README.md

Codefresh gitops runtime

Table of Content

• Prerequisites
• Get Chart Info
• Codefresh official documentation
• Argo-workflows artifact and log storage
• Installation with External ArgoCD
• Using with private registries - Helper utility
• Openshift
• High Availability
  • HA mode with autoscaling
• Upgrading
  • To 0.23.x
  • > 0.24.x

Prerequisites

• Helm 3.11.0+

Get Chart Info

helm show all oci://quay.io/codefresh/gitops-runtime

See Use OCI-based registries

Codefresh official documentation:

Prior to running the installation please see the official documentation at: https://codefresh.io/docs/docs/installation/gitops/hybrid-gitops-helm-installation/

Multi Runtime Installation

You can install multiple Codefresh GitOps Runtimes in the same cluster, as long as each Runtime is deployed in its own namespace and manages only the applications in that namespace. To achieve this, configure your Runtimes to run in namespaced mode by setting global.runtime.singleNamespace=true. See the values.yaml example below:

global:
  runtime:
    singleNamespace: true
sealed-secrets:
  enabled: false
argo-cd:
  createClusterRoles: false
  crds:
    install: false
  configs:
    params:
      application.namespaces: ''
argo-workflows:
  crds:
    install: false
  singleNamespace: true
  createAggregateRoles: false
  controller:
    clusterWorkflowTemplates:
      enabled: false
  server:
    clusterWorkflowTemplates:
      enabled: false
tunnel-client:
  enabled: false
gitops-operator:
  crds:
    install: false

Note that for the first runtime in the cluster, you have to configure it to install the CRDs, with setting these values:

global:
  runtime:
    isConfigurationRuntime: true
argo-cd:
  crds:
    install: true
argo-workflows:
  crds:
    install: true
gitops-operator:
  crds:
    install: true

Warning

If you want more than one runtime in your cluster, make sure that all of the runtimes in your cluster are configured with global.runtime.singleNamespace=true. If you already have a runtime installed in the cluster without this setting, multi runtime installation is not supported.

Argo-workflows artifact and log storage

Codefresh provides a SaaS object storage based solution for Argo workflows logs storage. The chart deploys a configmap named codefresh-workflows-log-store with the repository configuration. If you want to utilize the Codefresh SaaS solution for log storage for all workflows in the runtime please set the following values:

argo-workflows:
  controller:
    workflowDefaults:
      spec:
        artifactRepositoryRef:
          configMap: codefresh-workflows-log-store
          key: codefresh-workflows-log-store

Warning

It's highly recommended to use your own artifact storage for data privacy reasons. Codefresh provided storage has a retention policy of 14 days and limitations on uploaded file sizes. Please refer to the official documentation for more details.

Installation with External ArgoCD

If you want to use an existing ArgoCD installation, you can disable the built-in ArgoCD and configure the GitOps Runtime to use the external ArgoCD. See the values.yaml example below:

global:
  # -- Configuration for external ArgoCD
  # Should be used when `argo-cd.enabled` is set to false
  external-argo-cd:
    # -- ArgoCD server settings
    server:
      # -- Service name of the ArgoCD server
      svc: argocd
      # -- Port of the ArgoCD server
      port: 80
      # -- Set if Argo CD is running behind reverse proxy under subpath different from /
      # e.g.
      # rootpath: '/argocd'
      rootpath: ''
    redis:
      # -- Service name of the ArgoCD Redis
      svc: argocd-redis
      # -- Port of the ArgoCD Redis
      port: 6379
    repoServer:
      # -- Service name of the ArgoCD repo server
      svc: argocd-repo-server
      # -- Port of the ArgoCD repo server
      port: 8081

    # -- How GitOps Runtime should authenticate with ArgoCD
    auth:
      # -- Authentication type. Can be password or token
      type: password

      # If `auth.type=password` is set
      # -- ArgoCD username in plain text
      username: "admin"
      # -- ArgoCD password in plain text
      password: ""
      # -- ArgoCD password referenced by an existing secret
      passwordSecretKeyRef:
        name: argocd-initial-admin-secret
        key: password

      # If `auth.type=token` is set
      # -- ArgoCD token in plain text
      token: ""
      # -- ArgoCD token referenced by an existing secret
      tokenSecretKeyRef: {}
      # e.g:
      # tokenSecretKeyRef:
      #   name: argocd-token
      #   key: token

argo-cd:
  # -- Disable built-in ArgoCD
  enabled: false

⚠️ If auth.type=password is set, ArgoCd user must have apiKey capability enabled.

argocd-cm ConfigMap

apiVersion: v1
kind: ConfigMap
metadata:
  name: argocd-cm
  namespace: argocd
  labels:
    app.kubernetes.io/name: argocd-cm
    app.kubernetes.io/part-of: argocd
data:
  accounts.admin: apiKey, login
  admin.enabled: "true"

Using with private registries - Helper utility

The GitOps Runtime comprises multiple subcharts and container images. Subcharts also vary in values structure, making it difficult to override image specific values to use private registries. We have created a helper utility to resolve this issue:

• The utility create values files in the correct structure, overriding the registry for each image. When installing the chart, you can then provide those values files to override all images.
• The utility also creates other files with data to help you identify and correctly mirror all the images.

Usage

The utility is packaged in a container image. Below are instructions on executing the utility using Docker:

docker run -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.27.5 <local_registry>

output_dir - is a local directory where the utility will output files.
local_registry - is your local registry where you want to mirror the images to

The utility will output 4 files into the folder:

1. image-list.txt - is the list of all images used in this version of the chart. Those are the images that you need to mirror.
2. image-mirror.csv - is a csv file with 2 fields - source_image and target_image. source_image is the image with the original registry and target_image is the image with the private registry. Can be used as an input file for a mirroring script.
3. values-images-no-tags.yaml - a values file with all image values with the private registry excluding tags. If provided through --values to helm install/upgrade command - it will override all images to use the private registry.
4. values-images-with-tags.yaml - The same as 3 but with tags included.

For usage with external ArgoCD run the utility with EXTERNAL_ARGOCD environment variable set to true.

docker run -e EXTERNAL_ARGOCD=true  -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.27.5 <local_registry>

Openshift

internal-router:
  dnsService: dns-default
  dnsNamespace: openshift-dns
  clusterDomain: cluster.local

argo-cd:
  redis:
    securityContext:
      runAsUser: 1000680000 # Arbitrary user ID within allowed range

  openshift:
    enabled: true

sealed-secrets:
  podSecurityContext:
    enabled: false
  containerSecurityContext:
    enabled: false

High Availability

This chart installs the non-HA version of GitOps Runtime by default. If you want to run GitOps Runtime in HA mode, you can use the example values below:

