argocd values.yaml💣
nameOverride💣
Type: string
"argocd"
Description: Provide a name in place of argocd
fullnameOverride💣
Type: string
""
Description: String to fully override "argo-cd.fullname"
kubeVersionOverride💣
Type: string
""
Description: Override the Kubernetes version, which is used to evaluate certain manifests
awsCredentials.awsAccessKeyId💣
Type: string
""
awsCredentials.awsSecretAccessKey💣
Type: string
""
awsCredentials.awsDefaultRegion💣
Type: string
"us-gov-west-1"
global.image.repository💣
Type: string
"registry1.dso.mil/ironbank/big-bang/argocd"
global.image.tag💣
Type: string
"v2.4.10"
global.image.imagePullPolicy💣
Type: string
"IfNotPresent"
global.podAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations for the all deployed pods
global.podLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Labels for the all deployed pods
global.securityContext💣
Type: object
{}
Default value (formatted)
{}
Description: Toggle and define securityContext. See [values.yaml]
global.imagePullSecrets[0].name💣
Type: string
"private-registry"
global.hostAliases💣
Type: list
[]
Default value (formatted)
[]
Description: Mapping between IP and hostnames that will be injected as entries in the pod’s hosts files
global.additionalLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Additional labels to add to all resources
global.networkPolicy.create💣
Type: bool
false
Description: Create NetworkPolicy objects for all components
global.networkPolicy.defaultDenyIngress💣
Type: bool
false
Description: Default deny all ingress traffic
apiVersionOverrides.certmanager💣
Type: string
""
Description: String to override apiVersion of certmanager resources rendered by this helm chart
apiVersionOverrides.ingress💣
Type: string
""
Description: String to override apiVersion of ingresses rendered by this helm chart
apiVersionOverrides.autoscaling💣
Type: string
""
Description: String to override apiVersion of autoscaling rendered by this helm chart
createAggregateRoles💣
Type: bool
false
Description: Create clusterroles that extend existing clusterroles to interact with argo-cd crds # Ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#aggregated-clusterroles
extraObjects💣
Type: list
[]
Default value (formatted)
[]
Description: Array of extra K8s manifests to deploy
controller.name💣
Type: string
"application-controller"
Description: Application controller name string
controller.imagePullSecrets[0].name💣
Type: string
"private-registry"
controller.replicas💣
Type: int
1
Description: The number of application controller pods to run. If changing the number of replicas you must pass the number as ARGOCD_CONTROLLER_REPLICAS as an environment variable
controller.enableStatefulSet💣
Type: bool
true
Description: Deploy the application controller as a StatefulSet instead of a Deployment, this is required for HA capability.
controller.args.statusProcessors💣
Type: string
"20"
Description: define the application controller --status-processors
controller.args.operationProcessors💣
Type: string
"10"
Description: define the application controller --operation-processors
controller.args.appResyncPeriod💣
Type: string
"180"
Description: define the application controller --app-resync
controller.args.selfHealTimeout💣
Type: string
"5"
Description: define the application controller --self-heal-timeout-seconds
controller.args.repoServerTimeoutSeconds💣
Type: string
"60"
Description: define the application controller --repo-server-timeout-seconds
controller.logFormat💣
Type: string
"text"
Description: Application controller log format. Either text or json
controller.logLevel💣
Type: string
"info"
Description: Application controller log level
controller.extraArgs💣
Type: list
[]
Default value (formatted)
[]
Description: Additional command line arguments to pass to application controller
controller.env💣
Type: list
[]
Default value (formatted)
[]
Description: Environment variables to pass to application controller
controller.podAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to application controller pods
controller.podLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Labels to be added to application controller pods
controller.containerSecurityContext💣
Type: object
{"capabilities":{"drop":["ALL"]},"runAsGroup":1000,"runAsNonRoot":true,"runAsUser":1000}
Default value (formatted)
{
"capabilities": {
"drop": [
"ALL"
]
},
"runAsGroup": 1000,
"runAsNonRoot": true,
"runAsUser": 1000
}
Description: Application controller container-level security context
controller.containerPort💣
Type: int
8082
Description: Application controller listening port
controller.readinessProbe.failureThreshold💣
Type: int
3
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
controller.readinessProbe.initialDelaySeconds💣
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
controller.readinessProbe.periodSeconds💣
Type: int
10
Description: How often (in seconds) to perform the [probe]
controller.readinessProbe.successThreshold💣
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
controller.readinessProbe.timeoutSeconds💣
Type: int
1
Description: Number of seconds after which the [probe] times out
controller.livenessProbe.failureThreshold💣
Type: int
3
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
controller.livenessProbe.initialDelaySeconds💣
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
controller.livenessProbe.periodSeconds💣
Type: int
10
Description: How often (in seconds) to perform the [probe]
controller.livenessProbe.successThreshold💣
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
controller.livenessProbe.timeoutSeconds💣
Type: int
1
Description: Number of seconds after which the [probe] times out
controller.volumeMounts💣
Type: list
[]
Default value (formatted)
[]
Description: Additional volumeMounts to the application controller main container
controller.volumes💣
Type: list
[]
Default value (formatted)
[]
Description: Additional volumes to the application controller pod
controller.service.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Application controller service annotations
controller.service.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Application controller service labels
controller.service.port💣
Type: int
8082
Description: Application controller service port
controller.service.portName💣
Type: string
"https-controller"
Description: Application controller service port name
controller.nodeSelector💣
Type: object
{}
Default value (formatted)
{}
Description: [Node selector]
controller.tolerations💣
Type: list
[]
Default value (formatted)
[]
Description: [Tolerations] for use with node taints
controller.affinity💣
Type: object
{}
Default value (formatted)
{}
Description: Assign custom [affinity] rules to the deployment
controller.topologySpreadConstraints💣
Type: list
[]
Default value (formatted)
[]
Description: Assign custom [TopologySpreadConstraints] rules to the application controller # Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/ # If labelSelector is left out, it will default to the labelSelector configuration of the deployment
controller.priorityClassName💣
Type: string
""
Description: Priority class for the application controller pods
controller.resources💣
Type: object
{"limits":{"cpu":"500m","memory":"3Gi"},"requests":{"cpu":"500m","memory":"3Gi"}}
Default value (formatted)
{
"limits": {
"cpu": "500m",
"memory": "3Gi"
},
"requests": {
"cpu": "500m",
"memory": "3Gi"
}
}
Description: Resource limits and requests for the application controller pods
controller.serviceAccount.create💣
Type: bool
true
Description: Create a service account for the application controller
controller.serviceAccount.name💣
Type: string
"argocd-application-controller"
Description: Service account name
controller.serviceAccount.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations applied to created service account
controller.serviceAccount.automountServiceAccountToken💣
Type: bool
true
Description: Automount API credentials for the Service Account
controller.metrics.enabled💣
Type: bool
false
Description: Deploy metrics service
controller.metrics.applicationLabels.enabled💣
Type: bool
false
Description: Enables additional labels in argocd_app_labels metric
controller.metrics.applicationLabels.labels💣
Type: list
[]
Default value (formatted)
[]
Description: Additional labels
controller.metrics.service.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Metrics service annotations
