Available Helm values for Label Studio Enterprise Kubernetes deployments

Refer to these tables with available Helm chart values for your lse-values.yaml file
when configuring your Label Studio Enterprise deployment on Kubernetes. See Deploy Label Studio Enterprise on Kubernetes for more.

Global parameters

Global parameters for the Helm chart.

Key	Type	Default Value	Description
global.imagePullSecrets	string	[]	Image pull secret to use for registry authentication
global.image.repository	string	heartexlabs/label-studio-enterprise	Image repository
global.image.pullPolicy	string	IfNotPresent	Image pull policy
global.image.tag	string	“”	Image tag (immutable tags are recommended)
global.djangoConfig.db	string	default	Django default config name
global.djangoConfig.settings_module	string	htx.settings.label_studio	Django default settings module name
global.enterpriseLicense.secretName	string	“”	Name of an existing secret holding the Label Studio Enterprise license information
global.enterpriseLicense.secretKey	string	license	Key of an existing secret holding the enterprise license information
global.pgConfig.host	string	“”	PostgreSQL hostname
global.pgConfig.port	string	5432	PostgreSQL port
global.pgConfig.dbName	string	“”	PostgreSQL database name
global.pgConfig.userName	string	“”	PostgreSQL database user account
global.pgConfig.password.secretName	string	“”	Name of an existing secret holding the password of PostgreSQL database user account
global.pgConfig.password.secretKey	string	“”	Key of an existing secret holding the password of PostgreSQL database user account
global.redisConfig.host	string	“”	Redis connection string in a format: redis://[:password]@localhost:6379/1
global.redisConfig.password.secretName	string	“”	Name of an existing secret holding the password of Redis database
global.redisConfig.password.secretKey	string	“”	Key of an existing secret holding the password of Redis database
global.extraEnvironmentVars	map	{}	Key/value map of an extra Environment variables, for example, PYTHONUNBUFFERED: 1
global.extraEnvironmentSecrets	map	{}	Key/value map of an extra Secrets
global.contextPath	string	/	Context path appended for health/readiness checks
global.persistence.enabled	string	false	Enable persistent storage. See more about setting up persistent storage.
global.persistence.type	string	volume	Persistent storage type
global.persistence.config.s3.accessKey	string	“”	Access key to use to access AWS S3
global.persistence.config.s3.secretKey	string	“”	Secret key to use to access AWS S3
global.persistence.config.s3.accessKeyExistingSecret	string	“”	Existing Secret name to extract Access key from to access AWS S3
global.persistence.config.s3.accessKeyExistingSecretKey	string	“”	Existing Secret key to extract Access key from to access AWS S3
global.persistence.config.s3.secretKeyExistingSecret	string	“”	Existing Secret name to extract Access secret key from to access AWS S3
global.persistence.config.s3.secretKeyExistingSecretKey	string	“”	Existing Secret key to extract Access secret key from to access AWS S3
global.persistence.config.s3.region	string	“”	AWS S3 region
global.persistence.config.s3.bucket	string	“”	AWS S3 bucket name
global.persistence.config.s3.folder	string	“”	AWS S3 folder name
global.persistence.config.s3.urlExpirationSecs	string	86400	The number of seconds that a presigned URL is valid for
global.persistence.config.volume.storageClass	string	“”	StorageClass for Persistent Volume
global.persistence.config.volume.size	string	5Gi	Persistent volume size
global.persistence.config.volume.annotations	map	{}	Persistent volume additional annotations
global.persistence.config.volume.existingClaim	string	“”	Name of an existing PVC to use
global.persistence.config.volume.resourcePolicy	string	“”	PVC resource policy
global.persistence.config.azure.storageAccountName	string	“”	Azure Storage Account Name to use to access Azure Blob Storage
global.persistence.config.azure.storageAccountKey	string	“”	Azure Storage Account Key to use to access Azure Blob Storage
global.persistence.config.azure.storageAccountNameExistingSecret	string	“”	Existing Secret name to extract Azure Storage Account Name from to access Azure Blob Storage
global.persistence.config.azure.storageAccountNameExistingSecretKey	string	“”	Existing Secret key to extract Azure Storage Account Name from to use to access Azure Blob Storage
global.persistence.config.azure.storageAccountKeyExistingSecret	string	“”	Existing Secret name to extract Azure Storage Account Key from to access Azure Blob Storage
global.persistence.config.azure.storageAccountKeyExistingSecretKey	string	“”	Existing Secret key to extract Azure Storage Account Key from to use to access Azure Blob Storage
global.persistence.config.azure.containerName	string	“”	Azure Storage container name
global.persistence.config.azure.folder	string	“”	Azure Storage folder name
global.persistence.config.azure.urlExpirationSecs	string	86400	The number of seconds that a presigned URL is valid for
global.persistence.config.gcs.projectID	string	“”	GCP Project ID to use
global.persistence.config.gcs.applicationCredentialsJSON	string	“”	Service Account key to access GCS
global.persistence.config.gcs.applicationCredentialsJSONExistingSecret	string	“”	Existing Secret name to extract Service Account Key from to access GCS
global.persistence.config.gcs.applicationCredentialsJSONExistingSecretKey	string	“”	Existing Secret key to extract Service Account Key from to access GCS
global.persistence.config.gcs.bucket	string	“”	GCS bucket name
global.persistence.config.gcs.folder	string	“”	GCS folder name
global.persistence.config.gcs.urlExpirationSecs	string	86400	The number of seconds that a presigned URL is valid for
featureFlags	map	{}	Key/value map of Feature Flags

App parameters

Parameters specific to the app portion of the Label Studio Enterprise deployment.