Warning: You need at least 3 worker nodes for HA mode

HA mode with autoscaling

global:
  topologySpreadConstraints:
    - maxSkew: 1
      topologyKey: kubernetes.io/hostname
      whenUnsatisfiable: DoNotSchedule

  event-reporters:
    pdb:
      enabled: true
      minAvailable: 1

app-proxy:
  replicaCount: 2
  pdb:
    enabled: true
    minAvailable: 1
  topologySpreadConstraints:
    - maxSkew: 1
      topologyKey: kubernetes.io/hostname
      whenUnsatisfiable: DoNotSchedule
      labelSelector:
        matchLabels:
          app: cap-app-proxy

gitops-operator:
  replicaCount: 2
  pdb:
    enabled: true
    minAvailable: 1
  topologySpreadConstraints:
    - maxSkew: 1
      topologyKey: kubernetes.io/hostname
      whenUnsatisfiable: DoNotSchedule
      labelSelector:
        matchLabels:
          app: gitops-operator

internal-router:
  replicaCount: 2
  pdb:
    enabled: true
    minAvailable: 1
  topologySpreadConstraints:
    - maxSkew: 1
      topologyKey: kubernetes.io/hostname
      whenUnsatisfiable: DoNotSchedule
      labelSelector:
        matchLabels:
          app: internal-router

argo-gateway:
  hpa:
    enabled: true
    minReplicas: 2
  pdb:
    enabled: true
    minAvailable: 1
  topologySpreadConstraints:
    - maxSkew: 1
      topologyKey: kubernetes.io/hostname
      whenUnsatisfiable: DoNotSchedule
      labelSelector:
        matchLabels:
          app.kubernetes.io/component: argo-gateway

argo-cd:
  redis-ha:
    enabled: true

  controller:
    replicas: 1

  server:
    autoscaling:
      enabled: true
      minReplicas: 2
    pdb:
      enabled: true
      minAvailable: 1

  repoServer:
    autoscaling:
      enabled: true
      minReplicas: 2
    pdb:
      enabled: true
      minAvailable: 1

  applicationSet:
    replicas: 2

argo-workflows:
  controller:
    replicas: 2
    pdb:
      enabled: true
      minAvailable: 1
  server:
    autoscaling:
      enabled: true
      minReplicas: 2
    pdb:
      enabled: true
      minAvailable: 1

Upgrading

To 0.23.x

Affected values

• .Values.gitops-operator.image map has been changed to include registry field. Please migrate the values git below:

# before
gitops-operator:
  image:
    repository: quay.io/codefresh/codefresh-gitops-operator
    tag: vX.Y.Z

# after
gitops-operator:
  image:
    registry: quay.io
    repository: codefresh/codefresh-gitops-operator
    tag: vX.Y.Z

> 0.24.x

Affected values

• .Values.redis/.Values.redis-ha/.Values.redis-secret-init were added

# Enabled standalone Redis (single Deployment with 1 replica)
redis:
  enabled: true

# Enabled Redis High Availability (StatefulSet with Proxy)
redis-ha:
  enabled: false

• .Values.cf-argocd-extras.eventReporter was updated to .Values.global.event-reporters

# Before:
cf-argocd-extras:
  eventReporter:
    image:
      ...
  ...

# After:
global:
  event-reporters:
    image:
      ...
  ...

• .Values.cf-argocd-extras.sourcesServer was updated to .Values.argo-gateway

# Before:
cf-argocd-extras:
  sourcesServer:
    image:
      ...
  ...

# After:
argo-gateway:
  image:
      ...
  ...

• .Values.global.external-argo-cd was changed to .Values.global.integrations.argo-cd

