You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
[Spike] Add Helm template support for Splunk Universal Forwarder #1775
The splunk-operator Helm chart currently supports deploying Splunk Enterprise components
(Standalone, IndexerCluster, etc.) but has no built-in template for a Universal Forwarder (UF).
Teams that need to deploy a UF alongside their Splunk stack must manage it manually or with
separate tooling.
Problem
There is no universalforwarder Helm template in helm-chart/splunk-enterprise/templates/,
making it harder to manage UF deployments consistently alongside operator-managed resources.
Spike Goal
Explore and validate the design of a Helm template for deploying a Universal Forwarder,
specifically answering:
What Kubernetes resources are needed (Deployment, Secret, ConfigMap)?
How should the UF be configured (env vars, mounted config file)?
Should this use the existing CRD pattern or be a standalone Deployment?
What security context constraints are required?
Spike Output / Definition of Done
A working prototype template that renders and deploys successfully
A list of open questions or follow-up tasks for productionizing the template
Decision on whether to proceed with full implementation
Activity
tasen5 commentedon Mar 13, 2026
ffb2c19
kasiakoziol commentedon Aug 5, 2026
Hello @tasen5
This is addressed - https://github.com/splunk/splunk-operator/tree/develop/helm-chart/splunk-universalforwarder - and will be released as a part of the upcoming release.
Best regards,
Kasia