argocd values.yaml📜
awsCredentials.awsAccessKeyId📜
Type: string
""
awsCredentials.awsSecretAccessKey📜
Type: string
""
awsCredentials.awsDefaultRegion📜
Type: string
"us-gov-west-1"
domain📜
Type: string
"dev.bigbang.mil"
istio.enabled📜
Type: bool
false
Description: Toggle BigBang istio integration
istio.hardened.enabled📜
Type: bool
false
istio.hardened.outboundTrafficPolicyMode📜
Type: string
"REGISTRY_ONLY"
istio.hardened.customServiceEntries📜
Type: list
[]
istio.hardened.customAuthorizationPolicies📜
Type: list
[]
istio.hardened.monitoring.enabled📜
Type: bool
true
istio.hardened.monitoring.namespaces[0]📜
Type: string
"monitoring"
istio.hardened.monitoring.principals[0]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-grafana"
istio.hardened.monitoring.principals[1]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-alertmanager"
istio.hardened.monitoring.principals[2]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-operator"
istio.hardened.monitoring.principals[3]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-prometheus"
istio.hardened.monitoring.principals[4]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-state-metrics"
istio.hardened.monitoring.principals[5]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-prometheus-node-exporter"
istio.hardened.argocd.enabled📜
Type: bool
true
istio.hardened.argocd.namespaces[0]📜
Type: string
"argocd"
istio.hardened.argocd.principals[0]📜
Type: string
"cluster.local/ns/argocd/sa/argocd-application-controller"
istio.hardened.argocd.principals[1]📜
Type: string
"cluster.local/ns/argocd/sa/argocd-applicationset-controller"
istio.hardened.argocd.principals[2]📜
Type: string
"cluster.local/ns/argocd/sa/argocd-argocd-redis-bb"
istio.hardened.argocd.principals[3]📜
Type: string
"cluster.local/ns/argocd/sa/argocd-argocd-repo-server"
istio.hardened.argocd.principals[4]📜
Type: string
"cluster.local/ns/argocd/sa/argocd-dex-server"
istio.hardened.argocd.principals[5]📜
Type: string
"cluster.local/ns/argocd/sa/argocd-notifications-controller"
istio.hardened.argocd.principals[6]📜
Type: string
"cluster.local/ns/argocd/sa/argocd-server"
istio.hardened.argocd.principals[7]📜
Type: string
"cluster.local/ns/argocd/sa/upgrade-job-svc-account"
istio.hardened.argocd.principals[8]📜
Type: string
"cluster.local/ns/argocd/sa/argocd-argocd-redis-bb-metrics"
istio.injection📜
Type: string
"disabled"
Description: Toggle BigBang istio injection
istio.mtls📜
Type: object
mode: STRICT
Description: Default argocd peer authentication
istio.mtls.mode📜
Type: string
"STRICT"
Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic
istio.argocd.enabled📜
Type: bool
true
Description: Toggle Istio VirtualService creation
istio.argocd.annotations📜
Type: object
{}
Description: Set Annotations for VirtualService
istio.argocd.labels📜
Type: object
{}
Description: Set Labels for VirtualService
istio.argocd.gateways📜
Type: list
- istio-system/main
Description: Set Gateway for VirtualService
istio.argocd.hosts📜
Type: list
- argocd.{{ .Values.domain }}
Description: Set Hosts for VirtualService
monitoring.enabled📜
Type: bool
false
Description: Toggle BigBang monitoring integration
networkPolicies.enabled📜
Type: bool
false
Description: Toggle BigBang networkPolicies integration
networkPolicies.ingressLabels.app📜
Type: string
"istio-ingressgateway"
networkPolicies.ingressLabels.istio📜
Type: string
"ingressgateway"
networkPolicies.controlPlaneCidr📜
Type: string
"0.0.0.0/0"
Description: Control Plane CIDR, defaults to 0.0.0.0/0, use kubectl get endpoints -n default kubernetes to get the CIDR range needed for your cluster Must be an IP CIDR range (x.x.x.x/x - ideally with /32 for the specific IP of a single endpoint, broader range for multiple masters/endpoints) Used by package NetworkPolicies to allow Kube API access
networkPolicies.additionalPolicies📜
Type: list
[]
upgradeJob.enabled📜
Type: bool
true
upgradeJob.image.repository📜
Type: string
"registry1.dso.mil/ironbank/big-bang/base"
upgradeJob.image.tag📜
Type: string
"2.1.0"
upgradeJob.image.imagePullPolicy📜
Type: string
"IfNotPresent"
bbtests.enabled📜
Type: bool
false
bbtests.cypress.artifacts📜
Type: bool
true
bbtests.cypress.envs.cypress_url📜
Type: string
"http://argocd-server"
bbtests.cypress.envs.cypress_user📜
Type: string
"admin"
bbtests.cypress.envs.cypress_password📜
Type: string
"Password123"
bbtests.cypress.envs.cypress_timeout📜
Type: string
"120000"
bbtests.cypress.resources.requests.cpu📜
Type: int
4
bbtests.cypress.resources.requests.memory📜
Type: string
"4Gi"
bbtests.cypress.resources.limits.cpu📜
Type: int
4
bbtests.cypress.resources.limits.memory📜
Type: string
"8Gi"
bbtests.scripts.image📜
Type: string
"registry1.dso.mil/bigbang-ci/devops-tester:1.1.2"
bbtests.scripts.envs.ARGOCD_SERVER📜
Type: string
"http://argocd-server"
bbtests.scripts.envs.ARGOCD_USER📜
Type: string
"admin"
bbtests.scripts.envs.ARGOCD_PASSWORD📜
Type: string
"Password123"
redis-bb📜
Type: object
auth:
enabled: false
commonConfiguration: 'maxmemory 200mb
save ""'
enabled: true
image:
pullSecrets:
- private-registry
istio:
redis:
enabled: false
master:
containerSecurityContext:
capabilities:
drop:
- ALL
enabled: true
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
resources:
limits:
cpu: 100m
memory: 256Mi
requests:
cpu: 100m
memory: 256Mi
metrics:
containerSecurityContext:
enabled: true
runAsGroup: 1001
runAsUser: 1001
enabled: true
labels:
app.kubernetes.io/name: argocd-redis-ha-haproxy
metrics: null
replica:
containerSecurityContext:
capabilities:
drop:
- ALL
enabled: true
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 5
periodSeconds: 10
successThreshold: 1
tcpSocket:
port: 6379
timeoutSeconds: 30
resources:
limits:
cpu: 100m
memory: 256Mi
requests:
cpu: 100m
memory: 256Mi
Description: BigBang HA Redis Passthrough
redis-bb.metrics.labels📜
Type: object
app.kubernetes.io/name: argocd-redis-ha-haproxy
Description: Custom labels for the haproxy pod. This is relevant for Argo CD CLI.
redis-bb.metrics.containerSecurityContext📜
Type: object
enabled: true
runAsGroup: 1001
runAsUser: 1001
Description: HAProxy enable prometheus metric scraping
global.domain📜
Type: string
"argocd.example.com"
Description: Default domain used by all components # Used for ingresses, certificates, SSO, notifications, etc.
global.runtimeClassName📜
Type: string
""
Description: Runtime class name for all components
global.additionalLabels📜
Type: object
{}
Description: Common labels for the all resources
global.revisionHistoryLimit📜
Type: int
3
Description: Number of old deployment ReplicaSets to retain. The rest will be garbage collected.
global.image.repository📜
Type: string
"registry1.dso.mil/ironbank/big-bang/argocd"
Description: If defined, a repository applied to all Argo CD deployments
global.image.tag📜
Type: string
"v3.0.6"
Description: Overrides the global Argo CD image tag whose default is the chart appVersion
global.image.imagePullPolicy📜
Type: string
"IfNotPresent"
Description: If defined, a imagePullPolicy applied to all Argo CD deployments
global.imagePullSecrets📜
Type: list
- name: private-registry
Description: Secrets with credentials to pull images from a private registry
global.logging.format📜
Type: string
"text"
Description: Set the global logging format. Either: text or json
global.logging.level📜
Type: string
"info"
Description: Set the global logging level. One of: debug, info, warn or error
global.statefulsetAnnotations📜
Type: object
{}
Description: Annotations for the all deployed Statefulsets
global.deploymentAnnotations📜
Type: object
{}
Description: Annotations for the all deployed Deployments
global.podAnnotations📜
Type: object
{}
Description: Annotations for the all deployed pods
global.podLabels📜
Type: object
{}
Description: Labels for the all deployed pods
global.addPrometheusAnnotations📜
Type: bool
false
Description: Add Prometheus scrape annotations to all metrics services. This can be used as an alternative to the ServiceMonitors.
global.hostAliases📜
Type: list
[]
Description: Mapping between IP and hostnames that will be injected as entries in the pod’s hosts files
global.dualStack.ipFamilyPolicy📜
Type: string
""
Description: IP family policy to configure dual-stack see Configure dual-stack
global.dualStack.ipFamilies📜
Type: list
[]
Description: IP families that should be supported and the order in which they should be applied to ClusterIP as well. Can be IPv4 and/or IPv6.
global.networkPolicy.create📜
Type: bool
false
Description: Create NetworkPolicy objects for all components
global.networkPolicy.defaultDenyIngress📜
Type: bool
false
Description: Default deny all ingress traffic
global.priorityClassName📜
Type: string
""
Description: Default priority class for all components
global.nodeSelector📜
Type: object
kubernetes.io/os: linux
Description: Default node selector for all components
global.tolerations📜
Type: list
[]
Description: Default tolerations for all components
global.affinity.podAntiAffinity📜
Type: string
"soft"
Description: Default pod anti-affinity rules. Either: none, soft or hard
global.affinity.nodeAffinity.type📜
Type: string
"hard"
Description: Default node affinity rules. Either: none, soft or hard
global.affinity.nodeAffinity.matchExpressions📜
Type: list
[]
Description: Default match expressions for node affinity
global.topologySpreadConstraints📜
Type: list
[]
Description: Default [TopologySpreadConstraints] rules for all components # Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/ # If labelSelector is left out, it will default to the labelSelector of the component
global.deploymentStrategy📜
Type: object
{}
Description: Deployment strategy for the all deployed Deployments
global.env📜
Type: list
[]
Description: Environment variables to pass to all deployed Deployments
global.certificateAnnotations📜
Type: object
{}
Description: Annotations for the all deployed Certificates
upstream.nameOverride📜
Type: string
"argocd"
Description: Provide a name in place of argocd
upstream.fullnameOverride📜
Type: string
""
Description: String to fully override "argo-cd.fullname"
upstream.namespaceOverride📜
Type: string
.Release.Namespace
Description: Override the namespace
upstream.kubeVersionOverride📜
Type: string
""
Description: Override the Kubernetes version, which is used to evaluate certain manifests
upstream.apiVersionOverrides📜
Type: object
{}
upstream.createAggregateRoles📜
Type: bool
false
Description: Create aggregated roles that extend existing cluster roles to interact with argo-cd resources # Ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#aggregated-clusterroles
upstream.createClusterRoles📜
Type: bool
true
Description: Create cluster roles for cluster-wide installation. # Used when you manage applications in the same cluster where Argo CD runs
upstream.openshift.enabled📜
Type: bool
false
Description: enables using arbitrary uid for argo repo server
upstream.crds.install📜
Type: bool
true
Description: Install and upgrade CRDs
upstream.crds.keep📜
Type: bool
true
Description: Keep CRDs on chart uninstall
upstream.crds.annotations📜
Type: object
{}
Description: Annotations to be added to all CRDs
upstream.crds.additionalLabels📜
Type: object
{}
Description: Addtional labels to be added to all CRDs
upstream.configs.cm.create📜
Type: bool
true
Description: Create the argocd-cm configmap for [declarative setup]
upstream.configs.cm.annotations📜
Type: object
{}
Description: Annotations to be added to argocd-cm configmap
upstream.configs.cm.”application.instanceLabelKey”📜
Type: string
"argocd.argoproj.io/instance"
Description: The name of tracking label used by Argo CD for resource pruning
upstream.configs.cm.”application.sync.impersonation.enabled”📜
Type: bool
false
Description: Enable control of the service account used for the sync operation (alpha) # Ref: https://argo-cd.readthedocs.io/en/stable/operator-manual/app-sync-using-impersonation/
upstream.configs.cm.”server.rbac.log.enforce.enable”📜
Type: bool
false
Description: Enable logs RBAC enforcement # Ref: https://argo-cd.readthedocs.io/en/latest/operator-manual/upgrading/2.3-2.4/#enable-logs-rbac-enforcement
upstream.configs.cm.”exec.enabled”📜
Type: bool
false
Description: Enable exec feature in Argo UI # Ref: https://argo-cd.readthedocs.io/en/latest/operator-manual/rbac/#exec-resource
upstream.configs.cm.”admin.enabled”📜
Type: bool
true
Description: Enable local admin user # Ref: https://argo-cd.readthedocs.io/en/latest/faq/#how-to-disable-admin-user
upstream.configs.cm.”timeout.reconciliation”📜
Type: string
"180s"
Description: Timeout to discover if a new manifests version got published to the repository
upstream.configs.cm.”timeout.hard.reconciliation”📜
Type: string
"0s"
Description: Timeout to refresh application data as well as target manifests cache
upstream.configs.cm.”statusbadge.enabled”📜
Type: bool
false
Description: Enable Status Badge # Ref: https://argo-cd.readthedocs.io/en/stable/user-guide/status-badge/
upstream.configs.params.create📜
Type: bool
true
Description: Create the argocd-cmd-params-cm configmap If false, it is expected the configmap will be created by something else.