Key	Type	Default Value	Description
app.enabled	string	true	Enable app pod
app.deploymentStrategy.type	string	RollingUpdate	Deployment strategy type
app.deploymentStrategy.rollingUpdate.maxSurge	string	2	The maximum number of pods that can be created over the desired number of pods
app.deploymentStrategy.rollingUpdate.maxUnavailable	string	0	The maximum number of pods that can be unavailable during the update process
app.replicas	string	1	Amount of app pod replicas
app.NameOverride	string	“”	String to partially override release template name
app.FullnameOverride	string	“”	String to fully override release template name
app.resources.requests.memory	string	384Mi	The requested memory resources for the App container
app.resources.requests.cpu	string	250m	The requested cpu resources for the App container
app.resources.limits.memory	string	1024Mi	The memory resources limits for the App container
app.resources.limits.cpu	string	750m	The cpu resources limits for the App container
app.logLevel	string	INFO	Application log level
app.debug	string	“”	Application DEBUG mode
app.extraEnvironmentVars	map	{}	A map of extra environment variables to set
app.extraEnvironmentSecrets	map	{}	A map of extra environment secrets to set
app.nodeSelector	map	{}	labels for pod assignment, formatted as a multi-line string or YAML map
app.annotations	map	{}	k8s annotations to attach to the app pods
app.extraLabels	map	{}	extra k8s labels to attach
app.affinity	map	{}	Affinity for pod assignment
app.tolerations	list	[]	Toleration settings for pod
app.readinessProbe.enabled	string	true	Enable redinessProbe
app.readinessProbe.path	string	/version	Path for reasinessProbe
app.readinessProbe.failureThreshold	string	2	When a probe fails, Kubernetes will try failureThreshold times before giving up
app.readinessProbe.initialDelaySeconds	string	10	Number of seconds after the container has started before probe initiates
app.readinessProbe.periodSeconds	string	10	How often (in seconds) to perform the probe
app.readinessProbe.successThreshold	string	1	Minimum consecutive successes for the probe to be considered successful after having failed
app.readinessProbe.timeoutSeconds	string	5	Number of seconds after which the probe times out
app.livenessProbe.enabled	string	true	Enable livenessProbe
app.livenessProbe.path	string	/health	Path for livenessProbe
app.livenessProbe.failureThreshold	string	3	When a probe fails, Kubernetes will try failureThreshold times before giving up
app.livenessProbe.initialDelaySeconds	string	60	Number of seconds after the container has started before probe initiates
app.livenessProbe.periodSeconds	string	10	How often (in seconds) to perform the probe
app.livenessProbe.successThreshold	string	1	Minimum consecutive successes for the probe to be considered successful after having failed
app.livenessProbe.timeoutSeconds	string	5	Number of seconds after which the probe times out
app.service.type	string	ClusterIP	k8s service type
app.service.port	string	80	k8s service port
app.service.targetPort	string	8085	k8s servuce target port
app.service.portName	string	service	k8s service port name
app.service.annotations	map	{}	Custom annotations for app service
app.service.sessionAffinity	string	“None”	Session Affinity for Kubernetes service, can be “None” or “ClientIP”
app.service.sessionAffinityConfig	map	{}	Additional settings for the sessionAffinity
app.ingress.enabled	string	true	Enable ingress
app.ingress.className	string	“”	Ingress classname
app.ingress.annotations	map	{}	Additional ingress annotations
app.ingress.host	string	app.heartex.local	Ingress host
app.ingress.path	string	/	Ingress path
app.ingress.extraPaths	list	[]	Extra paths to prepend to the host configuration
app.ingress.tls	list	[]	TLS secrets definition
app.serviceAccount.create	string	true	Enable the creation of a ServiceAccount for app pod
app.serviceAccount.name	string	“”	Name of the created ServiceAccount
app.serviceAccount.annotations	map	{}	Custom annotations for app ServiceAccount
app.extraVolumes	list	[]	Array to add extra volumes
app.extraVolumeMounts	list	[]	Array to add extra mounts (normally used with extraVolumes)
app.podSecurityContext.enabled	string	false	Enable pod Security Context
app.containerSecurityContext.enabled	string	true	Enable container Security Context
app.containerSecurityContext.runAsNonRoot	string	true	Avoid running as root User
app.containerSecurityContext.allowPrivilegeEscalation	string	false	Controls whether a process can gain more privileges than its parent process
app.topologySpreadConstraints	list	[ ]	Topology Spread Constraints for pod assignment
app.dnsPolicy	string	“”	Pod DNS policy
app.enableServiceLinks	boolean	false	Service environment variables
app.shareProcessNamespace	boolean	false	Enable shared process namespace in a pod
app.automountServiceAccountToken	bollean	true	Automount service account token for the server service account

Rqworker parameters

Parameters specific to the rqworkers service of your Label Studio Enterprise deployment.