controller.metrics.service.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Metrics service labels
controller.metrics.service.servicePort💣
Type: int
8082
Description: Metrics service port
controller.metrics.service.portName💣
Type: string
"http-metrics"
Description: Metrics service port name
controller.metrics.serviceMonitor.enabled💣
Type: bool
false
Description: Enable a prometheus ServiceMonitor
controller.metrics.serviceMonitor.interval💣
Type: string
"30s"
Description: Prometheus ServiceMonitor interval
controller.metrics.serviceMonitor.relabelings💣
Type: list
[]
Default value (formatted)
[]
Description: Prometheus [RelabelConfigs] to apply to samples before scraping
controller.metrics.serviceMonitor.metricRelabelings💣
Type: list
[]
Default value (formatted)
[]
Description: Prometheus [MetricRelabelConfigs] to apply to samples before ingestion
controller.metrics.serviceMonitor.selector💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor selector
controller.metrics.serviceMonitor.scheme💣
Type: string
""
Description: Prometheus ServiceMonitor scheme
controller.metrics.serviceMonitor.tlsConfig💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor tlsConfig
controller.metrics.serviceMonitor.namespace💣
Type: string
""
Description: Prometheus ServiceMonitor namespace
controller.metrics.serviceMonitor.additionalLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor labels
controller.metrics.rules.enabled💣
Type: bool
false
Description: Deploy a PrometheusRule for the application controller
controller.metrics.rules.spec💣
Type: list
[]
Default value (formatted)
[]
Description: PrometheusRule.Spec for the application controller
controller.clusterAdminAccess.enabled💣
Type: bool
true
Description: Enable RBAC for local cluster deployments
controller.clusterRoleRules.enabled💣
Type: bool
false
Description: Enable custom rules for the application controller’s ClusterRole resource
controller.clusterRoleRules.rules💣
Type: list
[]
Default value (formatted)
[]
Description: List of custom rules for the application controller’s ClusterRole resource
controller.extraContainers💣
Type: list
[]
Default value (formatted)
[]
Description: Additional containers to be added to the application controller pod
controller.initContainers💣
Type: list
[]
Default value (formatted)
[]
Description: Init containers to add to the application controller pod # If your target Kubernetes cluster(s) require a custom auth provider executable # you could use this (and the same in the server pod) to bootstrap # that executable into your Argo CD container
controller.pdb.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Labels to be added to application controller pdb
controller.pdb.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to application controller pdb
controller.pdb.enabled💣
Type: bool
false
Description: Deploy a Poddisruptionbudget for the application controller
controller.imagePullSecrets💣
Type: list
[]
Default value (formatted)
[]
Description: Secrets with credentials to pull images from a private registry
dex.enabled💣
Type: bool
true
Description: Enable dex
dex.name💣
Type: string
"dex-server"
Description: Dex name
dex.imagePullSecrets[0].name💣
Type: string
"private-registry"
dex.extraArgs💣
Type: list
[]
Default value (formatted)
[]
Description: Additional command line arguments to pass to the Dex server
dex.metrics.enabled💣
Type: bool
false
Description: Deploy metrics service
dex.metrics.service.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Metrics service annotations
dex.metrics.service.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Metrics service labels
dex.metrics.service.portName💣
Type: string
"http-metrics"
Description: Metrics service port name
dex.metrics.serviceMonitor.enabled💣
Type: bool
false
Description: Enable a prometheus ServiceMonitor
dex.metrics.serviceMonitor.interval💣
Type: string
"30s"
Description: Prometheus ServiceMonitor interval
dex.metrics.serviceMonitor.relabelings💣
Type: list
[]
Default value (formatted)
[]
Description: Prometheus [RelabelConfigs] to apply to samples before scraping
dex.metrics.serviceMonitor.metricRelabelings💣
Type: list
[]
Default value (formatted)
[]
Description: Prometheus [MetricRelabelConfigs] to apply to samples before ingestion
dex.metrics.serviceMonitor.selector💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor selector
dex.metrics.serviceMonitor.scheme💣
Type: string
""
Description: Prometheus ServiceMonitor scheme
dex.metrics.serviceMonitor.tlsConfig💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor tlsConfig
dex.metrics.serviceMonitor.namespace💣
Type: string
""
Description: Prometheus ServiceMonitor namespace
dex.metrics.serviceMonitor.additionalLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor labels
dex.image.repository💣
Type: string
"registry1.dso.mil/ironbank/opensource/dexidp/dex"
Description: Dex image repository
dex.image.tag💣
Type: string
"v2.30.3"
Description: Dex image tag
dex.env💣
Type: list
[]
Default value (formatted)
[]
Description: Environment variables to pass to the Dex server
dex.podAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to the Dex server pods
dex.podLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Labels to be added to the Dex server pods
dex.livenessProbe.enabled💣
Type: bool
false
Description: Enable Kubernetes liveness probe for Dex >= 2.28.0
dex.livenessProbe.failureThreshold💣
Type: int
3
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
dex.livenessProbe.initialDelaySeconds💣
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
dex.livenessProbe.periodSeconds💣
Type: int
10
Description: How often (in seconds) to perform the [probe]
dex.livenessProbe.successThreshold💣
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
dex.livenessProbe.timeoutSeconds💣
Type: int
1
Description: Number of seconds after which the [probe] times out
dex.readinessProbe.enabled💣
Type: bool
false
Description: Enable Kubernetes readiness probe for Dex >= 2.28.0
dex.readinessProbe.failureThreshold💣
Type: int
3
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
dex.readinessProbe.initialDelaySeconds💣
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
dex.readinessProbe.periodSeconds💣
Type: int
10
Description: How often (in seconds) to perform the [probe]
dex.readinessProbe.successThreshold💣
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
dex.readinessProbe.timeoutSeconds💣
Type: int
1
Description: Number of seconds after which the [probe] times out
dex.serviceAccount.create💣
Type: bool
true
Description: Create dex service account
dex.serviceAccount.name💣
Type: string
"argocd-dex-server"
Description: Dex service account name
dex.serviceAccount.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations applied to created service account
dex.serviceAccount.automountServiceAccountToken💣
Type: bool
true
Description: Automount API credentials for the Service Account
dex.volumeMounts💣
Type: list
[{"mountPath":"/shared","name":"static-files"}]
Default value (formatted)
[
{
"mountPath": "/shared",
"name": "static-files"
}
]
Description: Additional volumeMounts to the dex main container
dex.volumes💣
Type: list
[{"emptyDir":{},"name":"static-files"}]
Default value (formatted)
[
{
"emptyDir": {},
"name": "static-files"
}
]
Description: Additional volumes to the dex pod
dex.extraVolumes💣
Type: list
[]
Default value (formatted)
[]
Description: Extra volumes to the dex pod
dex.extraVolumeMounts💣
Type: list
[]
Default value (formatted)
[]
Description: Extra volumeMounts to the dex pod
dex.containerPortHttp💣
Type: int
5556
Description: Container port for HTTP access
dex.servicePortHttp💣
Type: int
5556
Description: Service port for HTTP access
dex.servicePortHttpName💣
Type: string
"http"
Description: Service port name for HTTP access
dex.containerPortGrpc💣
Type: int
5557
Description: Container port for gRPC access
dex.servicePortGrpc💣
Type: int
5557
Description: Service port for gRPC access
dex.servicePortGrpcName💣
Type: string
"grpc"
Description: Service port name for gRPC access
dex.containerPortMetrics💣
Type: int
5558
Description: Container port for metrics access
dex.servicePortMetrics💣
Type: int
5558
Description: Service port for metrics access
dex.nodeSelector💣
Type: object
{}
Default value (formatted)
{}
Description: [Node selector]
dex.tolerations💣
Type: list
[]
Default value (formatted)
[]
Description: [Tolerations] for use with node taints
dex.affinity💣
Type: object
{}
Default value (formatted)
{}