upstream.configs.params.annotations📜
Type: object
{}
Description: Annotations to be added to the argocd-cmd-params-cm ConfigMap
upstream.configs.params.”otlp.address”📜
Type: string
""
Description: Open-Telemetry collector address: (e.g. “otel-collector:4317”)
upstream.configs.params.”controller.status.processors”📜
Type: int
20
Description: Number of application status processors
upstream.configs.params.”controller.operation.processors”📜
Type: int
10
Description: Number of application operation processors
upstream.configs.params.”controller.self.heal.timeout.seconds”📜
Type: int
5
Description: Specifies timeout between application self heal attempts
upstream.configs.params.”controller.repo.server.timeout.seconds”📜
Type: int
60
Description: Repo server RPC call timeout seconds.
upstream.configs.params.”controller.sync.timeout.seconds”📜
Type: int
0
Description: Specifies the timeout after which a sync would be terminated. 0 means no timeout
upstream.configs.params.”server.insecure”📜
Type: bool
true
Description: Run server without TLS # NOTE: This value should be set when you generate params by other means as it changes ports used by ingress template.
upstream.configs.params.”server.basehref”📜
Type: string
"/"
Description: Value for base href in index.html. Used if Argo CD is running behind reverse proxy under subpath different from /
upstream.configs.params.”server.rootpath”📜
Type: string
""
Description: Used if Argo CD is running behind reverse proxy under subpath different from /
upstream.configs.params.”server.staticassets”📜
Type: string
"/shared/app"
Description: Directory path that contains additional static assets
upstream.configs.params.”server.disable.auth”📜
Type: bool
false
Description: Disable Argo CD RBAC for user authentication
upstream.configs.params.”server.enable.gzip”📜
Type: bool
true
Description: Enable GZIP compression
upstream.configs.params.”server.enable.proxy.extension”📜
Type: bool
false
Description: Enable proxy extension feature. (proxy extension is in Alpha phase)
upstream.configs.params.”server.x.frame.options”📜
Type: string
"sameorigin"
Description: Set X-Frame-Options header in HTTP responses to value. To disable, set to “”.
upstream.configs.params.”reposerver.parallelism.limit”📜
Type: int
0
Description: Limit on number of concurrent manifests generate requests. Any value less the 1 means no limit.
upstream.configs.params.”applicationsetcontroller.policy”📜
Type: string
"sync"
Description: Modify how application is synced between the generator and the cluster. One of: sync, create-only, create-update, create-delete
upstream.configs.params.”applicationsetcontroller.enable.progressive.syncs”📜
Type: bool
false
Description: Enables use of the Progressive Syncs capability
upstream.configs.params.”application.namespaces”📜
Type: string
""
Description: Enables [Applications in any namespace] # List of additional namespaces where applications may be created in and reconciled from. # The namespace where Argo CD is installed to will always be allowed. # Set comma-separated list. (e.g. app-team-one, app-team-two)
upstream.configs.params.”controller.ignore.normalizer.jq.timeout”📜
Type: string
"1s"
Description: JQ Path expression timeout # By default, the evaluation of a JQPathExpression is limited to one second. # If you encounter a “JQ patch execution timed out” error message due to a complex JQPathExpression # that requires more time to evaluate, you can extend the timeout period.
upstream.configs.rbac.create📜
Type: bool
true
Description: Create the argocd-rbac-cm configmap with ([Argo CD RBAC policy]) definitions. If false, it is expected the configmap will be created by something else. Argo CD will not work if there is no configmap created with the name above.
upstream.configs.rbac.annotations📜
Type: object
{}
Description: Annotations to be added to argocd-rbac-cm configmap
upstream.configs.rbac.”policy.default”📜
Type: string
""
Description: The name of the default role which Argo CD will falls back to, when authorizing API requests (optional). If omitted or empty, users may be still be able to login, but will see no apps, projects, etc…
upstream.configs.rbac.scopes📜
Type: string
"[groups]"
Description: OIDC scopes to examine during rbac enforcement (in addition to sub scope). The scope value can be a string, or a list of strings.
upstream.configs.rbac.”policy.matchMode”📜
Type: string
"glob"
Description: Matcher function for Casbin, glob for glob matcher and regex for regex matcher.
upstream.configs.gpg.annotations📜
Type: object
{}
Description: Annotations to be added to argocd-gpg-keys-cm configmap
upstream.configs.ssh.create📜
Type: bool
true
Description: Specifies if the argocd-ssh-known-hosts-cm configmap should be created by Helm.
upstream.configs.ssh.annotations📜
Type: object
{}
Description: Annotations to be added to argocd-ssh-known-hosts-cm configmap
upstream.configs.ssh.extraHosts📜
Type: string
""
Description: Additional known hosts for private repositories
upstream.configs.tls.annotations📜
Type: object
{}
Description: Annotations to be added to argocd-tls-certs-cm configmap
upstream.configs.tls.create📜
Type: bool
true
Description: Specifies if the argocd-tls-certs-cm configmap should be created by Helm.
upstream.configs.cmp.create📜
Type: bool
false
Description: Create the argocd-cmp-cm configmap
upstream.configs.cmp.annotations📜
Type: object
{}
Description: Annotations to be added to argocd-cmp-cm configmap
upstream.configs.cmp.plugins📜
Type: object
{}
Description: Plugin yaml files to be added to argocd-cmp-cm
upstream.configs.credentialTemplates📜
Type: object
{}
Description: Repository credentials to be used as Templates for other repos # Creates a secret for each key/value specified below to create repository credentials
upstream.configs.credentialTemplatesAnnotations📜
Type: object
{}
Description: Annotations to be added to configs.credentialTemplates Secret
upstream.configs.repositories📜
Type: object
{}
Description: Repositories list to be used by applications # Creates a secret for each key/value specified below to create repositories # Note: the last example in the list would use a repository credential template, configured under “configs.credentialTemplates”.
upstream.configs.repositoriesAnnotations📜
Type: object
{}
Description: Annotations to be added to configs.repositories Secret
upstream.configs.secret.createSecret📜
Type: bool
true
Description: Create the argocd-secret
upstream.configs.secret.labels📜
Type: object
{}
Description: Labels to be added to argocd-secret
upstream.configs.secret.annotations📜
Type: object
{}
Description: Annotations to be added to argocd-secret
upstream.configs.secret.githubSecret📜
Type: string
""
Description: Shared secret for authenticating GitHub webhook events
upstream.configs.secret.gitlabSecret📜
Type: string
""
Description: Shared secret for authenticating GitLab webhook events
upstream.configs.secret.bitbucketServerSecret📜
Type: string
""
Description: Shared secret for authenticating BitbucketServer webhook events
upstream.configs.secret.bitbucketUUID📜
Type: string
""
Description: UUID for authenticating Bitbucket webhook events
upstream.configs.secret.gogsSecret📜
Type: string
""
Description: Shared secret for authenticating Gogs webhook events
upstream.configs.secret.azureDevops.username📜
Type: string
""
Description: Shared secret username for authenticating Azure DevOps webhook events
upstream.configs.secret.azureDevops.password📜
Type: string
""
Description: Shared secret password for authenticating Azure DevOps webhook events
upstream.configs.secret.extra📜
Type: object
{}
Description: add additional secrets to be added to argocd-secret # Custom secrets. Useful for injecting SSO secrets into environment variables. # Ref: https://argo-cd.readthedocs.io/en/stable/operator-manual/user-management/#sensitive-data-and-sso-client-secrets # Note that all values must be non-empty.
upstream.extraObjects📜
Type: list
[]
Description: Array of extra K8s manifests to deploy # Note: Supports use of custom Helm templates
upstream.controller.name📜
Type: string
"application-controller"
Description: Application controller name string
upstream.controller.replicas📜
Type: int
1
Description: The number of application controller pods to run. Additional replicas will cause sharding of managed clusters across number of replicas. # With dynamic cluster distribution turned on, sharding of the clusters will gracefully # rebalance if the number of replica’s changes or one becomes unhealthy. (alpha)
upstream.controller.dynamicClusterDistribution📜
Type: bool
false
Description: Enable dynamic cluster distribution (alpha) Ref: https://argo-cd.readthedocs.io/en/stable/operator-manual/dynamic-cluster-distribution # This is done using a deployment instead of a statefulSet # When replicas are added or removed, the sharding algorithm is re-run to ensure that the # clusters are distributed according to the algorithm. If the algorithm is well-balanced, # like round-robin, then the shards will be well-balanced.
upstream.controller.heartbeatTime📜
Type: int
10
Description: Application controller heartbeat time Ref: https://argo-cd.readthedocs.io/en/stable/operator-manual/dynamic-cluster-distribution/#working-of-dynamic-distribution
upstream.controller.revisionHistoryLimit📜
Type: int
5
Description: Maximum number of controller revisions that will be maintained in StatefulSet history
upstream.controller.pdb.enabled📜
Type: bool
false
Description: Deploy a [PodDisruptionBudget] for the application controller
upstream.controller.pdb.labels📜
Type: object
{}
Description: Labels to be added to application controller pdb
upstream.controller.pdb.annotations📜
Type: object
{}
Description: Annotations to be added to application controller pdb
upstream.controller.pdb.maxUnavailable📜
Type: string
""
Description: Number of pods that are unavailable after eviction as number or percentage (eg.: 50%). # Has higher precedence over controller.pdb.minAvailable
upstream.controller.extraArgs📜
Type: list
[]
Description: Additional command line arguments to pass to application controller
upstream.controller.env📜
Type: list
[]
Description: Environment variables to pass to application controller
upstream.controller.extraContainers📜
Type: list
[]
Description: Additional containers to be added to the application controller pod # Note: Supports use of custom Helm templates
upstream.controller.initContainers📜
Type: list
[]
Description: Init containers to add to the application controller pod # If your target Kubernetes cluster(s) require a custom credential (exec) plugin # you could use this (and the same in the server pod) to provide such executable # Ref: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins # Note: Supports use of custom Helm templates
upstream.controller.volumeMounts📜
Type: list
[]
Description: Additional volumeMounts to the application controller main container
upstream.controller.volumes📜
Type: list
[]
Description: Additional volumes to the application controller pod
upstream.controller.statefulsetAnnotations📜
Type: object
{}
Description: Annotations for the application controller StatefulSet
upstream.controller.deploymentAnnotations📜
Type: object
{}
Description: Annotations for the application controller Deployment
upstream.controller.podAnnotations📜
Type: object
{}
Description: Annotations to be added to application controller pods
upstream.controller.podLabels📜
Type: object
{}
Description: Labels to be added to application controller pods
upstream.controller.resources📜
Type: object
limits:
cpu: 500m
memory: 3Gi
requests:
cpu: 500m
memory: 3Gi
Description: Resource limits and requests for the application controller pods
upstream.controller.containerPorts.metrics📜
Type: int
8082
Description: Metrics container port
upstream.controller.hostNetwork📜
Type: bool
false
Description: Host Network for application controller pods
upstream.controller.dnsConfig📜
Type: object
{}
Description: [DNS configuration]
upstream.controller.dnsPolicy📜
Type: string
"ClusterFirst"
Description: Alternative DNS policy for application controller pods
upstream.controller.readinessProbe.failureThreshold📜
Type: int
3
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.controller.readinessProbe.initialDelaySeconds📜
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
upstream.controller.readinessProbe.periodSeconds📜
Type: int
10
Description: How often (in seconds) to perform the [probe]
upstream.controller.readinessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.controller.readinessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.controller.terminationGracePeriodSeconds📜
Type: int
30
Description: terminationGracePeriodSeconds for container lifecycle hook
upstream.controller.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account into the pod.
