Installation¶

Install¶

Use Helm to install KubeElasti into your Kubernetes cluster. Check out values.yaml to see configuration options in the helm value file.

helm install elasti oci://ghcr.io/kubeelasti/charts/elasti --namespace elasti --create-namespace

Verify the release (optional)

New to this? Every KubeElasti release is keyless-signed with cosign/Sigstore. Verifying proves an artifact genuinely came from KubeElasti's CI and wasn't tampered with. No keys needed, just install cosign.

Replace <version> (e.g. 0.1.25) and run:

ISSUER='https://token.actions.githubusercontent.com'
CHART_ID='^https://github.com/KubeElasti/KubeElasti/\.github/workflows/release\.yaml@refs/tags/.*'
IMAGE_ID='^https://github.com/truefoundry/github-workflows-public/\.github/workflows/build\.yml@.*'

# Helm chart
cosign verify --certificate-oidc-issuer "$ISSUER" --certificate-identity-regexp "$CHART_ID" \
  ghcr.io/kubeelasti/charts/elasti:<version>

# Resolver image
cosign verify --certificate-oidc-issuer "$ISSUER" --certificate-identity-regexp "$IMAGE_ID" \
  ghcr.io/kubeelasti/elasti-resolver:<version>

# Controller image
cosign verify --certificate-oidc-issuer "$ISSUER" --certificate-identity-regexp "$IMAGE_ID" \
  ghcr.io/kubeelasti/elasti-operator:<version>

A pass prints a The following checks were performed ... block. If you see Error: no matching signatures, the artifact is unsigned, altered, or from an unexpected source. Do not install it (report it). Verifying the files attached to a release (SBOMs, offline .sig bundles) is covered in the release doc.

Uninstall¶

To uninstall Elasti, you will need to remove all the installed ElastiServices first. Then, simply delete the installation file.

kubectl delete elastiservices --all
helm uninstall elasti -n elasti
kubectl delete namespace elasti