Description: Assign custom [affinity] rules to the deployment
dex.topologySpreadConstraints💣
Type: list
[]
Default value (formatted)
[]
Description: Assign custom [TopologySpreadConstraints] rules to dex # Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/ # If labelSelector is left out, it will default to the labelSelector configuration of the deployment
dex.priorityClassName💣
Type: string
""
Description: Priority class for dex
dex.containerSecurityContext💣
Type: object
{"capabilities":{"drop":["ALL"]},"runAsGroup":1000,"runAsNonRoot":true,"runAsUser":1000}
Default value (formatted)
{
"capabilities": {
"drop": [
"ALL"
]
},
"runAsGroup": 1000,
"runAsNonRoot": true,
"runAsUser": 1000
}
Description: Dex container-level security context
dex.resources💣
Type: object
{"limits":{"cpu":"10m","memory":"128Mi"},"requests":{"cpu":"10m","memory":"128Mi"}}
Default value (formatted)
{
"limits": {
"cpu": "10m",
"memory": "128Mi"
},
"requests": {
"cpu": "10m",
"memory": "128Mi"
}
}
Description: Resource limits and requests for dex
dex.extraContainers💣
Type: list
[]
Default value (formatted)
[]
Description: Additional containers to be added to the dex pod
dex.initContainers💣
Type: list
[]
Default value (formatted)
[]
Description: Init containers to add to the dex pod
dex.pdb.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Labels to be added to Dex server pdb
dex.pdb.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to Dex server pdb
dex.pdb.enabled💣
Type: bool
false
Description: Deploy a Poddisruptionbudget for the Dex server
dex.imagePullSecrets💣
Type: list
[]
Default value (formatted)
[]
Description: Secrets with credentials to pull images from a private registry
redis.externalEndpoint💣
Type: string
""
Description: Endpoint URL for external Redis For use with BigBang passthrough
redis.enabled💣
Type: bool
true
Description: Enable redis
redis.name💣
Type: string
"redis"
Description: Redis name
redis.image.repository💣
Type: string
"registry1.dso.mil/ironbank/opensource/redis/redis6"
Description: Redis repository
redis.image.tag💣
Type: string
"7.0.4"
Description: Redis tag
redis.image.imagePullPolicy💣
Type: string
"IfNotPresent"
Description: Redis imagePullPolicy
redis.imagePullSecrets[0]💣
Type: string
"private-registry"
redis.extraArgs💣
Type: list
[]
Default value (formatted)
[]
Description: Additional command line arguments to pass to redis-server
redis.containerPort💣
Type: int
6379
Description: Redis container port
redis.servicePort💣
Type: int
6379
Description: Redis service port
redis.env💣
Type: list
[]
Default value (formatted)
[]
Description: Environment variables to pass to the Redis server
redis.podAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to the Redis server pods
redis.podLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Labels to be added to the Redis server pods
redis.nodeSelector💣
Type: object
{}
Default value (formatted)
{}
Description: [Node selector]
redis.tolerations💣
Type: list
[]
Default value (formatted)
[]
Description: [Tolerations] for use with node taints
redis.affinity💣
Type: object
{}
Default value (formatted)
{}
Description: Assign custom [affinity] rules to the deployment
redis.topologySpreadConstraints💣
Type: list
[]
Default value (formatted)
[]
Description: Assign custom [TopologySpreadConstraints] rules to redis # Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/ # If labelSelector is left out, it will default to the labelSelector configuration of the deployment
redis.priorityClassName💣
Type: string
""
Description: Priority class for redis
redis.containerSecurityContext💣
Type: object
{}
Default value (formatted)
{}
Description: Redis container-level security context
redis.securityContext💣
Type: object
{"runAsNonRoot":true,"runAsUser":999}
Default value (formatted)
{
"runAsNonRoot": true,
"runAsUser": 999
}
Description: Redis pod-level security context
redis.serviceAccount.create💣
Type: bool
false
Description: Create a service account for the redis pod
redis.serviceAccount.name💣
Type: string
""
Description: Service account name for redis pod
redis.serviceAccount.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations applied to created service account
redis.serviceAccount.automountServiceAccountToken💣
Type: bool
false
Description: Automount API credentials for the Service Account
redis.resources💣
Type: object
{"limits":{"cpu":"50m","memory":"64Mi"},"requests":{"cpu":"50m","memory":"64Mi"}}
Default value (formatted)
{
"limits": {
"cpu": "50m",
"memory": "64Mi"
},
"requests": {
"cpu": "50m",
"memory": "64Mi"
}
}
Description: Resource limits and requests for redis
redis.volumeMounts💣
Type: list
[]
Default value (formatted)
[]
Description: Additional volumeMounts to the redis container
redis.volumes💣
Type: list
[]
Default value (formatted)
[]
Description: Additional volumes to the redis pod
redis.extraContainers💣
Type: list
[]
Default value (formatted)
[]
Description: Additional containers to be added to the redis pod
redis.initContainers💣
Type: list
[]
Default value (formatted)
[]
Description: Init containers to add to the redis pod
redis.service.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Redis service annotations
redis.service.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Additional redis service labels
redis.metrics.enabled💣
Type: bool
false
Description: Deploy metrics service and redis-exporter sidecar
redis.metrics.image.repository💣
Type: string
"public.ecr.aws/bitnami/redis-exporter"
Description: redis-exporter image repository
redis.metrics.image.tag💣
Type: string
"1.26.0-debian-10-r2"
Description: redis-exporter image tag
redis.metrics.image.imagePullPolicy💣
Type: string
"IfNotPresent"
Description: redis-exporter image PullPolicy
redis.metrics.containerPort💣
Type: int
9121
Description: Port to use for redis-exporter sidecar
redis.metrics.resources💣
Type: object
{}
Default value (formatted)
{}
Description: Resource limits and requests for redis-exporter sidecar
redis.metrics.service.type💣
Type: string
"ClusterIP"
Description: Metrics service type
redis.metrics.service.clusterIP💣
Type: string
"None"
Description: Metrics service clusterIP. None makes a “headless service” (no virtual IP)
redis.metrics.service.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Metrics service annotations
redis.metrics.service.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Metrics service labels
redis.metrics.service.servicePort💣
Type: int
9121
Description: Metrics service port
redis.metrics.service.portName💣
Type: string
"http-metrics"
Description: Metrics service port name
redis.metrics.serviceMonitor.enabled💣
Type: bool
false
Description: Enable a prometheus ServiceMonitor
redis.metrics.serviceMonitor.interval💣
Type: string
"30s"
Description: Interval at which metrics should be scraped
redis.metrics.serviceMonitor.relabelings💣
Type: list
[]
Default value (formatted)
[]
Description: Prometheus [RelabelConfigs] to apply to samples before scraping
redis.metrics.serviceMonitor.metricRelabelings💣
Type: list
[]
Default value (formatted)
[]
Description: Prometheus [MetricRelabelConfigs] to apply to samples before ingestion
redis.metrics.serviceMonitor.selector💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor selector
redis.metrics.serviceMonitor.scheme💣
Type: string
""
Description: Prometheus ServiceMonitor scheme
redis.metrics.serviceMonitor.tlsConfig💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor tlsConfig
redis.metrics.serviceMonitor.namespace💣
Type: string
""
Description: Prometheus ServiceMonitor namespace
redis.metrics.serviceMonitor.additionalLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor labels
redis.pdb.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Labels to be added to Redis server pdb
redis.pdb.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to Redis server pdb
redis.pdb.enabled💣
Type: bool
false
Description: Deploy a Poddisruptionbudget for the Redis server
redis-bb💣
Type: object
{"auth":{"enabled":false},"commonConfiguration":"maxmemory 200mb\nsave \"\"","enabled":true,"image":{"pullSecrets":["private-registry"]},"istio":{"redis":{"enabled":false}},"master":{"containerSecurityContext":{"capabilities":{"drop":["ALL"]},"runAsGroup":1001,"runAsNonRoot":true,"runAsUser":1001},"resources":{"limits":{"cpu":"100m","memory":"256Mi"},"requests":{"cpu":"100m","memory":"256Mi"}}},"replica":{"containerSecurityContext":{"capabilities":{"drop":["ALL"]},"runAsGroup":1001,"runAsNonRoot":true,"runAsUser":1001},"resources":{"limits":{"cpu":"100m","memory":"256Mi"},"requests":{"cpu":"100m","memory":"256Mi"}}}}
