Platform and supporting charts
Beyond the application charts, cpp-helm-chart holds the charts that build and support the platform itself. These are operated by the platform teams — service teams rarely change them, but you will see their releases in every cluster and their names in cpp-aks-deploy and cpp-flux-config, so it helps to know what each one is.
Many wrap a well-known upstream chart (istio, kube-prometheus-stack, Velero and so on), pinned and configured for CPP; the rest are CPP-specific. Each links to its directory in the repository, which is the authoritative reference for its values.
Cluster infrastructure
| Chart | Purpose |
|---|---|
| istio-base, istiod, istio-ingress, istio-egress | The istio service mesh: cluster resources and CRDs, the control plane, and the ingress/egress gateways |
| istio-config | istio configuration for an application or context namespace |
| istio-authorization-policies | AuthorizationPolicy resources controlling which workloads may talk to which |
| flux-operator, flux-instance | The Flux operator and the Flux instance it manages — the foundation of the GitOps route |
| keda | KEDA event-driven autoscaling |
| gatekeeper | OPA Gatekeeper policy enforcement |
| azure-service-operator | Azure Service Operator, which lets charts declare Azure resources (for example federated identity credentials) as Kubernetes objects |
| aks-rbac | Cluster-level RBAC for AKS |
| ccm-namespace | Creates and configures CCM namespaces |
| cpp-platform-priming | Primes a cluster with CPP platform prerequisites |
| overprovisioning | Headroom pods that keep spare capacity available for fast scale-up |
| dynatrace-operator | Dynatrace observability agent operator |
| kiali-operator | Kiali service-mesh observability for istio |
| velero | Velero cluster backup and restore |
Monitoring and dashboards
| Chart | Purpose |
|---|---|
| kube-prometheus-stack, kube-prometheus-stack-v3 | Prometheus Operator, Prometheus rules and Grafana dashboards for cluster monitoring |
| prometheus-adapter, prometheus-adapter-v3 | Exposes Prometheus metrics through the Kubernetes metrics APIs, so autoscalers can use them |
| prometheus-node-exporter | Node-level metrics |
| kube-state-metrics | Cluster-object metrics |
| grafana | Grafana on its own, where the full stack is not wanted |
| filebeat | Ships container logs to Elasticsearch |
| smashing | Smashing status dashboards |
Where a -v3 variant exists it is maintained in parallel with the original — check which of the two your target cluster consumes in cpp-aks-deploy or cpp-flux-config before changing either.
Products and data services
| Chart | Purpose |
|---|---|
| alfresco-content-services, alfresco-frontend-services, alfresco-search | The Alfresco document management stack |
| artemis-activemq | ActiveMQ Artemis message broker |
| camunda-optimize | Camunda Optimize process reporting |
| docmosis | Docmosis document generation |
| elasticsearch, elasticsearch-eck | Elasticsearch — the Elastic chart, and an ECK-managed instance for validation stacks |
| postgresql | In-cluster PostgreSQL |
| pgadmin | pgAdmin database administration UI |
| sonarqube | SonarQube code quality server |
| idam-gateway | Gateway in front of IdAM |
| nowsce-complex | Deploys the nowsce-complex service and the dependencies for its KEDA queue-based scaling |
Simulators and test tooling
Deployed to non-live environments and validation stacks only:
| Chart | Purpose |
|---|---|
| azurite | Azure Blob Storage emulator |
| idam-simulator | Simulates IdAM for testing |
| ftps-simulator | Simulates FTPS endpoints |
| gob-simulator | Standalone SOAP server for staging enforcement testing |
Related documentation
- Application charts — the charts CPP services deploy with
- Using and customising charts — how chart changes are made, tested and released
- Tools and configuration — the repositories and pipelines that deploy these charts