# Before:
global:
  external-argo-cd:
    server:
      svc: argocd-server
      port: 80
    ...

# After:
global:
  integrations:
    argo-cd:
      server:
        svc: argocd-server
        port: 80
      ...

Values

Key	Type	Default	Description
anchors.common-envs[0].OTEL_EXPORTER_OTLP_COMPRESSION	string	"gzip"	Specifies the compression algorithm to be used for all telemetry data. Ref: https://opentelemetry.io/docs/specs/otel/protocol/exporter/
anchors.common-envs[0].OTEL_EXPORTER_OTLP_ENDPOINT	string	"http://localhost:4317"	Base endpoint URL for all OpenTelemetry signals. Ref: https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/
anchors.common-envs[0].OTEL_EXPORTER_OTLP_PROTOCOL	string	"grpc"	Specifies the OTLP transport protocol to be used for all telemetry data. Ref: https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/
anchors.common-envs[0].OTEL_EXPORTER_PROMETHEUS_HOST	string	"0.0.0.0"	Host used by the Prometheus OTel metrics exporter if OTEL_METRICS_EXPORTER=prometheus
anchors.common-envs[0].OTEL_EXPORTER_PROMETHEUS_PORT	string	"9464"	Port used by the Prometheus OTel metrics exporter if OTEL_METRICS_EXPORTER=prometheus
anchors.common-envs[0].OTEL_LOGS_EXPORTER	string	"none"	OTel Logs exporter to be used. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
anchors.common-envs[0].OTEL_METRICS_EXPORTER	string	"none"	OTel metrics exporter to be used. Set to "prometheus" to export metrics in Prometheus format. If set to "prometheus", it's recommended to set METRICS_SCRAPE_TIMEOUT_MS=4×scrape_interval. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
anchors.common-envs[0].OTEL_METRIC_EXPORT_INTERVAL	string	"10000"	The time interval (in milliseconds) between the start of two export attempts for push metric exporters, such as "otlp". Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
anchors.common-envs[0].OTEL_METRIC_EXPORT_TIMEOUT	string	"5000"	Maximum allowed time (in milliseconds) to export data for push metric exporters, such as "otlp". Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
anchors.common-envs[0].OTEL_SEMCONV_STABILITY_OPT_IN	string	"http"	Emit the stable HTTP and networking OTel conventions if CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION=true.
anchors.common-envs[0].OTEL_TRACES_EXPORTER	string	"none"	OTel traces exporter to be used. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
anchors.common-envs[0].OTEL_TRACES_SAMPLER	string	"parentbased_always_on"	OTel sampler to be used for traces. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
app-proxy.affinity	object	{}
app-proxy.config.argoCdUrl	string	nil	ArgoCD Url. determined by chart logic. Do not change unless you are certain you need to
app-proxy.config.argoCdUsername	string	""	deprecated. use global.external-argo-cd.auth.username instead
app-proxy.config.argoWorkflowsInsecure	string	"true"
app-proxy.config.argoWorkflowsUrl	string	nil	Workflows server url. Determined by chart logic. Do not change unless you are certain you need to
app-proxy.config.clusterChunkSize	int	50	define cluster list size per request to report the cluster state to platform, e.g. if you have 90 clusters and set clusterChunkSize: 40, it means cron job will report cluster state to platform in 3 iterations (40,40,10) - reduce this value if you have a lot of clusters and the cron job is failing with payload too large error - use 0 to sync all clusters at once
app-proxy.config.cors	string	"https://g.codefresh.io"	Cors settings for app-proxy. This is the list of allowed domains for platform (comma separated).
app-proxy.config.env	string	"production"
app-proxy.config.logLevel	string	"info"	Log Level
app-proxy.config.skipGitPermissionValidation	string	"false"	Skit git permissions validation
app-proxy.env.<<[0].OTEL_EXPORTER_OTLP_COMPRESSION	string	"gzip"	Specifies the compression algorithm to be used for all telemetry data. Ref: https://opentelemetry.io/docs/specs/otel/protocol/exporter/
app-proxy.env.<<[0].OTEL_EXPORTER_OTLP_ENDPOINT	string	"http://localhost:4317"	Base endpoint URL for all OpenTelemetry signals. Ref: https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/
app-proxy.env.<<[0].OTEL_EXPORTER_OTLP_PROTOCOL	string	"grpc"	Specifies the OTLP transport protocol to be used for all telemetry data. Ref: https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/
app-proxy.env.<<[0].OTEL_EXPORTER_PROMETHEUS_HOST	string	"0.0.0.0"	Host used by the Prometheus OTel metrics exporter if OTEL_METRICS_EXPORTER=prometheus
app-proxy.env.<<[0].OTEL_EXPORTER_PROMETHEUS_PORT	string	"9464"	Port used by the Prometheus OTel metrics exporter if OTEL_METRICS_EXPORTER=prometheus
app-proxy.env.<<[0].OTEL_LOGS_EXPORTER	string	"none"	OTel Logs exporter to be used. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
app-proxy.env.<<[0].OTEL_METRICS_EXPORTER	string	"none"	OTel metrics exporter to be used. Set to "prometheus" to export metrics in Prometheus format. If set to "prometheus", it's recommended to set METRICS_SCRAPE_TIMEOUT_MS=4×scrape_interval. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
app-proxy.env.<<[0].OTEL_METRIC_EXPORT_INTERVAL	string	"10000"	The time interval (in milliseconds) between the start of two export attempts for push metric exporters, such as "otlp". Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
app-proxy.env.<<[0].OTEL_METRIC_EXPORT_TIMEOUT	string	"5000"	Maximum allowed time (in milliseconds) to export data for push metric exporters, such as "otlp". Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
app-proxy.env.<<[0].OTEL_SEMCONV_STABILITY_OPT_IN	string	"http"	Emit the stable HTTP and networking OTel conventions if CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION=true.
app-proxy.env.<<[0].OTEL_TRACES_EXPORTER	string	"none"	OTel traces exporter to be used. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
app-proxy.env.<<[0].OTEL_TRACES_SAMPLER	string	"parentbased_always_on"	OTel sampler to be used for traces. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
app-proxy.env.CF_TELEMETRY_LOGS_LEVEL	string	"info"	Level of logging for app-proxy
app-proxy.env.CF_TELEMETRY_LOGS_LEVEL_HTTP	string	"debug"	Level for logging HTTP requests
app-proxy.env.CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION	string	"false"	Enable OTel HTTP instrumentation. Make sure to sanitize url.full and url.query span attributes on collector before enabling this flag, as it may contain sensitive information.
app-proxy.env.CF_TELEMETRY_OTEL_ENABLE	string	"false"	Enable OpenTelemetry signals (logs, metrics, traces)
app-proxy.env.CF_TELEMETRY_PROMETHEUS_ENABLE	string	"false"	Enable Prometheus server
app-proxy.env.CF_TELEMETRY_PROMETHEUS_ENABLE_PROCESS_METRICS	string	"false"	Enable collecting process metrics
app-proxy.env.CF_TELEMETRY_PROMETHEUS_HOST	string	"0.0.0.0"	Host for Prometheus metrics server
app-proxy.env.CF_TELEMETRY_PROMETHEUS_PORT	string	"9100"	Port for Prometheus metrics server
app-proxy.env.CF_TELEMETRY_PYROSCOPE_ENABLE	string	"false"	Enable Pyroscope profiling. If enabled, the Pyroscope server address must be set in PYROSCOPE_SERVER_ADDRESS.
app-proxy.env.PYROSCOPE_SERVER_ADDRESS	string	""	Pyroscope server address
app-proxy.extraVolumeMounts	list	[]	Extra volume mounts for main container
app-proxy.extraVolumes	list	[]	extra volumes
app-proxy.fullnameOverride	string	"cap-app-proxy"
