service-catalog/manifests/helm/argo-cd/10.4.0

Argo CD Chart

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

Source code can be found here:

• https://github.com/argoproj/argo-cd
• https://github.com/argoproj/argo-helm/tree/main/charts/argo-cd

This is a community maintained chart. This chart installs argo-cd, a declarative, GitOps continuous delivery tool for Kubernetes.

The default installation is intended to be similar to the provided Argo CD releases.

If you want to avoid including sensitive information unencrypted (clear text) in your version control, make use of the declarative setup of Argo CD. For instance, rather than adding repositories and their keys in your Helm values, you could deploy SealedSecrets with contents as seen in this repositories section or any other secrets manager service (i.e. HashiCorp Vault, AWS/GCP Secrets Manager, etc.).

High Availability

This chart installs the non-HA version of Argo CD by default. If you want to run Argo CD in HA mode, you can use one of the example values in the next sections. Please also have a look into the upstream Operator Manual regarding High Availability to understand how scaling of Argo CD works in detail.

Warning: You need at least 3 worker nodes as the HA mode of redis enforces Pods to run on separate nodes.

HA mode with autoscaling

redis-ha:
  enabled: true

controller:
  replicas: 1

server:
  autoscaling:
    enabled: true
    minReplicas: 2

repoServer:
  autoscaling:
    enabled: true
    minReplicas: 2

applicationSet:
  replicas: 2

HA mode without autoscaling

redis-ha:
  enabled: true

controller:
  replicas: 1

server:
  replicas: 2

repoServer:
  replicas: 2

applicationSet:
  replicas: 2

Ingress configuration

Please refer to the Operator Manual for details as the samples below corespond to their respective sections.

SSL-Passthrough

The tls: true option will expect that the argocd-server-tls secret exists as Argo CD server loads TLS certificates from this place.

global:
  domain: argocd.example.com

certificate:
  enabled: true

server:
  ingress:
    enabled: true
    ingressClassName: nginx
    annotations:
      nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
      nginx.ingress.kubernetes.io/ssl-passthrough: "true"
    tls: true

SSL Termination at Ingress Controller

global:
  domain: argocd.example.com

configs:
  params:
    server.insecure: true

server:
  ingress:
    enabled: true
    ingressClassName: nginx
    annotations:
      nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
      nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
    extraTls:
      - hosts:
        - argocd.example.com
        # Based on the ingress controller used secret might be optional
        secretName: wildcard-tls

Note: If you don't plan on using a wildcard certificate it's also possible to use tls: true without extraTls section.

Multiple ingress resources for gRPC protocol support

Use ingressGrpc section if your ingress controller supports only a single protocol per Ingress resource (i.e.: Contour).

global:
  domain: argocd.example.com

configs:
  params:
    server.insecure: true

server:
  ingress:
    enabled: true
    ingressClassName: contour-internal
    extraTls:
      - hosts:
        - argocd.example.com
        secretName: wildcard-tls

   ingressGrpc:
     enabled: true
     ingressClassName: contour-internal
     extraTls:
      - hosts:
        - grpc.argocd.example.com
        secretName: wildcard-tls

Multiple ingress domains

global:
  domain: argocd.example.com

server:
  ingress:
    enabled: true
    ingressClassName: nginx
    annotations:
      cert-manager.io/cluster-issuer: "<my-issuer>"
      nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
    tls: true
    extraHosts:
      - name: argocd-alias.example.com
        path: /

AWS Application Load Balancer

Refer to the Operator Manual for AWS Application Load Balancer mode. The provided example assumes you are using TLS off-loading via AWS ACM service.

Note: Using controller: aws creates additional service for gRPC traffic and it's no longer need to use ingressGrpc configuration section.

global:
  domain: argocd.example.com

configs:
  params:
    server.insecure: true

server:
  ingress:
    enabled: true
    controller: aws
    ingressClassName: alb
    annotations:
      alb.ingress.kubernetes.io/scheme: internal
      alb.ingress.kubernetes.io/target-type: ip
      alb.ingress.kubernetes.io/backend-protocol: HTTP
      alb.ingress.kubernetes.io/listen-ports: '[{"HTTP":80}, {"HTTPS":443}]'
      alb.ingress.kubernetes.io/ssl-redirect: '443'
    aws:
      serviceType: ClusterIP # <- Used with target-type: ip
      backendProtocolVersion: GRPC

GKE Application Load Balancer

The implementation will populate ingressClassName, networking.gke.io/managed-certificates and networking.gke.io/v1beta1.FrontendConfig annotations automatically if you provide configuration for GKE resources.

global:
  domain: argocd.example.com

configs:
  params:
    server.insecure: true

server:
  service:
    annotations:
      cloud.google.com/neg: '{"ingress": true}'
      cloud.google.com/backend-config: '{"ports": {"http":"argocd-server"}}'

  ingress:
    enabled: true
    controller: gke
    gke:
      backendConfig:
        healthCheck:
          checkIntervalSec: 30
          timeoutSec: 5
          healthyThreshold: 1
          unhealthyThreshold: 2
          type: HTTP
          requestPath: /healthz
          port: 8080
      frontendConfig:
        redirectToHttps:
          enabled: true 
      managedCertificate:
        enabled: true

AKS Application Routing (generic)

AKS Web Application Routing uses the standard Kubernetes Ingress specification, so the generic controller type is sufficient. webapprouting provides a managed ingress controller based on nginx.

global: 
  domain: argocd.example.com 
 
configs: 
  params: 
    server.insecure: true 
 
server: 
  ingress: 
    enabled: true 
    controller: generic 
    ingressClassName: webapprouting.kubernetes.azure.com 
    annotations: 
      # Optional: Add any AKS-specific annotations if needed 
    extraTls: 
      - hosts: 
          - argocd.example.com 
        # Certificate can be managed by Web Application Routing 
        secretName: argocd-tls

Gateway API HTTPRoute

The Gateway API provides a modern, extensible way to configure ingress traffic routing. This chart supports HTTPRoute resources as an alternative to traditional Ingress.

Note: Gateway API support is EXPERIMENTAL. Support depends on your Gateway controller implementation. Some controllers may require additional configuration (e.g., BackendTLSPolicy for HTTPS backends). Refer to Gateway API implementations for controller-specific details.

global:
  domain: argocd.example.com

server:
  httproute:
    enabled: true
    parentRefs:
      - name: example-gateway
        namespace: gateway-system
        sectionName: https

Gateway API with gRPC support

For deployments requiring gRPC routing, use GRPCRoute alongside HTTPRoute:

server:
  httproute:
    enabled: true
    parentRefs:
      - name: example-gateway
        namespace: gateway-system
        sectionName: https

  grpcroute:
    enabled: true
    parentRefs:
      - name: example-gateway
        namespace: gateway-system
        sectionName: grpc

When the Argo CD server runs in insecure mode (server.insecure: true), it serves the web UI (HTTP/1.1 only) and gRPC (HTTP/2 only) on the same container port. appProtocol is single-valued per Service port, so the http port cannot describe both protocols. Per GEP-1911 implementations only may infer the backend protocol from the route type, so gRPC works on some Gateway controllers and not others. Set server.service.servicePortHttp2 to expose an additional Service port, and server.service.servicePortHttp2AppProtocol to declare its protocol explicitly. The GRPCRoute then targets that port, while the HTTPRoute keeps using the http port:

configs:
  params:
    server.insecure: true

server:
  service:
    servicePortHttp2: 8080
    servicePortHttp2AppProtocol: kubernetes.io/h2c

  httproute:
    enabled: true
    parentRefs:
      - name: example-gateway
        namespace: gateway-system

  grpcroute:
    enabled: true
    parentRefs:
      - name: example-gateway
        namespace: gateway-system
        sectionName: grpc

Note: The kubernetes.io/h2c application protocol is defined by KEP-3726, and not every implementation uses it — Istio, for example, expects http2 or grpc, and can also select the protocol from servicePortHttp2Name alone. Set servicePortHttp2AppProtocol to whatever your controller understands. The port is only rendered in insecure mode, since h2c does not apply to a TLS backend.

Gateway API with TLS backend

For HTTPS backends with Gateway API, you may need to configure BackendTLSPolicy:

Warning: BackendTLSPolicy is in EXPERIMENTAL status. Not all Gateway controllers support this resource (e.g., Cilium does not yet support it).

configs:
  params:
    server.insecure: false  # HTTPS backend

server:
  httproute:
    enabled: true
    parentRefs:
      - name: example-gateway
        namespace: gateway-system

  backendTLSPolicy:
    enabled: true
    hostname: argocd-server.argocd.svc.cluster.local
    wellKnownCACertificates: System

Gateway API ListenerSet

Use ListenerSet to attach listeners to an existing shared Gateway. This is useful when you want to contribute listeners to a Gateway managed by another team or namespace.

Note: ListenerSet support is EXPERIMENTAL. Requires Gateway API v1.5+ and a controller that supports ListenerSet. Refer to Gateway API implementations for controller-specific details.

Only parentRef (pointing to the parent Gateway) is required. A default HTTPS listener is synthesized automatically using global.domain as the hostname:

global:
  domain: argocd.example.com

server:
  listenerset:
    enabled: true
    parentRef:
      name: example-gateway
      namespace: gateway-system

Combined with an HTTPRoute to route traffic through the listener to the Argo CD server. The HTTPRoute automatically targets the ListenerSet and inherits the hostname from global.domain — no extra configuration needed:

global:
  domain: argocd.example.com

server:
  listenerset:
    enabled: true
    parentRef:
      name: example-gateway
      namespace: gateway-system

  httproute:
    enabled: true

To customise the synthesized listener (e.g. change the port, protocol, or TLS secret), override the individual fields:

server:
  listenerset:
    enabled: true
    parentRef:
      name: example-gateway
      namespace: gateway-system
    hostname: custom.example.com   # overrides global.domain
    port: 8443
    tls:
      secretName: my-tls-secret

For full control, provide a listeners array directly. When non-empty it is used verbatim and all synthesized listener fields are ignored:

server:
  listenerset:
    enabled: true
    parentRef:
      name: example-gateway
      namespace: gateway-system
    listeners:
      - name: https
        port: 443
        protocol: HTTPS
        hostname: argocd.example.com
        tls:
          mode: Terminate
          certificateRefs:
            - group: ""
              kind: Secret
              name: argocd-server-tls
        allowedRoutes:
          namespaces:
            from: Same

Setting the initial admin password via Argo CD Application CR

Note: When deploying the argo-cd chart via an Argo CD Application CR, define your bcrypt-hashed admin password under helm.values—not helm.parameters—because Argo CD performs variable substitution on parameters, which will mangle any $… in your hash.

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: argocd-testing
spec:
  destination:
    namespace: testing
    server: https://kubernetes.default.svc
  project: default
  source:
    chart: argo-cd
    repoURL: https://argoproj.github.io/argo-helm
    targetRevision: 3.21.0
    helm:
      values: |
        configs:
          secret:
            argocdServerAdminPassword: $2a$10$H1a30nMr9v2QE2nkyz0BoOD2J0I6FQFMtHS0csEg12RBWzfRuuoE6

Synchronizing Changes from Original Repository

In the original Argo CD repository an manifests/install.yaml is generated using kustomize. It's the basis for the installation as described in the docs.

When installing Argo CD using this helm chart the user should have a similar experience and configuration rolled out. Hence, it makes sense to try to achieve a similar output of rendered .yaml resources when calling helm template using the default settings in values.yaml.

To update the templates and default settings in values.yaml it may come in handy to look up the diff of the manifests/install.yaml between two versions accordingly. This can either be done directly via github and look for manifests/install.yaml:

https://github.com/argoproj/argo-cd/compare/v1.8.7...v2.0.0#files_bucket

Or you clone the repository and do a local git-diff:

git clone https://github.com/argoproj/argo-cd.git
cd argo-cd
git diff v1.8.7 v2.0.0 -- manifests/install.yaml

Changes in the CustomResourceDefinition resources shall be fixed easily by copying 1:1 from the manifests/crds folder into this charts/argo-cd/templates/crds folder.

Custom resource definitions

The chart enables server-side apply for CustomResourceDefinitions when using Argo CD to install Argo CD using the crds.annotations.argocd.argoproj.io/sync-options annotation. This default avoids client-side apply size limits that can affect large CRDs (for example, ApplicationSet CRDs) and follows the upstream upgrade guidance: https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/3.2-3.3/#applicationset-crd-exceeds-the-size-limit-for-client-side-apply. If you install the CRDs manually using kubectl make sure to enable server-side apply.

Some users would prefer to install the CRDs outside of the chart. You can disable the CRD installation of this chart by using --set crds.install=false when installing the chart.

Helm cannot upgrade custom resource definitions in the <chart>/crds folder by design. Starting with 5.2.0, the CRDs have been moved to <chart>/templates to address this design decision.

If you are using Argo CD chart version prior to 5.2.0 or have elected to manage the Argo CD CRDs outside of the chart, please use kubectl to upgrade CRDs manually from templates/crds folder or via the manifests from the upstream project repo:

kubectl apply -k "https://github.com/argoproj/argo-cd/manifests/crds?ref=<appVersion>"

# Eg. version v2.4.9
kubectl apply -k "https://github.com/argoproj/argo-cd/manifests/crds?ref=v2.4.9"

Changelog

For full list of changes please check ArtifactHub changelog.

Highlighted versions provide information about additional steps that should be performed by user when upgrading to newer version.

10.0.0

In this chart version we changed the parameter global.networkPolicy.create from false to true to align with the upstream manifests and apply security best practices. There might be use cases where users want to disable the network policies, for example when using a service mesh or when you want to use a more specific network policy type like CiliumNetworkPolicy. In this case, please set global.networkPolicy.create to false in your values.yaml and manage the network policies yourself.

9.1.0

This chart contains a breaking change (if using redis-ha), which was introduced by the dependency redis-ha (as seen here). The upgrade will complain about selector label changes being immutable, which requires a replacement of the argocd-redis-ha-haproxy deployment. To overcome this, you will need to delete (orphaning children) this deployment, updated ArgoCD to disable server-side diffing, then allow the new deployment of argocd-redis-ha-haproxy to rollout with the updated label selectors.

Note: If server-side diffing is enabled, you will need to revert this to use client-side diffing, otherwise ArgoCD will be in an Unknown status. More information here. If you happened to upgrade this helm chart before configuring client-side diffing, you will need to delete (orphaning children) the argocd-redis-ha-haproxy deployment; once the newest deployment has rolled out, its suggested to cleanup the orphaned ReplicaSets

This issue was reported here

9.0.0

We have removed all parameters under .Values.configs.params in this release, with the exception of create and annotations. This is to ensure better alignment with the upstream project, as tracking changes to their default values within the Helm chart has become challenging.

**Though we removed the parameters from values.yaml in argo-helm, we keep providing the interface to override .Values.configs.params as the same way. **

Breaking change

Please be aware that the default value for applicationsetcontroller.policy has been updated to match the upstream default. The chart's default was previously 'sync', while the upstream default is "" (an empty string). If you rely on the previous behavior, you will need to update your values.yaml.

To restore the previous setting, you can override the argocd-cmd-params-cm ConfigMap as you could in older versions.

configs:
  params:
    applicationsetcontroller.policy: 'sync'

8.0.0

In this release we upgrade the Helm chart to deploy the next major version of Argo CD (v3.0.0). Please carefully read at least those resources:

• v2.14 to 3.0 upgrade instructions
• Argo CD v3.0 Release Blog Post

7.9.0

Chart versions from >= 7.7.2 and < 7.9.0 are using a Redis version which is no longer using an open source version of Redis. Thus we downgraded Redis to latest available 7.2 (from 7.4) to be in-line with upstream manifests and fully honor CNCF Allowlist License Policy.

Users using redis-ha may encounter issues which can be resolved by either deleting all redis-ha pods after the deployment/upgrade:

kubectl delete pods -l app=redis-ha

Or alternatively by temporary switching to a single redis installation, then back to HA.

1. Evaluate current chart version in use

   $ helm ls
   NAME  	NAMESPACE	REVISION	UPDATED                              	STATUS  	CHART         	APP VERSION
   argocd	argocd   	3       	2025-04-29 00:07:43.099922 +0200 CEST	deployed	argo-cd-7.8.28	v2.14.11
   

2. Switch to single redis

   helm upgrade argocd argo/argo-cd --version <your current chart version> --reuse-values --set redis-ha.enabled=false
   

3. Upgrade to chart version 7.9 or newer and re-enable redis HA again

   helm upgrade argocd argo/argo-cd --version 7.9.0 --reuse-values --set redis-ha.enabled=true
   

7.0.0

We changed the type of .Values.configs.clusterCredentials from list to object. If you used the value, please migrate like below.

