements
| Component | Version |
| --- | --- |
| Kubernetes | 1.34 and above |
| Helm | v3 and above |
### Required Resources
- Reachable Boundary controller upstreams
- Valid Boundary worker HCL in `worker.config`
- Persistent storage support if PVCs are enabled
- Optional cloud identity setup (for example IRSA) when using cloud KMS
## Helm Install Commands
Add the HashiCorp Helm repository (one-time):
```bash
helm repo add hashicorp https://helm.releases.hashicorp.com
helm repo update
```
Install with custom values:
```bash
helm install boundary-worker hashicorp/boundary-worker \
--version 0.1.0 \
--namespace boundary \
--values my-values.yaml \
--wait
```
## Helm Upgrade Commands
Standard upgrade:
```bash
helm upgrade boundary-worker hashicorp/boundary-worker \
--version 0.1.0 \
--namespace boundary \
--values my-values.yaml \
--rollback-on-failure \
--wait
```
----
Please note: We take Boundary security and user trust seriously. If you believe you found a security issue in Boundary, please responsibly disclose it at [security@hashicorp.com](mailto:security@hashicorp.com).
----