Key	Type	Default	Description
rqworker.enabled	string	true	Enable rqworker pod
rqworker.NameOverride	string	“”	String to partially override release template name
rqworker.FullnameOverride	string	“”	String to fully override release template name
rqworker.deploymentStrategy.type	string	Recreate	Deployment strategy type
rqworker.replicas	string	1	Amount of rqworker replicas
rqworker.resources.requests.memory	string	256Mi	The requested memory resources for the Rqworker container
rqworker.resources.requests.cpu	string	100m	The requested cpu resources for the Rqworker container
rqworker.resources.limits.memory	string	512Mi	The memory resources limits for the Rqworker container
rqworker.resources.limits.cpu	string	500m	The cpu resources limits for the Rqworker container
rqworker.logLevel	string	INFO	Rqworker log level
rqworker.debug	string	“”	Rqworker DEBUG mode
rqworker.extraEnvironmentVars	map	{}	A map of extra environment variables to set
rqworker.extraEnvironmentSecrets	map	{}	A map of extra environment secrets to set
rqworker.nodeSelector	map	{}	labels for pod assignment, formatted as a multi-line string or YAML map
rqworker.annotations	map	{}	k8s annotations to attach to the rqworker pods
rqworker.extraLabels	map	{}	extra k8s labels to attach
rqworker.affinity	map	{}	Affinity for pod assignment
rqworker.tolerations	list	[]	Toleration settings for pod
rqworker.readinessProbe.enabled	string	false	Enable redinessProbe
rqworker.readinessProbe.path	string	/version	Path for reasinessProbe
rqworker.readinessProbe.failureThreshold	string	2	When a probe fails, Kubernetes will try failureThreshold times before giving up
rqworker.readinessProbe.initialDelaySeconds	string	35	Number of seconds after the container has started before probe initiates
rqworker.readinessProbe.periodSeconds	string	5	How often (in seconds) to perform the probe
rqworker.readinessProbe.successThreshold	string	1	Minimum consecutive successes for the probe to be considered successful after having failed
rqworker.readinessProbe.timeoutSeconds	string	3	Number of seconds after which the probe times out
rqworker.livenessProbe.enabled	string	false	Enable livenessProbe
rqworker.livenessProbe.path	string	/health	Path for livenessProbe
rqworker.livenessProbe.failureThreshold	string	2	When a probe fails, Kubernetes will try failureThreshold times before giving up
rqworker.livenessProbe.initialDelaySeconds	string	60	Number of seconds after the container has started before probe initiates
rqworker.livenessProbe.periodSeconds	string	5	How often (in seconds) to perform the probe
rqworker.livenessProbe.successThreshold	string	1	Minimum consecutive successes for the probe to be considered successful after having failed
rqworker.livenessProbe.timeoutSeconds	string	3	Number of seconds after which the probe times out
rqworker.serviceAccount.create	string	true	Enable the creation of a ServiceAccount for rqworker pod
rqworker.serviceAccount.name	string	“”	Name of the created ServiceAccount
rqworker.serviceAccount.annotations	map	{}	Custom annotations for app ServiceAccount
rqworker.extraVolumes	list	[]	Array to add extra volumes
rqworker.extraVolumeMounts	list	[]	Array to add extra mounts (normally used with extraVolumes)
rqworker.podSecurityContext.enabled	string	false	Enable pod Security Context
rqworker.containerSecurityContext.enabled	string	true	Enable container Security Context
rqworker.containerSecurityContext.runAsNonRoot	string	true	Avoid running as root User
rqworker.containerSecurityContext.allowPrivilegeEscalation	string	false	Controls whether a process can gain more privileges than its parent process
rqworker.topologySpreadConstraints	list	[ ]	Topology Spread Constraints for pod assignment
rqworker.dnsPolicy	string	“”	Pod DNS policy
rqworker.enableServiceLinks	boolean	false	Service environment variables
rqworker.shareProcessNamespace	boolean	false	Enable shared process namespace in a pod
rqworker.automountServiceAccountToken	bollean	true	Automount service account token for the server service account

Deprecated parameters

Deprecated parameters no longer in use or supported by Label Studio Enterprise Helm charts.

Key	Type	Default Value	Description
minio.enabled	string	true	Enable minio deployment
minio.accessKey.password	string	minio	Minio accesskey
minio.secretKey.password	string	minio123	Minio accessPassword
minio.resources.requests.cpu	string	250m	Minio requested resources
minio.resources.requests.memory	string	256Mi	Minio limits resources
minio.mode	string	standalone	Minio mode
minio.persistence.enabled	string	false	Minio enable persistence