github.com/argoproj/argo-cd/v3@v3.2.1/manifests/base/server/argocd-server-deployment.yaml (about)

     1  apiVersion: apps/v1
     2  kind: Deployment
     3  metadata:
     4    labels:
     5      app.kubernetes.io/name: argocd-server
     6      app.kubernetes.io/part-of: argocd
     7      app.kubernetes.io/component: server
     8    name: argocd-server
     9  spec:
    10    selector:
    11      matchLabels:
    12        app.kubernetes.io/name: argocd-server
    13    template:
    14      metadata:
    15        labels:
    16          app.kubernetes.io/name: argocd-server
    17      spec:
    18        serviceAccountName: argocd-server
    19        containers:
    20          - name: argocd-server
    21            image: quay.io/argoproj/argocd:latest
    22            imagePullPolicy: Always
    23            args:
    24              - /usr/local/bin/argocd-server
    25            env:
    26              - name: REDIS_PASSWORD
    27                valueFrom:
    28                  secretKeyRef:
    29                    key: auth
    30                    name: argocd-redis
    31              - name: ARGOCD_SERVER_INSECURE
    32                valueFrom:
    33                  configMapKeyRef:
    34                    name: argocd-cmd-params-cm
    35                    key: server.insecure
    36                    optional: true
    37              - name: ARGOCD_SERVER_BASEHREF
    38                valueFrom:
    39                  configMapKeyRef:
    40                    name: argocd-cmd-params-cm
    41                    key: server.basehref
    42                    optional: true
    43              - name: ARGOCD_SERVER_ROOTPATH
    44                valueFrom:
    45                  configMapKeyRef:
    46                    name: argocd-cmd-params-cm
    47                    key: server.rootpath
    48                    optional: true
    49              - name: ARGOCD_SERVER_LOGFORMAT
    50                valueFrom:
    51                  configMapKeyRef:
    52                    name: argocd-cmd-params-cm
    53                    key: server.log.format
    54                    optional: true
    55              - name: ARGOCD_SERVER_LOG_LEVEL
    56                valueFrom:
    57                  configMapKeyRef:
    58                    name: argocd-cmd-params-cm
    59                    key: server.log.level
    60                    optional: true
    61              - name: ARGOCD_SERVER_REPO_SERVER
    62                valueFrom:
    63                  configMapKeyRef:
    64                    name: argocd-cmd-params-cm
    65                    key: repo.server
    66                    optional: true
    67              - name: ARGOCD_SERVER_DEX_SERVER
    68                valueFrom:
    69                  configMapKeyRef:
    70                    name: argocd-cmd-params-cm
    71                    key: server.dex.server
    72                    optional: true
    73              - name: ARGOCD_SERVER_DISABLE_AUTH
    74                valueFrom:
    75                  configMapKeyRef:
    76                    name: argocd-cmd-params-cm
    77                    key: server.disable.auth
    78                    optional: true
    79              - name: ARGOCD_SERVER_ENABLE_GZIP
    80                valueFrom:
    81                  configMapKeyRef:
    82                    name: argocd-cmd-params-cm
    83                    key: server.enable.gzip
    84                    optional: true
    85              - name: ARGOCD_SERVER_REPO_SERVER_TIMEOUT_SECONDS
    86                valueFrom:
    87                  configMapKeyRef:
    88                    name: argocd-cmd-params-cm
    89                    key: server.repo.server.timeout.seconds
    90                    optional: true
    91              - name: ARGOCD_SERVER_X_FRAME_OPTIONS
    92                valueFrom:
    93                  configMapKeyRef:
    94                    name: argocd-cmd-params-cm
    95                    key: server.x.frame.options
    96                    optional: true
    97              - name: ARGOCD_SERVER_CONTENT_SECURITY_POLICY
    98                valueFrom:
    99                  configMapKeyRef:
   100                    name: argocd-cmd-params-cm
   101                    key: server.content.security.policy
   102                    optional: true
   103              - name: ARGOCD_SERVER_REPO_SERVER_PLAINTEXT
   104                valueFrom:
   105                  configMapKeyRef:
