mirror of
https://github.com/hanzoai/deploy.git
synced 2026-10-07 08:44:50 +00:00
zeekayandHanzo Dev
446e343a3d
Two corrections on top of the naming pass, both found by checking the live cluster rather than the source. The rename had silently changed the user-facing annotation key from argocd.argoproj.io/sync-wave to cd.argoproj.io/sync-wave — 63 live Applications carry the old key, so deploying that would have ignored every sync-wave and broken fleet deploy ordering. The key is now cd.hanzo.ai/*, and universe 575650286 moves the ApplicationSet template that stamps it, so the controller regenerates all 63 consistently. The API group in code said argoproj.io/v1alpha1 in 157 places while the cluster has served apps.hanzo.ai/v1alpha1 since 2026-07-23 (the CRDs are applications.apps.hanzo.ai). Code now matches what is actually served. The legacy applications.argoproj.io/app-name label had ZERO live users, so it went with the rest. foo.argoproj.io test fixtures became foo.example.com — arbitrary test domains should not carry a vendor name. go build ./... exit 0. Co-authored-by: Hanzo Dev <[email protected]>
7.3 KiB
7.3 KiB
cd-applicationset-controller Command Reference
cd-applicationset-controller
Starts Hanzo CD ApplicationSet controller
cd-applicationset-controller [flags]
Options
--allowed-scm-providers strings The list of allowed custom SCM provider API URLs. This restriction does not apply to SCM or PR generators which do not accept a custom API URL. (Default: Empty = all)
--applicationset-namespaces strings Hanzo CD applicationset namespaces
--cd-repo-server string Hanzo CD repo server address (default "cd-repo-server:8081")
--as string Username to impersonate for the operation
--as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
--as-uid string UID to impersonate for the operation
--cache-sync-period duration Period at which the manager client cache is forcefully resynced with the Kubernetes API server. 0 disables periodic resync. (default 10h0m0s)
--certificate-authority string Path to a cert file for the certificate authority
--client-certificate string Path to a client certificate file for TLS
--client-key string Path to a client key file for TLS
--cluster string The name of the kubeconfig cluster to use
--concurrent-application-updates int Number of concurrent Application create/update/delete operations per ApplicationSet reconcile. (default 1)
--concurrent-reconciliations int Max concurrent reconciliations limit for the controller (default 10)
--context string The name of the kubeconfig context to use
--debug Print debug logs. Takes precedence over loglevel
--disable-compression If true, opt-out of response compression for all requests to the server
--dry-run Enable dry run mode
--enable-github-api-metrics Enable GitHub API metrics for generators that use the GitHub API
--enable-leader-election Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
--enable-new-git-file-globbing Enable new globbing in Git files generator.
--enable-policy-override For security reason if 'policy' is set, it is not possible to override it at applicationSet level. 'allow-policy-override' allows user to define their own policy (default true)
--enable-progressive-syncs Enable use of the experimental progressive syncs feature.
--enable-scm-providers Enable retrieving information from SCM providers, used by the SCM and PR generators (Default: true) (default true)
-h, --help help for cd-applicationset-controller
--insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
--kubeconfig string Path to a kube config. Only required if out-of-cluster
--logformat string Set the logging format. One of: json|text (default "json")
--loglevel string Set the logging level. One of: debug|info|warn|error (default "info")
--max-resources-status-count int Max number of resources stored in appset status. (default 5000)
--metrics-addr string The address the metric endpoint binds to. (default ":8080")
--metrics-applicationset-labels strings List of Application labels that will be added to the cd_applicationset_labels metric
-n, --namespace string If present, the namespace scope for this CLI request
--password string Password for basic authentication to the API server
--policy string Modify how application is synced between the generator and the cluster. Default is '' (empty), which means AppSets default to 'sync', but they may override that default. Setting an explicit value prevents AppSet-level overrides, unless --allow-policy-override is enabled. Explicit options are: 'sync' (create & update & delete), 'create-only', 'create-update' (no deletion), 'create-delete' (no update)
--preserved-annotations strings Sets global preserved field values for annotations
--preserved-labels strings Sets global preserved field values for labels
--probe-addr string The address the probe endpoint binds to. (default ":8081")
--proxy-url string If provided, this URL will be used to connect via proxy
--repo-server-ca-cert-path string Path to the repo-server CA certificate file
--repo-server-client-cert-key-path string Path to the client certificate key file for mTLS. Defaults to the auto-mounted Secret path; mTLS client cert is skipped if the file does not exist. (default "/app/config/reposerver/mtls/client.key")
--repo-server-client-cert-path string Path to the client certificate file for mTLS. Defaults to the auto-mounted Secret path; mTLS client cert is skipped if the file does not exist. (default "/app/config/reposerver/mtls/client.crt")
--repo-server-plaintext Disable TLS on connections to repo server
--repo-server-timeout-seconds int Repo server RPC call timeout seconds. (default 60)
--request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
--scm-no-proxy string Comma-separated list of hosts that should bypass the --scm-proxy-url proxy.
--scm-proxy-url string HTTP/HTTPS proxy URL for outbound SCM provider API requests (GitHub, GitLab, etc.). Does NOT affect Kubernetes API server connectivity — use --proxy-url (kubectl flag) for that.
--scm-root-ca-path string Provide Root CA Path for self-signed TLS Certificates
--server string The address and port of the Kubernetes API server
--tls-server-name string If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.
--token string Bearer token for authentication to the API server
--token-ref-strict-mode Set to true to require secrets referenced by SCM providers to have the cd.hanzo.ai/secret-type=scm-creds label set (Default: false)
--user string The name of the kubeconfig user to use
--username string Username for basic authentication to the API server
--webhook-addr string The address the webhook endpoint binds to. (default ":7000")
--webhook-parallelism-limit int Number of webhook requests processed concurrently (default 50)