upstream.controller.serviceAccount.create📜
Type: bool
true
Description: Create a service account for the application controller
upstream.controller.serviceAccount.name📜
Type: string
"argocd-application-controller"
Description: Service account name
upstream.controller.serviceAccount.annotations📜
Type: object
{}
Description: Annotations applied to created service account
upstream.controller.serviceAccount.labels📜
Type: object
{}
Description: Labels applied to created service account
upstream.controller.serviceAccount.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account
upstream.controller.metrics.enabled📜
Type: bool
false
Description: Deploy metrics service
upstream.controller.metrics.scrapeTimeout📜
Type: string
""
Description: Prometheus ServiceMonitor scrapeTimeout. If empty, Prometheus uses the global scrape timeout unless it is less than the target’s scrape interval value in which the latter is used.
upstream.controller.metrics.applicationLabels.enabled📜
Type: bool
false
Description: Enables additional labels in argocd_app_labels metric
upstream.controller.metrics.applicationLabels.labels📜
Type: list
[]
Description: Additional labels
upstream.controller.metrics.service.type📜
Type: string
"ClusterIP"
Description: Metrics service type
upstream.controller.metrics.service.clusterIP📜
Type: string
""
Description: Metrics service clusterIP. None makes a “headless service” (no virtual IP)
upstream.controller.metrics.service.annotations📜
Type: object
{}
Description: Metrics service annotations
upstream.controller.metrics.service.labels📜
Type: object
{}
Description: Metrics service labels
upstream.controller.metrics.service.servicePort📜
Type: int
8082
Description: Metrics service port
upstream.controller.metrics.service.portName📜
Type: string
"http-metrics"
Description: Metrics service port name
upstream.controller.metrics.serviceMonitor.enabled📜
Type: bool
false
Description: Enable a prometheus ServiceMonitor
upstream.controller.metrics.serviceMonitor.interval📜
Type: string
"30s"
Description: Prometheus ServiceMonitor interval
upstream.controller.metrics.serviceMonitor.honorLabels📜
Type: bool
false
Description: When true, honorLabels preserves the metric’s labels when they collide with the target’s labels.
upstream.controller.metrics.serviceMonitor.relabelings📜
Type: list
[]
Description: Prometheus [RelabelConfigs] to apply to samples before scraping
upstream.controller.metrics.serviceMonitor.metricRelabelings📜
Type: list
[]
Description: Prometheus [MetricRelabelConfigs] to apply to samples before ingestion
upstream.controller.metrics.serviceMonitor.selector📜
Type: object
{}
Description: Prometheus ServiceMonitor selector
upstream.controller.metrics.serviceMonitor.scheme📜
Type: string
""
Description: Prometheus ServiceMonitor scheme
upstream.controller.metrics.serviceMonitor.tlsConfig📜
Type: object
{}
Description: Prometheus ServiceMonitor tlsConfig
upstream.controller.metrics.serviceMonitor.namespace📜
Type: string
""
Description: Prometheus ServiceMonitor namespace
upstream.controller.metrics.serviceMonitor.additionalLabels📜
Type: object
{}
Description: Prometheus ServiceMonitor labels
upstream.controller.metrics.serviceMonitor.annotations📜
Type: object
{}
Description: Prometheus ServiceMonitor annotations
upstream.controller.metrics.rules.enabled📜
Type: bool
false
Description: Deploy a PrometheusRule for the application controller
upstream.controller.metrics.rules.namespace📜
Type: string
""
Description: PrometheusRule namespace
upstream.controller.metrics.rules.selector📜
Type: object
{}
Description: PrometheusRule selector
upstream.controller.metrics.rules.additionalLabels📜
Type: object
{}
Description: PrometheusRule labels
upstream.controller.metrics.rules.annotations📜
Type: object
{}
Description: PrometheusRule annotations
upstream.controller.metrics.rules.spec📜
Type: list
[]
Description: PrometheusRule.Spec for the application controller
upstream.controller.clusterRoleRules.enabled📜
Type: bool
false
Description: Enable custom rules for the application controller’s ClusterRole resource
upstream.controller.clusterRoleRules.rules📜
Type: list
[]
Description: List of custom rules for the application controller’s ClusterRole resource
upstream.dex.enabled📜
Type: bool
true
Description: Enable dex
upstream.dex.name📜
Type: string
"dex-server"
Description: Dex name
upstream.dex.extraArgs📜
Type: list
[]
Description: Additional command line arguments to pass to the Dex server
upstream.dex.metrics.enabled📜
Type: bool
false
Description: Deploy metrics service
upstream.dex.metrics.service.annotations📜
Type: object
{}
Description: Metrics service annotations
upstream.dex.metrics.service.labels📜
Type: object
{}
Description: Metrics service labels
upstream.dex.metrics.service.portName📜
Type: string
"http-metrics"
Description: Metrics service port name
upstream.dex.metrics.serviceMonitor.enabled📜
Type: bool
false
Description: Enable a prometheus ServiceMonitor
upstream.dex.metrics.serviceMonitor.interval📜
Type: string
"30s"
Description: Prometheus ServiceMonitor interval
upstream.dex.metrics.serviceMonitor.honorLabels📜
Type: bool
false
Description: When true, honorLabels preserves the metric’s labels when they collide with the target’s labels.
upstream.dex.metrics.serviceMonitor.relabelings📜
Type: list
[]
Description: Prometheus [RelabelConfigs] to apply to samples before scraping
upstream.dex.metrics.serviceMonitor.metricRelabelings📜
Type: list
[]
Description: Prometheus [MetricRelabelConfigs] to apply to samples before ingestion
upstream.dex.metrics.serviceMonitor.selector📜
Type: object
{}
Description: Prometheus ServiceMonitor selector
upstream.dex.metrics.serviceMonitor.scheme📜
Type: string
""
Description: Prometheus ServiceMonitor scheme
upstream.dex.metrics.serviceMonitor.tlsConfig📜
Type: object
{}
Description: Prometheus ServiceMonitor tlsConfig
upstream.dex.metrics.serviceMonitor.namespace📜
Type: string
""
Description: Prometheus ServiceMonitor namespace
upstream.dex.metrics.serviceMonitor.additionalLabels📜
Type: object
{}
Description: Prometheus ServiceMonitor labels
upstream.dex.metrics.serviceMonitor.annotations📜
Type: object
{}
Description: Prometheus ServiceMonitor annotations
upstream.dex.pdb.enabled📜
Type: bool
false
Description: Deploy a [PodDisruptionBudget] for the Dex server
upstream.dex.pdb.labels📜
Type: object
{}
Description: Labels to be added to Dex server pdb
upstream.dex.pdb.annotations📜
Type: object
{}
Description: Annotations to be added to Dex server pdb
upstream.dex.pdb.maxUnavailable📜
Type: string
""
Description: Number of pods that are unavailble after eviction as number or percentage (eg.: 50%). # Has higher precedence over dex.pdb.minAvailable
upstream.dex.image.repository📜
Type: string
"registry1.dso.mil/ironbank/opensource/dexidp/dex"
Description: Dex image repository
upstream.dex.image.tag📜
Type: string
"v2.43.1"
Description: Dex image tag
upstream.dex.env📜
Type: list
[]
Description: Environment variables to pass to the Dex server
upstream.dex.extraContainers📜
Type: list
[]
Description: Additional containers to be added to the dex pod # Note: Supports use of custom Helm templates
upstream.dex.initContainers📜
Type: list
[]
Description: Init containers to add to the dex pod # Note: Supports use of custom Helm templates
upstream.dex.volumeMounts📜
Type: list
[]
Description: Additional volumeMounts to the dex main container
upstream.dex.volumes📜
Type: list
[]
Description: Additional volumes to the dex pod
upstream.dex.certificateSecret.enabled📜
Type: bool
false
Description: Create argocd-dex-server-tls secret
upstream.dex.certificateSecret.labels📜
Type: object
{}
Description: Labels to be added to argocd-dex-server-tls secret
upstream.dex.certificateSecret.annotations📜
Type: object
{}
Description: Annotations to be added to argocd-dex-server-tls secret
upstream.dex.certificateSecret.ca📜
Type: string
""
Description: Certificate authority. Required for self-signed certificates.
upstream.dex.certificateSecret.key📜
Type: string
""
Description: Certificate private key
upstream.dex.certificateSecret.crt📜
Type: string
""
Description: Certificate data. Must contain SANs of Dex service (ie: argocd-dex-server, argocd-dex-server.argo-cd.svc)
upstream.dex.deploymentAnnotations📜
Type: object
{}
Description: Annotations to be added to the Dex server Deployment
upstream.dex.podAnnotations📜
Type: object
{}
Description: Annotations to be added to the Dex server pods
upstream.dex.podLabels📜
Type: object
{}
Description: Labels to be added to the Dex server pods
upstream.dex.resources📜
Type: object
limits:
cpu: 20m
memory: 256Mi
requests:
cpu: 10m
memory: 128Mi
Description: Resource limits and requests for dex
upstream.dex.containerPorts.http📜
Type: int
5556
Description: HTTP container port
upstream.dex.containerPorts.grpc📜
Type: int
5557
Description: gRPC container port
upstream.dex.containerPorts.metrics📜
Type: int
5558
Description: Metrics container port
upstream.dex.dnsConfig📜
Type: object
{}
Description: [DNS configuration]
upstream.dex.dnsPolicy📜
Type: string
"ClusterFirst"
Description: Alternative DNS policy for Dex server pods
upstream.dex.livenessProbe.enabled📜
Type: bool
false
Description: Enable Kubernetes liveness probe for Dex >= 2.28.0
upstream.dex.livenessProbe.httpPath📜
Type: string
"/healthz/live"
Description: Http path to use for the liveness probe
upstream.dex.livenessProbe.httpPort📜
Type: string
"metrics"
Description: Http port to use for the liveness probe
upstream.dex.livenessProbe.httpScheme📜
Type: string
"HTTP"
Description: Scheme to use for for the liveness probe (can be HTTP or HTTPS)
upstream.dex.livenessProbe.failureThreshold📜
Type: int
3
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.dex.livenessProbe.initialDelaySeconds📜
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
upstream.dex.livenessProbe.periodSeconds📜
Type: int
10
Description: How often (in seconds) to perform the [probe]
upstream.dex.livenessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.dex.livenessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.dex.readinessProbe.enabled📜
Type: bool
false
Description: Enable Kubernetes readiness probe for Dex >= 2.28.0
upstream.dex.readinessProbe.httpPath📜
Type: string
"/healthz/ready"
Description: Http path to use for the readiness probe
upstream.dex.readinessProbe.httpPort📜
Type: string
"metrics"
Description: Http port to use for the readiness probe
upstream.dex.readinessProbe.httpScheme📜
Type: string
"HTTP"
Description: Scheme to use for for the liveness probe (can be HTTP or HTTPS)
upstream.dex.readinessProbe.failureThreshold📜
Type: int
3
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.dex.readinessProbe.initialDelaySeconds📜
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
upstream.dex.readinessProbe.periodSeconds📜
Type: int
10
Description: How often (in seconds) to perform the [probe]
upstream.dex.readinessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.dex.readinessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.dex.terminationGracePeriodSeconds📜
Type: int
30
Description: terminationGracePeriodSeconds for container lifecycle hook
upstream.dex.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account into the pod.