app-proxy.image-enrichment	object	{"config":{"clientHeartbeatIntervalInSeconds":5,"concurrencyCmKey":"imageReportExecutor","concurrencyCmName":"workflow-synchronization-semaphores","images":{"gitEnrichment":{"registry":"quay.io","repository":"codefreshplugins/argo-hub-codefresh-csdp-image-enricher-git-info","tag":"1.1.22-main"},"jiraEnrichment":{"registry":"quay.io","repository":"codefreshplugins/argo-hub-codefresh-csdp-image-enricher-jira-info","tag":"1.1.22-main"},"reportImage":{"registry":"quay.io","repository":"codefreshplugins/argo-hub-codefresh-csdp-report-image-info","tag":"1.1.22-main"}},"podGcStrategy":"OnWorkflowCompletion","ttlActiveInSeconds":900,"ttlAfterCompletionInSeconds":86400},"enabled":true,"serviceAccount":{"annotations":null,"create":true,"name":"codefresh-image-enrichment-sa"}}	Image enrichment process configuration
app-proxy.image-enrichment.config	object	{"clientHeartbeatIntervalInSeconds":5,"concurrencyCmKey":"imageReportExecutor","concurrencyCmName":"workflow-synchronization-semaphores","images":{"gitEnrichment":{"registry":"quay.io","repository":"codefreshplugins/argo-hub-codefresh-csdp-image-enricher-git-info","tag":"1.1.22-main"},"jiraEnrichment":{"registry":"quay.io","repository":"codefreshplugins/argo-hub-codefresh-csdp-image-enricher-jira-info","tag":"1.1.22-main"},"reportImage":{"registry":"quay.io","repository":"codefreshplugins/argo-hub-codefresh-csdp-report-image-info","tag":"1.1.22-main"}},"podGcStrategy":"OnWorkflowCompletion","ttlActiveInSeconds":900,"ttlAfterCompletionInSeconds":86400}	Configurations for image enrichment workflow
app-proxy.image-enrichment.config.clientHeartbeatIntervalInSeconds	int	5	Client heartbeat interval in seconds for image enrichemnt workflow
app-proxy.image-enrichment.config.concurrencyCmKey	string	"imageReportExecutor"	The name of the key in the configmap to use as synchronization semaphore
app-proxy.image-enrichment.config.concurrencyCmName	string	"workflow-synchronization-semaphores"	The name of the configmap to use as synchronization semaphore, see https://argoproj.github.io/argo-workflows/synchronization/
app-proxy.image-enrichment.config.images	object	{"gitEnrichment":{"registry":"quay.io","repository":"codefreshplugins/argo-hub-codefresh-csdp-image-enricher-git-info","tag":"1.1.22-main"},"jiraEnrichment":{"registry":"quay.io","repository":"codefreshplugins/argo-hub-codefresh-csdp-image-enricher-jira-info","tag":"1.1.22-main"},"reportImage":{"registry":"quay.io","repository":"codefreshplugins/argo-hub-codefresh-csdp-report-image-info","tag":"1.1.22-main"}}	Enrichemnt images
app-proxy.image-enrichment.config.images.reportImage	object	{"registry":"quay.io","repository":"codefreshplugins/argo-hub-codefresh-csdp-report-image-info","tag":"1.1.22-main"}	Report image enrichment task image
app-proxy.image-enrichment.config.podGcStrategy	string	"OnWorkflowCompletion"	Pod grabage collection strategy. By default all pods will be deleted when the enrichment workflow completes.
app-proxy.image-enrichment.config.ttlActiveInSeconds	int	900	Maximum allowed runtime for the enrichment workflow
app-proxy.image-enrichment.config.ttlAfterCompletionInSeconds	int	86400	Number of seconds to live after completion
app-proxy.image-enrichment.enabled	bool	true	Enable or disable enrichment process. Please note that for enrichemnt, argo-workflows has to be enabled as well.
app-proxy.image-enrichment.serviceAccount	object	{"annotations":null,"create":true,"name":"codefresh-image-enrichment-sa"}	Service account that will be used for enrichemnt process
app-proxy.image-enrichment.serviceAccount.annotations	string	nil	Annotations on the service account
app-proxy.image-enrichment.serviceAccount.create	bool	true	Whether to create the service account or use an existing one
app-proxy.image-enrichment.serviceAccount.name	string	"codefresh-image-enrichment-sa"	Name of the service account to create or the name of the existing one to use
app-proxy.image.pullPolicy	string	"IfNotPresent"
app-proxy.image.repository	string	"quay.io/codefresh/cap-app-proxy"
app-proxy.image.tag	string	"f1a9078"
app-proxy.imagePullSecrets	list	[]
app-proxy.initContainer.command[0]	string	"./init.sh"
app-proxy.initContainer.env	object	{}
app-proxy.initContainer.extraVolumeMounts	list	[]	Extra volume mounts for init container
app-proxy.initContainer.image.pullPolicy	string	"IfNotPresent"
app-proxy.initContainer.image.repository	string	"quay.io/codefresh/cap-app-proxy-init"
app-proxy.initContainer.image.tag	string	"f1a9078"
app-proxy.initContainer.resources.limits	object	{}
app-proxy.initContainer.resources.requests.cpu	string	"0.2"
app-proxy.initContainer.resources.requests.memory	string	"256Mi"
app-proxy.leader-elector.containerSecurityContext.allowPrivilegeEscalation	bool	false
app-proxy.leader-elector.image.registry	string	"quay.io"
app-proxy.leader-elector.image.repository	string	"codefresh/leader-elector"
app-proxy.leader-elector.image.tag	string	"0.0.1"
app-proxy.leader-elector.livenessProbe.failureThreshold	int	10
app-proxy.leader-elector.livenessProbe.initialDelaySeconds	int	10
app-proxy.leader-elector.livenessProbe.periodSeconds	int	10
app-proxy.leader-elector.livenessProbe.successThreshold	int	1
app-proxy.leader-elector.livenessProbe.timeoutSeconds	int	10
app-proxy.leader-elector.readinessProbe.failureThreshold	int	3
app-proxy.leader-elector.readinessProbe.initialDelaySeconds	int	10
app-proxy.leader-elector.readinessProbe.periodSeconds	int	10
app-proxy.leader-elector.readinessProbe.successThreshold	int	1
app-proxy.leader-elector.readinessProbe.timeoutSeconds	int	10
app-proxy.leader-elector.resources.limits.cpu	string	"200m"
app-proxy.leader-elector.resources.limits.memory	string	"200Mi"
app-proxy.leader-elector.resources.requests.cpu	string	"100m"
app-proxy.leader-elector.resources.requests.memory	string	"100Mi"
app-proxy.livenessProbe.failureThreshold	int	10	Minimum consecutive failures for the [probe] to be considered failed after having succeeded.
app-proxy.livenessProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before [probe] is initiated.
app-proxy.livenessProbe.periodSeconds	int	10	How often (in seconds) to perform the [probe].
app-proxy.livenessProbe.successThreshold	int	1	Minimum consecutive successes for the [probe] to be considered successful after having failed.
app-proxy.livenessProbe.timeoutSeconds	int	10	Number of seconds after which the [probe] times out.
app-proxy.nameOverride	string	""
app-proxy.nodeSelector	object	{}
app-proxy.pdb.enabled	bool	false	Enable PDB
app-proxy.pdb.maxUnavailable	string	""	Set number of pods that are unavailable after eviction as number or percentage
app-proxy.pdb.minAvailable	int	1	Set number of pods that are available after eviction as number or percentage
app-proxy.podAnnotations	object	{}
app-proxy.podLabels	object	{}
app-proxy.podSecurityContext	object	{}
app-proxy.readinessProbe.failureThreshold	int	3	Minimum consecutive failures for the [probe] to be considered failed after having succeeded.
app-proxy.readinessProbe.initialDelaySeconds	int	10	Number of seconds after the container has started before [probe] is initiated.
app-proxy.readinessProbe.periodSeconds	int	10	How often (in seconds) to perform the [probe].
app-proxy.readinessProbe.successThreshold	int	1	Minimum consecutive successes for the [probe] to be considered successful after having failed.
app-proxy.readinessProbe.timeoutSeconds	int	10	Number of seconds after which the [probe] times out.
app-proxy.replicaCount	int	1
app-proxy.resources.limits.cpu	string	"1500m"
app-proxy.resources.limits.ephemeral-storage	string	"6Gi"
app-proxy.resources.limits.memory	string	"1Gi"
app-proxy.resources.requests.cpu	string	"100m"
app-proxy.resources.requests.ephemeral-storage	string	"2Gi"
app-proxy.resources.requests.memory	string	"512Mi"
app-proxy.securityContext.allowPrivilegeEscalation	bool	false
app-proxy.service.port	int	3017
app-proxy.service.type	string	"ClusterIP"
app-proxy.serviceAccount.annotations	object	{}
app-proxy.serviceAccount.create	bool	true
app-proxy.serviceAccount.name	string	"cap-app-proxy"
app-proxy.serviceMonitor.enabled	bool	false
