github.com/argoproj/argo-cd/v2@v2.10.9/docs/operator-manual/server-commands/argocd-server.md (about)

     1  # `argocd-server` Command Reference
     2  
     3  ## argocd-server
     4  
     5  Run the ArgoCD API server
     6  
     7  ### Synopsis
     8  
     9  The API server is a gRPC/REST server which exposes the API consumed by the Web UI, CLI, and CI/CD systems.  This command runs API server in the foreground.  It can be configured by following options.
    10  
    11  ```
    12  argocd-server [flags]
    13  ```
    14  
    15  ### Examples
    16  
    17  ```
    18    # Start the Argo CD API server with default settings
    19    $ argocd-server
    20    
    21    # Start the Argo CD API server on a custom port and enable tracing
    22    $ argocd-server --port 8888 --otlp-address localhost:4317
    23  ```
    24  
    25  ### Options
    26  
    27  ```
    28        --address string                                Listen on given address (default "0.0.0.0")
    29        --api-content-types string                      Semicolon separated list of allowed content types for non GET api requests. Any content type is allowed if empty. (default "application/json")
    30        --app-state-cache-expiration duration           Cache expiration for app state (default 1h0m0s)
    31        --application-namespaces strings                List of additional namespaces where application resources can be managed in
    32        --as string                                     Username to impersonate for the operation
    33        --as-group stringArray                          Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
    34        --as-uid string                                 UID to impersonate for the operation
    35        --basehref string                               Value for base href in index.html. Used if Argo CD is running behind reverse proxy under subpath different from / (default "/")
    36        --certificate-authority string                  Path to a cert file for the certificate authority
    37        --client-certificate string                     Path to a client certificate file for TLS
    38        --client-key string                             Path to a client key file for TLS
    39        --cluster string                                The name of the kubeconfig cluster to use
    40        --connection-status-cache-expiration duration   Cache expiration for cluster/repo connection status (default 1h0m0s)
    41        --content-security-policy value                 Set Content-Security-Policy header in HTTP responses to value. To disable, set to "". (default "frame-ancestors 'self';")
    42        --context string                                The name of the kubeconfig context to use
    43        --default-cache-expiration duration             Cache expiration default (default 24h0m0s)
    44        --dex-server string                             Dex server address (default "argocd-dex-server:5556")
    45        --dex-server-plaintext                          Use a plaintext client (non-TLS) to connect to dex server
    46        --dex-server-strict-tls                         Perform strict validation of TLS certificates when connecting to dex server
    47        --disable-auth                                  Disable client authentication
    48        --disable-compression                           If true, opt-out of response compression for all requests to the server
    49        --enable-gzip                                   Enable GZIP compression (default true)
    50        --enable-proxy-extension                        Enable Proxy Extension feature
    51        --gloglevel int                                 Set the glog logging level
    52    -h, --help                                          help for argocd-server
    53        --insecure                                      Run server without TLS
    54        --insecure-skip-tls-verify                      If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
    55        --kubeconfig string                             Path to a kube config. Only required if out-of-cluster
    56        --logformat string                              Set the logging format. One of: text|json (default "text")
    57        --login-attempts-expiration duration            Cache expiration for failed login attempts (default 24h0m0s)
    58        --loglevel string                               Set the logging level. One of: debug|info|warn|error (default "info")
    59        --metrics-address string                        Listen for metrics on given address (default "0.0.0.0")
    60        --metrics-port int                              Start metrics on given port (default 8083)
    61    -n, --namespace string                              If present, the namespace scope for this CLI request
    62        --oidc-cache-expiration duration                Cache expiration for OIDC state (default 3m0s)
    63        --otlp-address string                           OpenTelemetry collector address to send traces to
    64        --otlp-attrs strings                            List of OpenTelemetry collector extra attrs when send traces, each attribute is separated by a colon(e.g. key:value)
    65        --otlp-headers stringToString                   List of OpenTelemetry collector extra headers sent with traces, headers are comma-separated key-value pairs(e.g. key1=value1,key2=value2) (default [])
    66        --otlp-insecure                                 OpenTelemetry collector insecure mode (default true)
    67        --password string                               Password for basic authentication to the API server
    68        --port int                                      Listen on given port (default 8080)
    69        --proxy-url string                              If provided, this URL will be used to connect via proxy
    70        --redis string                                  Redis server hostname and port (e.g. argocd-redis:6379). 
    71        --redis-ca-certificate string                   Path to Redis server CA certificate (e.g. /etc/certs/redis/ca.crt). If not specified, system trusted CAs will be used for server certificate validation.
    72        --redis-client-certificate string               Path to Redis client certificate (e.g. /etc/certs/redis/client.crt).
    73        --redis-client-key string                       Path to Redis client key (e.g. /etc/certs/redis/client.crt).
    74        --redis-compress string                         Enable compression for data sent to Redis with the required compression algorithm. (possible values: gzip, none) (default "gzip")
    75        --redis-insecure-skip-tls-verify                Skip Redis server certificate validation.
    76        --redis-use-tls                                 Use TLS when connecting to Redis. 
    77        --redisdb int                                   Redis database.
    78        --repo-server string                            Repo server address (default "argocd-repo-server:8081")
    79        --repo-server-plaintext                         Use a plaintext client (non-TLS) to connect to repository server
    80        --repo-server-strict-tls                        Perform strict validation of TLS certificates when connecting to repo server
    81        --repo-server-timeout-seconds int               Repo server RPC call timeout seconds. (default 60)
    82        --request-timeout string                        The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
    83        --rootpath string                               Used if Argo CD is running behind reverse proxy under subpath different from /
    84        --sentinel stringArray                          Redis sentinel hostname and port (e.g. argocd-redis-ha-announce-0:6379). 
    85        --sentinelmaster string                         Redis sentinel master group name. (default "master")
    86        --server string                                 The address and port of the Kubernetes API server
    87        --staticassets string                           Directory path that contains additional static assets (default "/shared/app")
    88        --tls-server-name string                        If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.
    89        --tlsciphers string                             The list of acceptable ciphers to be used when establishing TLS connections. Use 'list' to list available ciphers. (default "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384:TLS_RSA_WITH_AES_256_GCM_SHA384")
    90        --tlsmaxversion string                          The maximum SSL/TLS version that is acceptable (one of: 1.0|1.1|1.2|1.3) (default "1.3")
    91        --tlsminversion string                          The minimum SSL/TLS version that is acceptable (one of: 1.0|1.1|1.2|1.3) (default "1.2")
    92        --token string                                  Bearer token for authentication to the API server
    93        --user string                                   The name of the kubeconfig user to use
    94        --username string                               Username for basic authentication to the API server
    95        --x-frame-options value                         Set X-Frame-Options header in HTTP responses to value. To disable, set to "". (default "sameorigin")
    96  ```
    97  
    98  ### SEE ALSO
    99  
   100  * [argocd-server version](argocd-server_version.md)	 - Print version information
   101