upstream.dex.serviceAccount.create📜
Type: bool
true
Description: Create dex service account
upstream.dex.serviceAccount.name📜
Type: string
"argocd-dex-server"
Description: Dex service account name
upstream.dex.serviceAccount.annotations📜
Type: object
{}
Description: Annotations applied to created service account
upstream.dex.serviceAccount.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account
upstream.dex.servicePortHttp📜
Type: int
5556
Description: Service port for HTTP access
upstream.dex.servicePortHttpName📜
Type: string
"http"
Description: Service port name for HTTP access
upstream.dex.servicePortGrpc📜
Type: int
5557
Description: Service port for gRPC access
upstream.dex.servicePortGrpcName📜
Type: string
"grpc"
Description: Service port name for gRPC access
upstream.dex.servicePortMetrics📜
Type: int
5558
Description: Service port for metrics access
upstream.dex.deploymentStrategy📜
Type: object
{}
Description: Deployment strategy to be added to the Dex server Deployment
upstream.redis.enabled📜
Type: bool
false
Description: Enable redis
upstream.redis.name📜
Type: string
"redis"
Description: Redis name
upstream.redis.pdb.enabled📜
Type: bool
false
Description: Deploy a [PodDisruptionBudget] for the Redis
upstream.redis.pdb.labels📜
Type: object
{}
Description: Labels to be added to Redis pdb
upstream.redis.pdb.annotations📜
Type: object
{}
Description: Annotations to be added to Redis pdb
upstream.redis.pdb.maxUnavailable📜
Type: string
""
Description: Number of pods that are unavailble after eviction as number or percentage (eg.: 50%). # Has higher precedence over redis.pdb.minAvailable
upstream.redis.image.repository📜
Type: string
"registry1.dso.mil/ironbank/bitnami/redis"
Description: Redis repository
upstream.redis.image.tag📜
Type: string
"8.0.2"
Description: Redis tag
upstream.redis.exporter.enabled📜
Type: bool
false
Description: Enable Prometheus redis-exporter sidecar
upstream.redis.exporter.env📜
Type: list
[]
Description: Environment variables to pass to the Redis exporter
upstream.redis.exporter.image.repository📜
Type: string
"ironbank/bitnami/analytics/redis-exporter"
Description: Repository to use for the redis-exporter
upstream.redis.exporter.image.tag📜
Type: string
"v1.73.0"
Description: Tag to use for the redis-exporter
upstream.redis.exporter.readinessProbe.enabled📜
Type: bool
false
Description: Enable Kubernetes liveness probe for Redis exporter (optional)
upstream.redis.exporter.readinessProbe.initialDelaySeconds📜
Type: int
30
Description: Number of seconds after the container has started before [probe] is initiated
upstream.redis.exporter.readinessProbe.periodSeconds📜
Type: int
15
Description: How often (in seconds) to perform the [probe]
upstream.redis.exporter.readinessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.redis.exporter.readinessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.redis.exporter.readinessProbe.failureThreshold📜
Type: int
5
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.redis.exporter.livenessProbe.enabled📜
Type: bool
false
Description: Enable Kubernetes liveness probe for Redis exporter
upstream.redis.exporter.livenessProbe.initialDelaySeconds📜
Type: int
30
Description: Number of seconds after the container has started before [probe] is initiated
upstream.redis.exporter.livenessProbe.periodSeconds📜
Type: int
15
Description: How often (in seconds) to perform the [probe]
upstream.redis.exporter.livenessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.redis.exporter.livenessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.redis.exporter.livenessProbe.failureThreshold📜
Type: int
5
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.redis.exporter.resources📜
Type: object
{}
Description: Resource limits and requests for redis-exporter sidecar
upstream.redis.extraArgs📜
Type: list
[]
Description: Additional command line arguments to pass to redis-server
upstream.redis.env📜
Type: list
[]
Description: Environment variables to pass to the Redis server
upstream.redis.readinessProbe.enabled📜
Type: bool
false
Description: Enable Kubernetes liveness probe for Redis server
upstream.redis.readinessProbe.initialDelaySeconds📜
Type: int
30
Description: Number of seconds after the container has started before [probe] is initiated
upstream.redis.readinessProbe.periodSeconds📜
Type: int
15
Description: How often (in seconds) to perform the [probe]
upstream.redis.readinessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.redis.readinessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.redis.readinessProbe.failureThreshold📜
Type: int
5
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.redis.livenessProbe.enabled📜
Type: bool
false
Description: Enable Kubernetes liveness probe for Redis server
upstream.redis.livenessProbe.initialDelaySeconds📜
Type: int
30
Description: Number of seconds after the container has started before [probe] is initiated
upstream.redis.livenessProbe.periodSeconds📜
Type: int
15
Description: How often (in seconds) to perform the [probe]
upstream.redis.livenessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.redis.livenessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.redis.livenessProbe.failureThreshold📜
Type: int
5
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.redis.extraContainers📜
Type: list
[]
Description: Additional containers to be added to the redis pod # Note: Supports use of custom Helm templates
upstream.redis.initContainers📜
Type: list
[]
Description: Init containers to add to the redis pod # Note: Supports use of custom Helm templates
upstream.redis.volumeMounts📜
Type: list
[]
Description: Additional volumeMounts to the redis container
upstream.redis.volumes📜
Type: list
[]
Description: Additional volumes to the redis pod
upstream.redis.deploymentAnnotations📜
Type: object
{}
Description: Annotations to be added to the Redis server Deployment
upstream.redis.podAnnotations📜
Type: object
{}
Description: Annotations to be added to the Redis server pods
upstream.redis.podLabels📜
Type: object
{}
Description: Labels to be added to the Redis server pods
upstream.redis.resources📜
Type: object
limits:
cpu: 50m
memory: 64Mi
requests:
cpu: 50m
memory: 64Mi
Description: Resource limits and requests for redis
upstream.redis.containerPorts.redis📜
Type: int
6379
Description: Redis container port
upstream.redis.containerPorts.metrics📜
Type: int
9121
Description: Metrics container port
upstream.redis.dnsConfig📜
Type: object
{}
Description: [DNS configuration]
upstream.redis.dnsPolicy📜
Type: string
"ClusterFirst"
Description: Alternative DNS policy for Redis server pods
upstream.redis.servicePort📜
Type: int
6379
Description: Redis service port
upstream.redis.terminationGracePeriodSeconds📜
Type: int
30
Description: terminationGracePeriodSeconds for container lifecycle hook
upstream.redis.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account into the pod.
upstream.redis.serviceAccount.create📜
Type: bool
false
Description: Create a service account for the redis pod
upstream.redis.serviceAccount.name📜
Type: string
""
Description: Service account name for redis pod
upstream.redis.serviceAccount.annotations📜
Type: object
{}
Description: Annotations applied to created service account
upstream.redis.serviceAccount.automountServiceAccountToken📜
Type: bool
false
Description: Automount API credentials for the Service Account
upstream.redis.service.annotations📜
Type: object
{}
Description: Redis service annotations
upstream.redis.service.labels📜
Type: object
{}
Description: Additional redis service labels
upstream.redis.master.containerSecurityContext.enabled📜
Type: bool
true
upstream.redis.master.containerSecurityContext.runAsUser📜
Type: int
999
upstream.redis.master.containerSecurityContext.runAsGroup📜
Type: int
999
upstream.redis.replica.containerSecurityContext.enabled📜
Type: bool
true
upstream.redis.replica.containerSecurityContext.runAsUser📜
Type: int
999
upstream.redis.replica.containerSecurityContext.runAsGroup📜
Type: int
999
upstream.redis.metrics.enabled📜
Type: bool
false
Description: Deploy metrics service
upstream.redis.metrics.service.type📜
Type: string
"ClusterIP"
Description: Metrics service type
upstream.redis.metrics.service.clusterIP📜
Type: string
"None"
Description: Metrics service clusterIP. None makes a “headless service” (no virtual IP)
upstream.redis.metrics.service.annotations📜
Type: object
{}
Description: Metrics service annotations
upstream.redis.metrics.service.labels📜
Type: object
{}
Description: Metrics service labels
upstream.redis.metrics.service.servicePort📜
Type: int
9121
Description: Metrics service port
upstream.redis.metrics.service.portName📜
Type: string
"http-metrics"
Description: Metrics service port name
upstream.redis.metrics.serviceMonitor.enabled📜
Type: bool
false
Description: Enable a prometheus ServiceMonitor
upstream.redis.metrics.serviceMonitor.interval📜
Type: string
"30s"
Description: Interval at which metrics should be scraped
upstream.redis.metrics.serviceMonitor.honorLabels📜
Type: bool
false
Description: When true, honorLabels preserves the metric’s labels when they collide with the target’s labels.
upstream.redis.metrics.serviceMonitor.relabelings📜
Type: list
[]
Description: Prometheus [RelabelConfigs] to apply to samples before scraping
upstream.redis.metrics.serviceMonitor.metricRelabelings📜
Type: list
[]
Description: Prometheus [MetricRelabelConfigs] to apply to samples before ingestion
upstream.redis.metrics.serviceMonitor.selector📜
Type: object
{}
Description: Prometheus ServiceMonitor selector
upstream.redis.metrics.serviceMonitor.scheme📜
Type: string
""
Description: Prometheus ServiceMonitor scheme
upstream.redis.metrics.serviceMonitor.tlsConfig📜
Type: object
{}
Description: Prometheus ServiceMonitor tlsConfig
upstream.redis.metrics.serviceMonitor.namespace📜
Type: string
""
Description: Prometheus ServiceMonitor namespace
upstream.redis.metrics.serviceMonitor.additionalLabels📜
Type: object
{}
Description: Prometheus ServiceMonitor labels
upstream.redis.metrics.serviceMonitor.annotations📜
Type: object
{}
Description: Prometheus ServiceMonitor annotations
upstream.redis.metrics.containerSecurityContext.enabled📜
Type: bool
true
upstream.redis.metrics.containerSecurityContext.runAsUser📜
Type: int
999
upstream.redis.metrics.containerSecurityContext.runAsGroup📜
Type: int
999
upstream.externalRedis.host📜
Type: string
"argocd-argocd-redis-bb-headless.argocd.svc.cluster.local"
Description: External Redis server host
upstream.externalRedis.username📜
Type: string
""
Description: External Redis username
upstream.externalRedis.password📜
Type: string
""
Description: External Redis password
upstream.externalRedis.port📜
Type: int
6379
Description: External Redis server port
upstream.externalRedis.existingSecret📜
Type: string
""
Description: The name of an existing secret with Redis (must contain key redis-password) and Sentinel credentials. When it’s set, the externalRedis.password parameter is ignored
upstream.externalRedis.secretAnnotations📜
Type: object
{}
Description: External Redis Secret annotations
upstream.redisSecretInit.enabled📜
Type: bool
false
Description: Enable Redis secret initialization. If disabled, secret must be provisioned by alternative methods
upstream.redisSecretInit.name📜
Type: string
"redis-secret-init"
Description: Redis secret-init name
upstream.redisSecretInit.jobAnnotations📜
Type: object
{}
Description: Annotations to be added to the Redis secret-init Job
upstream.redisSecretInit.podAnnotations📜
Type: object
{}
Description: Annotations to be added to the Redis secret-init Job
upstream.redisSecretInit.podLabels📜
Type: object
{}
Description: Labels to be added to the Redis secret-init Job
upstream.redisSecretInit.resources📜
Type: object
{}
Description: Resource limits and requests for Redis secret-init Job
upstream.redisSecretInit.securityContext📜
Type: object
{}
Description: Redis secret-init Job pod-level security context
upstream.redisSecretInit.serviceAccount.create📜
Type: bool
true
Description: Create a service account for the redis pod
upstream.redisSecretInit.serviceAccount.name📜
Type: string
""
Description: Service account name for redis pod
upstream.redisSecretInit.serviceAccount.annotations📜
Type: object
{}
Description: Annotations applied to created service account
upstream.redisSecretInit.serviceAccount.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account
upstream.redisSecretInit.affinity📜
Type: object
{}
Description: Assign custom [affinity] rules to the Redis secret-init Job
upstream.server.name📜
Type: string
"server"
Description: Argo CD server name
upstream.server.replicas📜
Type: int
1
Description: The number of server pods to run
upstream.server.autoscaling.enabled📜
Type: bool
false
Description: Enable Horizontal Pod Autoscaler ([HPA]) for the Argo CD server
upstream.server.autoscaling.minReplicas📜
Type: int
1
Description: Minimum number of replicas for the Argo CD server [HPA]
upstream.server.autoscaling.maxReplicas📜
Type: int
5
Description: Maximum number of replicas for the Argo CD server [HPA]
upstream.server.autoscaling.targetCPUUtilizationPercentage📜
Type: int
50
Description: Average CPU utilization percentage for the Argo CD server [HPA]
upstream.server.autoscaling.targetMemoryUtilizationPercentage📜
Type: int
50
Description: Average memory utilization percentage for the Argo CD server [HPA]
upstream.server.autoscaling.behavior📜
Type: object
{}
Description: Configures the scaling behavior of the target in both Up and Down directions.
