mlrun · alxtkr77 · Dec 25, 2025 · Dec 25, 2025 · Dec 28, 2025 · Dec 28, 2025
diff --git a/charts/mlrun-ce/Chart.yaml b/charts/mlrun-ce/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
 name: mlrun-ce
-version: 0.10.1-rc3
+version: 0.10.1-rc4
 description: MLRun Open Source Stack
 home: https://iguazio.com
 icon: https://www.iguazio.com/wp-content/uploads/2019/10/Iguazio-Logo.png

diff --git a/charts/mlrun-ce/admin_installation_values.yaml b/charts/mlrun-ce/admin_installation_values.yaml
@@ -48,7 +48,7 @@ pipelines:
 kube-prometheus-stack:
   enabled: false
 
-tdengine:
+timescaledb:
   enabled: false
 
 kafka:

diff --git a/charts/mlrun-ce/templates/_helpers.tpl b/charts/mlrun-ce/templates/_helpers.tpl
@@ -249,23 +249,25 @@ Model monitoring DSN
 {{- end -}}
 {{- end -}}
 
+{{/*
+TimescaleDB helpers
+*/}}
+
 {{/*
 Expand the name of the chart.
 */}}
-{{- define "mlrun-ce.tdengine.name" -}}
-{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- define "mlrun-ce.timescaledb.name" -}}
+{{- default "timescaledb" .Values.timescaledb.nameOverride | trunc 63 | trimSuffix "-" }}
 {{- end }}
 
 {{/*
 Create a default fully qualified app name.
-We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
-If release name contains chart name it will be used as a full name.
 */}}
-{{- define "mlrun-ce.tdengine.fullname" -}}
-{{- if .Values.tdengine.fullnameOverride }}
-{{- .Values.tdengine.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- define "mlrun-ce.timescaledb.fullname" -}}
+{{- if .Values.timescaledb.fullnameOverride }}
+{{- .Values.timescaledb.fullnameOverride | trunc 63 | trimSuffix "-" }}
 {{- else }}
-    {{- $name := default .Chart.Name .Values.tdengine.nameOverride }}
+    {{- $name := default "timescaledb" .Values.timescaledb.nameOverride }}
     {{- if contains $name .Release.Name }}
         {{- .Release.Name | trunc 63 | trimSuffix "-" }}
     {{- else }}
@@ -277,27 +279,35 @@ If release name contains chart name it will be used as a full name.
 {{/*
 Create chart name and version as used by the chart label.
 */}}
-{{- define "mlrun-ce.tdengine.chart" -}}
+{{- define "mlrun-ce.timescaledb.chart" -}}
 {{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
 {{- end }}
 
 {{/*
-Common labels
+TimescaleDB Common labels
 */}}
-{{- define "mlrun-ce.tdengine.labels" -}}
-helm.sh/chart: {{ include "mlrun-ce.tdengine.chart" . }}
-{{ include "mlrun-ce.tdengine.selectorLabels" . }}
+{{- define "mlrun-ce.timescaledb.labels" -}}
+helm.sh/chart: {{ include "mlrun-ce.timescaledb.chart" . }}
+{{ include "mlrun-ce.timescaledb.selectorLabels" . }}
 {{- if .Chart.AppVersion }}
 app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
 {{- end }}
 app.kubernetes.io/managed-by: {{ .Release.Service }}
 {{- end }}
 
 {{/*
-Selector labels
+TimescaleDB Selector labels
 */}}
-{{- define "mlrun-ce.tdengine.selectorLabels" -}}
-app.kubernetes.io/name: {{ include "mlrun-ce.tdengine.name" . }}
+{{- define "mlrun-ce.timescaledb.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "mlrun-ce.timescaledb.name" . }}
 app.kubernetes.io/instance: {{ .Release.Name }}
+app.kubernetes.io/component: timescaledb
+{{- end }}
+
+{{/*
+TimescaleDB connection string for MLRun model monitoring
+*/}}
+{{- define "mlrun-ce.timescaledb.connectionString" -}}
+postgresql://{{ .Values.timescaledb.auth.username }}:{{ .Values.timescaledb.auth.password }}@{{ include "mlrun-ce.timescaledb.fullname" . }}:{{ .Values.timescaledb.service.port }}/{{ .Values.timescaledb.auth.database }}
 {{- end }}
 
diff --git a/charts/mlrun-ce/templates/tdengine/configmap.yaml b/charts/mlrun-ce/templates/tdengine/configmap.yaml
diff --git a/charts/mlrun-ce/templates/tdengine/service.yaml b/charts/mlrun-ce/templates/tdengine/service.yaml
diff --git a/charts/mlrun-ce/templates/tdengine/statefulset.yaml b/charts/mlrun-ce/templates/tdengine/statefulset.yaml
diff --git a/charts/mlrun-ce/templates/timescaledb/secret.yaml b/charts/mlrun-ce/templates/timescaledb/secret.yaml
@@ -0,0 +1,12 @@
+{{- if .Values.timescaledb.enabled -}}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "mlrun-ce.timescaledb.fullname" . }}-secret
+  labels:
+    {{- include "mlrun-ce.timescaledb.labels" . | nindent 4 }}
+type: Opaque
-type: Opaque
+type: Opaque
+# NOTE: The values below contain sensitive credentials. Kubernetes Secrets are only base64-encoded by
+# default; for production clusters, ensure encryption at rest is enabled for Secrets or use an external
+# secret management solution (for example, a CSI driver or External Secrets) to provide these values.
-type: Opaque
+type: Opaque
+# NOTE: The values below contain sensitive credentials. Kubernetes Secrets are only base64-encoded by
+# default; for production clusters, ensure encryption at rest is enabled for Secrets or use an external
+# secret management solution (for example, a CSI driver or External Secrets) to provide these values.
+stringData:
+  username: {{ .Values.timescaledb.auth.username | quote }}
+  password: {{ .Values.timescaledb.auth.password | quote }}
+{{- end }}
diff --git a/charts/mlrun-ce/templates/timescaledb/service.yaml b/charts/mlrun-ce/templates/timescaledb/service.yaml
@@ -0,0 +1,17 @@
+{{- if .Values.timescaledb.enabled -}}
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "mlrun-ce.timescaledb.fullname" . }}
+  labels:
+    {{- include "mlrun-ce.timescaledb.labels" . | nindent 4 }}
+spec:
+  type: {{ .Values.timescaledb.service.type }}
+  ports:
+    - name: postgresql
+      port: {{ .Values.timescaledb.service.port }}
+      targetPort: postgresql
+      protocol: TCP
+  selector:
+    {{- include "mlrun-ce.timescaledb.selectorLabels" . | nindent 4 }}
+{{- end }}