   106                    name: argocd-cmd-params-cm
   107                    key: server.repo.server.plaintext
   108                    optional: true
   109              - name: ARGOCD_SERVER_REPO_SERVER_STRICT_TLS
   110                valueFrom:
   111                  configMapKeyRef:
   112                    name: argocd-cmd-params-cm
   113                    key: server.repo.server.strict.tls
   114                    optional: true
   115              - name: ARGOCD_SERVER_DEX_SERVER_PLAINTEXT
   116                valueFrom:
   117                  configMapKeyRef:
   118                    name: argocd-cmd-params-cm
   119                    key: server.dex.server.plaintext
   120                    optional: true
   121              - name: ARGOCD_SERVER_DEX_SERVER_STRICT_TLS
   122                valueFrom:
   123                  configMapKeyRef:
   124                    name: argocd-cmd-params-cm
   125                    key: server.dex.server.strict.tls
   126                    optional: true
   127              - name: ARGOCD_TLS_MIN_VERSION
   128                valueFrom:
   129                  configMapKeyRef:
   130                    name: argocd-cmd-params-cm
   131                    key: server.tls.minversion
   132                    optional: true
   133              - name: ARGOCD_TLS_MAX_VERSION
   134                valueFrom:
   135                  configMapKeyRef:
   136                    name: argocd-cmd-params-cm
   137                    key: server.tls.maxversion
   138                    optional: true
   139              - name: ARGOCD_TLS_CIPHERS
   140                valueFrom:
   141                  configMapKeyRef:
   142                    name: argocd-cmd-params-cm
   143                    key: server.tls.ciphers
   144                    optional: true
   145              - name: ARGOCD_SERVER_CONNECTION_STATUS_CACHE_EXPIRATION
   146                valueFrom:
   147                  configMapKeyRef:
   148                    name: argocd-cmd-params-cm
   149                    key: server.connection.status.cache.expiration
   150                    optional: true
   151              - name: ARGOCD_SERVER_OIDC_CACHE_EXPIRATION
   152                valueFrom:
   153                  configMapKeyRef:
   154                    name: argocd-cmd-params-cm
   155                    key: server.oidc.cache.expiration
   156                    optional: true
   157              - name: ARGOCD_SERVER_STATIC_ASSETS
   158                valueFrom:
   159                  configMapKeyRef:
   160                    name: argocd-cmd-params-cm
   161                    key: server.staticassets
   162                    optional: true
   163              - name: ARGOCD_APP_STATE_CACHE_EXPIRATION
   164                valueFrom:
   165                  configMapKeyRef:
   166                    name: argocd-cmd-params-cm
   167                    key: server.app.state.cache.expiration
   168                    optional: true
   169              - name: REDIS_SERVER
   170                valueFrom:
   171                  configMapKeyRef:
   172                    name: argocd-cmd-params-cm
   173                    key: redis.server
   174                    optional: true
   175              - name: REDIS_COMPRESSION
   176                valueFrom:
   177                  configMapKeyRef:
   178                    name: argocd-cmd-params-cm
   179                    key: redis.compression
   180                    optional: true
   181              - name: REDISDB
   182                valueFrom:
   183                  configMapKeyRef:
   184                    name: argocd-cmd-params-cm
   185                    key: redis.db
   186                    optional: true
   187              - name: ARGOCD_DEFAULT_CACHE_EXPIRATION
   188                valueFrom:
   189                  configMapKeyRef:
   190                    name: argocd-cmd-params-cm
   191                    key: server.default.cache.expiration
   192                    optional: true
   193              - name: ARGOCD_MAX_COOKIE_NUMBER
   194                valueFrom:
   195                  configMapKeyRef:
   196                    name: argocd-cmd-params-cm
   197                    key: server.http.cookie.maxnumber
   198                    optional: true
   199              - name: ARGOCD_SERVER_LISTEN_ADDRESS
   200                valueFrom:
   201                  configMapKeyRef:
   202                    name: argocd-cmd-params-cm
   203                    key: server.listen.address