Default value (formatted)
{
"auth": {
"enabled": false
},
"commonConfiguration": "maxmemory 200mb
save \"\"",
"enabled": true,
"image": {
"pullSecrets": [
"private-registry"
]
},
"istio": {
"redis": {
"enabled": false
}
},
"master": {
"containerSecurityContext": {
"capabilities": {
"drop": [
"ALL"
]
},
"runAsGroup": 1001,
"runAsNonRoot": true,
"runAsUser": 1001
},
"resources": {
"limits": {
"cpu": "100m",
"memory": "256Mi"
},
"requests": {
"cpu": "100m",
"memory": "256Mi"
}
}
},
"replica": {
"containerSecurityContext": {
"capabilities": {
"drop": [
"ALL"
]
},
"runAsGroup": 1001,
"runAsNonRoot": true,
"runAsUser": 1001
},
"resources": {
"limits": {
"cpu": "100m",
"memory": "256Mi"
},
"requests": {
"cpu": "100m",
"memory": "256Mi"
}
}
}
}
Description: BigBang HA Redis Passthrough
externalRedis.host💣
Type: string
""
Description: External Redis server host
externalRedis.password💣
Type: string
""
Description: External Redis password
externalRedis.port💣
Type: int
6379
Description: External Redis server port
externalRedis.existingSecret💣
Type: string
""
Description: The name of an existing secret with Redis credentials (must contain key redis-password). When it’s set, the externalRedis.password parameter is ignored
externalRedis.secretAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: External Redis Secret annotations
server.name💣
Type: string
"server"
Description: Argo CD server name
server.replicas💣
Type: int
1
Description: The number of server pods to run
server.autoscaling.enabled💣
Type: bool
false
Description: Enable Horizontal Pod Autoscaler ([HPA]) for the Argo CD server
server.autoscaling.minReplicas💣
Type: int
1
Description: Minimum number of replicas for the Argo CD server [HPA]
server.autoscaling.maxReplicas💣
Type: int
5
Description: Maximum number of replicas for the Argo CD server [HPA]
server.autoscaling.targetCPUUtilizationPercentage💣
Type: int
50
Description: Average CPU utilization percentage for the Argo CD server [HPA]
server.autoscaling.targetMemoryUtilizationPercentage💣
Type: int
50
Description: Average memory utilization percentage for the Argo CD server [HPA]
server.extraArgs💣
Type: list
["--insecure"]
Default value (formatted)
[
"--insecure"
]
Description: Additional command line arguments to pass to Argo CD server
server.staticAssets.enabled💣
Type: bool
true
Description: Disable deprecated flag --staticassets
server.env💣
Type: list
[]
Default value (formatted)
[]
Description: Environment variables to pass to Argo CD server
server.lifecycle💣
Type: object
{}
Default value (formatted)
{}
Description: Specify postStart and preStop lifecycle hooks for your argo-cd-server container
server.logFormat💣
Type: string
"text"
Description: Argo CD server log format: Either text or json
server.logLevel💣
Type: string
"info"
Description: Argo CD server log level
server.podAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to server pods
server.podLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Labels to be added to server pods
server.containerPort💣
Type: int
8080
Description: Configures the server port
server.readinessProbe.failureThreshold💣
Type: int
3
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
server.readinessProbe.initialDelaySeconds💣
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
server.readinessProbe.periodSeconds💣
Type: int
10
Description: How often (in seconds) to perform the [probe]
server.readinessProbe.successThreshold💣
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
server.readinessProbe.timeoutSeconds💣
Type: int
1
Description: Number of seconds after which the [probe] times out
server.livenessProbe.failureThreshold💣
Type: int
3
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
server.livenessProbe.initialDelaySeconds💣
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
server.livenessProbe.periodSeconds💣
Type: int
10
Description: How often (in seconds) to perform the [probe]
server.livenessProbe.successThreshold💣
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
server.livenessProbe.timeoutSeconds💣
Type: int
1
Description: Number of seconds after which the [probe] times out
server.volumeMounts💣
Type: list
[]
Default value (formatted)
[]
Description: Additional volumeMounts to the server main container
server.volumes💣
Type: list
[]
Default value (formatted)
[]
Description: Additional volumes to the server pod
server.nodeSelector💣
Type: object
{}
Default value (formatted)
{}
Description: [Node selector]
server.tolerations💣
Type: list
[]
Default value (formatted)
[]
Description: [Tolerations] for use with node taints
server.affinity💣
Type: object
{}
Default value (formatted)
{}
Description: Assign custom [affinity] rules to the deployment
server.topologySpreadConstraints💣
Type: list
[]
Default value (formatted)
[]
Description: Assign custom [TopologySpreadConstraints] rules to the Argo CD server # Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/ # If labelSelector is left out, it will default to the labelSelector configuration of the deployment
server.priorityClassName💣
Type: string
""
Description: Priority class for the Argo CD server
server.containerSecurityContext💣
Type: object
{"capabilities":{"drop":["ALL"]},"runAsGroup":1000,"runAsNonRoot":true,"runAsUser":1000}
Default value (formatted)
{
"capabilities": {
"drop": [
"ALL"
]
},
"runAsGroup": 1000,
"runAsNonRoot": true,
"runAsUser": 1000
}
Description: Servers container-level security context
server.resources💣
Type: object
{"limits":{"cpu":"20m","memory":"128Mi"},"requests":{"cpu":"20m","memory":"128Mi"}}
Default value (formatted)
{
"limits": {
"cpu": "20m",
"memory": "128Mi"
},
"requests": {
"cpu": "20m",
"memory": "128Mi"
}
}
Description: Resource limits and requests for the Argo CD server
server.certificate.enabled💣
Type: bool
false
Description: Deploy a Certificate resource (requires cert-manager)
server.certificate.domain💣
Type: string
"argocd.example.com"
Description: Certificate primary domain (commonName)
server.certificate.duration💣
Type: string
""
Description: The requested ‘duration’ (i.e. lifetime) of the Certificate. Value must be in units accepted by Go time.ParseDuration
server.certificate.renewBefore💣
Type: string
""
Description: How long before the currently issued certificate’s expiry cert-manager should renew the certificate. Value must be in units accepted by Go time.ParseDuration
server.certificate.issuer.group💣
Type: string
""
Description: Certificate issuer group. Set if using an external issuer. Eg. cert-manager.io
server.certificate.issuer.kind💣
Type: string
""
Description: Certificate issuer kind. Either Issuer or ClusterIssuer
server.certificate.issuer.name💣
Type: string
""
Description: Certificate isser name. Eg. letsencrypt
server.certificate.additionalHosts💣
Type: list
[]
Default value (formatted)
[]
Description: Certificate manager additional hosts
server.certificate.secretName💣
Type: string
"argocd-server-tls"
Description: The name of the Secret that will be automatically created and managed by this Certificate resource
server.service.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Server service annotations
server.service.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Server service labels
server.service.type💣
Type: string
"ClusterIP"
Description: Server service type
server.service.nodePortHttp💣
Type: int
30080
Description: Server service http port for NodePort service type (only if server.service.type is set to “NodePort”)
server.service.nodePortHttps💣
Type: int
30443
Description: Server service https port for NodePort service type (only if server.service.type is set to “NodePort”)
server.service.servicePortHttp💣
Type: int
80
Description: Server service http port
server.service.servicePortHttps💣
Type: int
443
Description: Server service https port
server.service.servicePortHttpName💣
Type: string
"tcp-server"
Description: Server service http port name, can be used to route traffic via istio
server.service.servicePortHttpsName💣
Type: string
"https"
Description: Server service https port name, can be used to route traffic via istio
server.service.namedTargetPort💣
Type: bool
true
Description: Use named target port for argocd # Named target ports are not supported by GCE health checks, so when deploying argocd on GKE # and exposing it via GCE ingress, the health checks fail and the load balancer returns a 502.