# before
configs:
  clusterCredentials:
    - mycluster:
      server: https://mycluster.example.com
      labels: {}
      annotations: {}
      # ...

# after
configs:
  clusterCredentials:
    mycluster:
      server: https://mycluster.example.com
      labels: {}
      annotations: {}
      # ...

6.10.0

This version introduces authentication for Redis to mitigate GHSA-9766-5277-j5hr.

How to rotate Redis secret?

Upstream steps in the FAQ are not enough, since we chose a different approach. (We use a Kubernetes Job with Chart Hooks to create the auth secret argocd-redis.)

Steps to rotate the secret when using the helm chart (bold step is additional to upstream):

• Delete argocd-redis secret in the namespace where Argo CD is installed.

  kubectl delete secret argocd-redis -n <argocd namespace>
  

• Perform a helm upgrade

  helm upgrade argocd argo/argo-cd --reuse-values --wait
  

• If you are running Redis in HA mode, restart Redis in HA.

  kubectl rollout restart deployment argocd-redis-ha-haproxy
  kubectl rollout restart statefulset argocd-redis-ha-server
  

• If you are running Redis in non-HA mode, restart Redis.

  kubectl rollout restart deployment argocd-redis
  

• Restart other components.

  kubectl rollout restart deployment argocd-server argocd-repo-server
  kubectl rollout restart statefulset argocd-application-controller
  

6.9.0

ApplicationSet controller is always created to follow upstream's manifest.

6.4.0

Added support for application controller dynamic cluster distribution. Please refer to the docs for more information.

Added env variables to handle the non-standard names generated by the helm chart. Here are the docs and code

6.1.0

Added support for global domain used by all components.

6.0.0

This version removes support for:

• deprecated component options logLevel and logFormat
• deprecated component arguments <components>.args.<feature> that were replaced with configs.params
• deprecated configuration server.config that was replaced with configs.cm
• deprecated configuration server.rbacConfig that was replaced with configs.rbac

Major version also contains breaking changes related to Argo CD Ingress resources that were hard to extend and maintain for various ingress controller implementations. Please review your setup and adjust to new configuration options:

• catch all rule was removed for security reasons. If you need this please use server.ingress.extraRules to provide ingress rule without hostname
• ingress rule for paths changed to path as there is only single Argo CD backend path
• ingress rule for hosts changed to hostname as there can be only single SSO redirect for given hostname
• ingress TLS for server uses by default argocd-server-tls secret required by Argo CD server, additional ingresses are using <hostname>-tls secret when tls: true
• additional hostnames and routing can be provided via extraHosts configuration section
• additional TLS secrets can be provided via extraTls configuration section

Please refer to ingress configuration for examples.

5.53.0

Argocd-repo-server can now optionally use Persistent Volumes for its mountpoints instead of only emptydir()

5.52.0

Because Argo CD Extensions is now deprecated and no further changes will be made, we switched to Argo CD Extension Installer, adding an Argo CD Extension Installer to init-container in the Argo CD API server. If you used old mechanism, please move to new mechanism. For more details, please refer .Values.server.extensions in values.yaml.

5.35.0

This version supports Kubernetes version >=1.23.0-0. The current supported version of Kubernetes is v1.24 or later and we align with the Amazon EKS calendar, because many AWS users follow a conservative approach.

Please see more information about EoL: Amazon EKS EoL.

5.31.0

The manifests are now using tini as entrypoint, instead of entrypoint.sh. Until Argo CD v2.8, entrypoint.sh is retained for upgrade compatibility. This means that the deployment manifests have to be updated after upgrading to Argo CD v2.7, and before upgrading to Argo CD v2.8 later. In case the manifests are updated before moving to Argo CD v2.8, the containers will not be able to start.

5.26.0

This version adds support for Config Management Plugins using the sidecar model and configured in a ConfigMap named argocd-cmp-cm. Users will need to migrate from the previous argocd-cm ConfigMap method to using the sidecar method before Argo CD v2.8. See the Argo CD CMP migration guide for more specifics.

To migrate your plugins, you can now set the configs.cmp.create to true and move your plugins from configs.cm to configs.cmp.plugins. You will also need to configure the sidecar containers under repoServer.extraContainers and ensure you are mounting any custom volumes you need from repoServer.volumes into here also.

5.24.0

This version adds additional global parameters for scheduling (nodeSelector, tolerations, topologySpreadConstraints). Default global.affinity rules can be disabled when none value is used for the preset.

5.22.0

This version adds global.affinity options that are used as a presets. Override on component level works as before and replaces the default preset completely.

5.19.0

This version consolidates config for custom repository TLS certificates and SSH known hosts. If you provided these values (configs.knownHosts.*, configs.knownHostsAnnotations, configs.tlsCerts, configs.tlsCertsAnnotations) please move them into new configs.ssh and configs.tls sections. You can also use new option configs.ssh.extraHosts to configure your SSH keys without maintaing / overwritting keys for public Git repositories.

5.13.0

This version reduces history limit for Argo CD deployment replicas to 3 to provide more visibility for Argo CD deployments that manage itself. If you need more deployment revisions for rollbacks set global.revisionHistoryLimit parameter.

5.12.0

If Argo CD is managing termination of TLS and you are using configs.secret.argocdServerTlsConfig option to provide custom TLS configuration for this chart, please use server.certificate or server.certificateSecret instead. For the secrets for tls termination, please use a secret named argocd-server-tls instead of argocd-secret. For the technical details please check the Argo CD documentation. When transitioning from the one secret to the other pay attention to tls.key and tls.crt keys.

5.10.0

This version hardens security by configuring default container security contexts and adds hard requirement for Kubernetes 1.22+ to work properly. The change aligns chart with officially supported versions by upstream project.

5.7.0

This version introcudes new configs.cm and configs.rbac sections that replaces server.config and server.rbacConfig respectively. Please move your current configuration to the new place. The Argo CD RBAC config now also sets defaults in the argocd-rbac-cm. If you have manually created this ConfigMap please ensure templating is disabled so you will not lose your changes.

5.5.20

This version moved API version templates into dedicated helper. If you are using these in your umbrella chart please migrate your templates to pattern argo-cd.apiVersion.<component>.

5.5.0

This version introduces new configs.params section that replaces command line arguments for containers. Please refer to documentation in values.yaml for migrating the configuration.

5.2.0

Custom resource definitions were moved to templates folder so they can be managed by Helm.

To adopt already created CRDs, please use following command:

YOUR_ARGOCD_NAMESPACE="" # e.g. argo-cd
YOUR_ARGOCD_RELEASENAME="" # e.g. argo-cd

for crd in "applications.argoproj.io" "applicationsets.argoproj.io" "argocdextensions.argoproj.io" "appprojects.argoproj.io"; do
  kubectl label --overwrite crd $crd app.kubernetes.io/managed-by=Helm
  kubectl annotate --overwrite crd $crd meta.helm.sh/release-namespace="$YOUR_ARGOCD_NAMESPACE"
  kubectl annotate --overwrite crd $crd meta.helm.sh/release-name="$YOUR_ARGOCD_RELEASENAME"
done

5.0.0

This version removes support for:

• deprecated repository credentials (parameter configs.repositoryCredentials)
• option to run application controller as a Deployment
• the parameters server.additionalApplications and server.additionalProjects

Please carefully read the following section if you are using these parameters!

In order to upgrade Applications and Projects safely against CRDs' upgrade, server.additionalApplications and server.additionalProjects are moved to argocd-apps.

If you are using server.additionalApplications or server.additionalProjects, you can adopt to argocd-apps as below:

1. Add helm.sh/resource-policy annotation to avoid resources being removed by upgrading Helm chart

You can keep your existing CRDs by adding "helm.sh/resource-policy": keep on additionalAnnotations, under server.additionalApplications and server.additionalProjects blocks, and running helm upgrade.

e.g:

server:
  additionalApplications:
    - name: guestbook
      namespace: argocd
      additionalLabels: {}
      additionalAnnotations:
        "helm.sh/resource-policy": keep # <-- add this
      finalizers:
      - resources-finalizer.argocd.argoproj.io
      project: guestbook
      source:
        repoURL: https://github.com/argoproj/argocd-example-apps.git
        targetRevision: HEAD
        path: guestbook
        directory:
          recurse: true
      destination:
        server: https://kubernetes.default.svc
        namespace: guestbook
      syncPolicy:
        automated:
          prune: false
          selfHeal: false
      ignoreDifferences:
      - group: apps
        kind: Deployment
        jsonPointers:
        - /spec/replicas
      info:
      - name: url
        value: https://argoproj.github.io/

You can also keep your existing CRDs by running the following scripts.

# keep Applications
for app in "guestbook"; do
  kubectl annotate --overwrite application $app helm.sh/resource-policy=keep
done

# keep Projects
for project in "guestbook"; do
  kubectl annotate --overwrite appproject $project helm.sh/resource-policy=keep
done

2. Upgrade argo-cd Helm chart to v5.0.0

3. Remove keep helm.sh/resource-policy annotation

# delete annotations from Applications
for app in "guestbook"; do
  kubectl annotate --overwrite application $app helm.sh/resource-policy-
done

# delete annotations from Projects
for project in "guestbook"; do
  kubectl annotate --overwrite appproject $project helm.sh/resource-policy-
done

4. Adopt existing resources to argocd-apps

4.9.0

This version starts to use upstream image with applicationset binary. Start command was changed from applicationset-controller to argocd-applicationset-controller

4.3.*

With this minor version, the notification notifier's service.slack is no longer configured by default.

4.0.0 and above

This helm chart version deploys Argo CD v2.3. The Argo CD Notifications and ApplicationSet are part of Argo CD now. You no longer need to install them separately. The Notifications and ApplicationSet components are bundled into default Argo CD installation. Please read the v2.2 to 2.3 upgrade instructions in the upstream repository.

3.13.0

This release removes the flag --staticassets from argocd server as it has been dropped upstream. If this flag needs to be enabled e.g for older releases of Argo CD, it can be passed via the server.extraArgs field

3.10.2

Argo CD has recently deprecated the flag --staticassets and from chart version 3.10.2 has been disabled by default It can be re-enabled by setting server.staticAssets.enabled to true

3.8.1

This bugfix version potentially introduces a rename (and recreation) of one or more ServiceAccounts. It only happens when you use one of these customization:

# Case 1) - only happens when you do not specify a custom name (repoServer.serviceAccount.name)
repoServer:
  serviceAccount:
    create: true

# Case 2)
controller:
  serviceAccount:
    name: "" # or <nil>

# Case 3)
dex:
  serviceAccount:
    name: "" # or <nil>

# Case 4)
server:
  serviceAccount:
    name: "" # or <nil>

Please check if you are affected by one of these cases before you upgrade, especially when you use cloud IAM roles for service accounts. (eg. IRSA on AWS or Workload Identity for GKE)

3.2.*

With this minor version we introduced the evaluation for the ingress manifest (depending on the capabilities version), See Pull Request. Issue 703 reported that the capabilities evaluation is not handled correctly when deploying the chart via an Argo CD instance, especially deploying on clusters running a cluster version prior to 1.19 (which misses Ingress on apiVersion networking.k8s.io/v1).

If you are running a cluster version prior to 1.19 you can avoid this issue by directly installing chart version 3.6.0 and setting kubeVersionOverride like:

kubeVersionOverride: "1.18.0"

Then you should no longer encounter this issue.

3.0.0 and above

Helm apiVersion switched to v2. Requires Helm 3.0.0 or above to install. Read More on how to migrate your release from Helm 2 to Helm 3.

2.14.7 and above

The matchLabels key in the Argo CD Application Controller is no longer hard-coded. Note that labels are immutable so caution should be exercised when making changes to this resource.

2.10.x to 2.11.0

The application controller is now available as a StatefulSet when the controller.enableStatefulSet flag is set to true. Depending on your Helm deployment this may be a downtime or breaking change if enabled when using HA and will become the default in 3.x.

1.8.7 to 2.x.x

controller.extraArgs, repoServer.extraArgs and server.extraArgs are now arrays of strings instead of a map

What was

server:
  extraArgs:
    insecure: ""

is now

server:
  extraArgs:
  - --insecure

Prerequisites

• Kubernetes: >=1.25.0-0
  • We align with Amazon EKS calendar because there are many AWS users and it's a conservative approach.
  • Please check Support Matrix of Argo CD for official info.
• Helm v3.0.0+

Installing the Chart

To install the chart with the release name my-release:

$ helm repo add argo https://argoproj.github.io/argo-helm
"argo" has been added to your repositories

$ helm install my-release argo/argo-cd
NAME: my-release
...

General parameters

Key	Type	Default	Description
apiVersionOverrides	object	{}
crds.additionalLabels	object	{}	Additional labels to be added to all CRDs
crds.annotations	object	{"argocd.argoproj.io/sync-options":"ServerSideApply=true"}	Annotations to be added to all CRDs
crds.install	bool	true	Install and upgrade CRDs
crds.keep	bool	true	Keep CRDs on chart uninstall
createAggregateRoles	bool	false	Create aggregated roles that extend existing cluster roles to interact with argo-cd resources
createClusterRoles	bool	true	Create cluster roles for cluster-wide installation.
extraObjects	list	[]	Array of extra K8s manifests to deploy
fullnameOverride	string	""	String to fully override "argo-cd.fullname"
kubeVersionOverride	string	""	Override the Kubernetes version, which is used to evaluate certain manifests
nameOverride	string	"argocd"	Provide a name in place of argocd
namespaceOverride	string	.Release.Namespace	Override the namespace
openshift.enabled	bool	false	enables using arbitrary uid for argo repo server

Global Configs

Note: Any values you put under .Values.configs.cm are passed to argocd-cm ConfigMap, and under .Values.configs.params are passed to argocd-params-cm ConfigMap.

Key	Type	Default	Description
global.addPrometheusAnnotations	bool	false	Add Prometheus scrape annotations to all metrics services. This can be used as an alternative to the ServiceMonitors.
global.additionalLabels	object	{}	Common labels for the all resources
global.affinity.nodeAffinity.matchExpressions	list	[]	Default match expressions for node affinity
global.affinity.nodeAffinity.type	string	"hard"	Default node affinity rules. Either: none, soft or hard
global.affinity.podAntiAffinity	string	"soft"	Default pod anti-affinity rules. Either: none, soft or hard
global.certificateAnnotations	object	{}	Annotations for the all deployed Certificates
global.deploymentAnnotations	object	{}	Annotations for the all deployed Deployments
global.deploymentLabels	object	{}	Labels for the all deployed Deployments
global.deploymentStrategy	object	{}	Deployment strategy for the all deployed Deployments
global.domain	string	"argocd.example.com"	Default domain used by all components
global.dualStack.ipFamilies	list	[]	IP families that should be supported and the order in which they should be applied to ClusterIP as well. Can be IPv4 and/or IPv6.
global.dualStack.ipFamilyPolicy	string	""	IP family policy to configure dual-stack see Configure dual-stack
global.env	list	[]	Environment variables to pass to all deployed Deployments
global.extraVolumeMounts	list	[]	Extra volume mounts to add to all deployed Deployments and StatefulSets
global.extraVolumes	list	[]	Extra volumes to add to all deployed Deployments and StatefulSets
global.hostAliases	list	[]	Mapping between IP and hostnames that will be injected as entries in the pod's hosts files
global.image.imagePullPolicy	string	"IfNotPresent"	If defined, a imagePullPolicy applied to all Argo CD deployments
global.image.repository	string	"quay.io/argoproj/argocd"	If defined, a repository applied to all Argo CD deployments
global.image.tag	string	""	Overrides the global Argo CD image tag whose default is the chart appVersion
global.imagePullSecrets	list	[]	Secrets with credentials to pull images from a private registry
global.logging.format	string	"text"	Set the global logging format. Either: text or json
global.logging.level	string	"info"	Set the global logging level. One of: debug, info, warn or error
global.networkPolicy.create	bool	true	Create NetworkPolicy objects for all components
global.networkPolicy.defaultDenyIngress	bool	false	Default deny all ingress traffic
global.nodeSelector	object	{"kubernetes.io/os":"linux"}	Default node selector for all components
global.podAnnotations	object	{}	Annotations for the all deployed pods
global.podLabels	object	{}	Labels for the all deployed pods
global.priorityClassName	string	""	Default priority class for all components
global.revisionHistoryLimit	int	3	Number of old deployment ReplicaSets to retain. The rest will be garbage collected.
global.runtimeClassName	string	""	Runtime class name for all components
global.securityContext	object	{} (See values.yaml)	Toggle and define pod-level security context.
global.statefulsetAnnotations	object	{}	Annotations for the all deployed Statefulsets
global.statefulsetLabels	object	{}	Labels for the all deployed Statefulsets
global.tolerations	list	[]	Default tolerations for all components
global.topologySpreadConstraints	list	[]	Default TopologySpreadConstraints rules for all components

