Argocd server

argocd-server

Run the ArgoCD API server

Synopsis

The API server is a gRPC/REST server which exposes the API consumed by the Web UI, CLI, and CI/CD systems. This command runs API server in the foreground. It can be configured by following options.

  1. argocd-server [flags]

Options

  1. --app-state-cache-expiration duration Cache expiration for app state (default 1h0m0s)
  2. --application-namespaces strings List of additional namespaces where application resources can be managed in
  3. --as string Username to impersonate for the operation
  4. --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  5. --as-uid string UID to impersonate for the operation
  6. --basehref string Value for base href in index.html. Used if Argo CD is running behind reverse proxy under subpath different from / (default "/")
  7. --certificate-authority string Path to a cert file for the certificate authority
  8. --client-certificate string Path to a client certificate file for TLS
  9. --client-key string Path to a client key file for TLS
  10. --cluster string The name of the kubeconfig cluster to use
  11. --connection-status-cache-expiration duration Cache expiration for cluster/repo connection status (default 1h0m0s)
  12. --content-security-policy value Set Content-Security-Policy header in HTTP responses to value. To disable, set to "". (default "frame-ancestors 'self';")
  13. --context string The name of the kubeconfig context to use
  14. --default-cache-expiration duration Cache expiration default (default 24h0m0s)
  15. --dex-server string Dex server address (default "argocd-dex-server:5556")
  16. --dex-server-plaintext Use a plaintext client (non-TLS) to connect to dex server
  17. --dex-server-strict-tls Perform strict validation of TLS certificates when connecting to dex server
  18. --disable-auth Disable client authentication
  19. --enable-gzip Enable GZIP compression
  20. --enable-proxy-extension Enable Proxy Extension feature
  21. --gloglevel int Set the glog logging level
  22. -h, --help help for argocd-server
  23. --insecure Run server without TLS
  24. --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  25. --kubeconfig string Path to a kube config. Only required if out-of-cluster
  26. --logformat string Set the logging format. One of: text|json (default "text")
  27. --login-attempts-expiration duration Cache expiration for failed login attempts (default 24h0m0s)
  28. --loglevel string Set the logging level. One of: debug|info|warn|error (default "info")
  29. --metrics-port int Start metrics on given port (default 8083)
  30. -n, --namespace string If present, the namespace scope for this CLI request
  31. --oidc-cache-expiration duration Cache expiration for OIDC state (default 3m0s)
  32. --otlp-address string OpenTelemetry collector address to send traces to
  33. --password string Password for basic authentication to the API server
  34. --port int Listen on given port (default 8080)
  35. --proxy-url string If provided, this URL will be used to connect via proxy
  36. --redis string Redis server hostname and port (e.g. argocd-redis:6379).
  37. --redis-ca-certificate string Path to Redis server CA certificate (e.g. /etc/certs/redis/ca.crt). If not specified, system trusted CAs will be used for server certificate validation.
  38. --redis-client-certificate string Path to Redis client certificate (e.g. /etc/certs/redis/client.crt).
  39. --redis-client-key string Path to Redis client key (e.g. /etc/certs/redis/client.crt).
  40. --redis-compress string Enable compression for data sent to Redis with the required compression algorithm. (possible values: none, gzip) (default "none")
  41. --redis-insecure-skip-tls-verify Skip Redis server certificate validation.
  42. --redis-use-tls Use TLS when connecting to Redis.
  43. --redisdb int Redis database.
  44. --repo-server string Repo server address (default "argocd-repo-server:8081")
  45. --repo-server-plaintext Use a plaintext client (non-TLS) to connect to repository server
  46. --repo-server-strict-tls Perform strict validation of TLS certificates when connecting to repo server
  47. --repo-server-timeout-seconds int Repo server RPC call timeout seconds. (default 60)
  48. --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
  49. --rootpath string Used if Argo CD is running behind reverse proxy under subpath different from /
  50. --sentinel stringArray Redis sentinel hostname and port (e.g. argocd-redis-ha-announce-0:6379).
  51. --sentinelmaster string Redis sentinel master group name. (default "master")
  52. --server string The address and port of the Kubernetes API server
  53. --staticassets string Directory path that contains additional static assets (default "/shared/app")
  54. --tls-server-name string If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.
  55. --tlsciphers string The list of acceptable ciphers to be used when establishing TLS connections. Use 'list' to list available ciphers. (default "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384:TLS_RSA_WITH_AES_256_GCM_SHA384")
  56. --tlsmaxversion string The maximum SSL/TLS version that is acceptable (one of: 1.0|1.1|1.2|1.3) (default "1.3")
  57. --tlsminversion string The minimum SSL/TLS version that is acceptable (one of: 1.0|1.1|1.2|1.3) (default "1.2")
  58. --token string Bearer token for authentication to the API server
  59. --user string The name of the kubeconfig user to use
  60. --username string Username for basic authentication to the API server
  61. --x-frame-options value Set X-Frame-Options header in HTTP responses to value. To disable, set to "". (default "sameorigin")

SEE ALSO