server.service.loadBalancerIP💣
Type: string
""
Description: LoadBalancer will get created with the IP specified in this field
server.service.loadBalancerSourceRanges💣
Type: list
[]
Default value (formatted)
[]
Description: Source IP ranges to allow access to service from
server.service.externalIPs💣
Type: list
[]
Default value (formatted)
[]
Description: Server service external IPs
server.service.externalTrafficPolicy💣
Type: string
""
Description: Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
server.service.sessionAffinity💣
Type: string
""
Description: Used to maintain session affinity. Supports ClientIP and None
server.metrics.enabled💣
Type: bool
false
Description: Deploy metrics service
server.metrics.service.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Metrics service annotations
server.metrics.service.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Metrics service labels
server.metrics.service.servicePort💣
Type: int
8083
Description: Metrics service port
server.metrics.service.portName💣
Type: string
"http-metrics"
Description: Metrics service port name
server.metrics.serviceMonitor.enabled💣
Type: bool
false
Description: Enable a prometheus ServiceMonitor
server.metrics.serviceMonitor.interval💣
Type: string
"30s"
Description: Prometheus ServiceMonitor interval
server.metrics.serviceMonitor.relabelings💣
Type: list
[]
Default value (formatted)
[]
Description: Prometheus [RelabelConfigs] to apply to samples before scraping
server.metrics.serviceMonitor.metricRelabelings💣
Type: list
[]
Default value (formatted)
[]
Description: Prometheus [MetricRelabelConfigs] to apply to samples before ingestion
server.metrics.serviceMonitor.selector💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor selector
server.metrics.serviceMonitor.scheme💣
Type: string
""
Description: Prometheus ServiceMonitor scheme
server.metrics.serviceMonitor.tlsConfig💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor tlsConfig
server.metrics.serviceMonitor.namespace💣
Type: string
""
Description: Prometheus ServiceMonitor namespace
server.metrics.serviceMonitor.additionalLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor labels
server.serviceAccount.create💣
Type: bool
true
Description: Create server service account
server.serviceAccount.name💣
Type: string
"argocd-server"
Description: Server service account name
server.serviceAccount.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations applied to created service account
server.serviceAccount.automountServiceAccountToken💣
Type: bool
true
Description: Automount API credentials for the Service Account
server.ingress.enabled💣
Type: bool
false
Description: Enable an ingress resource for the Argo CD server
server.ingress.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Additional ingress annotations
server.ingress.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Additional ingress labels
server.ingress.ingressClassName💣
Type: string
""
Description: Defines which ingress controller will implement the resource
server.ingress.hosts💣
Type: list
[]
Default value (formatted)
[]
Description: List of ingress hosts # Argo Ingress. # Hostnames must be provided if Ingress is enabled. # Secrets must be manually created in the namespace
server.ingress.paths💣
Type: list
["/"]
Default value (formatted)
[
"/"
]
Description: List of ingress paths
server.ingress.pathType💣
Type: string
"Prefix"
Description: Ingress path type. One of Exact, Prefix or ImplementationSpecific
server.ingress.extraPaths💣
Type: list
[]
Default value (formatted)
[]
Description: Additional ingress paths
server.ingress.tls💣
Type: list
[]
Default value (formatted)
[]
Description: Ingress TLS configuration
server.ingress.https💣
Type: bool
false
Description: Uses server.service.servicePortHttps instead server.service.servicePortHttp
server.ingressGrpc.enabled💣
Type: bool
false
Description: Enable an ingress resource for the Argo CD server for dedicated [gRPC-ingress]
server.ingressGrpc.isAWSALB💣
Type: bool
false
Description: Setup up gRPC ingress to work with an AWS ALB
server.ingressGrpc.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Additional ingress annotations for dedicated [gRPC-ingress]
server.ingressGrpc.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Additional ingress labels for dedicated [gRPC-ingress]
server.ingressGrpc.ingressClassName💣
Type: string
""
Description: Defines which ingress controller will implement the resource [gRPC-ingress]
server.ingressGrpc.awsALB.serviceType💣
Type: string
"NodePort"
Description: Service type for the AWS ALB gRPC service # Service Type if isAWSALB is set to true # Can be of type NodePort or ClusterIP depending on which mode you are # are running. Instance mode needs type NodePort, IP mode needs type # ClusterIP # Ref: https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.2/how-it-works/#ingress-traffic
server.ingressGrpc.awsALB.backendProtocolVersion💣
Type: string
"HTTP2"
Description: Backend protocol version for the AWS ALB gRPC service # This tells AWS to send traffic from the ALB using HTTP2. Can use gRPC as well if you want to leverage gRPC specific features
server.ingressGrpc.hosts💣
Type: list
[]
Default value (formatted)
[]
Description: List of ingress hosts for dedicated [gRPC-ingress] # Argo Ingress. # Hostnames must be provided if Ingress is enabled. # Secrets must be manually created in the namespace #
server.ingressGrpc.paths💣
Type: list
["/"]
Default value (formatted)
[
"/"
]
Description: List of ingress paths for dedicated [gRPC-ingress]
server.ingressGrpc.pathType💣
Type: string
"Prefix"
Description: Ingress path type for dedicated [gRPC-ingress]. One of Exact, Prefix or ImplementationSpecific
server.ingressGrpc.extraPaths💣
Type: list
[]
Default value (formatted)
[]
Description: Additional ingress paths for dedicated [gRPC-ingress]
server.ingressGrpc.tls💣
Type: list
[]
Default value (formatted)
[]
Description: Ingress TLS configuration for dedicated [gRPC-ingress]
server.ingressGrpc.https💣
Type: bool
false
Description: Uses server.service.servicePortHttps instead server.service.servicePortHttp
server.route.enabled💣
Type: bool
false
Description: Enable an OpenShift Route for the Argo CD server
server.route.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Openshift Route annotations
server.route.hostname💣
Type: string
""
Description: Hostname of OpenShift Route
server.route.termination_type💣
Type: string
"passthrough"
Description: Termination type of Openshift Route
server.route.termination_policy💣
Type: string
"None"
Description: Termination policy of Openshift Route
server.configEnabled💣
Type: bool
true
Description: Manage Argo CD configmap (Declarative Setup) # Ref: https://github.com/argoproj/argo-cd/blob/master/docs/operator-manual/argocd-cm.yaml
server.configAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to Argo CD ConfigMap
server.rbacConfig💣
Type: object
{}
Default value (formatted)
{}
Description: Argo CD rbac config ([Argo CD RBAC policy]) # Ref: https://github.com/argoproj/argo-cd/blob/master/docs/operator-manual/rbac.md
server.rbacConfigAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to Argo CD rbac ConfigMap
server.rbacConfigCreate💣
Type: bool
true
Description: Whether or not to create the configmap. If false, it is expected the configmap will be created by something else. Argo CD will not work if there is no configMap created with the name above.
server.clusterAdminAccess.enabled💣
Type: bool
true
Description: Enable RBAC for local cluster deployments
server.GKEbackendConfig.enabled💣
Type: bool
false
Description: Enable BackendConfig custom resource for Google Kubernetes Engine
server.GKEbackendConfig.spec💣
Type: object
{}
Default value (formatted)
{}
Description: [BackendConfigSpec]
server.GKEmanagedCertificate.enabled💣
Type: bool
false
Description: Enable ManagedCertificate custom resource for Google Kubernetes Engine.
server.GKEmanagedCertificate.domains💣
Type: list
["argocd.example.com"]
Default value (formatted)
[
"argocd.example.com"
]
Description: Domains for the Google Managed Certificate
server.GKEfrontendConfig.enabled💣
Type: bool
false
Description: Enable FrontConfig custom resource for Google Kubernetes Engine
server.GKEfrontendConfig.spec💣
Type: object
{}
Default value (formatted)
{}
Description: [FrontendConfigSpec]
server.extraContainers💣
Type: list
[]
Default value (formatted)
[]
Description: Additional containers to be added to the server pod # See https://github.com/lemonldap-ng-controller/lemonldap-ng-controller as example.
server.initContainers💣
Type: list
[]
Default value (formatted)
[]
Description: Init containers to add to the server pod # If your target Kubernetes cluster(s) require a custom auth provider executable # you could use this (and the same in the application controller pod) to bootstrap # that executable into your Argo CD container
server.extensions.enabled💣
Type: bool
false
Description: Enable support for extensions # This function in tech preview stage, do expect unstability or breaking changes in newer versions. Bump image.tag if necessary.