Argo CD Configs

Key	Type	Default	Description
configs.clusterCredentials	object	{} (See values.yaml)	Provide one or multiple external cluster credentials
configs.cm."admin.enabled"	bool	true	Enable local admin user
configs.cm."application.instanceLabelKey"	string	"argocd.argoproj.io/instance"	The name of tracking label used by Argo CD for resource pruning
configs.cm."application.sync.impersonation.enabled"	bool	false	Enable control of the service account used for the sync operation (alpha)
configs.cm."exec.enabled"	bool	false	Enable exec feature in Argo UI
configs.cm."resource.customizations.ignoreResourceUpdates.ConfigMap"	string	See values.yaml	Ignore the cluster-autoscaler status
configs.cm."resource.customizations.ignoreResourceUpdates.Endpoints"	string	See values.yaml	Ignores update if Endpoints is not excluded globally
configs.cm."resource.customizations.ignoreResourceUpdates.all"	string	See values.yaml	Ignoring status for all resources. An update will still be sent if the status update causes the health to change.
configs.cm."resource.customizations.ignoreResourceUpdates.apps_ReplicaSet"	string	See values.yaml	Ignore the common scaling annotations
configs.cm."resource.customizations.ignoreResourceUpdates.argoproj.io_Application"	string	See values.yaml	Some Application fields are generated and not related to the application updates itself
configs.cm."resource.customizations.ignoreResourceUpdates.argoproj.io_Rollout"	string	See values.yaml	Ignore Argo Rollouts generated fields
configs.cm."resource.customizations.ignoreResourceUpdates.autoscaling_HorizontalPodAutoscaler"	string	See values.yaml	Legacy annotations used on HPA autoscaling/v1
configs.cm."resource.customizations.ignoreResourceUpdates.discovery.k8s.io_EndpointSlice"	string	See values.yaml	Ignores update if EndpointSlice is not excluded globally
configs.cm."resource.exclusions"	string	See values.yaml	Resource Exclusion/Inclusion
configs.cm."statusbadge.enabled"	bool	false	Enable Status Badge
configs.cm."timeout.hard.reconciliation"	string	"0s"	Timeout to refresh application data as well as target manifests cache
configs.cm."timeout.reconciliation"	string	"120s"	Timeout to discover if a new manifests version got published to the repository
configs.cm."timeout.reconciliation.jitter"	string	"60s"	Maximum jitter added to the reconciliation timeout to spread out refreshes and reduce repo-server load
configs.cm.annotations	object	{}	Annotations to be added to argocd-cm configmap
configs.cm.create	bool	true	Create the argocd-cm configmap for declarative setup
configs.cmp.annotations	object	{}	Annotations to be added to argocd-cmp-cm configmap
configs.cmp.create	bool	false	Create the argocd-cmp-cm configmap
configs.cmp.plugins	object	{}	Plugin yaml files to be added to argocd-cmp-cm
configs.credentialTemplates	object	{}	Repository credentials to be used as Templates for other repos
configs.credentialTemplatesAnnotations	object	{}	Annotations to be added to configs.credentialTemplates Secret
configs.gpg.annotations	object	{}	Annotations to be added to argocd-gpg-keys-cm configmap
configs.gpg.keys	object	{} (See values.yaml)	GnuPG public keys to add to the keyring
configs.params.annotations	object	{}	Annotations to be added to the argocd-cmd-params-cm ConfigMap
configs.params.create	bool	true	Create the argocd-cmd-params-cm configmap If false, it is expected the configmap will be created by something else.
configs.rbac."policy.csv"	string	'' (See values.yaml)	File containing user-defined policies and role definitions.
configs.rbac."policy.default"	string	""	The name of the default role which Argo CD will falls back to, when authorizing API requests (optional). If omitted or empty, users may be still be able to login, but will see no apps, projects, etc...
configs.rbac."policy.matchMode"	string	"glob"	Matcher function for Casbin, glob for glob matcher and regex for regex matcher.
configs.rbac.annotations	object	{}	Annotations to be added to argocd-rbac-cm configmap
configs.rbac.create	bool	true	Create the argocd-rbac-cm configmap with (Argo CD RBAC policy) definitions. If false, it is expected the configmap will be created by something else. Argo CD will not work if there is no configmap created with the name above.
configs.rbac.scopes	string	"[groups]"	OIDC scopes to examine during rbac enforcement (in addition to sub scope). The scope value can be a string, or a list of strings.
configs.repositories	object	{}	Repositories list to be used by applications
configs.repositoriesAnnotations	object	{}	Annotations to be added to configs.repositories Secret
configs.secret.annotations	object	{}	Annotations to be added to argocd-secret
configs.secret.argocdServerAdminPassword	string	""	Bcrypt hashed admin password
configs.secret.argocdServerAdminPasswordMtime	string	"" (defaults to current time)	Admin password modification time. Eg. "2006-01-02T15:04:05Z"
configs.secret.azureDevops.password	string	""	Shared secret password for authenticating Azure DevOps webhook events
configs.secret.azureDevops.username	string	""	Shared secret username for authenticating Azure DevOps webhook events
configs.secret.bitbucketServerSecret	string	""	Shared secret for authenticating BitbucketServer webhook events
configs.secret.bitbucketUUID	string	""	UUID for authenticating Bitbucket webhook events
configs.secret.createSecret	bool	true	Create the argocd-secret
configs.secret.extra	object	{}	add additional secrets to be added to argocd-secret
configs.secret.githubSecret	string	""	Shared secret for authenticating GitHub webhook events
configs.secret.gitlabSecret	string	""	Shared secret for authenticating GitLab webhook events
configs.secret.gogsSecret	string	""	Shared secret for authenticating Gogs webhook events
configs.secret.labels	object	{}	Labels to be added to argocd-secret
configs.ssh.annotations	object	{}	Annotations to be added to argocd-ssh-known-hosts-cm configmap
configs.ssh.create	bool	true	Specifies if the argocd-ssh-known-hosts-cm configmap should be created by Helm.
configs.ssh.extraHosts	string	""	Additional known hosts for private repositories
configs.ssh.knownHosts	string	See values.yaml	Known hosts to be added to the known host list by default.
configs.styles	string	"" (See values.yaml)	Define custom CSS styles for your argo instance. This setting will automatically mount the provided CSS and reference it in the argo configuration.
configs.tls.annotations	object	{}	Annotations to be added to argocd-tls-certs-cm configmap
configs.tls.certificates	object	{} (See values.yaml)	TLS certificates for Git repositories
configs.tls.create	bool	true	Specifies if the argocd-tls-certs-cm configmap should be created by Helm.

Argo CD Controller

Key	Type	Default	Description
controller.affinity	object	{} (defaults to global.affinity preset)	Assign custom affinity rules to the deployment
controller.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account into the pod.
controller.clusterRoleRules.enabled	bool	false	Enable custom rules for the application controller's ClusterRole resource
controller.clusterRoleRules.rules	list	[]	List of custom rules for the application controller's ClusterRole resource
controller.containerPorts.metrics	int	8082	Metrics container port
controller.containerSecurityContext	object	See values.yaml	Application controller container-level security context
controller.deploymentAnnotations	object	{}	Annotations for the application controller Deployment
controller.deploymentLabels	object	{}	Labels for the application controller Deployment
controller.dnsConfig	object	{}	DNS configuration
controller.dnsPolicy	string	"ClusterFirst"	Alternative DNS policy for application controller pods
controller.dynamicClusterDistribution	bool	false	Enable dynamic cluster distribution (alpha) Ref: https://argo-cd.readthedocs.io/en/stable/operator-manual/dynamic-cluster-distribution
controller.emptyDir.sizeLimit	string	"" (defaults not set if not specified i.e. no size limit)	EmptyDir size limit for application controller
controller.env	list	[]	Environment variables to pass to application controller
controller.envFrom	list	[] (See values.yaml)	envFrom to pass to application controller
controller.extraArgs	list	[]	Additional command line arguments to pass to application controller
controller.extraContainers	list	[]	Additional containers to be added to the application controller pod
controller.heartbeatTime	int	10	Application controller heartbeat time Ref: https://argo-cd.readthedocs.io/en/stable/operator-manual/dynamic-cluster-distribution/#working-of-dynamic-distribution
controller.hostNetwork	bool	false	Host Network for application controller pods
controller.image.imagePullPolicy	string	"" (defaults to global.image.imagePullPolicy)	Image pull policy for the application controller
controller.image.repository	string	"" (defaults to global.image.repository)	Repository to use for the application controller
controller.image.tag	string	"" (defaults to global.image.tag)	Tag to use for the application controller
controller.imagePullSecrets	list	[] (defaults to global.imagePullSecrets)	Secrets with credentials to pull images from a private registry
controller.initContainers	list	[]	Init containers to add to the application controller pod
controller.metrics.applicationLabels.enabled	bool	false	Enables additional labels in argocd_app_labels metric
controller.metrics.applicationLabels.labels	list	[]	Additional labels
controller.metrics.enabled	bool	false	Deploy metrics service
controller.metrics.rules.additionalLabels	object	{}	PrometheusRule labels
controller.metrics.rules.annotations	object	{}	PrometheusRule annotations
controller.metrics.rules.enabled	bool	false	Deploy a PrometheusRule for the application controller
controller.metrics.rules.namespace	string	""	PrometheusRule namespace
controller.metrics.rules.selector	object	{}	PrometheusRule selector
controller.metrics.rules.spec	list	[]	PrometheusRule.Spec for the application controller
controller.metrics.service.annotations	object	{}	Metrics service annotations
controller.metrics.service.clusterIP	string	""	Metrics service clusterIP. None makes a "headless service" (no virtual IP)
controller.metrics.service.labels	object	{}	Metrics service labels
controller.metrics.service.portName	string	"http-metrics"	Metrics service port name
controller.metrics.service.servicePort	int	8082	Metrics service port
controller.metrics.service.type	string	"ClusterIP"	Metrics service type
controller.metrics.serviceMonitor.additionalLabels	object	{}	Prometheus ServiceMonitor labels
controller.metrics.serviceMonitor.annotations	object	{}	Prometheus ServiceMonitor annotations
controller.metrics.serviceMonitor.enabled	bool	false	Enable a prometheus ServiceMonitor
controller.metrics.serviceMonitor.honorLabels	bool	false	When true, honorLabels preserves the metric’s labels when they collide with the target’s labels.
controller.metrics.serviceMonitor.interval	string	"30s"	Prometheus ServiceMonitor interval
controller.metrics.serviceMonitor.metricRelabelings	list	[]	Prometheus MetricRelabelConfigs to apply to samples before ingestion
controller.metrics.serviceMonitor.namespace	string	""	Prometheus ServiceMonitor namespace
controller.metrics.serviceMonitor.relabelings	list	[]	Prometheus RelabelConfigs to apply to samples before scraping
controller.metrics.serviceMonitor.scheme	string	""	Prometheus ServiceMonitor scheme
controller.metrics.serviceMonitor.scrapeTimeout	string	""	Prometheus ServiceMonitor scrapeTimeout. If empty, Prometheus uses the global scrape timeout unless it is less than the target's scrape interval value in which the latter is used.
controller.metrics.serviceMonitor.selector	object	{}	Prometheus ServiceMonitor selector
controller.metrics.serviceMonitor.tlsConfig	object	{}	Prometheus ServiceMonitor tlsConfig
controller.name	string	"application-controller"	Application controller name string
controller.networkPolicy.create	bool	false (defaults to global.networkPolicy.create)	Default network policy rules used by application controller
controller.nodeSelector	object	{} (defaults to global.nodeSelector)	Node selector
controller.pdb.annotations	object	{}	Annotations to be added to application controller pdb
controller.pdb.enabled	bool	false	Deploy a PodDisruptionBudget for the application controller
controller.pdb.labels	object	{}	Labels to be added to application controller pdb
controller.pdb.maxUnavailable	string	""	Number of pods that are unavailable after eviction as number or percentage (eg.: 50%).
controller.pdb.minAvailable	string	"" (defaults to 0 if not specified)	Number of pods that are available after eviction as number or percentage (eg.: 50%)
controller.podAnnotations	object	{}	Annotations to be added to application controller pods
controller.podLabels	object	{}	Labels to be added to application controller pods
controller.priorityClassName	string	"" (defaults to global.priorityClassName)	Priority class for the application controller pods
controller.readinessProbe.failureThreshold	int	3	Minimum consecutive failures for the probe to be considered failed after having succeeded
controller.readinessProbe.httpPath	string	"/healthz"	Http path to use for the readiness probe
controller.readinessProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
controller.readinessProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
controller.readinessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
controller.readinessProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
controller.replicas	int	1	The number of application controller pods to run. Additional replicas will cause sharding of managed clusters across number of replicas.
controller.resources	object	{}	Resource limits and requests for the application controller pods
controller.revisionHistoryLimit	int	5	Maximum number of controller revisions that will be maintained in StatefulSet history
controller.roleRules	list	[]	List of custom rules for the application controller's Role resource
controller.runtimeClassName	string	"" (defaults to global.runtimeClassName)	Runtime class name for the application controller
controller.serviceAccount.annotations	object	{}	Annotations applied to created service account
controller.serviceAccount.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account
controller.serviceAccount.create	bool	true	Create a service account for the application controller
controller.serviceAccount.labels	object	{}	Labels applied to created service account
controller.serviceAccount.name	string	"argocd-application-controller"	Service account name
controller.startupProbe.enabled	bool	false	Enable Kubernetes startup probe for application controller
controller.startupProbe.failureThreshold	int	20	Minimum consecutive failures for the probe to be considered failed after having succeeded
controller.startupProbe.httpPath	string	"/healthz"	Http path to use for the startup probe
controller.startupProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
controller.startupProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
controller.startupProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
controller.startupProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
controller.statefulsetAnnotations	object	{}	Annotations for the application controller StatefulSet
controller.statefulsetLabels	object	{}	Labels for the application controller StatefulSet
controller.terminationGracePeriodSeconds	int	30	terminationGracePeriodSeconds for container lifecycle hook
controller.tolerations	list	[] (defaults to global.tolerations)	Tolerations for use with node taints
controller.topologySpreadConstraints	list	[] (defaults to global.topologySpreadConstraints)	Assign custom TopologySpreadConstraints rules to the application controller
controller.volumeMounts	list	[]	Additional volumeMounts to the application controller main container
controller.volumes	list	[]	Additional volumes to the application controller pod
controller.vpa.annotations	object	{}	Annotations to be added to application controller vpa
controller.vpa.containerPolicy	object	{}	Controls how VPA computes the recommended resources for application controller container
controller.vpa.enabled	bool	false	Deploy a VerticalPodAutoscaler for the application controller
controller.vpa.labels	object	{}	Labels to be added to application controller vpa
controller.vpa.recommenders	list	[]	The recommenders that will provide recommendations for vertical scaling. Only relevant if a named VPA recommender (e.g. one started with a custom recommender name) is in use; leave unset to use the cluster's default recommender
controller.vpa.updateMode	string	"Initial"	One of the VPA operation modes