upstream.server.autoscaling.metrics📜
Type: list
[]
Description: Configures custom HPA metrics for the Argo CD server Ref: https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
upstream.server.pdb.enabled📜
Type: bool
false
Description: Deploy a [PodDisruptionBudget] for the Argo CD server
upstream.server.pdb.labels📜
Type: object
{}
Description: Labels to be added to Argo CD server pdb
upstream.server.pdb.annotations📜
Type: object
{}
Description: Annotations to be added to Argo CD server pdb
upstream.server.pdb.maxUnavailable📜
Type: string
""
Description: Number of pods that are unavailable after eviction as number or percentage (eg.: 50%). # Has higher precedence over server.pdb.minAvailable
upstream.server.extraArgs📜
Type: list
[]
Description: Additional command line arguments to pass to Argo CD server
upstream.server.env📜
Type: list
[]
Description: Environment variables to pass to Argo CD server
upstream.server.lifecycle📜
Type: object
{}
Description: Specify postStart and preStop lifecycle hooks for your argo-cd-server container
upstream.server.extensions.enabled📜
Type: bool
false
Description: Enable support for Argo CD extensions
upstream.server.extensions.image.repository📜
Type: string
"quay.io/argoprojlabs/argocd-extension-installer"
Description: Repository to use for extension installer image
upstream.server.extensions.image.tag📜
Type: string
"v0.0.8"
Description: Tag to use for extension installer image
upstream.server.extensions.resources📜
Type: object
{}
Description: Resource limits and requests for the argocd-extensions container
upstream.server.extraContainers📜
Type: list
[]
Description: Additional containers to be added to the server pod # Note: Supports use of custom Helm templates
upstream.server.initContainers📜
Type: list
[]
Description: Init containers to add to the server pod # If your target Kubernetes cluster(s) require a custom credential (exec) plugin # you could use this (and the same in the application controller pod) to provide such executable # Ref: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins
upstream.server.volumeMounts📜
Type: list
[]
Description: Additional volumeMounts to the server main container
upstream.server.volumes📜
Type: list
[]
Description: Additional volumes to the server pod
upstream.server.deploymentAnnotations📜
Type: object
{}
Description: Annotations to be added to server Deployment
upstream.server.podAnnotations📜
Type: object
{}
Description: Annotations to be added to server pods
upstream.server.podLabels📜
Type: object
{}
Description: Labels to be added to server pods
upstream.server.resources📜
Type: object
limits:
cpu: 20m
memory: 128Mi
requests:
cpu: 20m
memory: 128Mi
Description: Resource limits and requests for the Argo CD server
upstream.server.containerPorts.server📜
Type: int
8080
Description: Server container port
upstream.server.containerPorts.metrics📜
Type: int
8083
Description: Metrics container port
upstream.server.hostNetwork📜
Type: bool
false
Description: Host Network for Server pods
upstream.server.dnsConfig📜
Type: object
{}
Description: [DNS configuration]
upstream.server.dnsPolicy📜
Type: string
"ClusterFirst"
Description: Alternative DNS policy for Server pods
upstream.server.readinessProbe.failureThreshold📜
Type: int
5
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.server.readinessProbe.initialDelaySeconds📜
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
upstream.server.readinessProbe.periodSeconds📜
Type: int
10
Description: How often (in seconds) to perform the [probe]
upstream.server.readinessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.server.readinessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.server.livenessProbe.failureThreshold📜
Type: int
5
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.server.livenessProbe.initialDelaySeconds📜
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
upstream.server.livenessProbe.periodSeconds📜
Type: int
10
Description: How often (in seconds) to perform the [probe]
upstream.server.livenessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.server.livenessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.server.terminationGracePeriodSeconds📜
Type: int
30
Description: terminationGracePeriodSeconds for container lifecycle hook
upstream.server.deploymentStrategy📜
Type: object
{}
Description: Deployment strategy to be added to the server Deployment
upstream.server.certificate.enabled📜
Type: bool
false
Description: Deploy a Certificate resource (requires cert-manager)
upstream.server.certificate.additionalHosts📜
Type: list
[]
Description: Certificate Subject Alternate Names (SANs)
upstream.server.certificate.issuer.group📜
Type: string
""
Description: Certificate issuer group. Set if using an external issuer. Eg. cert-manager.io
upstream.server.certificate.issuer.kind📜
Type: string
""
Description: Certificate issuer kind. Either Issuer or ClusterIssuer
upstream.server.certificate.issuer.name📜
Type: string
""
Description: Certificate issuer name. Eg. letsencrypt
upstream.server.certificate.privateKey.rotationPolicy📜
Type: string
"Never"
Description: Rotation policy of private key when certificate is re-issued. Either: Never or Always
upstream.server.certificate.privateKey.encoding📜
Type: string
"PKCS1"
Description: The private key cryptography standards (PKCS) encoding for private key. Either: PCKS1 or PKCS8
upstream.server.certificate.privateKey.algorithm📜
Type: string
"RSA"
Description: Algorithm used to generate certificate private key. One of: RSA, Ed25519 or ECDSA
upstream.server.certificate.privateKey.size📜
Type: int
2048
Description: Key bit size of the private key. If algorithm is set to Ed25519, size is ignored.
upstream.server.certificate.annotations📜
Type: object
{}
Description: Annotations to be applied to the Server Certificate
upstream.server.certificate.usages📜
Type: list
[]
Description: Usages for the certificate ## Ref: https://cert-manager.io/docs/reference/api-docs/#cert-manager.io/v1.KeyUsage
upstream.server.certificate.secretTemplateAnnotations📜
Type: object
{}
Description: Annotations that allow the certificate to be composed from data residing in existing Kubernetes Resources
upstream.server.certificateSecret.enabled📜
Type: bool
false
Description: Create argocd-server-tls secret
upstream.server.certificateSecret.annotations📜
Type: object
{}
Description: Annotations to be added to argocd-server-tls secret
upstream.server.certificateSecret.labels📜
Type: object
{}
Description: Labels to be added to argocd-server-tls secret
upstream.server.certificateSecret.key📜
Type: string
""
Description: Private Key of the certificate
upstream.server.certificateSecret.crt📜
Type: string
""
Description: Certificate data
upstream.server.service.annotations📜
Type: object
{}
Description: Server service annotations
upstream.server.service.labels📜
Type: object
{}
Description: Server service labels
upstream.server.service.type📜
Type: string
"ClusterIP"
Description: Server service type
upstream.server.service.nodePortHttp📜
Type: int
30080
Description: Server service http port for NodePort service type (only if server.service.type is set to “NodePort”)
upstream.server.service.nodePortHttps📜
Type: int
30443
Description: Server service https port for NodePort service type (only if server.service.type is set to “NodePort”)
upstream.server.service.servicePortHttp📜
Type: int
80
Description: Server service http port
upstream.server.service.servicePortHttps📜
Type: int
443
Description: Server service https port
upstream.server.service.servicePortHttpName📜
Type: string
"http"
Description: Server service http port name, can be used to route traffic via istio
upstream.server.service.servicePortHttpsName📜
Type: string
"https"
Description: Server service https port name, can be used to route traffic via istio
upstream.server.service.servicePortHttpsAppProtocol📜
Type: string
""
Description: Server service https port appProtocol # Ref: https://kubernetes.io/docs/concepts/services-networking/service/#application-protocol
upstream.server.service.loadBalancerClass📜
Type: string
""
Description: The class of the load balancer implementation
upstream.server.service.loadBalancerIP📜
Type: string
""
Description: LoadBalancer will get created with the IP specified in this field
upstream.server.service.loadBalancerSourceRanges📜
Type: list
[]
Description: Source IP ranges to allow access to service from # EKS Ref: https://repost.aws/knowledge-center/eks-cidr-ip-address-loadbalancer # GKE Ref: https://cloud.google.com/kubernetes-engine/docs/concepts/network-overview#limit-connectivity-ext-lb
upstream.server.service.externalIPs📜
Type: list
[]
Description: Server service external IPs
upstream.server.service.externalTrafficPolicy📜
Type: string
""
Description: Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
upstream.server.service.sessionAffinity📜
Type: string
""
Description: Used to maintain session affinity. Supports ClientIP and None
upstream.server.metrics.enabled📜
Type: bool
false
Description: Deploy metrics service
upstream.server.metrics.service.type📜
Type: string
"ClusterIP"
Description: Metrics service type
upstream.server.metrics.service.clusterIP📜
Type: string
""
Description: Metrics service clusterIP. None makes a “headless service” (no virtual IP)
upstream.server.metrics.service.annotations📜
Type: object
{}
Description: Metrics service annotations
upstream.server.metrics.service.labels📜
Type: object
{}
Description: Metrics service labels
upstream.server.metrics.service.servicePort📜
Type: int
8083
Description: Metrics service port
upstream.server.metrics.service.portName📜
Type: string
"http-metrics"
Description: Metrics service port name
upstream.server.metrics.serviceMonitor.enabled📜
Type: bool
false
Description: Enable a prometheus ServiceMonitor
upstream.server.metrics.serviceMonitor.interval📜
Type: string
"30s"
Description: Prometheus ServiceMonitor interval
upstream.server.metrics.serviceMonitor.scrapeTimeout📜
Type: string
""
Description: Prometheus ServiceMonitor scrapeTimeout. If empty, Prometheus uses the global scrape timeout unless it is less than the target’s scrape interval value in which the latter is used.
upstream.server.metrics.serviceMonitor.honorLabels📜
Type: bool
false
Description: When true, honorLabels preserves the metric’s labels when they collide with the target’s labels.
upstream.server.metrics.serviceMonitor.relabelings📜
Type: list
[]
Description: Prometheus [RelabelConfigs] to apply to samples before scraping
upstream.server.metrics.serviceMonitor.metricRelabelings📜
Type: list
[]
Description: Prometheus [MetricRelabelConfigs] to apply to samples before ingestion
upstream.server.metrics.serviceMonitor.selector📜
Type: object
{}
Description: Prometheus ServiceMonitor selector
upstream.server.metrics.serviceMonitor.scheme📜
Type: string
""
Description: Prometheus ServiceMonitor scheme
upstream.server.metrics.serviceMonitor.tlsConfig📜
Type: object
{}
Description: Prometheus ServiceMonitor tlsConfig
upstream.server.metrics.serviceMonitor.namespace📜
Type: string
""
Description: Prometheus ServiceMonitor namespace
upstream.server.metrics.serviceMonitor.additionalLabels📜
Type: object
{}
Description: Prometheus ServiceMonitor labels
upstream.server.metrics.serviceMonitor.annotations📜
Type: object
{}
Description: Prometheus ServiceMonitor annotations
upstream.server.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account into the pod.