server.extensions.image.repository💣
Type: string
"ghcr.io/argoproj-labs/argocd-extensions"
Description: Repository to use for extensions image
server.extensions.image.tag💣
Type: string
"v0.1.0"
Description: Tag to use for extensions image
server.extensions.image.imagePullPolicy💣
Type: string
"IfNotPresent"
Description: Image pull policy for extensions
server.extensions.resources💣
Type: object
{}
Default value (formatted)
{}
Description: Resource limits and requests for the argocd-extensions container
server.extensions.contents💣
Type: list
[]
Default value (formatted)
[]
Description: Extensions to be loaded into the server
server.pdb.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Labels to be added to server pdb
server.pdb.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to server pdb
server.pdb.enabled💣
Type: bool
false
Description: Deploy a Poddisruptionbudget for the server
server.imagePullSecrets💣
Type: list
[]
Default value (formatted)
[]
Description: Secrets with credentials to pull images from a private registry
repoServer.name💣
Type: string
"repo-server"
Description: Repo server name
repoServer.replicas💣
Type: int
1
Description: The number of repo server pods to run
repoServer.autoscaling.enabled💣
Type: bool
false
Description: Enable Horizontal Pod Autoscaler ([HPA]) for the repo server
repoServer.autoscaling.minReplicas💣
Type: int
1
Description: Minimum number of replicas for the repo server [HPA]
repoServer.autoscaling.maxReplicas💣
Type: int
5
Description: Maximum number of replicas for the repo server [HPA]
repoServer.autoscaling.targetCPUUtilizationPercentage💣
Type: int
50
Description: Average CPU utilization percentage for the repo server [HPA]
repoServer.autoscaling.targetMemoryUtilizationPercentage💣
Type: int
50
Description: Average memory utilization percentage for the repo server [HPA]
repoServer.extraArgs💣
Type: list
[]
Default value (formatted)
[]
Description: Additional command line arguments to pass to repo server
repoServer.env💣
Type: list
[]
Default value (formatted)
[]
Description: Environment variables to pass to repo server
repoServer.logFormat💣
Type: string
"text"
Description: Repo server log format: Either text or json
repoServer.logLevel💣
Type: string
"info"
Description: Repo server log level
repoServer.podAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to repo server pods
repoServer.podLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Labels to be added to repo server pods
repoServer.containerPort💣
Type: int
8081
Description: Configures the repo server port
repoServer.readinessProbe.failureThreshold💣
Type: int
3
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
repoServer.readinessProbe.initialDelaySeconds💣
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
repoServer.readinessProbe.periodSeconds💣
Type: int
10
Description: How often (in seconds) to perform the [probe]
repoServer.readinessProbe.successThreshold💣
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
repoServer.readinessProbe.timeoutSeconds💣
Type: int
1
Description: Number of seconds after which the [probe] times out
repoServer.livenessProbe.failureThreshold💣
Type: int
3
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
repoServer.livenessProbe.initialDelaySeconds💣
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
repoServer.livenessProbe.periodSeconds💣
Type: int
10
Description: How often (in seconds) to perform the [probe]
repoServer.livenessProbe.successThreshold💣
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
repoServer.livenessProbe.timeoutSeconds💣
Type: int
1
Description: Number of seconds after which the [probe] times out
repoServer.volumeMounts💣
Type: list
[]
Default value (formatted)
[]
Description: Additional volumeMounts to the repo server main container
repoServer.volumes💣
Type: list
[]
Default value (formatted)
[]
Description: Additional volumes to the repo server pod
repoServer.nodeSelector💣
Type: object
{}
Default value (formatted)
{}
Description: [Node selector]
repoServer.tolerations💣
Type: list
[]
Default value (formatted)
[]
Description: [Tolerations] for use with node taints
repoServer.affinity💣
Type: object
{}
Default value (formatted)
{}
Description: Assign custom [affinity] rules to the deployment
repoServer.topologySpreadConstraints💣
Type: list
[]
Default value (formatted)
[]
Description: Assign custom [TopologySpreadConstraints] rules to the repo server # Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/ # If labelSelector is left out, it will default to the labelSelector configuration of the deployment
repoServer.priorityClassName💣
Type: string
""
Description: Priority class for the repo server
repoServer.containerSecurityContext💣
Type: object
{"capabilities":{"drop":["ALL"]},"runAsGroup":1000,"runAsNonRoot":true,"runAsUser":1000}
Default value (formatted)
{
"capabilities": {
"drop": [
"ALL"
]
},
"runAsGroup": 1000,
"runAsNonRoot": true,
"runAsUser": 1000
}
Description: Repo server container-level security context
repoServer.resources💣
Type: object
{"limits":{"cpu":"100m","memory":"1Gi"},"requests":{"cpu":"100m","memory":"1Gi"}}
Default value (formatted)
{
"limits": {
"cpu": "100m",
"memory": "1Gi"
},
"requests": {
"cpu": "100m",
"memory": "1Gi"
}
}
Description: Resource limits and requests for the repo server pods
repoServer.service.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Repo server service annotations
repoServer.service.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Repo server service labels
repoServer.service.port💣
Type: int
8081
Description: Repo server service port
repoServer.service.portName💣
Type: string
"tcp-repo-server"
Description: Repo server service port name
repoServer.metrics.enabled💣
Type: bool
false
Description: Deploy metrics service
repoServer.metrics.service.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Metrics service annotations
repoServer.metrics.service.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Metrics service labels
repoServer.metrics.service.servicePort💣
Type: int
8084
Description: Metrics service port
repoServer.metrics.service.portName💣
Type: string
"http-metrics"
Description: Metrics service port name
repoServer.metrics.serviceMonitor.enabled💣
Type: bool
false
Description: Enable a prometheus ServiceMonitor
repoServer.metrics.serviceMonitor.interval💣
Type: string
"30s"
Description: Prometheus ServiceMonitor interval
repoServer.metrics.serviceMonitor.relabelings💣
Type: list
[]
Default value (formatted)
[]
Description: Prometheus [RelabelConfigs] to apply to samples before scraping
repoServer.metrics.serviceMonitor.metricRelabelings💣
Type: list
[]
Default value (formatted)
[]
Description: Prometheus [MetricRelabelConfigs] to apply to samples before ingestion
repoServer.metrics.serviceMonitor.selector💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor selector
repoServer.metrics.serviceMonitor.scheme💣
Type: string
""
Description: Prometheus ServiceMonitor scheme
repoServer.metrics.serviceMonitor.tlsConfig💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor tlsConfig
repoServer.metrics.serviceMonitor.namespace💣
Type: string
""
Description: Prometheus ServiceMonitor namespace
repoServer.metrics.serviceMonitor.additionalLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor labels
repoServer.clusterAdminAccess.enabled💣
Type: bool
false
Description: Enable RBAC for local cluster deployments
repoServer.clusterRoleRules.enabled💣
Type: bool
false
Description: Enable custom rules for the Repo server’s Cluster Role resource
repoServer.clusterRoleRules.rules💣
Type: list
[]
Default value (formatted)
[]
Description: List of custom rules for the Repo server’s Cluster Role resource
repoServer.serviceAccount.create💣
Type: bool
true
Description: Create repo server service account
repoServer.serviceAccount.name💣
Type: string
""
Description: Repo server service account name
repoServer.serviceAccount.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations applied to created service account
repoServer.serviceAccount.automountServiceAccountToken💣
Type: bool
true
Description: Automount API credentials for the Service Account
repoServer.extraContainers💣
Type: list
[]
Default value (formatted)
[]
Description: Additional containers to be added to the repo server pod
repoServer.rbac💣
Type: list
[]
Default value (formatted)
[]
Description: Repo server rbac rules
repoServer.copyutil.resources💣
Type: object
{}
Default value (formatted)
{}
Description: Resource limits and requests for the copyutil initContainer
repoServer.initContainers💣
Type: list
[]
Default value (formatted)
[]
Description: Init containers to add to the repo server pods
repoServer.pdb.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Labels to be added to Repo server pdb
repoServer.pdb.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to Repo server pdb
repoServer.pdb.enabled💣
Type: bool
false
Description: Deploy a Poddisruptionbudget for the Repo server
repoServer.imagePullSecrets💣
Type: list
[]
Default value (formatted)
[]
Description: Secrets with credentials to pull images from a private registry
configs.gpgKeysAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: GnuPG key ring annotations
configs.knownHostsAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: Known Hosts configmap annotations
configs.tlsCertsAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: TLS certificate configmap annotations
configs.repositoryCredentials💣
Type: object
{}
Default value (formatted)
{}
Description: DEPRECATED: Instead, use configs.credentialTemplates and/or configs.repositories
configs.credentialTemplates💣
Type: object
{}
Default value (formatted)
{}
Description: Repository credentials to be used as Templates for other repos # Creates a secret for each key/value specified below to create repository credentials
configs.credentialTemplatesAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to configs.credentialTemplates Secret
configs.repositories💣
Type: object
{}
Default value (formatted)
{}
Description: Repositories list to be used by applications # Creates a secret for each key/value specified below to create repositories # Note: the last example in the list would use a repository credential template, configured under “configs.repositoryCredentials”.
configs.repositoriesAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to configs.repositories Secret
configs.secret.createSecret💣
Type: bool
true
Description: Create the argocd-secret
configs.secret.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be added to argocd-secret
configs.secret.githubSecret💣
Type: string
""
Description: Shared secret for authenticating GitHub webhook events
configs.secret.gitlabSecret💣
Type: string
""
Description: Shared secret for authenticating GitLab webhook events
configs.secret.bitbucketServerSecret💣
Type: string
""
Description: Shared secret for authenticating BitbucketServer webhook events
configs.secret.bitbucketUUID💣
Type: string
""
Description: UUID for authenticating Bitbucket webhook events
configs.secret.gogsSecret💣
Type: string
""
Description: Shared secret for authenticating Gogs webhook events
configs.secret.extra💣
Type: object
{}
Default value (formatted)
{}
Description: add additional secrets to be added to argocd-secret # Custom secrets. Useful for injecting SSO secrets into environment variables. # Ref: https://argo-cd.readthedocs.io/en/stable/operator-manual/user-management/#sensitive-data-and-sso-client-secrets # Note that all values must be non-empty.