Argo Repo Server

Key	Type	Default	Description
repoServer.affinity	object	{} (defaults to global.affinity preset)	Assign custom affinity rules to the deployment
repoServer.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account into the pod.
repoServer.autoscaling.behavior	object	{}	Configures the scaling behavior of the target in both Up and Down directions.
repoServer.autoscaling.enabled	bool	false	Enable Horizontal Pod Autoscaler (HPA) for the repo server
repoServer.autoscaling.maxReplicas	int	5	Maximum number of replicas for the repo server HPA
repoServer.autoscaling.metrics	list	[]	Configures custom HPA metrics for the Argo CD repo server Ref: https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
repoServer.autoscaling.minReplicas	int	1	Minimum number of replicas for the repo server HPA
repoServer.autoscaling.targetCPUUtilizationPercentage	int	50	Average CPU utilization percentage for the repo server HPA
repoServer.autoscaling.targetMemoryUtilizationPercentage	int	50	Average memory utilization percentage for the repo server HPA
repoServer.certificateSecret.annotations	object	{}	Annotations to be added to argocd-repo-server-tls secret
repoServer.certificateSecret.ca	string	""	Certificate authority. Required for self-signed certificates.
repoServer.certificateSecret.crt	string	""	Certificate data. Must contain SANs of Repo service (ie: argocd-repo-server, argocd-repo-server.argo-cd.svc)
repoServer.certificateSecret.enabled	bool	false	Create argocd-repo-server-tls secret
repoServer.certificateSecret.key	string	""	Certificate private key
repoServer.certificateSecret.labels	object	{}	Labels to be added to argocd-repo-server-tls secret
repoServer.clusterRoleRules.enabled	bool	false	Enable custom rules for the Repo server's Cluster Role resource
repoServer.clusterRoleRules.rules	list	[]	List of custom rules for the Repo server's Cluster Role resource
repoServer.containerPorts.metrics	int	8084	Metrics container port
repoServer.containerPorts.server	int	8081	Repo server container port
repoServer.containerSecurityContext	object	See values.yaml	Repo server container-level security context
repoServer.copyutil.extraArgs	string	"--update=none"	Extra arguments for the cp command in the repo server copyutil initContainer
repoServer.copyutil.resources	object	{}	Resource limits and requests for the repo server copyutil initContainer
repoServer.deploymentAnnotations	object	{}	Annotations to be added to repo server Deployment
repoServer.deploymentLabels	object	{}	Labels for the repo server Deployment
repoServer.deploymentStrategy	object	{}	Deployment strategy to be added to the repo server Deployment
repoServer.dnsConfig	object	{}	DNS configuration
repoServer.dnsPolicy	string	"ClusterFirst"	Alternative DNS policy for Repo server pods
repoServer.emptyDir.sizeLimit	string	"" (defaults not set if not specified i.e. no size limit)	EmptyDir size limit for repo server
repoServer.env	list	[]	Environment variables to pass to repo server
repoServer.envFrom	list	[] (See values.yaml)	envFrom to pass to repo server
repoServer.existingVolumes	object	{}	Volumes to be used in replacement of emptydir on default volumes
repoServer.extraArgs	list	[]	Additional command line arguments to pass to repo server
repoServer.extraContainers	list	[]	Additional containers to be added to the repo server pod
repoServer.hostNetwork	bool	false	Host Network for Repo server pods
repoServer.image.imagePullPolicy	string	"" (defaults to global.image.imagePullPolicy)	Image pull policy for the repo server
repoServer.image.repository	string	"" (defaults to global.image.repository)	Repository to use for the repo server
repoServer.image.tag	string	"" (defaults to global.image.tag)	Tag to use for the repo server
repoServer.imagePullSecrets	list	[] (defaults to global.imagePullSecrets)	Secrets with credentials to pull images from a private registry
repoServer.initContainers	list	[]	Init containers to add to the repo server pods
repoServer.lifecycle	object	{}	Specify postStart and preStop lifecycle hooks for your argo-repo-server container
repoServer.livenessProbe.enabled	bool	true	Enable Kubernetes liveness probe for Repo Server
repoServer.livenessProbe.failureThreshold	int	3	Minimum consecutive failures for the probe to be considered failed after having succeeded
repoServer.livenessProbe.httpPath	string	"/healthz?full=true"	Http path to use for the liveness probe
repoServer.livenessProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
repoServer.livenessProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
repoServer.livenessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
repoServer.livenessProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
repoServer.metrics.enabled	bool	false	Deploy metrics service
repoServer.metrics.service.annotations	object	{}	Metrics service annotations
repoServer.metrics.service.clusterIP	string	""	Metrics service clusterIP. None makes a "headless service" (no virtual IP)
repoServer.metrics.service.labels	object	{}	Metrics service labels
repoServer.metrics.service.portName	string	"http-metrics"	Metrics service port name
repoServer.metrics.service.servicePort	int	8084	Metrics service port
repoServer.metrics.service.type	string	"ClusterIP"	Metrics service type
repoServer.metrics.serviceMonitor.additionalLabels	object	{}	Prometheus ServiceMonitor labels
repoServer.metrics.serviceMonitor.annotations	object	{}	Prometheus ServiceMonitor annotations
repoServer.metrics.serviceMonitor.enabled	bool	false	Enable a prometheus ServiceMonitor
repoServer.metrics.serviceMonitor.honorLabels	bool	false	When true, honorLabels preserves the metric’s labels when they collide with the target’s labels.
repoServer.metrics.serviceMonitor.interval	string	"30s"	Prometheus ServiceMonitor interval
repoServer.metrics.serviceMonitor.metricRelabelings	list	[]	Prometheus MetricRelabelConfigs to apply to samples before ingestion
repoServer.metrics.serviceMonitor.namespace	string	""	Prometheus ServiceMonitor namespace
repoServer.metrics.serviceMonitor.relabelings	list	[]	Prometheus RelabelConfigs to apply to samples before scraping
repoServer.metrics.serviceMonitor.scheme	string	""	Prometheus ServiceMonitor scheme
repoServer.metrics.serviceMonitor.scrapeTimeout	string	""	Prometheus ServiceMonitor scrapeTimeout. If empty, Prometheus uses the global scrape timeout unless it is less than the target's scrape interval value in which the latter is used.
repoServer.metrics.serviceMonitor.selector	object	{}	Prometheus ServiceMonitor selector
repoServer.metrics.serviceMonitor.tlsConfig	object	{}	Prometheus ServiceMonitor tlsConfig
repoServer.name	string	"repo-server"	Repo server name
repoServer.networkPolicy.create	bool	false (defaults to global.networkPolicy.create)	Default network policy rules used by repo server
repoServer.nodeSelector	object	{} (defaults to global.nodeSelector)	Node selector
repoServer.pdb.annotations	object	{}	Annotations to be added to repo server pdb
repoServer.pdb.enabled	bool	false	Deploy a PodDisruptionBudget for the repo server
repoServer.pdb.labels	object	{}	Labels to be added to repo server pdb
repoServer.pdb.maxUnavailable	string	""	Number of pods that are unavailable after eviction as number or percentage (eg.: 50%).
repoServer.pdb.minAvailable	string	"" (defaults to 0 if not specified)	Number of pods that are available after eviction as number or percentage (eg.: 50%)
repoServer.podAnnotations	object	{}	Annotations to be added to repo server pods
repoServer.podLabels	object	{}	Labels to be added to repo server pods
repoServer.priorityClassName	string	"" (defaults to global.priorityClassName)	Priority class for the repo server pods
repoServer.rbac	list	[]	Repo server rbac rules
repoServer.readinessProbe.enabled	bool	true	Enable Kubernetes readiness probe for Repo Server
repoServer.readinessProbe.failureThreshold	int	3	Minimum consecutive failures for the probe to be considered failed after having succeeded
repoServer.readinessProbe.httpPath	string	"/healthz"	Http path to use for the readiness probe
repoServer.readinessProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
repoServer.readinessProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
repoServer.readinessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
repoServer.readinessProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
repoServer.replicas	int	1	The number of repo server pods to run
repoServer.resources	object	{}	Resource limits and requests for the repo server pods
repoServer.runtimeClassName	string	"" (defaults to global.runtimeClassName)	Runtime class name for the repo server
repoServer.service.annotations	object	{}	Repo server service annotations
repoServer.service.labels	object	{}	Repo server service labels
repoServer.service.port	int	8081	Repo server service port
repoServer.service.portName	string	"tcp-repo-server"	Repo server service port name
repoServer.service.trafficDistribution	string	""	Traffic distribution preference for the repo server service. If the field is not set, the implementation will apply its default routing strategy.
repoServer.serviceAccount.annotations	object	{}	Annotations applied to created service account
repoServer.serviceAccount.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account
repoServer.serviceAccount.create	bool	true	Create repo server service account
repoServer.serviceAccount.labels	object	{}	Labels applied to created service account
repoServer.serviceAccount.name	string	""	Repo server service account name
repoServer.startupProbe.enabled	bool	false	Enable Kubernetes startup probe for Repo Server
repoServer.startupProbe.failureThreshold	int	20	Minimum consecutive failures for the probe to be considered failed after having succeeded
repoServer.startupProbe.httpPath	string	"/healthz"	Http path to use for the startup probe
repoServer.startupProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
repoServer.startupProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
repoServer.startupProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
repoServer.startupProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
repoServer.terminationGracePeriodSeconds	int	30	terminationGracePeriodSeconds for container lifecycle hook
repoServer.tolerations	list	[] (defaults to global.tolerations)	Tolerations for use with node taints
repoServer.topologySpreadConstraints	list	[] (defaults to global.topologySpreadConstraints)	Assign custom TopologySpreadConstraints rules to the repo server
repoServer.useEphemeralHelmWorkingDir	bool	true	Toggle the usage of a ephemeral Helm working directory
repoServer.volumeMounts	list	[]	Additional volumeMounts to the repo server main container
repoServer.volumes	list	[]	Additional volumes to the repo server pod
repoServer.vpa.annotations	object	{}	Annotations to be added to repo server vpa
repoServer.vpa.containerPolicy	object	{}	Controls how VPA computes the recommended resources for repo server container
repoServer.vpa.enabled	bool	false	Deploy a VerticalPodAutoscaler for the repo server
repoServer.vpa.labels	object	{}	Labels to be added to repo server vpa
repoServer.vpa.recommenders	list	[]	The recommenders that will provide recommendations for vertical scaling. Only relevant if a named VPA recommender (e.g. one started with a custom recommender name) is in use; leave unset to use the cluster's default recommender
repoServer.vpa.updateMode	string	"Initial"	One of the VPA operation modes