upstream.server.serviceAccount.create📜
Type: bool
true
Description: Create server service account
upstream.server.serviceAccount.name📜
Type: string
"argocd-server"
Description: Server service account name
upstream.server.serviceAccount.annotations📜
Type: object
{}
Description: Annotations applied to created service account
upstream.server.serviceAccount.labels📜
Type: object
{}
Description: Labels applied to created service account
upstream.server.serviceAccount.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account
upstream.server.ingress.enabled📜
Type: bool
false
Description: Enable an ingress resource for the Argo CD server
upstream.server.ingress.controller📜
Type: string
"generic"
Description: Specific implementation for ingress controller. One of generic, aws or gke # Additional configuration might be required in related configuration sections
upstream.server.ingress.labels📜
Type: object
{}
Description: Additional ingress labels
upstream.server.ingress.annotations📜
Type: object
{}
Description: Additional ingress annotations # Ref: https://argo-cd.readthedocs.io/en/stable/operator-manual/ingress/#option-1-ssl-passthrough
upstream.server.ingress.ingressClassName📜
Type: string
""
Description: Defines which ingress controller will implement the resource
upstream.server.ingress.path📜
Type: string
"/"
Description: The path to Argo CD server
upstream.server.ingress.pathType📜
Type: string
"Prefix"
Description: Ingress path type. One of Exact, Prefix or ImplementationSpecific
upstream.server.ingress.tls📜
Type: bool
false
Description: Enable TLS configuration for the hostname defined at server.ingress.hostname # TLS certificate will be retrieved from a TLS secret argocd-server-tls # You can create this secret via certificate or certificateSecret option
upstream.server.ingress.aws.backendProtocolVersion📜
Type: string
"GRPC"
Description: Backend protocol version for the AWS ALB gRPC service # This tells AWS to send traffic from the ALB using gRPC. # For more information: https://docs.aws.amazon.com/elasticloadbalancing/latest/application/target-group-health-checks.html#health-check-settings
upstream.server.ingress.aws.serviceType📜
Type: string
"NodePort"
Description: Service type for the AWS ALB gRPC service # Can be of type NodePort or ClusterIP depending on which mode you are running. # Instance mode needs type NodePort, IP mode needs type ClusterIP # Ref: https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.2/how-it-works/#ingress-traffic
upstream.server.ingress.gke.managedCertificate.create📜
Type: bool
true
Description: Create ManagedCertificate resource and annotations for Google Load balancer # Ref: https://cloud.google.com/kubernetes-engine/docs/how-to/managed-certs
upstream.server.ingress.gke.managedCertificate.extraDomains📜
Type: list
[]
Description: Additional domains for ManagedCertificate resource
upstream.server.ingressGrpc.enabled📜
Type: bool
false
Description: Enable an ingress resource for the Argo CD server for dedicated [gRPC-ingress]
upstream.server.ingressGrpc.annotations📜
Type: object
{}
Description: Additional ingress annotations for dedicated [gRPC-ingress]
upstream.server.ingressGrpc.labels📜
Type: object
{}
Description: Additional ingress labels for dedicated [gRPC-ingress]
upstream.server.ingressGrpc.ingressClassName📜
Type: string
""
Description: Defines which ingress controller will implement the resource [gRPC-ingress]
upstream.server.ingressGrpc.path📜
Type: string
"/"
Description: Argo CD server ingress path for dedicated [gRPC-ingress]
upstream.server.ingressGrpc.pathType📜
Type: string
"Prefix"
Description: Ingress path type for dedicated [gRPC-ingress]. One of Exact, Prefix or ImplementationSpecific
upstream.server.ingressGrpc.tls📜
Type: bool
false
Description: Enable TLS configuration for the hostname defined at server.ingressGrpc.hostname # TLS certificate will be retrieved from a TLS secret with name: argocd-server-grpc-tls
upstream.server.route.enabled📜
Type: bool
false
Description: Enable an OpenShift Route for the Argo CD server
upstream.server.route.annotations📜
Type: object
{}
Description: Openshift Route annotations
upstream.server.route.hostname📜
Type: string
""
Description: Hostname of OpenShift Route
upstream.server.route.termination_type📜
Type: string
"passthrough"
Description: Termination type of Openshift Route
upstream.server.route.termination_policy📜
Type: string
"None"
Description: Termination policy of Openshift Route
upstream.server.clusterRoleRules.enabled📜
Type: bool
false
Description: Enable custom rules for the server’s ClusterRole resource
upstream.server.clusterRoleRules.rules📜
Type: list
[]
Description: List of custom rules for the server’s ClusterRole resource
upstream.repoServer.name📜
Type: string
"repo-server"
Description: Repo server name
upstream.repoServer.replicas📜
Type: int
1
Description: The number of repo server pods to run
upstream.repoServer.autoscaling.enabled📜
Type: bool
false
Description: Enable Horizontal Pod Autoscaler ([HPA]) for the repo server
upstream.repoServer.autoscaling.minReplicas📜
Type: int
1
Description: Minimum number of replicas for the repo server [HPA]
upstream.repoServer.autoscaling.maxReplicas📜
Type: int
5
Description: Maximum number of replicas for the repo server [HPA]
upstream.repoServer.autoscaling.targetCPUUtilizationPercentage📜
Type: int
50
Description: Average CPU utilization percentage for the repo server [HPA]
upstream.repoServer.autoscaling.targetMemoryUtilizationPercentage📜
Type: int
50
Description: Average memory utilization percentage for the repo server [HPA]
upstream.repoServer.autoscaling.behavior📜
Type: object
{}
Description: Configures the scaling behavior of the target in both Up and Down directions.
upstream.repoServer.autoscaling.metrics📜
Type: list
[]
Description: Configures custom HPA metrics for the Argo CD repo server Ref: https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
upstream.repoServer.pdb.enabled📜
Type: bool
false
Description: Deploy a [PodDisruptionBudget] for the repo server
upstream.repoServer.pdb.labels📜
Type: object
{}
Description: Labels to be added to repo server pdb
upstream.repoServer.pdb.annotations📜
Type: object
{}
Description: Annotations to be added to repo server pdb
upstream.repoServer.pdb.maxUnavailable📜
Type: string
""
Description: Number of pods that are unavailable after eviction as number or percentage (eg.: 50%). # Has higher precedence over repoServer.pdb.minAvailable
upstream.repoServer.extraArgs📜
Type: list
[]
Description: Additional command line arguments to pass to repo server
upstream.repoServer.env📜
Type: list
[]
Description: Environment variables to pass to repo server
upstream.repoServer.lifecycle📜
Type: object
{}
Description: Specify postStart and preStop lifecycle hooks for your argo-repo-server container
upstream.repoServer.extraContainers📜
Type: list
[]
Description: Additional containers to be added to the repo server pod # Ref: https://argo-cd.readthedocs.io/en/stable/user-guide/config-management-plugins/ # Note: Supports use of custom Helm templates
upstream.repoServer.initContainers📜
Type: list
[]
Description: Init containers to add to the repo server pods
upstream.repoServer.volumeMounts📜
Type: list
[]
Description: Additional volumeMounts to the repo server main container
upstream.repoServer.volumes📜
Type: list
[]
Description: Additional volumes to the repo server pod
upstream.repoServer.existingVolumes📜
Type: object
{}
Description: Volumes to be used in replacement of emptydir on default volumes
upstream.repoServer.useEphemeralHelmWorkingDir📜
Type: bool
true
Description: Toggle the usage of a ephemeral Helm working directory
upstream.repoServer.deploymentAnnotations📜
Type: object
{}
Description: Annotations to be added to repo server Deployment
upstream.repoServer.podAnnotations📜
Type: object
{}
Description: Annotations to be added to repo server pods
upstream.repoServer.podLabels📜
Type: object
{}
Description: Labels to be added to repo server pods
upstream.repoServer.resources📜
Type: object
limits:
cpu: 100m
memory: 1Gi
requests:
cpu: 100m
memory: 1Gi
Description: Resource limits and requests for the repo server pods
upstream.repoServer.containerPorts.server📜
Type: int
8081
Description: Repo server container port
upstream.repoServer.containerPorts.metrics📜
Type: int
8084
Description: Metrics container port
upstream.repoServer.hostNetwork📜
Type: bool
false
Description: Host Network for Repo server pods
upstream.repoServer.dnsConfig📜
Type: object
{}
Description: [DNS configuration]
upstream.repoServer.dnsPolicy📜
Type: string
"ClusterFirst"
Description: Alternative DNS policy for Repo server pods
upstream.repoServer.readinessProbe.failureThreshold📜
Type: int
5
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.repoServer.readinessProbe.initialDelaySeconds📜
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
upstream.repoServer.readinessProbe.periodSeconds📜
Type: int
10
Description: How often (in seconds) to perform the [probe]
upstream.repoServer.readinessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.repoServer.readinessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.repoServer.livenessProbe.failureThreshold📜
Type: int
5
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.repoServer.livenessProbe.initialDelaySeconds📜
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
upstream.repoServer.livenessProbe.periodSeconds📜
Type: int
10
Description: How often (in seconds) to perform the [probe]
upstream.repoServer.livenessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.repoServer.livenessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.repoServer.terminationGracePeriodSeconds📜
Type: int
30
Description: terminationGracePeriodSeconds for container lifecycle hook
upstream.repoServer.deploymentStrategy📜
Type: object
{}
Description: Deployment strategy to be added to the repo server Deployment
upstream.repoServer.certificateSecret.enabled📜
Type: bool
false
Description: Create argocd-repo-server-tls secret
upstream.repoServer.certificateSecret.annotations📜
Type: object
{}
Description: Annotations to be added to argocd-repo-server-tls secret
upstream.repoServer.certificateSecret.labels📜
Type: object
{}
Description: Labels to be added to argocd-repo-server-tls secret
upstream.repoServer.certificateSecret.ca📜
Type: string
""
Description: Certificate authority. Required for self-signed certificates.
upstream.repoServer.certificateSecret.key📜
Type: string
""
Description: Certificate private key
upstream.repoServer.certificateSecret.crt📜
Type: string
""
Description: Certificate data. Must contain SANs of Repo service (ie: argocd-repo-server, argocd-repo-server.argo-cd.svc)
upstream.repoServer.service.annotations📜
Type: object
{}
Description: Repo server service annotations
upstream.repoServer.service.labels📜
Type: object
{}
Description: Repo server service labels
upstream.repoServer.service.port📜
Type: int
8081
Description: Repo server service port
upstream.repoServer.service.portName📜
Type: string
"tcp-repo-server"
Description: Repo server service port name
upstream.repoServer.metrics.enabled📜
Type: bool
false
Description: Deploy metrics service
upstream.repoServer.metrics.service.type📜
Type: string
"ClusterIP"
Description: Metrics service type
upstream.repoServer.metrics.service.clusterIP📜
Type: string
""
Description: Metrics service clusterIP. None makes a “headless service” (no virtual IP)
upstream.repoServer.metrics.service.annotations📜
Type: object
{}
Description: Metrics service annotations
upstream.repoServer.metrics.service.labels📜
Type: object
{}
Description: Metrics service labels
upstream.repoServer.metrics.service.servicePort📜
Type: int
8084
Description: Metrics service port
upstream.repoServer.metrics.service.portName📜
Type: string
"http-metrics"
Description: Metrics service port name
upstream.repoServer.metrics.serviceMonitor.enabled📜
Type: bool
false
Description: Enable a prometheus ServiceMonitor
upstream.repoServer.metrics.serviceMonitor.interval📜
Type: string
"30s"
Description: Prometheus ServiceMonitor interval
upstream.repoServer.metrics.serviceMonitor.scrapeTimeout📜
Type: string
""
Description: Prometheus ServiceMonitor scrapeTimeout. If empty, Prometheus uses the global scrape timeout unless it is less than the target’s scrape interval value in which the latter is used.
upstream.repoServer.metrics.serviceMonitor.honorLabels📜
Type: bool
false
Description: When true, honorLabels preserves the metric’s labels when they collide with the target’s labels.
upstream.repoServer.metrics.serviceMonitor.relabelings📜
Type: list
[]
Description: Prometheus [RelabelConfigs] to apply to samples before scraping
upstream.repoServer.metrics.serviceMonitor.metricRelabelings📜
Type: list
[]
Description: Prometheus [MetricRelabelConfigs] to apply to samples before ingestion
upstream.repoServer.metrics.serviceMonitor.selector📜
Type: object
{}
Description: Prometheus ServiceMonitor selector
upstream.repoServer.metrics.serviceMonitor.scheme📜
Type: string
""
Description: Prometheus ServiceMonitor scheme
upstream.repoServer.metrics.serviceMonitor.tlsConfig📜
Type: object
{}
Description: Prometheus ServiceMonitor tlsConfig
upstream.repoServer.metrics.serviceMonitor.namespace📜
Type: string
""
Description: Prometheus ServiceMonitor namespace
upstream.repoServer.metrics.serviceMonitor.additionalLabels📜
Type: object
{}
Description: Prometheus ServiceMonitor labels
upstream.repoServer.metrics.serviceMonitor.annotations📜
Type: object
{}
Description: Prometheus ServiceMonitor annotations
upstream.repoServer.clusterRoleRules.enabled📜
Type: bool
false
Description: Enable custom rules for the Repo server’s Cluster Role resource
upstream.repoServer.clusterRoleRules.rules📜
Type: list
[]
Description: List of custom rules for the Repo server’s Cluster Role resource
upstream.repoServer.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account into the pod.