   204                    optional: true
   205              - name: ARGOCD_SERVER_METRICS_LISTEN_ADDRESS
   206                valueFrom:
   207                  configMapKeyRef:
   208                    name: argocd-cmd-params-cm
   209                    key: server.metrics.listen.address
   210                    optional: true
   211              - name: ARGOCD_SERVER_OTLP_ADDRESS
   212                valueFrom:
   213                  configMapKeyRef:
   214                    name: argocd-cmd-params-cm
   215                    key: otlp.address
   216                    optional: true
   217              - name: ARGOCD_SERVER_OTLP_INSECURE
   218                valueFrom:
   219                  configMapKeyRef:
   220                    name: argocd-cmd-params-cm
   221                    key: otlp.insecure
   222                    optional: true
   223              - name: ARGOCD_SERVER_OTLP_HEADERS
   224                valueFrom:
   225                  configMapKeyRef:
   226                    name: argocd-cmd-params-cm
   227                    key: otlp.headers
   228                    optional: true
   229              - name: ARGOCD_SERVER_OTLP_ATTRS
   230                valueFrom:
   231                  configMapKeyRef:
   232                    name: argocd-cmd-params-cm
   233                    key: otlp.attrs
   234                    optional: true
   235              - name: ARGOCD_APPLICATION_NAMESPACES
   236                valueFrom:
   237                  configMapKeyRef:
   238                    name: argocd-cmd-params-cm
   239                    key: application.namespaces
   240                    optional: true
   241              - name: ARGOCD_SERVER_ENABLE_PROXY_EXTENSION
   242                valueFrom:
   243                  configMapKeyRef:
   244                    name: argocd-cmd-params-cm
   245                    key: server.enable.proxy.extension
   246                    optional: true
   247              - name: ARGOCD_K8SCLIENT_RETRY_MAX
   248                valueFrom:
   249                  configMapKeyRef:
   250                    name: argocd-cmd-params-cm
   251                    key: server.k8sclient.retry.max
   252                    optional: true
   253              - name: ARGOCD_K8SCLIENT_RETRY_BASE_BACKOFF
   254                valueFrom:
   255                  configMapKeyRef:
   256                    name: argocd-cmd-params-cm
   257                    key: server.k8sclient.retry.base.backoff
   258                    optional: true
   259              - name: ARGOCD_API_CONTENT_TYPES
   260                valueFrom:
   261                  configMapKeyRef:
   262                    name: argocd-cmd-params-cm
   263                    key: server.api.content.types
   264                    optional: true
   265              - name: ARGOCD_SERVER_WEBHOOK_PARALLELISM_LIMIT
   266                valueFrom:
   267                  configMapKeyRef:
   268                    name: argocd-cmd-params-cm
   269                    key: server.webhook.parallelism.limit
   270                    optional: true
   271              - name: ARGOCD_APPLICATIONSET_CONTROLLER_ENABLE_NEW_GIT_FILE_GLOBBING
   272                valueFrom:
   273                  configMapKeyRef:
   274                    key: applicationsetcontroller.enable.new.git.file.globbing
   275                    name: argocd-cmd-params-cm
   276                    optional: true
   277              - name: ARGOCD_APPLICATIONSET_CONTROLLER_SCM_ROOT_CA_PATH
   278                valueFrom:
   279                  configMapKeyRef:
   280                    key: applicationsetcontroller.scm.root.ca.path
   281                    name: argocd-cmd-params-cm
   282                    optional: true
   283              - name: ARGOCD_APPLICATIONSET_CONTROLLER_ALLOWED_SCM_PROVIDERS
   284                valueFrom:
   285                  configMapKeyRef:
   286                    name: argocd-cmd-params-cm
   287                    key: applicationsetcontroller.allowed.scm.providers
   288                    optional: true
   289              - name: ARGOCD_APPLICATIONSET_CONTROLLER_ENABLE_SCM_PROVIDERS
   290                valueFrom:
   291                  configMapKeyRef:
   292                    name: argocd-cmd-params-cm
   293                    key: applicationsetcontroller.enable.scm.providers
   294                    optional: true
   295              - name: ARGOCD_APPLICATIONSET_CONTROLLER_ENABLE_GITHUB_API_METRICS