Argo Server

Key	Type	Default	Description
server.affinity	object	{} (defaults to global.affinity preset)	Assign custom affinity rules to the deployment
server.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account into the pod.
server.autoscaling.behavior	object	{}	Configures the scaling behavior of the target in both Up and Down directions.
server.autoscaling.enabled	bool	false	Enable Horizontal Pod Autoscaler (HPA) for the Argo CD server
server.autoscaling.maxReplicas	int	5	Maximum number of replicas for the Argo CD server HPA
server.autoscaling.metrics	list	[]	Configures custom HPA metrics for the Argo CD server Ref: https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
server.autoscaling.minReplicas	int	1	Minimum number of replicas for the Argo CD server HPA
server.autoscaling.targetCPUUtilizationPercentage	int	50	Average CPU utilization percentage for the Argo CD server HPA
server.autoscaling.targetMemoryUtilizationPercentage	int	50	Average memory utilization percentage for the Argo CD server HPA
server.backendTLSPolicy.annotations	object	{}	Additional BackendTLSPolicy annotations
server.backendTLSPolicy.enabled	bool	false	Enable BackendTLSPolicy resource for Argo CD server (Gateway API)
server.backendTLSPolicy.labels	object	{}	Additional BackendTLSPolicy labels
server.backendTLSPolicy.targetRefs	list	[] (See values.yaml)	Target references for the BackendTLSPolicy
server.backendTLSPolicy.validation	object	{} (See values.yaml)	TLS validation configuration
server.certificate.additionalHosts	list	[]	Certificate Subject Alternate Names (SANs)
server.certificate.annotations	object	{}	Annotations to be applied to the Server Certificate
server.certificate.domain	string	"" (defaults to global.domain)	Certificate primary domain (commonName)
server.certificate.duration	string	"" (defaults to 2160h = 90d if not specified)	The requested 'duration' (i.e. lifetime) of the certificate.
server.certificate.enabled	bool	false	Deploy a Certificate resource (requires cert-manager)
server.certificate.issuer.group	string	""	Certificate issuer group. Set if using an external issuer. Eg. cert-manager.io
server.certificate.issuer.kind	string	""	Certificate issuer kind. Either Issuer or ClusterIssuer
server.certificate.issuer.name	string	""	Certificate issuer name. Eg. letsencrypt
server.certificate.privateKey.algorithm	string	"RSA"	Algorithm used to generate certificate private key. One of: RSA, Ed25519 or ECDSA
server.certificate.privateKey.encoding	string	"PKCS1"	The private key cryptography standards (PKCS) encoding for private key. Either: PCKS1 or PKCS8
server.certificate.privateKey.rotationPolicy	string	"Never"	Rotation policy of private key when certificate is re-issued. Either: Never or Always
server.certificate.privateKey.size	int	2048	Key bit size of the private key. If algorithm is set to Ed25519, size is ignored.
server.certificate.renewBefore	string	"" (defaults to 360h = 15d if not specified)	How long before the expiry a certificate should be renewed.
server.certificate.secretTemplateAnnotations	object	{}	Annotations that allow the certificate to be composed from data residing in existing Kubernetes Resources
server.certificate.usages	list	[]	Usages for the certificate
server.certificateSecret.annotations	object	{}	Annotations to be added to argocd-server-tls secret
server.certificateSecret.crt	string	""	Certificate data
server.certificateSecret.enabled	bool	false	Create argocd-server-tls secret
server.certificateSecret.key	string	""	Private Key of the certificate
server.certificateSecret.labels	object	{}	Labels to be added to argocd-server-tls secret
server.clusterRoleRules.enabled	bool	false	Enable custom rules for the server's ClusterRole resource
server.clusterRoleRules.rules	list	[]	List of custom rules for the server's ClusterRole resource
server.containerPorts.metrics	int	8083	Metrics container port
server.containerPorts.server	int	8080	Server container port
server.containerSecurityContext	object	See values.yaml	Server container-level security context
server.deploymentAnnotations	object	{}	Annotations to be added to server Deployment
server.deploymentLabels	object	{}	Labels for the server Deployment
server.deploymentStrategy	object	{}	Deployment strategy to be added to the server Deployment
server.dnsConfig	object	{}	DNS configuration
server.dnsPolicy	string	"ClusterFirst"	Alternative DNS policy for Server pods
server.emptyDir.sizeLimit	string	"" (defaults not set if not specified i.e. no size limit)	EmptyDir size limit for the Argo CD server
server.env	list	[]	Environment variables to pass to Argo CD server
server.envFrom	list	[] (See values.yaml)	envFrom to pass to Argo CD server
server.extensions.containerSecurityContext	object	See values.yaml	Server UI extensions container-level security context
server.extensions.enabled	bool	false	Enable support for Argo CD extensions
server.extensions.extensionList	list	[] (See values.yaml)	Extensions for Argo CD
server.extensions.image.imagePullPolicy	string	"" (defaults to global.image.imagePullPolicy)	Image pull policy for extensions
server.extensions.image.repository	string	"quay.io/argoprojlabs/argocd-extension-installer"	Repository to use for extension installer image
server.extensions.image.tag	string	"v1.0.1"	Tag to use for extension installer image
server.extensions.resources	object	{}	Resource limits and requests for the argocd-extensions container
server.extraArgs	list	[]	Additional command line arguments to pass to Argo CD server
server.extraContainers	list	[]	Additional containers to be added to the server pod
server.grpcroute.annotations	object	{}	Additional GRPCRoute annotations
server.grpcroute.enabled	bool	false	Enable GRPCRoute resource for Argo CD server (Gateway API)
server.grpcroute.hostnames	list	[] (See values.yaml)	List of hostnames for the GRPCRoute
server.grpcroute.labels	object	{}	Additional GRPCRoute labels
server.grpcroute.parentRefs	list	[] (See values.yaml)	Gateway API parentRefs for the GRPCRoute
server.grpcroute.rules	list	[] (See values.yaml)	GRPCRoute rules configuration
server.hostNetwork	bool	false	Host Network for Server pods
server.httproute.annotations	object	{}	Additional HTTPRoute annotations
server.httproute.enabled	bool	false	Enable HTTPRoute resource for Argo CD server (Gateway API)
server.httproute.hostnames	list	[] (See values.yaml)	List of hostnames for the HTTPRoute
server.httproute.labels	object	{}	Additional HTTPRoute labels
server.httproute.parentRefs	list	[] (See values.yaml)	Gateway API parentRefs for the HTTPRoute
server.httproute.rules	list	[] (See values.yaml)	HTTPRoute rules configuration
server.image.imagePullPolicy	string	"" (defaults to global.image.imagePullPolicy)	Image pull policy for the Argo CD server
server.image.repository	string	"" (defaults to global.image.repository)	Repository to use for the Argo CD server
server.image.tag	string	"" (defaults to global.image.tag)	Tag to use for the Argo CD server
server.imagePullSecrets	list	[] (defaults to global.imagePullSecrets)	Secrets with credentials to pull images from a private registry
server.ingress.annotations	object	{}	Additional ingress annotations
server.ingress.aws.backendProtocolVersion	string	"GRPC"	Backend protocol version for the AWS ALB gRPC service
server.ingress.aws.serviceAnnotations	object	{}	Annotations for the AWS ALB gRPC service
server.ingress.aws.serviceType	string	"NodePort"	Service type for the AWS ALB gRPC service
server.ingress.controller	string	"generic"	Specific implementation for ingress controller. One of generic, aws or gke
server.ingress.enabled	bool	false	Enable an ingress resource for the Argo CD server
server.ingress.extraHosts	list	[] (See values.yaml)	The list of additional hostnames to be covered by ingress record
server.ingress.extraPaths	list	[] (See values.yaml)	Additional ingress paths
server.ingress.extraRules	list	[] (See values.yaml)	Additional ingress rules
server.ingress.extraTls	list	[] (See values.yaml)	Additional TLS configuration
server.ingress.gke.backendConfig	object	{} (See values.yaml)	Google [BackendConfig] resource, for use with the GKE Ingress Controller
server.ingress.gke.frontendConfig	object	{} (See values.yaml)	Google [FrontendConfig] resource, for use with the GKE Ingress Controller
server.ingress.gke.managedCertificate.create	bool	true	Create ManagedCertificate resource and annotations for Google Load balancer
server.ingress.gke.managedCertificate.extraDomains	list	[]	Additional domains for ManagedCertificate resource
server.ingress.hostname	string	"" (defaults to global.domain)	Argo CD server hostname
server.ingress.ingressClassName	string	""	Defines which ingress controller will implement the resource
server.ingress.labels	object	{}	Additional ingress labels
server.ingress.path	string	"/"	The path to Argo CD server
server.ingress.pathType	string	"Prefix"	Ingress path type. One of Exact, Prefix or ImplementationSpecific
server.ingress.tls	bool	false	Enable TLS configuration for the hostname defined at server.ingress.hostname
server.ingressGrpc.annotations	object	{}	Additional ingress annotations for dedicated gRPC-ingress
server.ingressGrpc.enabled	bool	false	Enable an ingress resource for the Argo CD server for dedicated gRPC-ingress
server.ingressGrpc.extraHosts	list	[] (See values.yaml)	The list of additional hostnames to be covered by ingress record
server.ingressGrpc.extraPaths	list	[] (See values.yaml)	Additional ingress paths for dedicated gRPC-ingress
server.ingressGrpc.extraRules	list	[] (See values.yaml)	Additional ingress rules
server.ingressGrpc.extraTls	list	[] (See values.yaml)	Additional TLS configuration for dedicated gRPC-ingress
server.ingressGrpc.hostname	string	"" (defaults to grpc.server.ingress.hostname)	Argo CD server hostname for dedicated gRPC-ingress
server.ingressGrpc.ingressClassName	string	""	Defines which ingress controller will implement the resource gRPC-ingress
server.ingressGrpc.labels	object	{}	Additional ingress labels for dedicated gRPC-ingress
server.ingressGrpc.path	string	"/"	Argo CD server ingress path for dedicated gRPC-ingress
server.ingressGrpc.pathType	string	"Prefix"	Ingress path type for dedicated gRPC-ingress. One of Exact, Prefix or ImplementationSpecific
server.ingressGrpc.tls	bool	false	Enable TLS configuration for the hostname defined at server.ingressGrpc.hostname
server.initContainers	list	[]	Init containers to add to the server pod
server.lifecycle	object	{}	Specify postStart and preStop lifecycle hooks for your argo-cd-server container
server.listenerset.allowedRoutes	object	{"namespaces":{"from":"Same"}}	allowedRoutes for the synthesized listener
server.listenerset.annotations	object	{}	Additional ListenerSet annotations
server.listenerset.enabled	bool	false	Enable ListenerSet resource for Argo CD server (Gateway API)
server.listenerset.hostname	string	""	Hostname for the synthesized listener. Defaults to global.domain when empty.
server.listenerset.labels	object	{}	Additional ListenerSet labels
server.listenerset.listenerName	string	"https"	Name of the synthesized listener. Also used as sectionName in auto-derived httproute parentRefs.
server.listenerset.listeners	list	[] (See values.yaml)	Listeners to attach to the parent Gateway. When non-empty, used verbatim and all synthesized listener fields above are ignored.
server.listenerset.parentRef	object	{} (See values.yaml)	Gateway API parentRef for the ListenerSet
server.listenerset.port	int	443	Port for the synthesized listener
server.listenerset.protocol	string	"HTTPS"	Protocol for the synthesized listener
server.listenerset.tls	object	{"enabled":true,"mode":"Terminate","secretName":""}	TLS configuration for the synthesized listener
server.listenerset.tls.enabled	bool	true	Enable TLS on the synthesized listener
server.listenerset.tls.mode	string	"Terminate"	TLS termination mode
server.listenerset.tls.secretName	string	""	Secret name for TLS certificate. Defaults to argocd-server-tls when empty.
server.livenessProbe.enabled	bool	true	Enable Kubernetes liveness probe for default backend
server.livenessProbe.failureThreshold	int	3	Minimum consecutive failures for the probe to be considered failed after having succeeded
server.livenessProbe.httpPath	string	"/healthz?full=true"	Http path to use for the liveness probe
server.livenessProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
server.livenessProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
server.livenessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
server.livenessProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
server.metrics.enabled	bool	false	Deploy metrics service
server.metrics.service.annotations	object	{}	Metrics service annotations
server.metrics.service.clusterIP	string	""	Metrics service clusterIP. None makes a "headless service" (no virtual IP)
server.metrics.service.labels	object	{}	Metrics service labels
server.metrics.service.portName	string	"http-metrics"	Metrics service port name
server.metrics.service.servicePort	int	8083	Metrics service port
server.metrics.service.type	string	"ClusterIP"	Metrics service type
server.metrics.serviceMonitor.additionalLabels	object	{}	Prometheus ServiceMonitor labels
server.metrics.serviceMonitor.annotations	object	{}	Prometheus ServiceMonitor annotations
server.metrics.serviceMonitor.enabled	bool	false	Enable a prometheus ServiceMonitor
server.metrics.serviceMonitor.honorLabels	bool	false	When true, honorLabels preserves the metric’s labels when they collide with the target’s labels.
server.metrics.serviceMonitor.interval	string	"30s"	Prometheus ServiceMonitor interval
server.metrics.serviceMonitor.metricRelabelings	list	[]	Prometheus MetricRelabelConfigs to apply to samples before ingestion
server.metrics.serviceMonitor.namespace	string	""	Prometheus ServiceMonitor namespace
server.metrics.serviceMonitor.relabelings	list	[]	Prometheus RelabelConfigs to apply to samples before scraping
server.metrics.serviceMonitor.scheme	string	""	Prometheus ServiceMonitor scheme
server.metrics.serviceMonitor.scrapeTimeout	string	""	Prometheus ServiceMonitor scrapeTimeout. If empty, Prometheus uses the global scrape timeout unless it is less than the target's scrape interval value in which the latter is used.
server.metrics.serviceMonitor.selector	object	{}	Prometheus ServiceMonitor selector
server.metrics.serviceMonitor.tlsConfig	object	{}	Prometheus ServiceMonitor tlsConfig
server.name	string	"server"	Argo CD server name
server.networkPolicy.create	bool	false (defaults to global.networkPolicy.create)	Default network policy rules used by ArgoCD Server
server.nodeSelector	object	{} (defaults to global.nodeSelector)	Node selector
server.pdb.annotations	object	{}	Annotations to be added to Argo CD server pdb
server.pdb.enabled	bool	false	Deploy a PodDisruptionBudget for the Argo CD server
server.pdb.labels	object	{}	Labels to be added to Argo CD server pdb
server.pdb.maxUnavailable	string	""	Number of pods that are unavailable after eviction as number or percentage (eg.: 50%).
server.pdb.minAvailable	string	"" (defaults to 0 if not specified)	Number of pods that are available after eviction as number or percentage (eg.: 50%)
server.podAnnotations	object	{}	Annotations to be added to server pods
server.podLabels	object	{}	Labels to be added to server pods
server.priorityClassName	string	"" (defaults to global.priorityClassName)	Priority class for the Argo CD server pods
server.readinessProbe.enabled	bool	true	Enable Kubernetes readiness probe for default backend
server.readinessProbe.failureThreshold	int	3	Minimum consecutive failures for the probe to be considered failed after having succeeded
server.readinessProbe.httpPath	string	"/healthz"	Http path to use for the readiness probe
server.readinessProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
server.readinessProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
server.readinessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
server.readinessProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
server.replicas	int	1	The number of server pods to run
server.resources	object	{}	Resource limits and requests for the Argo CD server
server.route.annotations	object	{}	Openshift Route annotations
server.route.enabled	bool	false	Enable an OpenShift Route for the Argo CD server
server.route.hostname	string	""	Hostname of OpenShift Route
server.route.termination_policy	string	"None"	Termination policy of Openshift Route
server.route.termination_type	string	"passthrough"	Termination type of Openshift Route
server.runtimeClassName	string	"" (defaults to global.runtimeClassName)	Runtime class name for the Argo CD server
server.service.annotations	object	{}	Server service annotations
server.service.externalIPs	list	[]	Server service external IPs
server.service.externalTrafficPolicy	string	"Cluster"	Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
server.service.labels	object	{}	Server service labels
server.service.loadBalancerClass	string	""	The class of the load balancer implementation
server.service.loadBalancerIP	string	""	LoadBalancer will get created with the IP specified in this field
server.service.loadBalancerSourceRanges	list	[]	Source IP ranges to allow access to service from
server.service.nodePortHttp	int	30080	Server service http port for NodePort service type (only if server.service.type is set to "NodePort")
server.service.nodePortHttp2	int	nil (a random node port is assigned)	Server service http2 port for NodePort service type (only if server.service.servicePortHttp2 is set and server.service.type is set to "NodePort")
server.service.nodePortHttps	int	30443	Server service https port for NodePort service type (only if server.service.type is set to "NodePort")
server.service.servicePortHttp	int	80	Server service http port
server.service.servicePortHttp2	int	nil (disabled)	Server service cleartext http2 (h2c) port, targeting the same container port as servicePortHttp
server.service.servicePortHttp2AppProtocol	string	""	Server service http2 port appProtocol, e.g. kubernetes.io/h2c. Implementations that select the protocol from the port name instead do not need it
server.service.servicePortHttp2Name	string	"http2"	Server service http2 port name, can be used to route traffic via istio
server.service.servicePortHttpName	string	"http"	Server service http port name, can be used to route traffic via istio
server.service.servicePortHttps	int	443	Server service https port
server.service.servicePortHttpsAppProtocol	string	""	Server service https port appProtocol
server.service.servicePortHttpsName	string	"https"	Server service https port name, can be used to route traffic via istio
server.service.sessionAffinity	string	"None"	Used to maintain session affinity. Supports ClientIP and None
server.service.type	string	"ClusterIP"	Server service type
server.serviceAccount.annotations	object	{}	Annotations applied to created service account
server.serviceAccount.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account
server.serviceAccount.create	bool	true	Create server service account
server.serviceAccount.labels	object	{}	Labels applied to created service account
server.serviceAccount.name	string	"argocd-server"	Server service account name
server.startupProbe.enabled	bool	false	Enable Kubernetes startup probe for Argo CD server
server.startupProbe.failureThreshold	int	20	Minimum consecutive failures for the probe to be considered failed after having succeeded
server.startupProbe.httpPath	string	"/healthz"	Http path to use for the startup probe
server.startupProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
server.startupProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
server.startupProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
server.startupProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
server.terminationGracePeriodSeconds	int	30	terminationGracePeriodSeconds for container lifecycle hook
server.tolerations	list	[] (defaults to global.tolerations)	Tolerations for use with node taints
server.topologySpreadConstraints	list	[] (defaults to global.topologySpreadConstraints)	Assign custom TopologySpreadConstraints rules to the Argo CD server
server.volumeMounts	list	[]	Additional volumeMounts to the server main container
server.volumes	list	[]	Additional volumes to the server pod
server.vpa.annotations	object	{}	Annotations to be added to Argo CD server vpa
server.vpa.containerPolicy	object	{}	Controls how VPA computes the recommended resources for Argo CD server container
server.vpa.enabled	bool	false	Deploy a VerticalPodAutoscaler for the Argo CD server
server.vpa.labels	object	{}	Labels to be added to Argo CD server vpa
server.vpa.recommenders	list	[]	The recommenders that will provide recommendations for vertical scaling. Only relevant if a named VPA recommender (e.g. one started with a custom recommender name) is in use; leave unset to use the cluster's default recommender
server.vpa.updateMode	string	"Initial"	One of the VPA operation modes

