Chart version: 0.8.4
Api version: v1
App version: 0.8.0
DEPRECATED A Helm chart for prometheus cloudwatch-exporter
Chart Type
Set me up:
helm repo add center
Install Chart:
helm install prometheus-cloudwatch-exporter center/stable/prometheus-cloudwatch-exporter
Versions (0)

Cloudwatch exporter

DEPRECATED and moved to


$ helm install stable/prometheus-cloudwatch-exporter


This chart bootstraps a cloudwatch exporter deployment on a Kubernetes cluster using the Helm package manager.


  • kube2iam installed to used the aws.role config option otherwise configure aws.aws_access_key_id and aws.aws_secret_access_key or
  • Or an IAM Role for service account attached to a service account with an annotation. If you run the pod as nobody in securityContext.runAsUser then also set securityContext.fsGroup to the same value so it will be able to access to the mounted secret.

Installing the Chart

To install the chart with the release name my-release:

$ helm install --name my-release stable/prometheus-cloudwatch-exporter --set aws.aws_access_key_id=$AWS_ACCESS_KEY_ID,aws.aws_secret_access_key=$AWS_SECRET_ACCESS_KEY

$ # or store them in a secret and pass its name as a value
$ kubectl create secret generic <SECRET_NAME> --from-literal=access_key=$AWS_ACCESS_KEY_ID --from-literal=secret_key=$AWS_SECRET_ACCESS_KEY
$ helm install --name my-release stable/prometheus-cloudwatch-exporter --set<SECRET_NAME>

$ # or add a role to aws with the [correct policy]( to add to cloud watch and pass its name as a value
$ helm install --name my-release stable/prometheus-cloudwatch-exporter --set awsRole=<ROLL_NAME>

The command deploys Cloudwatch exporter on the Kubernetes cluster in the default configuration. The configuration section lists the parameters that can be configured during installation.

Uninstalling the Chart

To uninstall/delete the my-release deployment:

$ helm delete my-release

The command removes all the Kubernetes components associated with the chart and deletes the release.


The following table lists the configurable parameters of the Cloudwatch Exporter chart and their default values.

Parameter Description Default
image.repository Image prom/cloudwatch-exporter
image.tag Image tag cloudwatch_exporter-0.8.0
image.pullPolicy Image pull policy IfNotPresent
command Container entrypoint command []
containerPort Application listening port 9106
service.type Service type ClusterIP
service.port The service port 80
service.portName The name of the service port http
service.annotations Custom annotations for service {}
service.labels Additional custom labels for the service {}
resources {}
aws.role AWS IAM Role To Use
aws.aws_access_key_id AWS access key id
aws.aws_secret_access_key AWS secret access key The name of a pre-created secret in which AWS credentials are stored
aws.secret.includesSessionToken Whether or not the pre-created secret contains an AWS STS session token
config Cloudwatch exporter configuration example configuration
rbac.create If true, create & use RBAC resources false
serviceAccount.create Specifies whether a service account should be created. true Name of the service account.
serviceAccount.annotations Custom annotations for service account. {}
tolerations Add tolerations []
nodeSelector node labels for pod assignment {}
affinity node/pod affinities {}
livenessProbe Liveness probe settings
readinessProbe Readiness probe settings
serviceMonitor.enabled Use servicemonitor from prometheus operator false
serviceMonitor.namespace Namespace thes Servicemonitor is installed in
serviceMonitor.interval How frequently Prometheus should scrape
serviceMonitor.telemetryPath path to cloudwatch-exporter telemtery-path
serviceMonitor.labels labels for the ServiceMonitor passed to Prometheus Operator {}
serviceMonitor.timeout Timeout after which the scrape is ended
serviceMonitor.relabelings RelabelConfigs to apply to samples before scraping.
serviceMonitor.metricRelabelings MetricRelabelConfigs to apply to samples before ingestion.
prometheusRule.enabled Namespace thes PrometheusRule is installed in false
prometheusRule.namespace Use PrometheusRule from prometheus operator
prometheusRule.labels labels for the prometheusRule passed to Prometheus Operator
prometheusRule.rules Specify alerting rules in YAML format for PrometheusRule
ingress.enabled Enables Ingress false
ingress.annotations Ingress annotations {}
ingress.labels Custom labels {}
ingress.hosts Ingress accepted hostnames []
ingress.tls Ingress TLS configuration []
securityContext Security Context for the pod {}

Specify each parameter using the --set key=value[,key=value] argument to helm install. For example,

$ helm install --name my-release \
    --set aws.role=my-aws-role \

Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart. For example,

$ helm install --name my-release -f values.yaml stable/prometheus-cloudwatch-exporter