app-proxy.serviceMonitor.labels	object	{}
app-proxy.serviceMonitor.name	string	""
app-proxy.tolerations	list	[]
argo-cd.configs.cm."accounts.admin"	string	"apiKey,login"
argo-cd.configs.cm."application.instanceLabelKey"	string	""
argo-cd.configs.cm."application.resourceTrackingMethod"	string	"annotation+label"
argo-cd.configs.cm."timeout.reconciliation"	string	"20s"
argo-cd.configs.params."application.namespaces"	string	"cf-*"
argo-cd.configs.params."server.insecure"	bool	true
argo-cd.controller.statefulsetAnnotations."argocd.argoproj.io/sync-options"	string	"Delete=false"
argo-cd.enabled	bool	true
argo-cd.fullnameOverride	string	"argo-cd"
argo-cd.notifications.enabled	bool	false
argo-cd.redis-ha.image.repository	string	"ecr-public.aws.com/docker/library/redis"	Redis repository
argo-cd.redis-ha.image.tag	string	"8.2.2-alpine"	Redis tag
argo-cd.redis.image.repository	string	"ecr-public.aws.com/docker/library/redis"	Redis repository
argo-cd.redis.image.tag	string	"8.2.2-alpine"	Redis tag
argo-gateway	object	{"affinity":{},"hpa":{"enabled":true,"maxReplicas":10,"minReplicas":1,"targetCPUUtilizationPercentage":70},"image":{"registry":"quay.io","repository":"codefresh/cf-argocd-extras","tag":"ebfec69"},"livenessProbe":{"failureThreshold":3,"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":10},"nodeSelector":{},"pdb":{"enabled":true,"maxUnavailable":"","minAvailable":"50%"},"readinessProbe":{"failureThreshold":3,"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":10},"resources":{"requests":{"cpu":"100m","memory":"128Mi"}},"service":{"type":"ClusterIP"},"serviceAccount":{"create":true},"serviceMonitor":{"enabled":false,"interval":"30s","labels":{},"scrapeTimeout":"10s"},"tolerations":[]}	Argo Gateway Argo Gateway is used to perform operations on ArgoCD from Codefresh platform
argo-workflows.crds.install	bool	true	Install and upgrade CRDs
argo-workflows.enabled	bool	true
argo-workflows.executor.resources.requests.ephemeral-storage	string	"10Mi"
argo-workflows.fullnameOverride	string	"argo"
argo-workflows.mainContainer.resources.requests.ephemeral-storage	string	"10Mi"
argo-workflows.server.authModes	list	["client"]	auth-mode needs to be set to client to be able to see workflow logs from Codefresh UI
argo-workflows.server.baseHref	string	"/workflows/"	Do not change. Workflows UI is only accessed through internal router, changing this values will break routing to workflows native UI from Codefresh.
argo-workflows.singleNamespace	bool	true	Restrict Argo Workflows to operate only in a single namespace (the namespace of the Helm release). This ensures it does not interfere with any other instances of Argo Workflows installed on your cluster.
codefreshWorkflowLogStoreCM	object	{"enabled":true,"endpoint":"gitops-workflow-logs.codefresh.io","insecure":false}	Argo workflows logs storage on Codefresh platform settings. Don't change unless instructed by Codefresh support.
event-reporters.cluster-event-reporter.env.<<[0].OTEL_EXPORTER_OTLP_COMPRESSION	string	"gzip"	Specifies the compression algorithm to be used for all telemetry data. Ref: https://opentelemetry.io/docs/specs/otel/protocol/exporter/
event-reporters.cluster-event-reporter.env.<<[0].OTEL_EXPORTER_OTLP_ENDPOINT	string	"http://localhost:4317"	Base endpoint URL for all OpenTelemetry signals. Ref: https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/
event-reporters.cluster-event-reporter.env.<<[0].OTEL_EXPORTER_OTLP_PROTOCOL	string	"grpc"	Specifies the OTLP transport protocol to be used for all telemetry data. Ref: https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/
event-reporters.cluster-event-reporter.env.<<[0].OTEL_EXPORTER_PROMETHEUS_HOST	string	"0.0.0.0"	Host used by the Prometheus OTel metrics exporter if OTEL_METRICS_EXPORTER=prometheus
event-reporters.cluster-event-reporter.env.<<[0].OTEL_EXPORTER_PROMETHEUS_PORT	string	"9464"	Port used by the Prometheus OTel metrics exporter if OTEL_METRICS_EXPORTER=prometheus
event-reporters.cluster-event-reporter.env.<<[0].OTEL_LOGS_EXPORTER	string	"none"	OTel Logs exporter to be used. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
event-reporters.cluster-event-reporter.env.<<[0].OTEL_METRICS_EXPORTER	string	"none"	OTel metrics exporter to be used. Set to "prometheus" to export metrics in Prometheus format. If set to "prometheus", it's recommended to set METRICS_SCRAPE_TIMEOUT_MS=4×scrape_interval. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
event-reporters.cluster-event-reporter.env.<<[0].OTEL_METRIC_EXPORT_INTERVAL	string	"10000"	The time interval (in milliseconds) between the start of two export attempts for push metric exporters, such as "otlp". Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
event-reporters.cluster-event-reporter.env.<<[0].OTEL_METRIC_EXPORT_TIMEOUT	string	"5000"	Maximum allowed time (in milliseconds) to export data for push metric exporters, such as "otlp". Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
event-reporters.cluster-event-reporter.env.<<[0].OTEL_SEMCONV_STABILITY_OPT_IN	string	"http"	Emit the stable HTTP and networking OTel conventions if CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION=true.
event-reporters.cluster-event-reporter.env.<<[0].OTEL_TRACES_EXPORTER	string	"none"	OTel traces exporter to be used. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
event-reporters.cluster-event-reporter.env.<<[0].OTEL_TRACES_SAMPLER	string	"parentbased_always_on"	OTel sampler to be used for traces. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
event-reporters.runtime-event-reporter.env.<<[0].OTEL_EXPORTER_OTLP_COMPRESSION	string	"gzip"	Specifies the compression algorithm to be used for all telemetry data. Ref: https://opentelemetry.io/docs/specs/otel/protocol/exporter/
event-reporters.runtime-event-reporter.env.<<[0].OTEL_EXPORTER_OTLP_ENDPOINT	string	"http://localhost:4317"	Base endpoint URL for all OpenTelemetry signals. Ref: https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/
event-reporters.runtime-event-reporter.env.<<[0].OTEL_EXPORTER_OTLP_PROTOCOL	string	"grpc"	Specifies the OTLP transport protocol to be used for all telemetry data. Ref: https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/
event-reporters.runtime-event-reporter.env.<<[0].OTEL_EXPORTER_PROMETHEUS_HOST	string	"0.0.0.0"	Host used by the Prometheus OTel metrics exporter if OTEL_METRICS_EXPORTER=prometheus
event-reporters.runtime-event-reporter.env.<<[0].OTEL_EXPORTER_PROMETHEUS_PORT	string	"9464"	Port used by the Prometheus OTel metrics exporter if OTEL_METRICS_EXPORTER=prometheus
event-reporters.runtime-event-reporter.env.<<[0].OTEL_LOGS_EXPORTER	string	"none"	OTel Logs exporter to be used. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
event-reporters.runtime-event-reporter.env.<<[0].OTEL_METRICS_EXPORTER	string	"none"	OTel metrics exporter to be used. Set to "prometheus" to export metrics in Prometheus format. If set to "prometheus", it's recommended to set METRICS_SCRAPE_TIMEOUT_MS=4×scrape_interval. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
event-reporters.runtime-event-reporter.env.<<[0].OTEL_METRIC_EXPORT_INTERVAL	string	"10000"	The time interval (in milliseconds) between the start of two export attempts for push metric exporters, such as "otlp". Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
event-reporters.runtime-event-reporter.env.<<[0].OTEL_METRIC_EXPORT_TIMEOUT	string	"5000"	Maximum allowed time (in milliseconds) to export data for push metric exporters, such as "otlp". Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
event-reporters.runtime-event-reporter.env.<<[0].OTEL_SEMCONV_STABILITY_OPT_IN	string	"http"	Emit the stable HTTP and networking OTel conventions if CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION=true.
