Helm Charts Reference

The cluster is composed of 20 Helm charts located in infra/kube-cluster/charts/. Each chart directory follows the same file layout:

File	Purpose
`helmfile.yaml.gotmpl`	Helmfile release definition (templated)
`values.moh.yaml`	Base values shared across environments
`values.moh.prod.yaml`	Production overrides
`values.moh.prod.cm.yaml`	Production ConfigMap values (optional, where present)

Analytics

Chart	Purpose
`dbt`	dbt Cloud job runner — triggered by Prefect workflows
`prefect`	Prefect server and workers for workflow orchestration
`spark`	Apache Spark cluster and Livy REST API server
`jupyter-hub`	JupyterHub for interactive data exploration
`superset`	Apache Superset BI platform

Data Store

Chart	Purpose
`stackgres-operator`	PostgreSQL Kubernetes operator — manages CRD installation
`stackgres`	Production PostgreSQL cluster (StackGres)
`minio-operator`	MinIO S3-compatible object storage operator
`minio-tenant`	MinIO storage tenant — S3 buckets for backups and data lake
`valkey`	In-memory cache (Redis-compatible)
`openebs`	OpenEBS persistent volume provisioner for local storage

Networking & Security

Chart	Purpose
`istio`	Service mesh — mTLS, traffic policies, and cluster ingress
`cert-manager`	Automatic TLS certificate provisioning via Let’s Encrypt
`external-secrets`	Sync secrets from AWS Secrets Manager into Kubernetes
`sso`	OAuth2 proxy / Dex — bridges Cognito to Kubernetes services
`rbac`	Role-based access control — ClusterRoles and bindings

Platform

Chart	Purpose
`namespaces`	Namespace management — source of truth for all namespaces
`greenriver`	GreenRiver application (backend and frontend)
`jobs`	Kubernetes Jobs and CronJobs for one-off and scheduled tasks
`monitoring-stack`	Prometheus, Grafana, and Alertmanager

Last updated on July 2, 2026

Cluster Overview Ansible