Dex

Key	Type	Default	Description
dex.affinity	object	{} (defaults to global.affinity preset)	Assign custom affinity rules to the deployment
dex.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account into the pod.
dex.certificateSecret.annotations	object	{}	Annotations to be added to argocd-dex-server-tls secret
dex.certificateSecret.ca	string	""	Certificate authority. Required for self-signed certificates.
dex.certificateSecret.crt	string	""	Certificate data. Must contain SANs of Dex service (ie: argocd-dex-server, argocd-dex-server.argo-cd.svc)
dex.certificateSecret.enabled	bool	false	Create argocd-dex-server-tls secret
dex.certificateSecret.key	string	""	Certificate private key
dex.certificateSecret.labels	object	{}	Labels to be added to argocd-dex-server-tls secret
dex.containerPorts.grpc	int	5557	gRPC container port
dex.containerPorts.http	int	5556	HTTP container port
dex.containerPorts.metrics	int	5558	Metrics container port
dex.containerSecurityContext	object	See values.yaml	Dex container-level security context
dex.deploymentAnnotations	object	{}	Annotations to be added to the Dex server Deployment
dex.deploymentLabels	object	{}	Labels for the Dex server Deployment
dex.deploymentStrategy	object	{}	Deployment strategy to be added to the Dex server Deployment
dex.dnsConfig	object	{}	DNS configuration
dex.dnsPolicy	string	"ClusterFirst"	Alternative DNS policy for Dex server pods
dex.emptyDir.sizeLimit	string	"" (defaults not set if not specified i.e. no size limit)	EmptyDir size limit for Dex server
dex.enabled	bool	true	Enable dex
dex.env	list	[]	Environment variables to pass to the Dex server
dex.envFrom	list	[] (See values.yaml)	envFrom to pass to the Dex server
dex.extraArgs	list	[]	Additional command line arguments to pass to the Dex server
dex.extraContainers	list	[]	Additional containers to be added to the dex pod
dex.image.imagePullPolicy	string	"" (defaults to global.image.imagePullPolicy)	Dex imagePullPolicy
dex.image.repository	string	"ghcr.io/dexidp/dex"	Dex image repository
dex.image.tag	string	"v2.45.1"	Dex image tag
dex.imagePullSecrets	list	[] (defaults to global.imagePullSecrets)	Secrets with credentials to pull images from a private registry
dex.initContainers	list	[]	Init containers to add to the dex pod
dex.initImage.imagePullPolicy	string	"" (defaults to global.image.imagePullPolicy)	Argo CD init image imagePullPolicy
dex.initImage.repository	string	"" (defaults to global.image.repository)	Argo CD init image repository
dex.initImage.resources	object	{} (defaults to dex.resources)	Argo CD init image resources
dex.initImage.tag	string	"" (defaults to global.image.tag)	Argo CD init image tag
dex.livenessProbe.enabled	bool	false	Enable Kubernetes liveness probe for Dex >= 2.28.0
dex.livenessProbe.failureThreshold	int	3	Minimum consecutive failures for the probe to be considered failed after having succeeded
dex.livenessProbe.httpPath	string	"/healthz/live"	Http path to use for the liveness probe
dex.livenessProbe.httpPort	string	"metrics"	Http port to use for the liveness probe
dex.livenessProbe.httpScheme	string	"HTTP"	Scheme to use for for the liveness probe (can be HTTP or HTTPS)
dex.livenessProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
dex.livenessProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
dex.livenessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
dex.livenessProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
dex.metrics.enabled	bool	false	Deploy metrics service
dex.metrics.service.annotations	object	{}	Metrics service annotations
dex.metrics.service.labels	object	{}	Metrics service labels
dex.metrics.service.portName	string	"http-metrics"	Metrics service port name
dex.metrics.serviceMonitor.additionalLabels	object	{}	Prometheus ServiceMonitor labels
dex.metrics.serviceMonitor.annotations	object	{}	Prometheus ServiceMonitor annotations
dex.metrics.serviceMonitor.enabled	bool	false	Enable a prometheus ServiceMonitor
dex.metrics.serviceMonitor.honorLabels	bool	false	When true, honorLabels preserves the metric’s labels when they collide with the target’s labels.
dex.metrics.serviceMonitor.interval	string	"30s"	Prometheus ServiceMonitor interval
dex.metrics.serviceMonitor.metricRelabelings	list	[]	Prometheus MetricRelabelConfigs to apply to samples before ingestion
dex.metrics.serviceMonitor.namespace	string	""	Prometheus ServiceMonitor namespace
dex.metrics.serviceMonitor.relabelings	list	[]	Prometheus RelabelConfigs to apply to samples before scraping
dex.metrics.serviceMonitor.scheme	string	""	Prometheus ServiceMonitor scheme
dex.metrics.serviceMonitor.selector	object	{}	Prometheus ServiceMonitor selector
dex.metrics.serviceMonitor.tlsConfig	object	{}	Prometheus ServiceMonitor tlsConfig
dex.name	string	"dex-server"	Dex name
dex.networkPolicy.create	bool	false (defaults to global.networkPolicy.create)	Default network policy rules used by Dex server
dex.nodeSelector	object	{} (defaults to global.nodeSelector)	Node selector
dex.pdb.annotations	object	{}	Annotations to be added to Dex server pdb
dex.pdb.enabled	bool	false	Deploy a PodDisruptionBudget for the Dex server
dex.pdb.labels	object	{}	Labels to be added to Dex server pdb
dex.pdb.maxUnavailable	string	""	Number of pods that are unavailble after eviction as number or percentage (eg.: 50%).
dex.pdb.minAvailable	string	"" (defaults to 0 if not specified)	Number of pods that are available after eviction as number or percentage (eg.: 50%)
dex.podAnnotations	object	{}	Annotations to be added to the Dex server pods
dex.podLabels	object	{}	Labels to be added to the Dex server pods
dex.priorityClassName	string	"" (defaults to global.priorityClassName)	Priority class for the dex pods
dex.readinessProbe.enabled	bool	false	Enable Kubernetes readiness probe for Dex >= 2.28.0
dex.readinessProbe.failureThreshold	int	3	Minimum consecutive failures for the probe to be considered failed after having succeeded
dex.readinessProbe.httpPath	string	"/healthz/ready"	Http path to use for the readiness probe
dex.readinessProbe.httpPort	string	"metrics"	Http port to use for the readiness probe
dex.readinessProbe.httpScheme	string	"HTTP"	Scheme to use for for the liveness probe (can be HTTP or HTTPS)
dex.readinessProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
dex.readinessProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
dex.readinessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
dex.readinessProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
dex.resources	object	{}	Resource limits and requests for dex
dex.runtimeClassName	string	"" (defaults to global.runtimeClassName)	Runtime class name for Dex
dex.serviceAccount.annotations	object	{}	Annotations applied to created service account
dex.serviceAccount.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account
dex.serviceAccount.create	bool	true	Create dex service account
dex.serviceAccount.name	string	"argocd-dex-server"	Dex service account name
dex.servicePortGrpc	int	5557	Service port for gRPC access
dex.servicePortGrpcName	string	"grpc"	Service port name for gRPC access
dex.servicePortHttp	int	5556	Service port for HTTP access
dex.servicePortHttpName	string	"http"	Service port name for HTTP access
dex.servicePortMetrics	int	5558	Service port for metrics access
dex.startupProbe.enabled	bool	false	Enable Kubernetes startup probe for Dex >= 2.28.0
dex.startupProbe.failureThreshold	int	20	Minimum consecutive failures for the probe to be considered failed after having succeeded
dex.startupProbe.httpPath	string	"/healthz/ready"	Http path to use for the startup probe
dex.startupProbe.httpPort	string	"metrics"	Http port to use for the startup probe
dex.startupProbe.httpScheme	string	"HTTP"	Scheme to use for the startup probe (can be HTTP or HTTPS)
dex.startupProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
dex.startupProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
dex.startupProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
dex.startupProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
dex.terminationGracePeriodSeconds	int	30	terminationGracePeriodSeconds for container lifecycle hook
dex.tolerations	list	[] (defaults to global.tolerations)	Tolerations for use with node taints
dex.topologySpreadConstraints	list	[] (defaults to global.topologySpreadConstraints)	Assign custom TopologySpreadConstraints rules to dex
dex.volumeMounts	list	[]	Additional volumeMounts to the dex main container
dex.volumes	list	[]	Additional volumes to the dex pod
dex.vpa.annotations	object	{}	Annotations to be added to Dex server vpa
dex.vpa.containerPolicy	object	{}	Controls how VPA computes the recommended resources for Dex server container
dex.vpa.enabled	bool	false	Deploy a VerticalPodAutoscaler for the Dex server
dex.vpa.labels	object	{}	Labels to be added to Dex server vpa
dex.vpa.recommenders	list	[]	The recommenders that will provide recommendations for vertical scaling. Only relevant if a named VPA recommender (e.g. one started with a custom recommender name) is in use; leave unset to use the cluster's default recommender
dex.vpa.updateMode	string	"Initial"	One of the VPA operation modes

Redis

Option 1 - Single Redis instance (default option)

Key	Type	Default	Description
redis.affinity	object	{} (defaults to global.affinity preset)	Assign custom affinity rules to the deployment
redis.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account into the pod.
redis.containerPorts.metrics	int	9121	Metrics container port
redis.containerPorts.redis	int	6379	Redis container port
redis.containerSecurityContext	object	See values.yaml	Redis container-level security context
redis.deploymentAnnotations	object	{}	Annotations to be added to the Redis server Deployment
redis.deploymentLabels	object	{}	Labels for the Redis server Deployment
redis.dnsConfig	object	{}	DNS configuration
redis.dnsPolicy	string	"ClusterFirst"	Alternative DNS policy for Redis server pods
redis.enabled	bool	true	Enable redis
redis.env	list	[]	Environment variables to pass to the Redis server
redis.envFrom	list	[] (See values.yaml)	envFrom to pass to the Redis server
redis.exporter.containerSecurityContext	object	See values.yaml	Redis exporter security context
redis.exporter.enabled	bool	false	Enable Prometheus redis-exporter sidecar
redis.exporter.env	list	[]	Environment variables to pass to the Redis exporter
redis.exporter.image.imagePullPolicy	string	"" (defaults to global.image.imagePullPolicy)	Image pull policy for the redis-exporter
redis.exporter.image.repository	string	"ghcr.io/oliver006/redis_exporter"	Repository to use for the redis-exporter
redis.exporter.image.tag	string	"v1.89.0"	Tag to use for the redis-exporter
redis.exporter.livenessProbe.enabled	bool	false	Enable Kubernetes liveness probe for Redis exporter
redis.exporter.livenessProbe.failureThreshold	int	5	Minimum consecutive failures for the probe to be considered failed after having succeeded
redis.exporter.livenessProbe.initialDelaySeconds	int	30	Number of seconds after the container has started before probe is initiated
redis.exporter.livenessProbe.periodSeconds	int	15	How often (in seconds) to perform the probe
redis.exporter.livenessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
redis.exporter.livenessProbe.timeoutSeconds	int	15	Number of seconds after which the probe times out
redis.exporter.readinessProbe.enabled	bool	false	Enable Kubernetes liveness probe for Redis exporter (optional)
redis.exporter.readinessProbe.failureThreshold	int	5	Minimum consecutive failures for the probe to be considered failed after having succeeded
redis.exporter.readinessProbe.initialDelaySeconds	int	30	Number of seconds after the container has started before probe is initiated
redis.exporter.readinessProbe.periodSeconds	int	15	How often (in seconds) to perform the probe
redis.exporter.readinessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
redis.exporter.readinessProbe.timeoutSeconds	int	15	Number of seconds after which the probe times out
redis.exporter.resources	object	{}	Resource limits and requests for redis-exporter sidecar
redis.extraArgs	list	[]	Additional command line arguments to pass to redis-server
redis.extraContainers	list	[]	Additional containers to be added to the redis pod
redis.image.imagePullPolicy	string	"" (defaults to global.image.imagePullPolicy)	Redis image pull policy
redis.image.repository	string	"ecr-public.aws.com/docker/library/redis"	Redis repository
redis.image.tag	string	"8.6.4-alpine"	Redis tag
redis.imagePullSecrets	list	[] (defaults to global.imagePullSecrets)	Secrets with credentials to pull images from a private registry
redis.initContainers	list	[]	Init containers to add to the redis pod
redis.livenessProbe.enabled	bool	false	Enable Kubernetes liveness probe for Redis server
redis.livenessProbe.failureThreshold	int	5	Minimum consecutive failures for the probe to be considered failed after having succeeded
redis.livenessProbe.initialDelaySeconds	int	30	Number of seconds after the container has started before probe is initiated
redis.livenessProbe.periodSeconds	int	15	How often (in seconds) to perform the probe
redis.livenessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
redis.livenessProbe.timeoutSeconds	int	15	Number of seconds after which the probe times out
redis.metrics.enabled	bool	false	Deploy metrics service
redis.metrics.service.annotations	object	{}	Metrics service annotations
redis.metrics.service.clusterIP	string	"None"	Metrics service clusterIP. None makes a "headless service" (no virtual IP)
redis.metrics.service.labels	object	{}	Metrics service labels
redis.metrics.service.portName	string	"http-metrics"	Metrics service port name
redis.metrics.service.servicePort	int	9121	Metrics service port
redis.metrics.service.type	string	"ClusterIP"	Metrics service type
redis.metrics.serviceMonitor.additionalLabels	object	{}	Prometheus ServiceMonitor labels
redis.metrics.serviceMonitor.annotations	object	{}	Prometheus ServiceMonitor annotations
redis.metrics.serviceMonitor.enabled	bool	false	Enable a prometheus ServiceMonitor
redis.metrics.serviceMonitor.honorLabels	bool	false	When true, honorLabels preserves the metric’s labels when they collide with the target’s labels.
redis.metrics.serviceMonitor.interval	string	"30s"	Interval at which metrics should be scraped
redis.metrics.serviceMonitor.metricRelabelings	list	[]	Prometheus MetricRelabelConfigs to apply to samples before ingestion
redis.metrics.serviceMonitor.namespace	string	""	Prometheus ServiceMonitor namespace
redis.metrics.serviceMonitor.relabelings	list	[]	Prometheus RelabelConfigs to apply to samples before scraping
redis.metrics.serviceMonitor.scheme	string	""	Prometheus ServiceMonitor scheme
redis.metrics.serviceMonitor.selector	object	{}	Prometheus ServiceMonitor selector
redis.metrics.serviceMonitor.tlsConfig	object	{}	Prometheus ServiceMonitor tlsConfig
redis.name	string	"redis"	Redis name
redis.networkPolicy.create	bool	false (defaults to global.networkPolicy.create)	Default network policy rules used by redis
redis.nodeSelector	object	{} (defaults to global.nodeSelector)	Node selector
redis.pdb.annotations	object	{}	Annotations to be added to Redis pdb
redis.pdb.enabled	bool	false	Deploy a PodDisruptionBudget for the Redis
redis.pdb.labels	object	{}	Labels to be added to Redis pdb
redis.pdb.maxUnavailable	string	""	Number of pods that are unavailble after eviction as number or percentage (eg.: 50%).
redis.pdb.minAvailable	string	"" (defaults to 0 if not specified)	Number of pods that are available after eviction as number or percentage (eg.: 50%)
redis.podAnnotations	object	{}	Annotations to be added to the Redis server pods
redis.podLabels	object	{}	Labels to be added to the Redis server pods
redis.priorityClassName	string	"" (defaults to global.priorityClassName)	Priority class for redis pods
redis.readinessProbe.enabled	bool	false	Enable Kubernetes liveness probe for Redis server
redis.readinessProbe.failureThreshold	int	5	Minimum consecutive failures for the probe to be considered failed after having succeeded
redis.readinessProbe.initialDelaySeconds	int	30	Number of seconds after the container has started before probe is initiated
redis.readinessProbe.periodSeconds	int	15	How often (in seconds) to perform the probe
redis.readinessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
redis.readinessProbe.timeoutSeconds	int	15	Number of seconds after which the probe times out
redis.resources	object	{}	Resource limits and requests for redis
redis.runtimeClassName	string	"" (defaults to global.runtimeClassName)	Runtime class name for redis
redis.securityContext	object	See values.yaml	Redis pod-level security context
redis.service.annotations	object	{}	Redis service annotations
redis.service.labels	object	{}	Additional redis service labels
redis.serviceAccount.annotations	object	{}	Annotations applied to created service account
redis.serviceAccount.automountServiceAccountToken	bool	false	Automount API credentials for the Service Account
redis.serviceAccount.create	bool	false	Create a service account for the redis pod
redis.serviceAccount.name	string	""	Service account name for redis pod
redis.servicePort	int	6379	Redis service port
redis.terminationGracePeriodSeconds	int	30	terminationGracePeriodSeconds for container lifecycle hook
redis.tolerations	list	[] (defaults to global.tolerations)	Tolerations for use with node taints
redis.topologySpreadConstraints	list	[] (defaults to global.topologySpreadConstraints)	Assign custom TopologySpreadConstraints rules to redis
redis.volumeMounts	list	[]	Additional volumeMounts to the redis container
redis.volumes	list	[]	Additional volumes to the redis pod
redis.vpa.annotations	object	{}	Annotations to be added to Redis vpa
redis.vpa.containerPolicy	object	{}	Controls how VPA computes the recommended resources for Redis container
redis.vpa.enabled	bool	false	Deploy a VerticalPodAutoscaler for the Redis
redis.vpa.labels	object	{}	Labels to be added to Redis vpa
redis.vpa.recommenders	list	[]	The recommenders that will provide recommendations for vertical scaling. Only relevant if a named VPA recommender (e.g. one started with a custom recommender name) is in use; leave unset to use the cluster's default recommender
redis.vpa.updateMode	string	"Initial"	One of the VPA operation modes

Option 2 - Redis HA

This option uses the following third-party chart to bootstrap a clustered Redis: https://github.com/DandyDeveloper/charts/tree/master/charts/redis-ha. For all available configuration options, please read upstream README and/or chart source. The main options are listed here:

Key	Type	Default	Description
redis-ha.additionalAffinities	object	{}	Additional affinities to add to the Redis server pods.
redis-ha.affinity	string	""	Assign custom affinity rules to the Redis pods.
redis-ha.auth	bool	true	Configures redis-ha with AUTH
redis-ha.containerSecurityContext	object	See values.yaml	Redis HA statefulset container-level security context
redis-ha.enabled	bool	false	Enables the Redis HA subchart and disables the custom Redis single node deployment
redis-ha.existingSecret	string	"argocd-redis"	Existing Secret to use for redis-ha authentication. By default the redis-secret-init Job is generating this Secret.
redis-ha.exporter.enabled	bool	false	Enable Prometheus redis-exporter sidecar
redis-ha.exporter.image	string	"ghcr.io/oliver006/redis_exporter"	Repository to use for the redis-exporter
redis-ha.exporter.tag	string	"v1.75.0"	Tag to use for the redis-exporter
redis-ha.haproxy.additionalAffinities	object	{}	Additional affinities to add to the haproxy pods.
redis-ha.haproxy.affinity	string	""	Assign custom affinity rules to the haproxy pods.
redis-ha.haproxy.containerSecurityContext	object	See values.yaml	HAProxy container-level security context
redis-ha.haproxy.enabled	bool	true	Enabled HAProxy LoadBalancing/Proxy
redis-ha.haproxy.hardAntiAffinity	bool	true	Whether the haproxy pods should be forced to run on separate nodes.
redis-ha.haproxy.image.repository	string	"ecr-public.aws.com/docker/library/haproxy"	HAProxy Image Repository
redis-ha.haproxy.labels	object	{"app.kubernetes.io/name":"argocd-redis-ha-haproxy"}	Custom labels for the haproxy pod. This is relevant for Argo CD CLI.
redis-ha.haproxy.metrics.enabled	bool	true	HAProxy enable prometheus metric scraping
redis-ha.haproxy.tolerations	list	[]	Tolerations for use with node taints for haproxy pods.
redis-ha.hardAntiAffinity	bool	true	Whether the Redis server pods should be forced to run on separate nodes.
redis-ha.image.repository	string	"ecr-public.aws.com/docker/library/redis"	Redis repository
redis-ha.image.tag	string	"8.2.3-alpine"	Redis tag
redis-ha.persistentVolume.enabled	bool	false	Configures persistence on Redis nodes
redis-ha.redis.config	object	See values.yaml	Any valid redis config options in this section will be applied to each server (see redis-ha chart)
redis-ha.redis.config.save	string	'""'	Will save the DB if both the given number of seconds and the given number of write operations against the DB occurred. "" is disabled
redis-ha.redis.masterGroupName	string	"argocd"	Redis convention for naming the cluster group: must match ^[\\w-\\.]+$ and can be templated
redis-ha.tolerations	list	[]	Tolerations for use with node taints for Redis pods.
redis-ha.topologySpreadConstraints	object	{"enabled":false,"maxSkew":"","topologyKey":"","whenUnsatisfiable":""}	Assign custom TopologySpreadConstraints rules to the Redis pods.
redis-ha.topologySpreadConstraints.enabled	bool	false	Enable Redis HA topology spread constraints
redis-ha.topologySpreadConstraints.maxSkew	string	"" (defaults to 1)	Max skew of pods tolerated
redis-ha.topologySpreadConstraints.topologyKey	string	"" (defaults to topology.kubernetes.io/zone)	Topology key for spread
redis-ha.topologySpreadConstraints.whenUnsatisfiable	string	"" (defaults to ScheduleAnyway)	Enforcement policy, hard or soft
redis-ha.exporter.image	string	nil (follows subchart default)	Exporter image
redis-ha.exporter.tag	string	nil (follows subchart default)	Exporter tag
redis-ha.haproxy.image.repository	string	nil (follows subchart default)	HAProxy Image Repository
redis-ha.haproxy.image.tag	string	nil (follows subchart default)	HAProxy Image Tag
redis-ha.image.repository	string	nil (follows subchart default)	Redis image repository