event-reporters.runtime-event-reporter.env.<<[0].OTEL_TRACES_EXPORTER	string	"none"	OTel traces exporter to be used. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
event-reporters.runtime-event-reporter.env.<<[0].OTEL_TRACES_SAMPLER	string	"parentbased_always_on"	OTel sampler to be used for traces. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
gitops-operator.affinity	object	{}
gitops-operator.config	object	{"commitStatusPollingInterval":"10s","maxConcurrentReleases":100,"maxReconcileRetries":10,"promotionWrapperTemplate":"","taskPollingInterval":"10s","workflowMonitorPollingInterval":"10s"}	GitOps operator configuration
gitops-operator.config.commitStatusPollingInterval	string	"10s"	Commit status polling interval
gitops-operator.config.maxConcurrentReleases	int	100	Maximum number of concurrent releases being processed by the operator (this will not affect the number of releases being processed by the gitops runtime)
gitops-operator.config.maxReconcileRetries	int	10	Maximum number of reconcile retries on promotion-related resources before failing a promotion task
gitops-operator.config.promotionWrapperTemplate	string	""	An optional template for the promotion wrapper (empty default will use the embedded one)
gitops-operator.config.taskPollingInterval	string	"10s"	Task polling interval
gitops-operator.config.workflowMonitorPollingInterval	string	"10s"	Workflow monitor polling interval
gitops-operator.crds	object	{"additionalLabels":{},"annotations":{},"install":true,"keep":false}	Codefresh gitops operator crds
gitops-operator.crds.additionalLabels	object	{}	Additional labels for gitops operator CRDs
gitops-operator.crds.annotations	object	{}	Annotations on gitops operator CRDs
gitops-operator.crds.install	bool	true	Whether or not to install CRDs
gitops-operator.crds.keep	bool	false	Keep CRDs if gitops runtime release is uninstalled
gitops-operator.enabled	bool	true
gitops-operator.env.<<[0].OTEL_EXPORTER_OTLP_COMPRESSION	string	"gzip"	Specifies the compression algorithm to be used for all telemetry data. Ref: https://opentelemetry.io/docs/specs/otel/protocol/exporter/
gitops-operator.env.<<[0].OTEL_EXPORTER_OTLP_ENDPOINT	string	"http://localhost:4317"	Base endpoint URL for all OpenTelemetry signals. Ref: https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/
gitops-operator.env.<<[0].OTEL_EXPORTER_OTLP_PROTOCOL	string	"grpc"	Specifies the OTLP transport protocol to be used for all telemetry data. Ref: https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/
gitops-operator.env.<<[0].OTEL_EXPORTER_PROMETHEUS_HOST	string	"0.0.0.0"	Host used by the Prometheus OTel metrics exporter if OTEL_METRICS_EXPORTER=prometheus
gitops-operator.env.<<[0].OTEL_EXPORTER_PROMETHEUS_PORT	string	"9464"	Port used by the Prometheus OTel metrics exporter if OTEL_METRICS_EXPORTER=prometheus
gitops-operator.env.<<[0].OTEL_LOGS_EXPORTER	string	"none"	OTel Logs exporter to be used. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
gitops-operator.env.<<[0].OTEL_METRICS_EXPORTER	string	"none"	OTel metrics exporter to be used. Set to "prometheus" to export metrics in Prometheus format. If set to "prometheus", it's recommended to set METRICS_SCRAPE_TIMEOUT_MS=4×scrape_interval. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
gitops-operator.env.<<[0].OTEL_METRIC_EXPORT_INTERVAL	string	"10000"	The time interval (in milliseconds) between the start of two export attempts for push metric exporters, such as "otlp". Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
gitops-operator.env.<<[0].OTEL_METRIC_EXPORT_TIMEOUT	string	"5000"	Maximum allowed time (in milliseconds) to export data for push metric exporters, such as "otlp". Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
gitops-operator.env.<<[0].OTEL_SEMCONV_STABILITY_OPT_IN	string	"http"	Emit the stable HTTP and networking OTel conventions if CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION=true.
gitops-operator.env.<<[0].OTEL_TRACES_EXPORTER	string	"none"	OTel traces exporter to be used. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
gitops-operator.env.<<[0].OTEL_TRACES_SAMPLER	string	"parentbased_always_on"	OTel sampler to be used for traces. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
gitops-operator.env.GITOPS_OPERATOR_VERSION	string	"0.11.1"
gitops-operator.fullnameOverride	string	""
gitops-operator.image	object	{"registry":"quay.io","repository":"codefresh/codefresh-gitops-operator","tag":"78571af"}	GitOps operator image
gitops-operator.imagePullSecrets	list	[]
gitops-operator.nameOverride	string	""
gitops-operator.nodeSelector	object	{}
gitops-operator.pdb.enabled	bool	false
gitops-operator.pdb.maxUnavailable	string	""
gitops-operator.pdb.minAvailable	int	1
gitops-operator.podAnnotations	object	{}
gitops-operator.podLabels	object	{}
gitops-operator.replicaCount	int	1
gitops-operator.resources.limits	object	{}
gitops-operator.resources.requests.cpu	string	"100m"
gitops-operator.resources.requests.memory	string	"128Mi"
gitops-operator.serviceAccount.annotations	object	{}
gitops-operator.serviceAccount.create	bool	true
gitops-operator.serviceAccount.name	string	"gitops-operator-controller-manager"
gitops-operator.tolerations	list	[]
global.codefresh	object	{"accountId":"","apiEventsPath":"/2.0/api/events","tls":{"caCerts":{"secret":{"annotations":{},"content":"","create":false,"key":"ca-bundle.crt"},"secretKeyRef":{}},"workflowPipelinesGitWebhooks":{"annotations":{},"certificates":{}}},"url":"https://g.codefresh.io","userToken":{"secretKeyRef":{},"token":""}}	Codefresh platform and account-related settings
global.codefresh.accountId	string	""	Codefresh Account ID.
global.codefresh.apiEventsPath	string	"/2.0/api/events"	Events API endpoint URL suffix.
global.codefresh.tls.caCerts	object	{"secret":{"annotations":{},"content":"","create":false,"key":"ca-bundle.crt"},"secretKeyRef":{}}	Custom CA certificates bundle for platform access with ssl
global.codefresh.tls.caCerts.secret	object	{"annotations":{},"content":"","create":false,"key":"ca-bundle.crt"}	Chart managed secret for custom platform CA certificates
global.codefresh.tls.caCerts.secret.create	bool	false	Whether to create the secret.
global.codefresh.tls.caCerts.secret.key	string	"ca-bundle.crt"	The secret key that holds the ca bundle
global.codefresh.tls.caCerts.secretKeyRef	object	{}	Reference to existing secret
global.codefresh.tls.workflowPipelinesGitWebhooks	object	{"annotations":{},"certificates":{}}	Those will be merged with the certificats defined in argo-cd.configs.tls.certificates - so if the certificates are already provided for ArgoCD, there is no need to provide them again.
global.codefresh.url	string	"https://g.codefresh.io"	URL of Codefresh platform.
global.codefresh.userToken	object	{"secretKeyRef":{},"token":""}	User token. Used for runtime registration against the patform. One of token (for plain text value) or secretKeyRef must be provided.
global.codefresh.userToken.secretKeyRef	object	{}	User token that references an existing secret containing the token.
global.codefresh.userToken.token	string	""	User token in plain text. The chart creates and manages the secret for this token.
global.event-reporters	object	{"affinity":{},"config":{},"image":{"registry":"quay.io","repository":"codefresh/cf-argocd-extras","tag":"0.27-ebfec69"},"livenessProbe":{"failureThreshold":3,"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":10},"nodeSelector":{},"pdb":{"enabled":true,"maxUnavailable":"","minAvailable":"50%"},"readinessProbe":{"failureThreshold":3,"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":10},"replicaCount":2,"resources":{"requests":{"cpu":"100m","memory":"128Mi"}},"service":{"ports":{"http":{"port":8088,"targetPort":8088},"metrics":{"port":8087,"targetPort":8087}},"type":"ClusterIP"},"serviceAccount":{"create":true},"serviceMonitor":{"enabled":false,"interval":"30s","labels":{},"scrapeTimeout":"10s"},"tolerations":[]}	Global settings for event reporters Event reporters are used for reporting runtime and cluster resources to Codefresh platform
