Skip to content

Helm Chart Quick Reference

For end-users installing SysGuardd via Helm from the published OCI registry.

Installation

# Install from OCI registry (Docker Hub)
helm install sysguardd oci://registry-1.docker.io/bansikah/sysguardd-helm \
  --namespace kube-system \
  --create-namespace

# Verify installation
kubectl get daemonset -n kube-system sysguardd
kubectl get pods -n kube-system -l app=sysguardd

Configuration

Monitor Mode (Default)

Logs policy violations without enforcement:

helm install sysguardd oci://registry-1.docker.io/bansikah/sysguardd-helm \
  --set sysguardd.mode=monitor

Enforce Mode

Terminates unauthorized processes:

helm install sysguardd oci://registry-1.docker.io/bansikah/sysguardd-helm \
  --set sysguardd.mode=enforce

Custom Policy

Supply your own policy file:

helm install sysguardd oci://registry-1.docker.io/bansikah/sysguardd-helm \
  --set policy.data="$(cat /path/to/custom.policy)"

Common Operations

Check Status

# Get pod logs
kubectl logs -n kube-system -l app=sysguardd -f

# Get pod status
kubectl get pods -n kube-system -l app=sysguardd -o wide

# Describe pod
kubectl describe pod -n kube-system -l app=sysguardd

Switch Modes

# Change from monitor to enforce
helm upgrade sysguardd oci://registry-1.docker.io/bansikah/sysguardd-helm \
  --reuse-values \
  --set sysguardd.mode=enforce

View Audit Logs

# Stream real-time audit logs (JSON format)
kubectl logs -n kube-system -l app=sysguardd -f | jq .

# Get last 100 log lines
kubectl logs -n kube-system -l app=sysguardd --tail=100 | tail -100 | jq .

Uninstall

helm uninstall sysguardd -n kube-system

Troubleshooting

Chart Not Found

Error: Error: failed to fetch "oci://registry-1.docker.io/bansikah/sysguardd-helm": unsupported protocol scheme "oci"

Solution: Upgrade Helm to 3.8+

helm version  # Must be v3.8.0 or higher

Pod CrashLoopBackOff

# Check pod events
kubectl describe pod -n kube-system -l app=sysguardd

# View pod logs
kubectl logs -n kube-system -l app=sysguardd --previous

Authentication Issues

If using private registry, create pull secret:

kubectl create secret docker-registry regcred \
  --docker-server=registry-1.docker.io \
  --docker-username=<username> \
  --docker-password=<password> \
  -n kube-system

helm install sysguardd oci://registry-1.docker.io/bansikah/sysguardd-helm \
  --set imagePullSecrets[0].name=regcred

Resources

Chart Versions

Version App Version Released Notes
1.0.0 0.1.0 2026-05-13 Initial OCI release

For version history, see GitHub Releases