Option 3 - External Redis

If you want to use an existing Redis (eg. a managed service from a cloud provider), you can use these parameters:

Key	Type	Default	Description
externalRedis.existingSecret	string	""	The name of an existing secret with Redis (must contain key redis-password. And should contain redis-username if username is not default) and Sentinel credentials. When it's set, the externalRedis.username and externalRedis.password parameters are ignored
externalRedis.host	string	""	External Redis server host
externalRedis.password	string	""	External Redis password
externalRedis.port	int	6379	External Redis server port
externalRedis.secretAnnotations	object	{}	External Redis Secret annotations
externalRedis.username	string	""	External Redis username

Redis secret-init

The helm chart deploys a Job to setup a random password which is used to secure the Redis. The Redis password is stored in Kubernetes secret argocd-redis with key auth in the namespace where Argo CD is installed. If you use an External Redis (See Option 3 above), this Job is not deployed.

Key	Type	Default	Description
redisSecretInit.affinity	object	{}	Assign custom affinity rules to the Redis secret-init Job
redisSecretInit.containerSecurityContext	object	See values.yaml	Application controller container-level security context
redisSecretInit.enabled	bool	true	Enable Redis secret initialization. If disabled, secret must be provisioned by alternative methods
redisSecretInit.extraArgs	list	[]	Additional command line arguments for the Redis secret-init Job
redisSecretInit.image.imagePullPolicy	string	"" (defaults to global.image.imagePullPolicy)	Image pull policy for the Redis secret-init Job
redisSecretInit.image.repository	string	"" (defaults to global.image.repository)	Repository to use for the Redis secret-init Job
redisSecretInit.image.tag	string	"" (defaults to global.image.tag)	Tag to use for the Redis secret-init Job
redisSecretInit.imagePullSecrets	list	[] (defaults to global.imagePullSecrets)	Secrets with credentials to pull images from a private registry
redisSecretInit.jobAnnotations	object	{}	Annotations to be added to the Redis secret-init Job
redisSecretInit.name	string	"redis-secret-init"	Redis secret-init name
redisSecretInit.nodeSelector	object	{} (defaults to global.nodeSelector)	Node selector to be added to the Redis secret-init Job
redisSecretInit.podAnnotations	object	{}	Annotations to be added to the Redis secret-init Job
redisSecretInit.podLabels	object	{}	Labels to be added to the Redis secret-init Job
redisSecretInit.priorityClassName	string	"" (defaults to global.priorityClassName)	Priority class for Redis secret-init Job
redisSecretInit.resources	object	{}	Resource limits and requests for Redis secret-init Job
redisSecretInit.runtimeClassName	string	"" (defaults to global.runtimeClassName)	Runtime class name for the Redis secret-init Job
redisSecretInit.securityContext	object	{}	Redis secret-init Job pod-level security context
redisSecretInit.serviceAccount.annotations	object	{}	Annotations applied to created service account
redisSecretInit.serviceAccount.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account
redisSecretInit.serviceAccount.create	bool	true	Create a service account for the redis pod
redisSecretInit.serviceAccount.name	string	""	Service account name for redis pod
redisSecretInit.tolerations	list	[] (defaults to global.tolerations)	Tolerations to be added to the Redis secret-init Job

ApplicationSet

Key	Type	Default	Description
applicationSet.affinity	object	{} (defaults to global.affinity preset)	Assign custom affinity rules
applicationSet.allowAnyNamespace	bool	false	Enable ApplicationSet in any namespace feature
applicationSet.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account into the pod.
applicationSet.certificate.additionalHosts	list	[]	Certificate Subject Alternate Names (SANs)
applicationSet.certificate.annotations	object	{}	Annotations to be applied to the ApplicationSet Certificate
applicationSet.certificate.domain	string	"" (defaults to global.domain)	Certificate primary domain (commonName)
applicationSet.certificate.duration	string	"" (defaults to 2160h = 90d if not specified)	The requested 'duration' (i.e. lifetime) of the certificate.
applicationSet.certificate.enabled	bool	false	Deploy a Certificate resource (requires cert-manager)
applicationSet.certificate.issuer.group	string	""	Certificate issuer group. Set if using an external issuer. Eg. cert-manager.io
applicationSet.certificate.issuer.kind	string	""	Certificate issuer kind. Either Issuer or ClusterIssuer
applicationSet.certificate.issuer.name	string	""	Certificate issuer name. Eg. letsencrypt
applicationSet.certificate.privateKey.algorithm	string	"RSA"	Algorithm used to generate certificate private key. One of: RSA, Ed25519 or ECDSA
applicationSet.certificate.privateKey.encoding	string	"PKCS1"	The private key cryptography standards (PKCS) encoding for private key. Either: PCKS1 or PKCS8
applicationSet.certificate.privateKey.rotationPolicy	string	"Never"	Rotation policy of private key when certificate is re-issued. Either: Never or Always
applicationSet.certificate.privateKey.size	int	2048	Key bit size of the private key. If algorithm is set to Ed25519, size is ignored.
applicationSet.certificate.renewBefore	string	"" (defaults to 360h = 15d if not specified)	How long before the expiry a certificate should be renewed.
applicationSet.containerPorts.metrics	int	8080	Metrics container port
applicationSet.containerPorts.probe	int	8081	Probe container port
applicationSet.containerPorts.webhook	int	7000	Webhook container port
applicationSet.containerSecurityContext	object	See values.yaml	ApplicationSet controller container-level security context
applicationSet.deploymentAnnotations	object	{}	Annotations to be added to ApplicationSet controller Deployment
applicationSet.deploymentLabels	object	{}	Labels for the ApplicationSet controller Deployment
applicationSet.deploymentStrategy	object	{}	Deployment strategy to be added to the ApplicationSet controller Deployment
applicationSet.dnsConfig	object	{}	DNS configuration
applicationSet.dnsPolicy	string	"ClusterFirst"	Alternative DNS policy for ApplicationSet controller pods
applicationSet.emptyDir.sizeLimit	string	"" (defaults not set if not specified i.e. no size limit)	EmptyDir size limit for applicationSet controller
applicationSet.extraArgs	list	[]	ApplicationSet controller command line flags
applicationSet.extraContainers	list	[]	Additional containers to be added to the ApplicationSet controller pod
applicationSet.extraEnv	list	[]	Environment variables to pass to the ApplicationSet controller
applicationSet.extraEnvFrom	list	[] (See values.yaml)	envFrom to pass to the ApplicationSet controller
applicationSet.extraVolumeMounts	list	[]	List of extra mounts to add (normally used with extraVolumes)
applicationSet.extraVolumes	list	[]	List of extra volumes to add
applicationSet.httproute.annotations	object	{}	Additional HTTPRoute annotations
applicationSet.httproute.enabled	bool	false	Enable HTTPRoute resource for Argo CD Applicationset Webhook (Gateway API)
applicationSet.httproute.hostnames	list	[] (See values.yaml)	List of hostnames for the HTTPRoute
applicationSet.httproute.labels	object	{}	Additional HTTPRoute labels
applicationSet.httproute.parentRefs	list	[] (See values.yaml)	Gateway API parentRefs for the HTTPRoute
applicationSet.httproute.rules	list	[] (See values.yaml)	HTTPRoute rules configuration
applicationSet.image.imagePullPolicy	string	"" (defaults to global.image.imagePullPolicy)	Image pull policy for the ApplicationSet controller
applicationSet.image.repository	string	"" (defaults to global.image.repository)	Repository to use for the ApplicationSet controller
applicationSet.image.tag	string	"" (defaults to global.image.tag)	Tag to use for the ApplicationSet controller
applicationSet.imagePullSecrets	list	[] (defaults to global.imagePullSecrets)	If defined, uses a Secret to pull an image from a private Docker registry or repository.
applicationSet.ingress.annotations	object	{}	Additional ingress annotations
applicationSet.ingress.enabled	bool	false	Enable an ingress resource for ApplicationSet webhook
applicationSet.ingress.extraHosts	list	[] (See values.yaml)	The list of additional hostnames to be covered by ingress record
applicationSet.ingress.extraPaths	list	[] (See values.yaml)	Additional ingress paths
applicationSet.ingress.extraRules	list	[] (See values.yaml)	Additional ingress rules
applicationSet.ingress.extraTls	list	[] (See values.yaml)	Additional ingress TLS configuration
applicationSet.ingress.hostname	string	"" (defaults to global.domain)	Argo CD ApplicationSet hostname
applicationSet.ingress.ingressClassName	string	""	Defines which ingress ApplicationSet controller will implement the resource
applicationSet.ingress.labels	object	{}	Additional ingress labels
applicationSet.ingress.path	string	"/api/webhook"	List of ingress paths
applicationSet.ingress.pathType	string	"Prefix"	Ingress path type. One of Exact, Prefix or ImplementationSpecific
applicationSet.ingress.tls	bool	false	Enable TLS configuration for the hostname defined at applicationSet.webhook.ingress.hostname
applicationSet.initContainers	list	[]	Init containers to add to the ApplicationSet controller pod
applicationSet.listenerset.allowedRoutes	object	{"namespaces":{"from":"Same"}}	allowedRoutes for the synthesized listener
applicationSet.listenerset.annotations	object	{}	Additional ListenerSet annotations
applicationSet.listenerset.enabled	bool	false	Enable ListenerSet resource for Argo CD ApplicationSet webhook (Gateway API)
applicationSet.listenerset.hostname	string	""	Hostname for the synthesized listener. Defaults to global.domain when empty.
applicationSet.listenerset.labels	object	{}	Additional ListenerSet labels
applicationSet.listenerset.listenerName	string	"https"	Name of the synthesized listener. Also used as sectionName in auto-derived httproute parentRefs.
applicationSet.listenerset.listeners	list	[] (See values.yaml)	Listeners to attach to the parent Gateway. When non-empty, used verbatim and all synthesized listener fields above are ignored.
applicationSet.listenerset.parentRef	object	{} (See values.yaml)	Gateway API parentRef for the ListenerSet
applicationSet.listenerset.port	int	443	Port for the synthesized listener
applicationSet.listenerset.protocol	string	"HTTPS"	Protocol for the synthesized listener
applicationSet.listenerset.tls	object	{"enabled":true,"mode":"Terminate","secretName":""}	TLS configuration for the synthesized listener
applicationSet.listenerset.tls.enabled	bool	true	Enable TLS on the synthesized listener
applicationSet.listenerset.tls.mode	string	"Terminate"	TLS termination mode
applicationSet.listenerset.tls.secretName	string	""	Secret name for TLS certificate. Defaults to argocd-applicationset-controller-tls when empty.
applicationSet.livenessProbe.enabled	bool	false	Enable Kubernetes liveness probe for ApplicationSet controller
applicationSet.livenessProbe.failureThreshold	int	3	Minimum consecutive failures for the probe to be considered failed after having succeeded
applicationSet.livenessProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
applicationSet.livenessProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
applicationSet.livenessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
applicationSet.livenessProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
applicationSet.metrics.enabled	bool	false	Deploy metrics service
applicationSet.metrics.service.annotations	object	{}	Metrics service annotations
applicationSet.metrics.service.clusterIP	string	""	Metrics service clusterIP. None makes a "headless service" (no virtual IP)
applicationSet.metrics.service.labels	object	{}	Metrics service labels
applicationSet.metrics.service.portName	string	"http-metrics"	Metrics service port name
applicationSet.metrics.service.servicePort	int	8080	Metrics service port
applicationSet.metrics.service.type	string	"ClusterIP"	Metrics service type
applicationSet.metrics.serviceMonitor.additionalLabels	object	{}	Prometheus ServiceMonitor labels
applicationSet.metrics.serviceMonitor.annotations	object	{}	Prometheus ServiceMonitor annotations
applicationSet.metrics.serviceMonitor.enabled	bool	false	Enable a prometheus ServiceMonitor
applicationSet.metrics.serviceMonitor.honorLabels	bool	false	When true, honorLabels preserves the metric’s labels when they collide with the target’s labels.
applicationSet.metrics.serviceMonitor.interval	string	"30s"	Prometheus ServiceMonitor interval
applicationSet.metrics.serviceMonitor.metricRelabelings	list	[]	Prometheus MetricRelabelConfigs to apply to samples before ingestion
applicationSet.metrics.serviceMonitor.namespace	string	""	Prometheus ServiceMonitor namespace
applicationSet.metrics.serviceMonitor.relabelings	list	[]	Prometheus RelabelConfigs to apply to samples before scraping
applicationSet.metrics.serviceMonitor.scheme	string	""	Prometheus ServiceMonitor scheme
applicationSet.metrics.serviceMonitor.scrapeTimeout	string	""	Prometheus ServiceMonitor scrapeTimeout. If empty, Prometheus uses the global scrape timeout unless it is less than the target's scrape interval value in which the latter is used.
applicationSet.metrics.serviceMonitor.selector	object	{}	Prometheus ServiceMonitor selector
applicationSet.metrics.serviceMonitor.tlsConfig	object	{}	Prometheus ServiceMonitor tlsConfig
applicationSet.name	string	"applicationset-controller"	ApplicationSet controller name string
applicationSet.networkPolicy.create	bool	false (defaults to global.networkPolicy.create)	Default network policy rules used by ApplicationSet controller
applicationSet.nodeSelector	object	{} (defaults to global.nodeSelector)	Node selector
applicationSet.pdb.annotations	object	{}	Annotations to be added to ApplicationSet controller pdb
applicationSet.pdb.enabled	bool	false	Deploy a PodDisruptionBudget for the ApplicationSet controller
applicationSet.pdb.labels	object	{}	Labels to be added to ApplicationSet controller pdb
applicationSet.pdb.maxUnavailable	string	""	Number of pods that are unavailable after eviction as number or percentage (eg.: 50%).
applicationSet.pdb.minAvailable	string	"" (defaults to 0 if not specified)	Number of pods that are available after eviction as number or percentage (eg.: 50%)
applicationSet.podAnnotations	object	{}	Annotations for the ApplicationSet controller pods
applicationSet.podLabels	object	{}	Labels for the ApplicationSet controller pods
applicationSet.priorityClassName	string	"" (defaults to global.priorityClassName)	Priority class for the ApplicationSet controller pods
applicationSet.readinessProbe.enabled	bool	false	Enable Kubernetes liveness probe for ApplicationSet controller
applicationSet.readinessProbe.failureThreshold	int	3	Minimum consecutive failures for the probe to be considered failed after having succeeded
applicationSet.readinessProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
applicationSet.readinessProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
applicationSet.readinessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
applicationSet.readinessProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
applicationSet.replicas	int	1	The number of ApplicationSet controller pods to run
applicationSet.resources	object	{}	Resource limits and requests for the ApplicationSet controller pods.
applicationSet.runtimeClassName	string	"" (defaults to global.runtimeClassName)	Runtime class name for the ApplicationSet controller
applicationSet.service.annotations	object	{}	ApplicationSet service annotations
applicationSet.service.labels	object	{}	ApplicationSet service labels
applicationSet.service.port	int	7000	ApplicationSet service port
applicationSet.service.portName	string	"http-webhook"	ApplicationSet service port name
applicationSet.service.type	string	"ClusterIP"	ApplicationSet service type
applicationSet.serviceAccount.annotations	object	{}	Annotations applied to created service account
applicationSet.serviceAccount.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account
applicationSet.serviceAccount.create	bool	true	Create ApplicationSet controller service account
applicationSet.serviceAccount.labels	object	{}	Labels applied to created service account
applicationSet.serviceAccount.name	string	"argocd-applicationset-controller"	ApplicationSet controller service account name
applicationSet.startupProbe.enabled	bool	false	Enable Kubernetes startup probe for ApplicationSet controller
applicationSet.startupProbe.failureThreshold	int	20	Minimum consecutive failures for the probe to be considered failed after having succeeded
applicationSet.startupProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
applicationSet.startupProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
applicationSet.startupProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
applicationSet.startupProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
applicationSet.terminationGracePeriodSeconds	int	30	terminationGracePeriodSeconds for container lifecycle hook
applicationSet.tolerations	list	[] (defaults to global.tolerations)	Tolerations for use with node taints
applicationSet.topologySpreadConstraints	list	[] (defaults to global.topologySpreadConstraints)	Assign custom TopologySpreadConstraints rules to the ApplicationSet controller
applicationSet.vpa.annotations	object	{}	Annotations to be added to ApplicationSet controller vpa
applicationSet.vpa.containerPolicy	object	{}	Controls how VPA computes the recommended resources for ApplicationSet controller container
applicationSet.vpa.enabled	bool	false	Deploy a VerticalPodAutoscaler for the ApplicationSet controller
applicationSet.vpa.labels	object	{}	Labels to be added to ApplicationSet controller vpa
applicationSet.vpa.recommenders	list	[]	The recommenders that will provide recommendations for vertical scaling. Only relevant if a named VPA recommender (e.g. one started with a custom recommender name) is in use; leave unset to use the cluster's default recommender
applicationSet.vpa.updateMode	string	"Initial"	One of the VPA operation modes

