Helm chart

The Vupt Helm chart deploys the cloud API, worker, Cloud MCP, and the signed audit log writer to any Kubernetes cluster. The chart is Business+ for license-gated features (SSO via Clerk, signed audit logs); the core surface runs on every tier.

Add the repo

helm repo add vupt https://charts.vupt.dev
helm repo update

Install

helm install vupt vupt/vupt \
  --namespace vupt \
  --create-namespace \
  --values my-values.yaml

A minimal my-values.yaml:

api:
  replicas: 2
  image:
    tag: "v1.0.0"

postgres:
  external:
    host: "pg.internal"
    database: "vupt"
    user: "vupt"
    passwordSecret: "vupt-pg-password"

ingress:
  enabled: true
  host: "vupt.your-domain.com"
  tls: true

# Business-tier license (set to a license key for SSO + signed audit logs)
license:
  key: ""

SSO and signed audit log

These are Business-tier features; they require a valid license key. Set license.key to a key obtained from your Vupt account. The chart's pre-install hook validates the key signature against the published Ed25519 public key before any pod is created.

Multi-replica API

The API is stateless — scale api.replicas to match throughput. The worker pod is stateful (in v1.0 it runs inline with the API; the standalone worker app is deferred to v1.1).

Storage

Component	PVC	Default size
Postgres (in-chart, optional)	vupt-postgres	50 Gi
Audit log writer	vupt-audit	20 Gi
Object storage adapter	vupt-r2-cache	10 Gi

Production deployments should use external Postgres + a managed S3-compatible bucket; the in-chart Postgres is for dev and small teams only.

Upgrade

helm upgrade vupt vupt/vupt --values my-values.yaml

The chart applies migrations via a helm.sh/hook: pre-upgrade job; rolling pod restarts follow.