Skip to content

feat(argo-cd): Adding "appProtocol" to HTTP service port of argocd-server#3716

Closed
gaffneyd4 wants to merge 1 commit intoargoproj:mainfrom
gaffneyd4:argocd_server_service_http_app_protocol
Closed

feat(argo-cd): Adding "appProtocol" to HTTP service port of argocd-server#3716
gaffneyd4 wants to merge 1 commit intoargoproj:mainfrom
gaffneyd4:argocd_server_service_http_app_protocol

Conversation

@gaffneyd4
Copy link
Copy Markdown

@gaffneyd4 gaffneyd4 commented Feb 10, 2026

Make it possible to configure appProtocol for the http port.

Motivation: Supports use case of configuring prior knowledge h2c for gRPC support (used by argocd CLI) when argocd-server is not configured to listen with HTTPS (--insecure). When configured properly, proxies like envoy and istio support HTTP/2 "prior knowledge" (h2c) for upstream connections (istio example).

Checklist:

  • I have bumped the chart version according to versioning
  • I have updated the documentation according to documentation
  • I have updated the chart changelog with all the changes that come with this pull request according to changelog.
  • Any new values are backwards compatible and/or have sensible default.
  • I have signed off all my commits as required by DCO.
  • I have created a separate pull request for each chart according to pull requests
  • My build is green (troubleshooting builds).

…rver

Signed-off-by: Derek Gaffney <17263955+gaffneyd4@users.noreply.github.com>
@gaffneyd4 gaffneyd4 force-pushed the argocd_server_service_http_app_protocol branch from 7e31e19 to 575c437 Compare February 10, 2026 03:53
@gaffneyd4
Copy link
Copy Markdown
Author

I just noticed that this PR might possibly duplicate the efforts in #3585

@gaffneyd4 gaffneyd4 closed this Feb 12, 2026
@gaffneyd4
Copy link
Copy Markdown
Author

gaffneyd4 commented Feb 12, 2026

The existing HTTP port needs to remain supporting HTTP/1.1 for handling requests from the browser. Unencrypted HTTP can't support both HTTP/1.1 and prior knowledge h2c. The correct approach will be to add an extra port for h2c that gRPC can use (or optionally repurpose the https port for h2c gRPC use when the server is running with --insecure mode).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant