[onedr0p]

Adds a standalone gatus-sidecar Helm chart that deploys upstream Gatus (ghcr.io/twin/gatus, image-only — never built here) together with the home-operations gatus-sidecar as a native sidecar that auto-discovers cluster endpoints. Published to oci://ghcr.io/home-operations/charts/gatus-sidecar, following the kromgo/tuppr chart conventions (helm-docs README, values.schema.json, helm-unittest, OCI publish + cosign).

Layout

• Deployment running the gatus container + gatus-sidecar as a native sidecar (initContainer restartPolicy: Always) sharing a /config volume.
• Persistence off by default → /config is an emptyDir (in-memory Gatus). Flip persistence.enabled for a PVC (existingClaim / storageClass / size).
• Bring-your-own config: set config.existingConfigMap + config.items (subPath-overlaid into gatus.configPath); the chart never renders Gatus config.

Split bump ownership

• Gatus → gatus.image.tag (default v5.36.0); Renovate bumps it (extends home-operations/renovate-config, regenerates docs/schema on upgrade).
• gatus-sidecar → the release Helm job pins its just-built digest; Renovate is disabled for that image.
• Chart version = this repo's release; appVersion = the pinned Gatus tag.

Configuration surface

• Gatus env: first-class GATUS_CONFIG_PATH (chart-set), GATUS_LOG_LEVEL, GATUS_DELAY_START_SECONDS, GATUS_WEB_PORT (from gatus.port), plus gatus.env/extraEnv/envFrom for ${VAR} config substitution.
• Sidecar: structured config (namespace, gatewayNames, ingressClasses, output, defaultInterval, probePaths, annotationConfig/-Enabled, logLevel, per-kind {enable, auto, prefix} for ingress/httproute/service/ingressroute) rendered into the real flags. Default mirrors real usage: httproute.auto + service.enable.
• RBAC derived from the enabled kinds (least privilege, get/list/watch; + rbac.extraRules).
• Availability knobs (mirrors feat(chart): availability knobs (PDB, priorityClass, grace, startup probe) konflate#189): podDisruptionBudget, priorityClassName, terminationGracePeriodSeconds, gatus.startupProbe.
• Service, optional ServiceMonitor, HTTPRoute and/or Ingress (like kromgo).

CI

helm-lint + helm-unittest jobs, a generate-check gate, and a kind e2e ("Helm E2E (kind)") that builds + kind-loads the PR's sidecar image, installs the chart service-only (no Gateway API CRDs needed) with in-memory Gatus, and runs helm test against /health.

Verified: helm lint / template / helm-unittest (42/42, 6 suites) / generate-check / zizmor all green.

Consuming it

Point an OCIRepository at oci://ghcr.io/home-operations/charts/gatus-sidecar and supply config.existingConfigMap + config.items. Resource names are <release>-gatus-sidecar — name the release gatus-sidecar (or set fullnameOverride) for clean names.