Helm chart
The mirops-operator Helm chart installs the operator, its RBAC, service, and optional report PVC. The operator installs its own CRDs at startup, so the chart ships only the image and RBAC — choosing an image.tag automatically pins the matching CRDs. The chart creates no ClusterMirror or UpgradeAnalysis; you create them after installing.
Install
From the published OCI repository:
helm install mirops oci://ghcr.io/miropshq/charts/mirops \
--namespace mirops --create-namespace --version 0.2.0
The chart publishes from main to charts; the default image tag is the chart's appVersion. It's also listed on Artifact Hub under the mirops organization — values, CRDs, images and changes per version — and its Install button gives the same helm install oci://… command.
Common values
| Value | Purpose |
|---|---|
upgrade.enabled | Run upgrade analysis. Off by default; the ClusterMirror controller always runs. |
image.repository, image.tag | Operator image (the tag selects the matching CRDs). |
serviceAccount.annotations | IRSA (AWS) or Workload Identity (Azure) for remote reports. |
reports.* | The in-cluster report HTTP endpoint. |
reportPVC.enabled | Mount a PVC for in-cluster persistent report storage (source.type: pvc, for mirrors and analyses). |
remediation.image.* | The remediation manager image. |
compatMatrix.enabled, compatMatrix.version | Pull a published compatibility-matrix version (latest or a date tag) instead of the embedded one. |
resources, nodeSelector, tolerations, affinity | Standard scheduling/limits. |
leaderElection.enabled | Operator runtime. |
Cloud identity examples
AWS (IRSA):
helm install mirops oci://ghcr.io/miropshq/charts/mirops \
--namespace mirops --create-namespace \
--set serviceAccount.annotations."eks\.amazonaws\.com/role-arn"=arn:aws:iam::<acct>:role/mirops-s3-role
Azure (Workload Identity):
helm install mirops oci://ghcr.io/miropshq/charts/mirops \
--namespace mirops --create-namespace \
--set-string podLabels."azure\.workload\.identity/use"=true \
--set serviceAccount.annotations."azure\.workload\.identity/client-id"=<client-id>
The tenant-id is optional — add --set serviceAccount.annotations."azure\.workload\.identity/tenant-id"=<tenant-id> only for cross-tenant identities.
Upgrade / uninstall
helm upgrade mirops oci://ghcr.io/miropshq/charts/mirops --namespace mirops --version 0.2.0 --reuse-values
helm uninstall mirops --namespace mirops
Upgrading from 0.1.0 turns upgrade analysis off unless you set upgrade.enabled=true — see Deploy with Helm.
See the Deploy with Helm guide for a full walkthrough.
- Source: github.com/miropshq/helm-charts