   296                valueFrom:
   297                  configMapKeyRef:
   298                    name: argocd-cmd-params-cm
   299                    key: applicationsetcontroller.enable.github.api.metrics
   300                    optional: true
   301              - name: ARGOCD_HYDRATOR_ENABLED
   302                valueFrom:
   303                  configMapKeyRef:
   304                    name: argocd-cmd-params-cm
   305                    key: hydrator.enabled
   306                    optional: true
   307              - name: ARGOCD_SYNC_WITH_REPLACE_ALLOWED
   308                valueFrom:
   309                  configMapKeyRef:
   310                    name: argocd-cmd-params-cm
   311                    key: server.sync.replace.allowed
   312                    optional: true
   313            volumeMounts:
   314              - name: ssh-known-hosts
   315                mountPath: /app/config/ssh
   316              - name: tls-certs
   317                mountPath: /app/config/tls
   318              - name: argocd-repo-server-tls
   319                mountPath: /app/config/server/tls
   320              - name: argocd-dex-server-tls
   321                mountPath: /app/config/dex/tls
   322              - mountPath: /home/argocd
   323                name: plugins-home
   324              - mountPath: /tmp
   325                name: tmp
   326              - name: argocd-cmd-params-cm
   327                mountPath: /home/argocd/params
   328            ports:
   329              - containerPort: 8080
   330              - containerPort: 8083
   331            livenessProbe:
   332              httpGet:
   333                path: /healthz?full=true
   334                port: 8080
   335              initialDelaySeconds: 3
   336              periodSeconds: 30
   337              timeoutSeconds: 5
   338            readinessProbe:
   339              httpGet:
   340                path: /healthz
   341                port: 8080
   342              initialDelaySeconds: 3
   343              periodSeconds: 30
   344            securityContext:
   345              allowPrivilegeEscalation: false
   346              readOnlyRootFilesystem: true
   347              runAsNonRoot: true
   348              capabilities:
   349                drop:
   350                  - ALL
   351              seccompProfile:
   352                type: RuntimeDefault
   353        volumes:
   354          - emptyDir: {}
   355            name: plugins-home
   356          - emptyDir: {}
   357            name: tmp
   358          - name: ssh-known-hosts
   359            configMap:
   360              name: argocd-ssh-known-hosts-cm
   361          - name: tls-certs
   362            configMap:
   363              name: argocd-tls-certs-cm
   364          - name: argocd-repo-server-tls
   365            secret:
   366              secretName: argocd-repo-server-tls
   367              optional: true
   368              items:
   369                - key: tls.crt
   370                  path: tls.crt
   371                - key: tls.key
   372                  path: tls.key
   373                - key: ca.crt
   374                  path: ca.crt
   375          - name: argocd-dex-server-tls
   376            secret:
   377              secretName: argocd-dex-server-tls
   378              optional: true
   379              items:
   380                - key: tls.crt
   381                  path: tls.crt
   382                - key: ca.crt
   383                  path: ca.crt
   384          - name: argocd-cmd-params-cm
   385            configMap:
   386              optional: true
   387              name: argocd-cmd-params-cm
   388              items:
   389              - key: server.profile.enabled
   390                path: profiler.enabled
   391        affinity:
   392          podAntiAffinity:
   393            preferredDuringSchedulingIgnoredDuringExecution:
   394              - weight: 100
   395                podAffinityTerm:
   396                  labelSelector:
   397                    matchLabels:
   398                      app.kubernetes.io/name: argocd-server
   399                  topologyKey: kubernetes.io/hostname
   400              - weight: 5
   401                podAffinityTerm:
   402                  labelSelector:
   403                    matchLabels:
   404                      app.kubernetes.io/part-of: argocd
   405                  topologyKey: kubernetes.io/hostname
   406        nodeSelector:
   407          kubernetes.io/os: linux