upstream.repoServer.serviceAccount.create📜
Type: bool
true
Description: Create repo server service account
upstream.repoServer.serviceAccount.name📜
Type: string
""
Description: Repo server service account name
upstream.repoServer.serviceAccount.annotations📜
Type: object
{}
Description: Annotations applied to created service account
upstream.repoServer.serviceAccount.labels📜
Type: object
{}
Description: Labels applied to created service account
upstream.repoServer.serviceAccount.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account
upstream.repoServer.rbac📜
Type: list
[]
Description: Repo server rbac rules
upstream.applicationSet.enabled📜
Type: bool
true
Description: Enable ApplicationSet controller
upstream.applicationSet.name📜
Type: string
"applicationset-controller"
Description: ApplicationSet controller name string
upstream.applicationSet.replicas📜
Type: int
1
Description: The number of ApplicationSet controller pods to run
upstream.applicationSet.pdb.enabled📜
Type: bool
false
Description: Deploy a [PodDisruptionBudget] for the ApplicationSet controller
upstream.applicationSet.pdb.labels📜
Type: object
{}
Description: Labels to be added to ApplicationSet controller pdb
upstream.applicationSet.pdb.annotations📜
Type: object
{}
Description: Annotations to be added to ApplicationSet controller pdb
upstream.applicationSet.pdb.maxUnavailable📜
Type: string
""
Description: Number of pods that are unavailable after eviction as number or percentage (eg.: 50%). # Has higher precedence over applicationSet.pdb.minAvailable
upstream.applicationSet.extraArgs📜
Type: list
[]
Description: ApplicationSet controller command line flags
upstream.applicationSet.extraEnv📜
Type: list
[]
Description: Environment variables to pass to the ApplicationSet controller
upstream.applicationSet.extraContainers📜
Type: list
[]
Description: Additional containers to be added to the ApplicationSet controller pod # Note: Supports use of custom Helm templates
upstream.applicationSet.initContainers📜
Type: list
[]
Description: Init containers to add to the ApplicationSet controller pod # Note: Supports use of custom Helm templates
upstream.applicationSet.extraVolumeMounts📜
Type: list
[]
Description: List of extra mounts to add (normally used with extraVolumes)
upstream.applicationSet.extraVolumes📜
Type: list
[]
Description: List of extra volumes to add
upstream.applicationSet.metrics.enabled📜
Type: bool
false
Description: Deploy metrics service
upstream.applicationSet.metrics.service.type📜
Type: string
"ClusterIP"
Description: Metrics service type
upstream.applicationSet.metrics.service.clusterIP📜
Type: string
""
Description: Metrics service clusterIP. None makes a “headless service” (no virtual IP)
upstream.applicationSet.metrics.service.annotations📜
Type: object
{}
Description: Metrics service annotations
upstream.applicationSet.metrics.service.labels📜
Type: object
{}
Description: Metrics service labels
upstream.applicationSet.metrics.service.servicePort📜
Type: int
8080
Description: Metrics service port
upstream.applicationSet.metrics.service.portName📜
Type: string
"http-metrics"
Description: Metrics service port name
upstream.applicationSet.metrics.serviceMonitor.enabled📜
Type: bool
false
Description: Enable a prometheus ServiceMonitor
upstream.applicationSet.metrics.serviceMonitor.interval📜
Type: string
"30s"
Description: Prometheus ServiceMonitor interval
upstream.applicationSet.metrics.serviceMonitor.scrapeTimeout📜
Type: string
""
Description: Prometheus ServiceMonitor scrapeTimeout. If empty, Prometheus uses the global scrape timeout unless it is less than the target’s scrape interval value in which the latter is used.
upstream.applicationSet.metrics.serviceMonitor.honorLabels📜
Type: bool
false
Description: When true, honorLabels preserves the metric’s labels when they collide with the target’s labels.
upstream.applicationSet.metrics.serviceMonitor.relabelings📜
Type: list
[]
Description: Prometheus [RelabelConfigs] to apply to samples before scraping
upstream.applicationSet.metrics.serviceMonitor.metricRelabelings📜
Type: list
[]
Description: Prometheus [MetricRelabelConfigs] to apply to samples before ingestion
upstream.applicationSet.metrics.serviceMonitor.selector📜
Type: object
{}
Description: Prometheus ServiceMonitor selector
upstream.applicationSet.metrics.serviceMonitor.scheme📜
Type: string
""
Description: Prometheus ServiceMonitor scheme
upstream.applicationSet.metrics.serviceMonitor.tlsConfig📜
Type: object
{}
Description: Prometheus ServiceMonitor tlsConfig
upstream.applicationSet.metrics.serviceMonitor.namespace📜
Type: string
""
Description: Prometheus ServiceMonitor namespace
upstream.applicationSet.metrics.serviceMonitor.additionalLabels📜
Type: object
{}
Description: Prometheus ServiceMonitor labels
upstream.applicationSet.metrics.serviceMonitor.annotations📜
Type: object
{}
Description: Prometheus ServiceMonitor annotations
upstream.applicationSet.service.annotations📜
Type: object
{}
Description: ApplicationSet service annotations
upstream.applicationSet.service.labels📜
Type: object
{}
Description: ApplicationSet service labels
upstream.applicationSet.service.type📜
Type: string
"ClusterIP"
Description: ApplicationSet service type
upstream.applicationSet.service.port📜
Type: int
7000
Description: ApplicationSet service port
upstream.applicationSet.service.portName📜
Type: string
"http-webhook"
Description: ApplicationSet service port name
upstream.applicationSet.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account into the pod.
upstream.applicationSet.serviceAccount.create📜
Type: bool
true
Description: Create ApplicationSet controller service account
upstream.applicationSet.serviceAccount.name📜
Type: string
"argocd-applicationset-controller"
Description: ApplicationSet controller service account name
upstream.applicationSet.serviceAccount.annotations📜
Type: object
{}
Description: Annotations applied to created service account
upstream.applicationSet.serviceAccount.labels📜
Type: object
{}
Description: Labels applied to created service account
upstream.applicationSet.serviceAccount.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account
upstream.applicationSet.deploymentAnnotations📜
Type: object
{}
Description: Annotations to be added to ApplicationSet controller Deployment
upstream.applicationSet.podAnnotations📜
Type: object
{}
Description: Annotations for the ApplicationSet controller pods
upstream.applicationSet.podLabels📜
Type: object
{}
Description: Labels for the ApplicationSet controller pods
upstream.applicationSet.resources📜
Type: object
{}
Description: Resource limits and requests for the ApplicationSet controller pods.
upstream.applicationSet.containerPorts.metrics📜
Type: int
8080
Description: Metrics container port
upstream.applicationSet.containerPorts.probe📜
Type: int
8081
Description: Probe container port
upstream.applicationSet.containerPorts.webhook📜
Type: int
7000
Description: Webhook container port
upstream.applicationSet.dnsConfig📜
Type: object
{}
Description: [DNS configuration]
upstream.applicationSet.dnsPolicy📜
Type: string
"ClusterFirst"
Description: Alternative DNS policy for ApplicationSet controller pods
upstream.applicationSet.readinessProbe.enabled📜
Type: bool
false
Description: Enable Kubernetes liveness probe for ApplicationSet controller
upstream.applicationSet.readinessProbe.initialDelaySeconds📜
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
upstream.applicationSet.readinessProbe.periodSeconds📜
Type: int
10
Description: How often (in seconds) to perform the [probe]
upstream.applicationSet.readinessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.applicationSet.readinessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.applicationSet.readinessProbe.failureThreshold📜
Type: int
5
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.applicationSet.livenessProbe.enabled📜
Type: bool
false
Description: Enable Kubernetes liveness probe for ApplicationSet controller
upstream.applicationSet.livenessProbe.initialDelaySeconds📜
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
upstream.applicationSet.livenessProbe.periodSeconds📜
Type: int
10
Description: How often (in seconds) to perform the [probe]
upstream.applicationSet.livenessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.applicationSet.livenessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.applicationSet.livenessProbe.failureThreshold📜
Type: int
5
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.applicationSet.terminationGracePeriodSeconds📜
Type: int
30
Description: terminationGracePeriodSeconds for container lifecycle hook
upstream.applicationSet.deploymentStrategy📜
Type: object
{}
Description: Deployment strategy to be added to the ApplicationSet controller Deployment
upstream.applicationSet.certificate.enabled📜
Type: bool
false
Description: Deploy a Certificate resource (requires cert-manager)
upstream.applicationSet.certificate.additionalHosts📜
Type: list
[]
Description: Certificate Subject Alternate Names (SANs)
upstream.applicationSet.certificate.issuer.group📜
Type: string
""
Description: Certificate issuer group. Set if using an external issuer. Eg. cert-manager.io
upstream.applicationSet.certificate.issuer.kind📜
Type: string
""
Description: Certificate issuer kind. Either Issuer or ClusterIssuer
upstream.applicationSet.certificate.issuer.name📜
Type: string
""
Description: Certificate issuer name. Eg. letsencrypt
upstream.applicationSet.certificate.privateKey.rotationPolicy📜
Type: string
"Never"
Description: Rotation policy of private key when certificate is re-issued. Either: Never or Always
upstream.applicationSet.certificate.privateKey.encoding📜
Type: string
"PKCS1"
Description: The private key cryptography standards (PKCS) encoding for private key. Either: PCKS1 or PKCS8
upstream.applicationSet.certificate.privateKey.algorithm📜
Type: string
"RSA"
Description: Algorithm used to generate certificate private key. One of: RSA, Ed25519 or ECDSA
upstream.applicationSet.certificate.privateKey.size📜
Type: int
2048
Description: Key bit size of the private key. If algorithm is set to Ed25519, size is ignored.
upstream.applicationSet.certificate.annotations📜
Type: object
{}
Description: Annotations to be applied to the ApplicationSet Certificate
upstream.applicationSet.ingress.enabled📜
Type: bool
false
Description: Enable an ingress resource for ApplicationSet webhook
upstream.applicationSet.ingress.labels📜
Type: object
{}
Description: Additional ingress labels
upstream.applicationSet.ingress.annotations📜
Type: object
{}
Description: Additional ingress annotations
upstream.applicationSet.ingress.ingressClassName📜
Type: string
""
Description: Defines which ingress ApplicationSet controller will implement the resource
upstream.applicationSet.ingress.path📜
Type: string
"/api/webhook"
Description: List of ingress paths
upstream.applicationSet.ingress.pathType📜
Type: string
"Prefix"
Description: Ingress path type. One of Exact, Prefix or ImplementationSpecific
upstream.applicationSet.ingress.tls📜
Type: bool
false
Description: Enable TLS configuration for the hostname defined at applicationSet.webhook.ingress.hostname # TLS certificate will be retrieved from a TLS secret with name:argocd-applicationset-controller-tls
upstream.applicationSet.allowAnyNamespace📜
Type: bool
false
Description: Enable ApplicationSet in any namespace feature
upstream.notifications.enabled📜
Type: bool
true
Description: Enable notifications controller
upstream.notifications.name📜
Type: string
"notifications-controller"
Description: Notifications controller name string
upstream.notifications.pdb.enabled📜
Type: bool
false
Description: Deploy a [PodDisruptionBudget] for the notifications controller
upstream.notifications.pdb.labels📜
Type: object
{}
Description: Labels to be added to notifications controller pdb
upstream.notifications.pdb.annotations📜
Type: object
{}
Description: Annotations to be added to notifications controller pdb
upstream.notifications.pdb.maxUnavailable📜
Type: string
""
Description: Number of pods that are unavailable after eviction as number or percentage (eg.: 50%). # Has higher precedence over notifications.pdb.minAvailable
upstream.notifications.extraArgs📜
Type: list
[]
Description: Extra arguments to provide to the notifications controller
upstream.notifications.extraEnv📜
Type: list
[]
Description: Additional container environment variables
upstream.notifications.extraContainers📜
Type: list
[]
Description: Additional containers to be added to the notifications controller pod # Note: Supports use of custom Helm templates
upstream.notifications.initContainers📜
Type: list
[]
Description: Init containers to add to the notifications controller pod # Note: Supports use of custom Helm templates
upstream.notifications.extraVolumeMounts📜
Type: list
[]
Description: List of extra mounts to add (normally used with extraVolumes)
upstream.notifications.extraVolumes📜
Type: list
[]
Description: List of extra volumes to add
upstream.notifications.context📜
Type: object
{}
Description: Define user-defined context # For more information: https://argo-cd.readthedocs.io/en/stable/operator-manual/notifications/templates/#defining-user-defined-context
upstream.notifications.secret.create📜
Type: bool
true
Description: Whether helm chart creates notifications controller secret # If true, will create a secret with the name below. Otherwise, will assume existence of a secret with that name.