Notifications

Key	Type	Default	Description
notifications.affinity	object	{} (defaults to global.affinity preset)	Assign custom affinity rules
notifications.argocdUrl	string	"" (defaults to https://global.domain)	Argo CD dashboard url; used in place of {{.context.argocdUrl}} in templates
notifications.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account into the pod.
notifications.clusterRoleRules.rules	list	[]	List of custom rules for the notifications controller's ClusterRole resource
notifications.cm.create	bool	true	Whether helm chart creates notifications controller config map
notifications.containerPorts.metrics	int	9001	Metrics container port
notifications.containerSecurityContext	object	See values.yaml	Notification controller container-level security Context
notifications.context	object	{}	Define user-defined context
notifications.deploymentAnnotations	object	{}	Annotations to be applied to the notifications controller Deployment
notifications.deploymentLabels	object	{}	Labels for the notifications controller Deployment
notifications.deploymentStrategy	object	{"type":"Recreate"}	Deployment strategy to be added to the notifications controller Deployment
notifications.dnsConfig	object	{}	DNS configuration
notifications.dnsPolicy	string	"ClusterFirst"	Alternative DNS policy for notifications controller Pods
notifications.enabled	bool	true	Enable notifications controller
notifications.extraArgs	list	[]	Extra arguments to provide to the notifications controller
notifications.extraContainers	list	[]	Additional containers to be added to the notifications controller pod
notifications.extraEnv	list	[]	Additional container environment variables
notifications.extraEnvFrom	list	[] (See values.yaml)	envFrom to pass to the notifications controller
notifications.extraVolumeMounts	list	[]	List of extra mounts to add (normally used with extraVolumes)
notifications.extraVolumes	list	[]	List of extra volumes to add
notifications.image.imagePullPolicy	string	"" (defaults to global.image.imagePullPolicy)	Image pull policy for the notifications controller
notifications.image.repository	string	"" (defaults to global.image.repository)	Repository to use for the notifications controller
notifications.image.tag	string	"" (defaults to global.image.tag)	Tag to use for the notifications controller
notifications.imagePullSecrets	list	[] (defaults to global.imagePullSecrets)	Secrets with credentials to pull images from a private registry
notifications.initContainers	list	[]	Init containers to add to the notifications controller pod
notifications.livenessProbe.enabled	bool	false	Enable Kubernetes liveness probe for notifications controller Pods
notifications.livenessProbe.failureThreshold	int	3	Minimum consecutive failures for the probe to be considered failed after having succeeded
notifications.livenessProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
notifications.livenessProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
notifications.livenessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
notifications.livenessProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
notifications.metrics.enabled	bool	false	Enables prometheus metrics server
notifications.metrics.port	int	9001	Metrics port
notifications.metrics.service.annotations	object	{}	Metrics service annotations
notifications.metrics.service.clusterIP	string	""	Metrics service clusterIP. None makes a "headless service" (no virtual IP)
notifications.metrics.service.labels	object	{}	Metrics service labels
notifications.metrics.service.portName	string	"http-metrics"	Metrics service port name
notifications.metrics.service.type	string	"ClusterIP"	Metrics service type
notifications.metrics.serviceMonitor.additionalLabels	object	{}	Prometheus ServiceMonitor labels
notifications.metrics.serviceMonitor.annotations	object	{}	Prometheus ServiceMonitor annotations
notifications.metrics.serviceMonitor.enabled	bool	false	Enable a prometheus ServiceMonitor
notifications.metrics.serviceMonitor.honorLabels	bool	false	When true, honorLabels preserves the metric’s labels when they collide with the target’s labels.
notifications.metrics.serviceMonitor.metricRelabelings	list	[]	Prometheus MetricRelabelConfigs to apply to samples before ingestion
notifications.metrics.serviceMonitor.relabelings	list	[]	Prometheus RelabelConfigs to apply to samples before scraping
notifications.metrics.serviceMonitor.scheme	string	""	Prometheus ServiceMonitor scheme
notifications.metrics.serviceMonitor.selector	object	{}	Prometheus ServiceMonitor selector
notifications.metrics.serviceMonitor.tlsConfig	object	{}	Prometheus ServiceMonitor tlsConfig
notifications.name	string	"notifications-controller"	Notifications controller name string
notifications.networkPolicy.create	bool	false (defaults to global.networkPolicy.create)	Default network policy rules used by notifications controller
notifications.nodeSelector	object	{} (defaults to global.nodeSelector)	Node selector
notifications.notifiers	object	See values.yaml	Configures notification services such as slack, email or custom webhook
notifications.pdb.annotations	object	{}	Annotations to be added to notifications controller pdb
notifications.pdb.enabled	bool	false	Deploy a PodDisruptionBudget for the notifications controller
notifications.pdb.labels	object	{}	Labels to be added to notifications controller pdb
notifications.pdb.maxUnavailable	string	""	Number of pods that are unavailable after eviction as number or percentage (eg.: 50%).
notifications.pdb.minAvailable	string	"" (defaults to 0 if not specified)	Number of pods that are available after eviction as number or percentage (eg.: 50%)
notifications.podAnnotations	object	{}	Annotations to be applied to the notifications controller Pods
notifications.podLabels	object	{}	Labels to be applied to the notifications controller Pods
notifications.priorityClassName	string	"" (defaults to global.priorityClassName)	Priority class for the notifications controller pods
notifications.readinessProbe.enabled	bool	false	Enable Kubernetes liveness probe for notifications controller Pods
notifications.readinessProbe.failureThreshold	int	3	Minimum consecutive failures for the probe to be considered failed after having succeeded
notifications.readinessProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
notifications.readinessProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
notifications.readinessProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
notifications.readinessProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
notifications.resources	object	{}	Resource limits and requests for the notifications controller
notifications.runtimeClassName	string	"" (defaults to global.runtimeClassName)	Runtime class name for the notifications controller
notifications.secret.annotations	object	{}	key:value pairs of annotations to be added to the secret
notifications.secret.create	bool	true	Whether helm chart creates notifications controller secret
notifications.secret.items	object	{}	Generic key:value pairs to be inserted into the secret
notifications.secret.labels	object	{}	key:value pairs of labels to be added to the secret
notifications.secret.name	string	"argocd-notifications-secret"	notifications controller Secret name
notifications.serviceAccount.annotations	object	{}	Annotations applied to created service account
notifications.serviceAccount.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account
notifications.serviceAccount.create	bool	true	Create notifications controller service account
notifications.serviceAccount.labels	object	{}	Labels applied to created service account
notifications.serviceAccount.name	string	"argocd-notifications-controller"	Notification controller service account name
notifications.startupProbe.enabled	bool	false	Enable Kubernetes startup probe for notifications controller Pods
notifications.startupProbe.failureThreshold	int	20	Minimum consecutive failures for the probe to be considered failed after having succeeded
notifications.startupProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
notifications.startupProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
notifications.startupProbe.successThreshold	int	1	Minimum consecutive successes for the probe to be considered successful after having failed
notifications.startupProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
notifications.subscriptions	list	[]	Contains centrally managed global application subscriptions
notifications.templates	object	{}	The notification template is used to generate the notification content
notifications.terminationGracePeriodSeconds	int	30	terminationGracePeriodSeconds for container lifecycle hook
notifications.tolerations	list	[] (defaults to global.tolerations)	Tolerations for use with node taints
notifications.topologySpreadConstraints	list	[] (defaults to global.topologySpreadConstraints)	Assign custom TopologySpreadConstraints rules to the application controller
notifications.triggers	object	{}	The trigger defines the condition when the notification should be sent
notifications.vpa.annotations	object	{}	Annotations to be added to notifications controller vpa
notifications.vpa.containerPolicy	object	{}	Controls how VPA computes the recommended resources for notifications controller container
notifications.vpa.enabled	bool	false	Deploy a VerticalPodAutoscaler for the notifications controller
notifications.vpa.labels	object	{}	Labels to be added to notifications controller vpa
notifications.vpa.recommenders	list	[]	The recommenders that will provide recommendations for vertical scaling. Only relevant if a named VPA recommender (e.g. one started with a custom recommender name) is in use; leave unset to use the cluster's default recommender
notifications.vpa.updateMode	string	"Initial"	One of the VPA operation modes

Commit server (Manifest Hydrator)

The Argo CD Commit Server provides push access to git repositories for hydrated manifests.

To read more about this component, please read Argo CD Manifest Hydrator and Manifest Hydrator.

Key	Type	Default	Description
commitServer.affinity	object	{} (defaults to global.affinity preset)	Assign custom affinity rules
commitServer.automountServiceAccountToken	bool	false	Automount API credentials for the Service Account into the pod.
commitServer.containerSecurityContext	object	See values.yaml	commit server container-level security context
commitServer.deploymentAnnotations	object	{}	Annotations to be added to commit server Deployment
commitServer.deploymentLabels	object	{}	Labels for the commit server Deployment
commitServer.deploymentStrategy	object	{}	Deployment strategy to be added to the commit server Deployment
commitServer.dnsConfig	object	{}	DNS configuration
commitServer.dnsPolicy	string	"ClusterFirst"	Alternative DNS policy for commit server pods
commitServer.enabled	bool	false	Enable commit server
commitServer.extraArgs	list	[]	commit server command line flags
commitServer.extraEnv	list	[]	Environment variables to pass to the commit server
commitServer.extraEnvFrom	list	[] (See values.yaml)	envFrom to pass to the commit server
commitServer.extraVolumeMounts	list	[]	List of extra mounts to add (normally used with extraVolumes)
commitServer.extraVolumes	list	[]	List of extra volumes to add
commitServer.image.imagePullPolicy	string	"" (defaults to global.image.imagePullPolicy)	Image pull policy for the commit server
commitServer.image.repository	string	"" (defaults to global.image.repository)	Repository to use for the commit server
commitServer.image.tag	string	"" (defaults to global.image.tag)	Tag to use for the commit server
commitServer.livenessProbe.enabled	bool	true	Enable Kubernetes liveness probe for commit server
commitServer.livenessProbe.failureThreshold	int	3	Minimum consecutive failures for the probe to be considered failed after having succeeded
commitServer.livenessProbe.httpPath	string	"/healthz?full=true"	Http path to use for the liveness probe
commitServer.livenessProbe.initialDelaySeconds	int	30	Number of seconds after the container has started before probe is initiated
commitServer.livenessProbe.periodSeconds	int	30	How often (in seconds) to perform the probe
commitServer.livenessProbe.timeoutSeconds	int	5	Number of seconds after which the probe times out
commitServer.metrics.enabled	bool	false	Enables prometheus metrics server
commitServer.metrics.service.annotations	object	{}	Metrics service annotations
commitServer.metrics.service.clusterIP	string	""	Metrics service clusterIP. None makes a "headless service" (no virtual IP)
commitServer.metrics.service.labels	object	{}	Metrics service labels
commitServer.metrics.service.portName	string	"metrics"	Metrics service port name
commitServer.metrics.service.servicePort	int	8087	Metrics service port
commitServer.metrics.service.type	string	"ClusterIP"	Metrics service type
commitServer.name	string	"commit-server"	Commit server name
commitServer.networkPolicy.create	bool	false (defaults to global.networkPolicy.create)	Default network policy rules used by commit server
commitServer.nodeSelector	object	{} (defaults to global.nodeSelector)	Node selector
commitServer.podAnnotations	object	{}	Annotations for the commit server pods
commitServer.podLabels	object	{}	Labels for the commit server pods
commitServer.priorityClassName	string	"" (defaults to global.priorityClassName)	Priority class for the commit server pods
commitServer.readinessProbe.enabled	bool	true	Enable Kubernetes liveness probe for commit server
commitServer.readinessProbe.failureThreshold	int	3	Minimum consecutive failures for the probe to be considered failed after having succeeded
commitServer.readinessProbe.httpPath	string	"/healthz"	Http path to use for the readiness probe
commitServer.readinessProbe.initialDelaySeconds	int	5	Number of seconds after the container has started before probe is initiated
commitServer.readinessProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
commitServer.readinessProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
commitServer.resources	object	{}	Resource limits and requests for the commit server pods.
commitServer.runtimeClassName	string	"" (defaults to global.runtimeClassName)	Runtime class name for the commit server
commitServer.service.annotations	object	{}	commit server service annotations
commitServer.service.labels	object	{}	commit server service labels
commitServer.service.port	int	8086	commit server service port
commitServer.service.portName	string	"server"	commit server service port name
commitServer.serviceAccount.annotations	object	{}	Annotations applied to created service account
commitServer.serviceAccount.automountServiceAccountToken	bool	true	Automount API credentials for the Service Account
commitServer.serviceAccount.create	bool	true	Create commit server service account
commitServer.serviceAccount.labels	object	{}	Labels applied to created service account
commitServer.serviceAccount.name	string	"argocd-commit-server"	commit server service account name
commitServer.startupProbe.enabled	bool	false	Enable Kubernetes startup probe for commit server
commitServer.startupProbe.failureThreshold	int	20	Minimum consecutive failures for the probe to be considered failed after having succeeded
commitServer.startupProbe.httpPath	string	"/healthz"	Http path to use for the startup probe
commitServer.startupProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before probe is initiated
commitServer.startupProbe.periodSeconds	int	10	How often (in seconds) to perform the probe
commitServer.startupProbe.timeoutSeconds	int	1	Number of seconds after which the probe times out
commitServer.terminationGracePeriodSeconds	int	30	terminationGracePeriodSeconds for container lifecycle hook
commitServer.tolerations	list	[] (defaults to global.tolerations)	Tolerations for use with node taints
commitServer.topologySpreadConstraints	list	[] (defaults to global.topologySpreadConstraints)	Assign custom TopologySpreadConstraints rules to the commit server
commitServer.vpa.annotations	object	{}	Annotations to be added to commit server vpa
commitServer.vpa.containerPolicy	object	{}	Controls how VPA computes the recommended resources for commit server container
commitServer.vpa.enabled	bool	false	Deploy a VerticalPodAutoscaler for the commit server
commitServer.vpa.labels	object	{}	Labels to be added to commit server vpa
commitServer.vpa.recommenders	list	[]	The recommenders that will provide recommendations for vertical scaling. Only relevant if a named VPA recommender (e.g. one started with a custom recommender name) is in use; leave unset to use the cluster's default recommender
commitServer.vpa.updateMode	string	"Initial"	One of the VPA operation modes

---

Autogenerated from chart metadata using helm-docs