configs.secret.argocdServerTlsConfig💣
Type: object
{}
Default value (formatted)
{}
Description: Argo TLS Data
openshift.enabled💣
Type: bool
false
Description: enables using arbitrary uid for argo repo server
sso.enabled💣
Type: bool
false
sso.rbac.”policy.csv”💣
Type: string
"g, Impact Level 2 Authorized, role:admin\n"
Default value (formatted)
g, Impact Level 2 Authorized, role:admin
sso.keycloakClientSecret💣
Type: string
"this-can-be-anything-for-dev"
sso.config.”oidc.config”💣
Type: string
"name: Keycloak\nissuer: https://login.dso.mil/auth/realms/baby-yoda\nclientID: platform1_a8604cc9-f5e9-4656-802d-d05624370245_bb8-argocd\nclientSecret: $oidc.keycloak.clientSecret\nrequestedScopes: [\"openid\",\"ArgoCD\"]\n"
Default value (formatted)
name: Keycloak
issuer: https://login.dso.mil/auth/realms/baby-yoda
clientID: platform1_a8604cc9-f5e9-4656-802d-d05624370245_bb8-argocd
clientSecret: $oidc.keycloak.clientSecret
requestedScopes: [\"openid\",\"ArgoCD\"]
domain💣
Type: string
"bigbang.dev"
istio.enabled💣
Type: bool
false
Description: Toggle BigBang istio integration
istio.mtls💣
Type: object
{"mode":"STRICT"}
Default value (formatted)
{
"mode": "STRICT"
}
Description: Default argocd peer authentication
istio.mtls.mode💣
Type: string
"STRICT"
Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic
istio.argocd.enabled💣
Type: bool
true
Description: Toggle Istio VirtualService creation
istio.argocd.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Set Annotations for VirtualService
istio.argocd.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Set Labels for VirtualService
istio.argocd.gateways💣
Type: list
["istio-system/main"]
Default value (formatted)
[
"istio-system/main"
]
Description: Set Gateway for VirtualService
istio.argocd.hosts💣
Type: list
["argocd.{{ .Values.domain }}"]
Default value (formatted)
[
"argocd.{{ .Values.domain }}"
]
Description: Set Hosts for VirtualService
monitoring.enabled💣
Type: bool
false
Description: Toggle BigBang monitoring integration
networkPolicies.enabled💣
Type: bool
false
Description: Toggle BigBang networkPolicies integration
networkPolicies.ingressLabels.app💣
Type: string
"istio-ingressgateway"
networkPolicies.ingressLabels.istio💣
Type: string
"ingressgateway"
networkPolicies.controlPlaneCidr💣
Type: string
"0.0.0.0/0"
Description: Control Plane CIDR, defaults to 0.0.0.0/0, use kubectl get endpoints -n default kubernetes to get the CIDR range needed for your cluster Must be an IP CIDR range (x.x.x.x/x - ideally with /32 for the specific IP of a single endpoint, broader range for multiple masters/endpoints) Used by package NetworkPolicies to allow Kube API access
bbtests.enabled💣
Type: bool
false
bbtests.cypress.artifacts💣
Type: bool
true
bbtests.cypress.envs.cypress_url💣
Type: string
"http://argocd-server:80"
bbtests.cypress.envs.cypress_user💣
Type: string
"admin"
bbtests.cypress.envs.cypress_password💣
Type: string
"Password123"
applicationSet.enabled💣
Type: bool
false
Description: Enable Application Set controller
applicationSet.name💣
Type: string
"applicationset-controller"
Description: Application Set controller name string
applicationSet.replicaCount💣
Type: int
1
Description: The number of controller pods to run
applicationSet.args.metricsAddr💣
Type: string
":8080"
Description: The default metric address
applicationSet.args.probeBindAddr💣
Type: string
":8081"
Description: The default health check port
applicationSet.args.enableLeaderElection💣
Type: bool
false
Description: The default leader election setting
applicationSet.args.policy💣
Type: string
"sync"
Description: How application is synced between the generator and the cluster
applicationSet.args.debug💣
Type: bool
false
Description: Print debug logs
applicationSet.args.dryRun💣
Type: bool
false
Description: Enable dry run mode
applicationSet.extraContainers💣
Type: list
[]
Default value (formatted)
[]
Description: Additional containers to be added to the applicationset controller pod
applicationSet.metrics.enabled💣
Type: bool
false
Description: Deploy metrics service
applicationSet.metrics.service.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Metrics service annotations
applicationSet.metrics.service.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Metrics service labels
applicationSet.metrics.service.servicePort💣
Type: int
8085
Description: Metrics service port
applicationSet.metrics.service.portName💣
Type: string
"http-metrics"
Description: Metrics service port name
applicationSet.metrics.serviceMonitor.enabled💣
Type: bool
false
Description: Enable a prometheus ServiceMonitor
applicationSet.metrics.serviceMonitor.interval💣
Type: string
"30s"
Description: Prometheus ServiceMonitor interval
applicationSet.metrics.serviceMonitor.relabelings💣
Type: list
[]
Default value (formatted)
[]
Description: Prometheus [RelabelConfigs] to apply to samples before scraping
applicationSet.metrics.serviceMonitor.metricRelabelings💣
Type: list
[]
Default value (formatted)
[]
Description: Prometheus [MetricRelabelConfigs] to apply to samples before ingestion
applicationSet.metrics.serviceMonitor.selector💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor selector
applicationSet.metrics.serviceMonitor.scheme💣
Type: string
""
Description: Prometheus ServiceMonitor scheme
applicationSet.metrics.serviceMonitor.tlsConfig💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor tlsConfig
applicationSet.metrics.serviceMonitor.namespace💣
Type: string
""
Description: Prometheus ServiceMonitor namespace
applicationSet.metrics.serviceMonitor.additionalLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor labels
applicationSet.imagePullSecrets💣
Type: list
[]
Default value (formatted)
[]
Description: If defined, uses a Secret to pull an image from a private Docker registry or repository.
applicationSet.service.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Application set service annotations
applicationSet.service.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Application set service labels
applicationSet.service.port💣
Type: int
7000
Description: Application set service port
applicationSet.service.portName💣
Type: string
"webhook"
Description: Application set service port name
applicationSet.serviceAccount.create💣
Type: bool
true
Description: Specifies whether a service account should be created
applicationSet.serviceAccount.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to add to the service account
applicationSet.serviceAccount.name💣
Type: string
""
Description: The name of the service account to use. If not set and create is true, a name is generated using the fullname template
applicationSet.podAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations for the controller pods
applicationSet.podLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Labels for the controller pods
applicationSet.podSecurityContext💣
Type: object
{}
Default value (formatted)
{}
Description: Pod Security Context
applicationSet.securityContext💣
Type: object
{}
Default value (formatted)
{}
Description: Security Context
applicationSet.resources💣
Type: object
{}
Default value (formatted)
{}
Description: Resource limits and requests for the controller pods.
applicationSet.nodeSelector💣
Type: object
{}
Default value (formatted)
{}
Description: [Node selector]
applicationSet.tolerations💣
Type: list
[]
Default value (formatted)
[]
Description: [Tolerations] for use with node taints
applicationSet.affinity💣
Type: object
{}
Default value (formatted)
{}
Description: Assign custom [affinity] rules
applicationSet.priorityClassName💣
Type: string
""
Description: If specified, indicates the pod’s priority. If not specified, the pod priority will be default or zero if there is no default.