upstream.notifications.secret.name📜
Type: string
"argocd-notifications-secret"
Description: notifications controller Secret name
upstream.notifications.secret.annotations📜
Type: object
{}
Description: key:value pairs of annotations to be added to the secret
upstream.notifications.secret.labels📜
Type: object
{}
Description: key:value pairs of labels to be added to the secret
upstream.notifications.secret.items📜
Type: object
{}
Description: Generic key:value pairs to be inserted into the secret # Can be used for templates, notification services etc. Some examples given below. # For more information: https://argo-cd.readthedocs.io/en/stable/operator-manual/notifications/services/overview/
upstream.notifications.metrics.enabled📜
Type: bool
false
Description: Enables prometheus metrics server
upstream.notifications.metrics.port📜
Type: int
9001
Description: Metrics port
upstream.notifications.metrics.service.type📜
Type: string
"ClusterIP"
Description: Metrics service type
upstream.notifications.metrics.service.clusterIP📜
Type: string
""
Description: Metrics service clusterIP. None makes a “headless service” (no virtual IP)
upstream.notifications.metrics.service.annotations📜
Type: object
{}
Description: Metrics service annotations
upstream.notifications.metrics.service.labels📜
Type: object
{}
Description: Metrics service labels
upstream.notifications.metrics.service.portName📜
Type: string
"http-metrics"
Description: Metrics service port name
upstream.notifications.metrics.serviceMonitor.enabled📜
Type: bool
false
Description: Enable a prometheus ServiceMonitor
upstream.notifications.metrics.serviceMonitor.selector📜
Type: object
{}
Description: Prometheus ServiceMonitor selector
upstream.notifications.metrics.serviceMonitor.additionalLabels📜
Type: object
{}
Description: Prometheus ServiceMonitor labels
upstream.notifications.metrics.serviceMonitor.annotations📜
Type: object
{}
Description: Prometheus ServiceMonitor annotations
upstream.notifications.metrics.serviceMonitor.scheme📜
Type: string
""
Description: Prometheus ServiceMonitor scheme
upstream.notifications.metrics.serviceMonitor.tlsConfig📜
Type: object
{}
Description: Prometheus ServiceMonitor tlsConfig
upstream.notifications.metrics.serviceMonitor.honorLabels📜
Type: bool
false
Description: When true, honorLabels preserves the metric’s labels when they collide with the target’s labels.
upstream.notifications.metrics.serviceMonitor.relabelings📜
Type: list
[]
Description: Prometheus [RelabelConfigs] to apply to samples before scraping
upstream.notifications.metrics.serviceMonitor.metricRelabelings📜
Type: list
[]
Description: Prometheus [MetricRelabelConfigs] to apply to samples before ingestion
upstream.notifications.deploymentAnnotations📜
Type: object
{}
Description: Annotations to be applied to the notifications controller Deployment
upstream.notifications.podAnnotations📜
Type: object
{}
Description: Annotations to be applied to the notifications controller Pods
upstream.notifications.podLabels📜
Type: object
{}
Description: Labels to be applied to the notifications controller Pods
upstream.notifications.resources📜
Type: object
{}
Description: Resource limits and requests for the notifications controller
upstream.notifications.containerPorts.metrics📜
Type: int
9001
Description: Metrics container port
upstream.notifications.dnsConfig📜
Type: object
{}
Description: [DNS configuration]
upstream.notifications.dnsPolicy📜
Type: string
"ClusterFirst"
Description: Alternative DNS policy for notifications controller Pods
upstream.notifications.readinessProbe.enabled📜
Type: bool
false
Description: Enable Kubernetes liveness probe for notifications controller Pods
upstream.notifications.readinessProbe.initialDelaySeconds📜
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
upstream.notifications.readinessProbe.periodSeconds📜
Type: int
10
Description: How often (in seconds) to perform the [probe]
upstream.notifications.readinessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.notifications.readinessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.notifications.readinessProbe.failureThreshold📜
Type: int
5
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.notifications.livenessProbe.enabled📜
Type: bool
false
Description: Enable Kubernetes liveness probe for notifications controller Pods
upstream.notifications.livenessProbe.initialDelaySeconds📜
Type: int
10
Description: Number of seconds after the container has started before [probe] is initiated
upstream.notifications.livenessProbe.periodSeconds📜
Type: int
10
Description: How often (in seconds) to perform the [probe]
upstream.notifications.livenessProbe.timeoutSeconds📜
Type: int
30
Description: Number of seconds after which the [probe] times out
upstream.notifications.livenessProbe.successThreshold📜
Type: int
1
Description: Minimum consecutive successes for the [probe] to be considered successful after having failed
upstream.notifications.livenessProbe.failureThreshold📜
Type: int
5
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.notifications.terminationGracePeriodSeconds📜
Type: int
30
Description: terminationGracePeriodSeconds for container lifecycle hook
upstream.notifications.deploymentStrategy📜
Type: object
type: Recreate
Description: Deployment strategy to be added to the notifications controller Deployment
upstream.notifications.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account into the pod.
upstream.notifications.serviceAccount.create📜
Type: bool
true
Description: Create notifications controller service account
upstream.notifications.serviceAccount.name📜
Type: string
"argocd-notifications-controller"
Description: Notification controller service account name
upstream.notifications.serviceAccount.annotations📜
Type: object
{}
Description: Annotations applied to created service account
upstream.notifications.serviceAccount.labels📜
Type: object
{}
Description: Labels applied to created service account
upstream.notifications.serviceAccount.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account
upstream.notifications.cm.create📜
Type: bool
true
Description: Whether helm chart creates notifications controller config map
upstream.notifications.clusterRoleRules.rules📜
Type: list
[]
Description: List of custom rules for the notifications controller’s ClusterRole resource
upstream.notifications.subscriptions📜
Type: list
[]
Description: Contains centrally managed global application subscriptions # For more information: https://argo-cd.readthedocs.io/en/stable/operator-manual/notifications/subscriptions/
upstream.notifications.templates📜
Type: object
{}
Description: The notification template is used to generate the notification content # For more information: https://argo-cd.readthedocs.io/en/stable/operator-manual/notifications/templates/
upstream.notifications.triggers📜
Type: object
{}
Description: The trigger defines the condition when the notification should be sent # For more information: https://argo-cd.readthedocs.io/en/stable/operator-manual/notifications/triggers/
upstream.notifications.bots.slack.enabled📜
Type: bool
false
Description: Enable slack bot # You have to set secret.notifiers.slack.signingSecret
upstream.notifications.bots.slack.pdb.enabled📜
Type: bool
false
Description: Deploy a [PodDisruptionBudget] for the Slack bot
upstream.notifications.bots.slack.pdb.labels📜
Type: object
{}
Description: Labels to be added to Slack bot pdb
upstream.notifications.bots.slack.pdb.annotations📜
Type: object
{}
Description: Annotations to be added to Slack bot pdb
upstream.notifications.bots.slack.pdb.maxUnavailable📜
Type: string
""
Description: Number of pods that are unavailble after eviction as number or percentage (eg.: 50%). # Has higher precedence over notifications.bots.slack.pdb.minAvailable
upstream.notifications.bots.slack.extraArgs📜
Type: list
[]
Description: List of extra cli args to add for Slack bot
upstream.notifications.bots.slack.service.annotations📜
Type: object
{}
Description: Service annotations for Slack bot
upstream.notifications.bots.slack.service.port📜
Type: int
80
Description: Service port for Slack bot
upstream.notifications.bots.slack.service.type📜
Type: string
"LoadBalancer"
Description: Service type for Slack bot
upstream.notifications.bots.slack.serviceAccount.create📜
Type: bool
true
Description: Specifies whether a service account should be created
upstream.notifications.bots.slack.serviceAccount.name📜
Type: string
"argocd-notifications-bot"
Description: The name of the service account to use. # If not set and create is true, a name is generated using the fullname template
upstream.notifications.bots.slack.serviceAccount.annotations📜
Type: object
{}
Description: Annotations applied to created service account
upstream.notifications.bots.slack.dnsConfig📜
Type: object
{}
Description: [DNS configuration]
upstream.notifications.bots.slack.dnsPolicy📜
Type: string
"ClusterFirst"
Description: Alternative DNS policy for Slack bot pods
upstream.notifications.bots.slack.resources📜
Type: object
{}
Description: Resource limits and requests for the Slack bot
upstream.notifications.bots.slack.tolerations📜
Type: list
[]
Description: [Tolerations] for use with node taints
upstream.notifications.bots.slack.nodeSelector📜
Type: object
{}
Description: [Node selector]
upstream.commitServer.enabled📜
Type: bool
false
Description: Enable commit server
upstream.commitServer.name📜
Type: string
"commit-server"
Description: Commit server name
upstream.commitServer.extraArgs📜
Type: list
[]
Description: commit server command line flags
upstream.commitServer.extraEnv📜
Type: list
[]
Description: Environment variables to pass to the commit server
upstream.commitServer.extraVolumeMounts📜
Type: list
[]
Description: List of extra mounts to add (normally used with extraVolumes)
upstream.commitServer.extraVolumes📜
Type: list
[]
Description: List of extra volumes to add
upstream.commitServer.metrics.enabled📜
Type: bool
false
Description: Enables prometheus metrics server
upstream.commitServer.metrics.service.type📜
Type: string
"ClusterIP"
Description: Metrics service type
upstream.commitServer.metrics.service.clusterIP📜
Type: string
""
Description: Metrics service clusterIP. None makes a “headless service” (no virtual IP)
upstream.commitServer.metrics.service.annotations📜
Type: object
{}
Description: Metrics service annotations
upstream.commitServer.metrics.service.labels📜
Type: object
{}
Description: Metrics service labels
upstream.commitServer.metrics.service.servicePort📜
Type: int
8087
Description: Metrics service port
upstream.commitServer.metrics.service.portName📜
Type: string
"metrics"
Description: Metrics service port name
upstream.commitServer.service.annotations📜
Type: object
{}
Description: commit server service annotations
upstream.commitServer.service.labels📜
Type: object
{}
Description: commit server service labels
upstream.commitServer.automountServiceAccountToken📜
Type: bool
false
Description: Automount API credentials for the Service Account into the pod.
upstream.commitServer.serviceAccount.create📜
Type: bool
true
Description: Create commit server service account
upstream.commitServer.serviceAccount.name📜
Type: string
"argocd-commit-server"
Description: commit server service account name
upstream.commitServer.serviceAccount.annotations📜
Type: object
{}
Description: Annotations applied to created service account
upstream.commitServer.serviceAccount.labels📜
Type: object
{}
Description: Labels applied to created service account
upstream.commitServer.serviceAccount.automountServiceAccountToken📜
Type: bool
true
Description: Automount API credentials for the Service Account
upstream.commitServer.deploymentAnnotations📜
Type: object
{}
Description: Annotations to be added to commit server Deployment
upstream.commitServer.podAnnotations📜
Type: object
{}
Description: Annotations for the commit server pods
upstream.commitServer.podLabels📜
Type: object
{}
Description: Labels for the commit server pods
upstream.commitServer.resources📜
Type: object
{}
Description: Resource limits and requests for the commit server pods.
upstream.commitServer.dnsConfig📜
Type: object
{}
Description: [DNS configuration]
upstream.commitServer.dnsPolicy📜
Type: string
"ClusterFirst"
Description: Alternative DNS policy for commit server pods
upstream.commitServer.readinessProbe.enabled📜
Type: bool
true
Description: Enable Kubernetes liveness probe for commit server
upstream.commitServer.readinessProbe.initialDelaySeconds📜
Type: int
5
Description: Number of seconds after the container has started before [probe] is initiated
upstream.commitServer.readinessProbe.periodSeconds📜
Type: int
10
Description: How often (in seconds) to perform the [probe]
upstream.commitServer.readinessProbe.timeoutSeconds📜
Type: int
1
Description: Number of seconds after which the [probe] times out
upstream.commitServer.readinessProbe.failureThreshold📜
Type: int
3
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.commitServer.livenessProbe.enabled📜
Type: bool
true
Description: Enable Kubernetes liveness probe for commit server
upstream.commitServer.livenessProbe.initialDelaySeconds📜
Type: int
30
Description: Number of seconds after the container has started before [probe] is initiated
upstream.commitServer.livenessProbe.periodSeconds📜
Type: int
30
Description: How often (in seconds) to perform the [probe]
upstream.commitServer.livenessProbe.timeoutSeconds📜
Type: int
5
Description: Number of seconds after which the [probe] times out
upstream.commitServer.livenessProbe.failureThreshold📜
Type: int
3
Description: Minimum consecutive failures for the [probe] to be considered failed after having succeeded
upstream.commitServer.terminationGracePeriodSeconds📜
Type: int
30
Description: terminationGracePeriodSeconds for container lifecycle hook
upstream.commitServer.deploymentStrategy📜
Type: object
{}
Description: Deployment strategy to be added to the commit server Deployment