global.httpProxy	string	""	global HTTP_PROXY for all components
global.httpsProxy	string	""	global HTTPS_PROXY for all components
global.imageRegistry	string	""
global.integrations.argo-cd.repoServer.port	int	8081	Port of the ArgoCD repo server
global.integrations.argo-cd.repoServer.svc	string	"argo-cd-repo-server"	Service name of the ArgoCD repo server
global.integrations.argo-cd.server.auth	object	{"password":"","passwordSecretKeyRef":{"key":"password","name":"argocd-initial-admin-secret"},"token":"","tokenSecretKeyRef":{},"type":"password","username":"admin"}	How GitOps Runtime should authenticate with ArgoCD server
global.integrations.argo-cd.server.auth.password	string	""	ArgoCD password in plain text
global.integrations.argo-cd.server.auth.passwordSecretKeyRef	object	{"key":"password","name":"argocd-initial-admin-secret"}	ArgoCD password referenced by an existing secret
global.integrations.argo-cd.server.auth.token	string	""	ArgoCD token in plain text
global.integrations.argo-cd.server.auth.tokenSecretKeyRef	object	{}	ArgoCD token referenced by an existing secret
global.integrations.argo-cd.server.auth.type	string	"password"	Authentication type. Can be password or token
global.integrations.argo-cd.server.auth.username	string	"admin"	ArgoCD username in plain text
global.integrations.argo-cd.server.port	int	80	Port of the ArgoCD server
global.integrations.argo-cd.server.rootpath	string	""	Set if Argo CD is running behind reverse proxy under subpath different from / e.g. rootpath: '/argocd'
global.integrations.argo-cd.server.svc	string	"argo-cd-server"	Service name of the ArgoCD server
global.noProxy	string	""	global NO_PROXY for all components
global.nodeSelector	object	{}	Global nodeSelector for all components
global.runtime	object	{"cluster":"https://kubernetes.default.svc","codefreshHosted":false,"gitCredentials":{"password":{"secretKeyRef":{},"value":null},"username":"username"},"ingress":{"annotations":{},"className":"nginx","enabled":false,"hosts":[],"labels":{},"protocol":"https","skipValidation":false,"tls":[]},"ingressUrl":"","isConfigurationRuntime":false,"name":null,"singleNamespace":false}	Runtime level settings
global.runtime.cluster	string	"https://kubernetes.default.svc"	Runtime cluster. Should not be changed.
global.runtime.codefreshHosted	bool	false	Defines whether this is a Codefresh hosted runtime. Should not be changed.
global.runtime.gitCredentials	object	{"password":{"secretKeyRef":{},"value":null},"username":"username"}	Git credentials runtime. Runtime is not fully functional without those credentials. If not provided through the installation, they must be provided through the Codefresh UI.
global.runtime.gitCredentials.password	object	{"secretKeyRef":{},"value":null}	Password. If using GitHub token, please provide it here.
global.runtime.gitCredentials.password.secretKeyRef	object	{}	secretKeyReference for Git credentials password. Provide name and key fields.
global.runtime.gitCredentials.password.value	string	nil	Plain text password
global.runtime.gitCredentials.username	string	"username"	Username. Optional when using token in password.
global.runtime.ingress	object	{"annotations":{},"className":"nginx","enabled":false,"hosts":[],"labels":{},"protocol":"https","skipValidation":false,"tls":[]}	Ingress settings
global.runtime.ingress.enabled	bool	false	Defines if ingress-based access mode is enabled for runtime. To use tunnel-based (ingressless) access mode, set to false.
global.runtime.ingress.hosts	list	[]	Hosts for runtime ingress. Note that Codefresh platform will always use the first host in the list to access the runtime.
global.runtime.ingress.protocol	string	"https"	The protocol that Codefresh platform will use to access the runtime ingress. Can be http or https.
global.runtime.ingress.skipValidation	bool	false	if set to true, the pre-install hook will validate the existance of appropriate values, but will not attempt to make a web request to the ingress host
global.runtime.ingressUrl	string	""	Explicit url for runtime ingress. Provide this value only if you don't want the chart to create and ingress (global.runtime.ingress.enabled=false) and tunnel-client is not used (tunnel-client.enabled=false)
global.runtime.isConfigurationRuntime	bool	false	is the runtime set as a "configuration runtime".
global.runtime.name	string	nil	Runtime name. Must be unique per platform account.
global.runtime.singleNamespace	bool	false	Runtime single namespace mode. When true, runtime operates in single namespace scope.
global.tolerations	list	[]	Global tolerations for all components
installer	object	{"affinity":{},"argoCdVersionCheck":{"argoServerLabels":{"app.kubernetes.io/component":"server","app.kubernetes.io/part-of":"argocd"}},"image":{"pullPolicy":"IfNotPresent","repository":"quay.io/codefresh/gitops-runtime-installer","tag":""},"nodeSelector":{},"skipUsageValidation":false,"skipValidation":false,"tolerations":[]}	Runtime installer used for running hooks and checks on the release
installer.skipUsageValidation	bool	false	if set to true, pre-install hook will not run
installer.skipValidation	bool	false	if set to true, pre-install hook will not run
internal-router.affinity	object	{}
internal-router.clusterDomain	string	"cluster.local"
internal-router.dnsNamespace	string	"kube-system"
internal-router.dnsService	string	"kube-dns"
internal-router.env	object	{}	Environment variables - see values.yaml inside the chart for usage
internal-router.fullnameOverride	string	"internal-router"
internal-router.image.pullPolicy	string	"IfNotPresent"
internal-router.image.repository	string	"docker.io/nginxinc/nginx-unprivileged"
internal-router.image.tag	string	"1.29-alpine3.23"
internal-router.imagePullSecrets	list	[]
internal-router.ipv6	object	{"enabled":false}	For ipv6 enabled clusters switch ipv6 enabled to true
internal-router.nameOverride	string	""
internal-router.nodeSelector	object	{}
internal-router.pdb.enabled	bool	false	Enable PDB
internal-router.pdb.maxUnavailable	string	""	Set number of pods that are unavailable after eviction as number or percentage
internal-router.pdb.minAvailable	int	1	Set number of pods that are available after eviction as number or percentage
internal-router.podAnnotations	object	{}
internal-router.podLabels	object	{}
internal-router.podSecurityContext	object	{}
internal-router.replicaCount	int	1
internal-router.resources.limits.cpu	string	"1"
internal-router.resources.limits.memory	string	"256Mi"
internal-router.resources.requests.cpu	string	"0.2"
internal-router.resources.requests.memory	string	"128Mi"
internal-router.routing	object	{}	Internal routing settings. Do not change this unless you are absolutely certain - the values are determined by chart's logic.
internal-router.securityContext	object	{}
internal-router.service.port	int	80
internal-router.service.type	string	"ClusterIP"
internal-router.serviceAccount.annotations	object	{}
internal-router.serviceAccount.create	bool	true
internal-router.serviceAccount.name	string	""
internal-router.tolerations	list	[]