applicationSet.extraVolumeMounts💣
Type: list
[]
Default value (formatted)
[]
Description: List of extra mounts to add (normally used with extraVolumes)
applicationSet.extraVolumes💣
Type: list
[]
Default value (formatted)
[]
Description: List of extra volumes to add
applicationSet.extraArgs💣
Type: list
[]
Default value (formatted)
[]
Description: List of extra cli args to add
applicationSet.extraEnv💣
Type: list
[]
Default value (formatted)
[]
Description: Environment variables to pass to the controller
applicationSet.webhook.ingress.enabled💣
Type: bool
false
Description: Enable an ingress resource for Webhooks
applicationSet.webhook.ingress.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Additional ingress annotations
applicationSet.webhook.ingress.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Additional ingress labels
applicationSet.webhook.ingress.ingressClassName💣
Type: string
""
Description: Defines which ingress controller will implement the resource
applicationSet.webhook.ingress.hosts💣
Type: list
[]
Default value (formatted)
[]
Description: List of ingress hosts # Hostnames must be provided if Ingress is enabled. # Secrets must be manually created in the namespace
applicationSet.webhook.ingress.paths💣
Type: list
["/api/webhook"]
Default value (formatted)
[
"/api/webhook"
]
Description: List of ingress paths
applicationSet.webhook.ingress.pathType💣
Type: string
"Prefix"
Description: Ingress path type. One of Exact, Prefix or ImplementationSpecific
applicationSet.webhook.ingress.extraPaths💣
Type: list
[]
Default value (formatted)
[]
Description: Additional ingress paths
applicationSet.webhook.ingress.tls💣
Type: list
[]
Default value (formatted)
[]
Description: Ingress TLS configuration
notifications.enabled💣
Type: bool
false
Description: Enable Notifications controller
notifications.name💣
Type: string
"notifications-controller"
Description: Notifications controller name string
notifications.affinity💣
Type: object
{}
Default value (formatted)
{}
Description: Assign custom [affinity] rules
notifications.argocdUrl💣
Type: string
nil
Description: Argo CD dashboard url; used in place of {{.context.argocdUrl}} in templates
notifications.imagePullSecrets💣
Type: list
[]
Default value (formatted)
[]
Description: Secrets with credentials to pull images from a private registry
notifications.nodeSelector💣
Type: object
{}
Default value (formatted)
{}
Description: [Node selector]
notifications.updateStrategy💣
Type: object
{"type":"Recreate"}
Default value (formatted)
{
"type": "Recreate"
}
Description: The deployment strategy to use to replace existing pods with new ones
notifications.context💣
Type: object
{}
Default value (formatted)
{}
Description: Define user-defined context # For more information: https://argocd-notifications.readthedocs.io/en/stable/templates/#defining-user-defined-context
notifications.secret.create💣
Type: bool
true
Description: Whether helm chart creates controller secret
notifications.secret.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: key:value pairs of annotations to be added to the secret
notifications.secret.name💣
Type: string
""
Description: The name of the secret to use. # If not set and create is true, the default name ‘argocd-notifications-secret’ is used
notifications.secret.items💣
Type: object
{}
Default value (formatted)
{}
Description: Generic key:value pairs to be inserted into the secret # Can be used for templates, notification services etc. Some examples given below. # For more information: https://argocd-notifications.readthedocs.io/en/stable/services/overview/
notifications.logLevel💣
Type: string
"info"
Description: Set the logging level. (One of: debug, info, warn, error)
notifications.logFormat💣
Type: string
"text"
Description: Application controller log format. Either text or json
notifications.extraArgs💣
Type: list
[]
Default value (formatted)
[]
Description: Extra arguments to provide to the controller
notifications.extraEnv💣
Type: list
[]
Default value (formatted)
[]
Description: Additional container environment variables
notifications.extraVolumeMounts💣
Type: list
[]
Default value (formatted)
[]
Description: List of extra mounts to add (normally used with extraVolumes)
notifications.extraVolumes💣
Type: list
[]
Default value (formatted)
[]
Description: List of extra volumes to add
notifications.metrics.enabled💣
Type: bool
false
Description: Enables prometheus metrics server
notifications.metrics.port💣
Type: int
9001
Description: Metrics port
notifications.metrics.service.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Metrics service annotations
notifications.metrics.service.labels💣
Type: object
{}
Default value (formatted)
{}
Description: Metrics service labels
notifications.metrics.service.portName💣
Type: string
"http-metrics"
Description: Metrics service port name
notifications.metrics.serviceMonitor.enabled💣
Type: bool
false
Description: Enable a prometheus ServiceMonitor
notifications.metrics.serviceMonitor.selector💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor selector
notifications.metrics.serviceMonitor.additionalLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor labels
notifications.metrics.serviceMonitor.scheme💣
Type: string
""
Description: Prometheus ServiceMonitor scheme
notifications.metrics.serviceMonitor.tlsConfig💣
Type: object
{}
Default value (formatted)
{}
Description: Prometheus ServiceMonitor tlsConfig
notifications.podAnnotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations to be applied to the controller Pods
notifications.podLabels💣
Type: object
{}
Default value (formatted)
{}
Description: Labels to be applied to the controller Pods
notifications.securityContext💣
Type: object
{"runAsNonRoot":true}
Default value (formatted)
{
"runAsNonRoot": true
}
Description: Pod Security Context
notifications.containerSecurityContext💣
Type: object
{}
Default value (formatted)
{}
Description: Container Security Context
notifications.resources💣
Type: object
{}
Default value (formatted)
{}
Description: Resource limits and requests for the controller
notifications.serviceAccount.create💣
Type: bool
true
Description: Specifies whether a service account should be created
notifications.serviceAccount.name💣
Type: string
"argocd-notifications-controller"
Description: The name of the service account to use. # If not set and create is true, a name is generated using the fullname template
notifications.serviceAccount.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations applied to created service account
notifications.cm.create💣
Type: bool
true
Description: Whether helm chart creates controller config map
notifications.cm.name💣
Type: string
""
Description: The name of the config map to use. # If not set and create is true, the default name ‘argocd-notifications-cm’ is used
notifications.subscriptions💣
Type: object
{}
Default value (formatted)
{}
Description: Contains centrally managed global application subscriptions # For more information: https://argocd-notifications.readthedocs.io/en/stable/subscriptions/
notifications.templates💣
Type: object
{}
Default value (formatted)
{}
Description: The notification template is used to generate the notification content # For more information: https://argocd-notifications.readthedocs.io/en/stable/templates/
notifications.tolerations💣
Type: list
[]
Default value (formatted)
[]
Description: [Tolerations] for use with node taints
notifications.triggers💣
Type: object
{}
Default value (formatted)
{}
Description: The trigger defines the condition when the notification should be sent # For more information: https://argocd-notifications.readthedocs.io/en/stable/triggers/
notifications.bots.slack.enabled💣
Type: bool
false
Description: Enable slack bot # You have to set secret.notifiers.slack.signingSecret
notifications.bots.slack.updateStrategy💣
Type: object
{"type":"Recreate"}
Default value (formatted)
{
"type": "Recreate"
}
Description: The deployment strategy to use to replace existing pods with new ones
notifications.bots.slack.imagePullSecrets💣
Type: list
[]
Default value (formatted)
[]
Description: Secrets with credentials to pull images from a private registry
notifications.bots.slack.service.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Service annotations for Slack bot
notifications.bots.slack.service.port💣
Type: int
80
Description: Service port for Slack bot
notifications.bots.slack.service.type💣
Type: string
"LoadBalancer"
Description: Service type for Slack bot
notifications.bots.slack.serviceAccount.create💣
Type: bool
true
Description: Specifies whether a service account should be created
notifications.bots.slack.serviceAccount.name💣
Type: string
"argocd-notifications-bot"
Description: The name of the service account to use. # If not set and create is true, a name is generated using the fullname template
notifications.bots.slack.serviceAccount.annotations💣
Type: object
{}
Default value (formatted)
{}
Description: Annotations applied to created service account
notifications.bots.slack.securityContext💣
Type: object
{"runAsNonRoot":true}
Default value (formatted)
{
"runAsNonRoot": true
}
Description: Pod Security Context
notifications.bots.slack.containerSecurityContext💣
Type: object
{}
Default value (formatted)
{}
Description: Container Security Context
notifications.bots.slack.resources💣
Type: object
{}
Default value (formatted)
{}
Description: Resource limits and requests for the Slack bot
notifications.bots.slack.affinity💣
Type: object
{}
Default value (formatted)
{}
Description: Assign custom [affinity] rules
notifications.bots.slack.tolerations💣
Type: list
[]
Default value (formatted)
[]
Description: [Tolerations] for use with node taints
notifications.bots.slack.nodeSelector💣
Type: object
{}
Default value (formatted)
{}
Description: [Node selector]