Helm chart

Chart: charts/rpdu2mqtt in the repository.

helm install rpdu2mqtt ./charts/rpdu2mqtt -n rpdu2mqtt --create-namespace -f my-values.yaml

Minimal my-values.yaml:

config:
  MQTT:
    Connection: { Host: mqtt.lan, Port: 1883 }
  Pdus:
    default:
      Connection: { Host: pdu.lan, Port: 80 }
  HomeAssistant:
    DiscoveryEnabled: true
  Gui:
    Enabled: true

credentials:
  mqtt: { username: rpdu2mqtt, password: "change-me" }
  pdu:  { username: hass, password: "change-me" }

• config: is rendered into a ConfigMap at /config/config.yaml. All keys: Configuration.
• credentials.* (or existingSecret) become RPDU2MQTT_* variables from a Secret.
• The pod restarts when the rendered config changes.
• A ConfigMap is read-only, so GUI Save is disabled. For GUI Save set kubernetesConfigSource.enabled: true (Kubernetes CRD).
• Valkey is deployed by default (valkey.enabled: true, 1Gi volume).

Key values

Notes

• Graceful rollout. With a cache, the new pod starts as a standby and takes the leader lease when the old pod stops. Only the lease holder polls and publishes. The old pod keeps serving for RPDU2MQTT_SHUTDOWN_DRAIN_SECONDS (10 s) with /readyz failing. A killed pod holds the lease for at most RPDU2MQTT_LEADER_LEASE_SECONDS (15 s). GUI Restart rolls the Deployment. See Updates and restarts.
• Replicas. Without the leader lease keep replicaCount: 1 (Recreate strategy). With it, extra replicas are standbys.
• Split roles. With split.enabled, the worker Deployment runs the PDU session, Modbus and exporters; api and ui only read. Keep worker at one replica. History needs a ReadWriteMany class.
• Scheduled restarts. autoRestart.enabled adds a CronJob running kubectl rollout restart on this release's Deployments, with its own ServiceAccount (get, list, patch on Deployments). Missed runs are skipped.
• Metrics. Set config.Prometheus.Exporter: true and serviceMonitor.enabled: true. Set serviceMonitor.labels to match your Prometheus serviceMonitorSelector (e.g. release: kube-prometheus-stack).
• Argo CD. See Argo CD for ignoreDifferences with the CRD source.

Exposing the REST API

config:
  Api:
    Enabled: true
ingress:
  enabled: true
  hosts:
    - host: rpdu2mqtt.example.com
      paths:
        - path: /
          pathType: Prefix          # GUI
        - path: /api
          pathType: Prefix
          service: api
        - path: /scalar
          pathType: Prefix
          service: api

• API docs: /scalar/v1 and /openapi/v1.json.
• service: api with the API disabled fails the render.
• Reads are unauthenticated. Put auth at the ingress, or restrict networkPolicy.apiIngressFrom.