redis	object	{"affinity":{},"enabled":false,"env":{},"envFrom":[],"extraArgs":[],"fullnameOverride":"runtime-redis","image":{"registry":"public.ecr.aws","repository":"docker/library/redis","tag":"8.2.1-alpine"},"imagePullSecrets":[],"livenessProbe":{"enabled":true,"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":15,"successThreshold":1,"timeoutSeconds":15},"metrics":{"enabled":true,"env":{},"envFrom":[],"image":{"registry":"ghcr.io","repository":"oliver006/redis_exporter","tag":"v1.72.1"},"livenessProbe":{"enabled":true,"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":15,"successThreshold":1,"timeoutSeconds":15},"readinessProbe":{"enabled":true,"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":15,"successThreshold":1,"timeoutSeconds":15},"resources":{},"serviceMonitor":{"enabled":false}},"nodeSelector":{},"pdb":{"annotations":{},"enabled":false,"labels":{},"maxUnavailable":"","minAvailable":1},"podAnnotations":{},"podLabels":{},"podSecurityContext":{},"readinessProbe":{"enabled":true,"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":15,"successThreshold":1,"timeoutSeconds":15},"resources":{},"securityContext":{},"service":{"annotations":{},"labels":{},"ports":{"metrics":{"port":9121,"targetPort":9121},"redis":{"port":6379,"targetPort":6379}},"type":"ClusterIP"},"serviceAccount":{"annotations":{},"create":true,"name":""},"tolerations":[],"topologySpreadConstraints":[]}	Standalone redis deployment Will be replaced by redis-ha subchart when redis-ha.enabled=true
redis-ha	object	{"additionalAffinities":{},"affinity":"","auth":true,"containerSecurityContext":{"readOnlyRootFilesystem":true},"enabled":false,"existingSecret":"gitops-runtime-redis","exporter":{"enabled":false,"image":"ghcr.io/oliver006/redis_exporter","tag":"v1.69.0"},"fullnameOverride":"runtime-redis-ha","haproxy":{"additionalAffinities":{},"affinity":"","containerSecurityContext":{"readOnlyRootFilesystem":true},"enabled":true,"hardAntiAffinity":true,"metrics":{"enabled":true},"tolerations":[]},"hardAntiAffinity":true,"image":{"repository":"public.ecr.aws/docker/library/redis","tag":"8.2.1-alpine"},"persistentVolume":{"enabled":false},"redis":{"config":{"save":"\"\""},"masterGroupName":"gitops-runtime"},"tolerations":[],"topologySpreadConstraints":{"enabled":false,"maxSkew":"","topologyKey":"","whenUnsatisfiable":""}}	Redis-HA subchart replaces custom redis deployment when redis-ha.enabled=true Ref: https://github.com/DandyDeveloper/charts/blob/master/charts/redis-ha/values.yaml
redis-ha.additionalAffinities	object	{}	Additional affinities to add to the Redis server pods.
redis-ha.affinity	string	""	Assign custom [affinity] rules to the Redis pods.
redis-ha.auth	bool	true	Configures redis-ha with AUTH
redis-ha.containerSecurityContext	object	See [values.yaml]	Redis HA statefulset container-level security context
redis-ha.enabled	bool	false	Enables the Redis HA subchart and disables the custom Redis single node deployment
redis-ha.existingSecret	string	"gitops-runtime-redis"	Existing Secret to use for redis-ha authentication. By default the redis-secret-init Job is generating this Secret.
redis-ha.exporter.enabled	bool	false	Enable Prometheus redis-exporter sidecar
redis-ha.exporter.image	string	"ghcr.io/oliver006/redis_exporter"	Repository to use for the redis-exporter
redis-ha.exporter.tag	string	"v1.69.0"	Tag to use for the redis-exporter
redis-ha.fullnameOverride	string	"runtime-redis-ha"	Full name of the Redis HA Resources
redis-ha.haproxy.additionalAffinities	object	{}	Additional affinities to add to the haproxy pods.
redis-ha.haproxy.affinity	string	""	Assign custom [affinity] rules to the haproxy pods.
redis-ha.haproxy.containerSecurityContext	object	See [values.yaml]	HAProxy container-level security context
redis-ha.haproxy.enabled	bool	true	Enabled HAProxy LoadBalancing/Proxy
redis-ha.haproxy.hardAntiAffinity	bool	true	Whether the haproxy pods should be forced to run on separate nodes.
redis-ha.haproxy.metrics.enabled	bool	true	HAProxy enable prometheus metric scraping
redis-ha.haproxy.tolerations	list	[]	[Tolerations] for use with node taints for haproxy pods.
redis-ha.hardAntiAffinity	bool	true	Whether the Redis server pods should be forced to run on separate nodes.
redis-ha.image.repository	string	"public.ecr.aws/docker/library/redis"	Redis repository
redis-ha.image.tag	string	"8.2.1-alpine"	Redis tag
redis-ha.persistentVolume.enabled	bool	false	Configures persistence on Redis nodes
redis-ha.redis.config	object	See [values.yaml]	Any valid redis config options in this section will be applied to each server (see redis-ha chart)
redis-ha.redis.config.save	string	'""'	Will save the DB if both the given number of seconds and the given number of write operations against the DB occurred. "" is disabled
redis-ha.redis.masterGroupName	string	"gitops-runtime"	Redis convention for naming the cluster group: must match ^[\\w-\\.]+$ and can be templated
redis-ha.tolerations	list	[]	[Tolerations] for use with node taints for Redis pods.
redis-ha.topologySpreadConstraints	object	{"enabled":false,"maxSkew":"","topologyKey":"","whenUnsatisfiable":""}	Assign custom TopologySpreadConstraints rules to the Redis pods.
redis-ha.topologySpreadConstraints.enabled	bool	false	Enable Redis HA topology spread constraints
redis-ha.topologySpreadConstraints.maxSkew	string	"" (defaults to 1)	Max skew of pods tolerated
redis-ha.topologySpreadConstraints.topologyKey	string	"" (defaults to topology.kubernetes.io/zone)	Topology key for spread
redis-ha.topologySpreadConstraints.whenUnsatisfiable	string	"" (defaults to ScheduleAnyway)	Enforcement policy, hard or soft
redis-secret-init	object	{"affinity":{},"image":{"registry":"docker.io","repository":"alpine/kubectl","tag":"1.35.1"},"nodeSelector":{},"tolerations":[]}	Enable hook job to create redis secret
redis.image	object	{"registry":"public.ecr.aws","repository":"docker/library/redis","tag":"8.2.1-alpine"}	Redis image
redis.metrics	object	{"enabled":true,"env":{},"envFrom":[],"image":{"registry":"ghcr.io","repository":"oliver006/redis_exporter","tag":"v1.72.1"},"livenessProbe":{"enabled":true,"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":15,"successThreshold":1,"timeoutSeconds":15},"readinessProbe":{"enabled":true,"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":15,"successThreshold":1,"timeoutSeconds":15},"resources":{},"serviceMonitor":{"enabled":false}}	Enable metrics sidecar
redis.metrics.serviceMonitor	object	{"enabled":false}	Enable a prometheus ServiceMonitor
redis.pdb	object	{"annotations":{},"enabled":false,"labels":{},"maxUnavailable":"","minAvailable":1}	Enabled Pod Disruption Budget for redis
redis.readinessProbe	object	{"enabled":true,"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":15,"successThreshold":1,"timeoutSeconds":15}	Probes configuration
redis.service	object	{"annotations":{},"labels":{},"ports":{"metrics":{"port":9121,"targetPort":9121},"redis":{"port":6379,"targetPort":6379}},"type":"ClusterIP"}	Service configuration
redis.serviceAccount	object	{"annotations":{},"create":true,"name":""}	Create ServiceAccount for redis
sealed-secrets.fullnameOverride	string	"sealed-secrets-controller"
sealed-secrets.image.registry	string	"quay.io"
sealed-secrets.image.repository	string	"codefresh/sealed-secrets-controller"
sealed-secrets.image.tag	string	"0.34.0"
sealed-secrets.keyrenewperiod	string	"720h"
sealed-secrets.resources.limits.cpu	string	"500m"
sealed-secrets.resources.limits.memory	string	"1Gi"
sealed-secrets.resources.requests.cpu	string	"200m"
sealed-secrets.resources.requests.memory	string	"512Mi"
tunnel-client.affinity	object	{}
tunnel-client.enabled	bool	true	Will only be used if global.runtime.ingress.enabled = false
tunnel-client.libraryMode	bool	true	Do not change this value! Breaks chart logic
tunnel-client.nodeSelector	object	{}
tunnel-client.tolerations	list	[]
tunnel-client.tunnelServer.host	string	"register-tunnels.cf-cd.com"
tunnel-client.tunnelServer.subdomainHost	string	"tunnels.cf-cd.com"