argoproj · C4tWithShell · Mar 31, 2026 · Mar 31, 2026 · Mar 31, 2026 · Mar 31, 2026
@@ -3,7 +3,7 @@ appVersion: v3.3.6
 kubeVersion: ">=1.25.0-0"
 description: A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
 name: argo-cd
-version: 9.4.17
+version: 9.4.18
 home: https://github.com/argoproj/argo-helm
 icon: https://argo-cd.readthedocs.io/en/stable/assets/logo.png
 sources:
@@ -26,5 +26,5 @@ annotations:
     fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
     url: https://argoproj.github.io/argo-helm/pgp_keys.asc
   artifacthub.io/changes: |
-    - kind: changed
-      description: Bump argo-cd to v3.3.6
+    - kind: added
+      description: Allow disabling individual Argo CD components with enabled flag
@@ -987,6 +987,7 @@ NAME: my-release
 | controller.dnsPolicy | string | `"ClusterFirst"` | Alternative DNS policy for application controller pods |
 | controller.dynamicClusterDistribution | bool | `false` | Enable dynamic cluster distribution (alpha) Ref: https://argo-cd.readthedocs.io/en/stable/operator-manual/dynamic-cluster-distribution |
 | controller.emptyDir.sizeLimit | string | `""` (defaults not set if not specified i.e. no size limit) | EmptyDir size limit for application controller |
+| controller.enabled | bool | `true` | Enable controller |
 | controller.env | list | `[]` | Environment variables to pass to application controller |
 | controller.envFrom | list | `[]` (See [values.yaml]) | envFrom to pass to application controller |
 | controller.extraArgs | list | `[]` | Additional command line arguments to pass to application controller |
@@ -1095,6 +1096,7 @@ NAME: my-release
 | repoServer.dnsConfig | object | `{}` | [DNS configuration] |
 | repoServer.dnsPolicy | string | `"ClusterFirst"` | Alternative DNS policy for Repo server pods |
 | repoServer.emptyDir.sizeLimit | string | `""` (defaults not set if not specified i.e. no size limit) | EmptyDir size limit for repo server |
+| repoServer.enabled | bool | `true` | Enable repo server |
 | repoServer.env | list | `[]` | Environment variables to pass to repo server |
 | repoServer.envFrom | list | `[]` (See [values.yaml]) | envFrom to pass to repo server |
 | repoServer.existingVolumes | object | `{}` | Volumes to be used in replacement of emptydir on default volumes |
@@ -1219,6 +1221,7 @@ NAME: my-release
 | server.dnsConfig | object | `{}` | [DNS configuration] |
 | server.dnsPolicy | string | `"ClusterFirst"` | Alternative DNS policy for Server pods |
 | server.emptyDir.sizeLimit | string | `""` (defaults not set if not specified i.e. no size limit) | EmptyDir size limit for the Argo CD server |
+| server.enabled | bool | `true` | Enable argocd server |
 | server.env | list | `[]` | Environment variables to pass to Argo CD server |
 | server.envFrom | list | `[]` (See [values.yaml]) | envFrom to pass to Argo CD server |
 | server.extensions.containerSecurityContext | object | See [values.yaml] | Server UI extensions container-level security context |
@@ -1674,6 +1677,7 @@ If you use an External Redis (See Option 3 above), this Job is not deployed.
 | applicationSet.dnsConfig | object | `{}` | [DNS configuration] |
 | applicationSet.dnsPolicy | string | `"ClusterFirst"` | Alternative DNS policy for ApplicationSet controller pods |
 | applicationSet.emptyDir.sizeLimit | string | `""` (defaults not set if not specified i.e. no size limit) | EmptyDir size limit for applicationSet controller |
+| applicationSet.enabled | bool | `true` | Enable ApplicationSet controller |
 | applicationSet.extraArgs | list | `[]` | ApplicationSet controller command line flags |
 | applicationSet.extraContainers | list | `[]` | Additional containers to be added to the ApplicationSet controller pod |
 | applicationSet.extraEnv | list | `[]` | Environment variables to pass to the ApplicationSet controller |

@@ -1,4 +1,4 @@
-{{- if .Values.createClusterRoles }}
+{{- if and .Values.createClusterRoles .Values.controller.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.createClusterRoles }}
+{{- if and .Values.createClusterRoles .Values.controller.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.controller.dynamicClusterDistribution }}
+{{- if and .Values.controller.dynamicClusterDistribution .Values.controller.enabled }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.controller.metrics.enabled }}
+{{- if and .Values.controller.metrics.enabled .Values.controller.enabled }}
 apiVersion: v1
 kind: Service
 metadata:

@@ -1,4 +1,4 @@
-{{- if or .Values.controller.networkPolicy.create .Values.global.networkPolicy.create }}
+{{- if and (or .Values.controller.networkPolicy.create .Values.global.networkPolicy.create) .Values.controller.enabled }}
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.controller.pdb.enabled }}
+{{- if and .Values.controller.pdb.enabled .Values.controller.enabled }}
 apiVersion: policy/v1
 kind: PodDisruptionBudget
 metadata:

@@ -1,4 +1,4 @@
-{{- if and (.Capabilities.APIVersions.Has "monitoring.coreos.com/v1") .Values.controller.metrics.enabled .Values.controller.metrics.rules.enabled }}
+{{- if and (.Capabilities.APIVersions.Has "monitoring.coreos.com/v1") .Values.controller.metrics.enabled .Values.controller.metrics.rules.enabled .Values.controller.enabled }}
 apiVersion: monitoring.coreos.com/v1
 kind: PrometheusRule
 metadata:

@@ -1,3 +1,4 @@
+{{- if .Values.controller.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
@@ -62,3 +63,4 @@ rules:
   - update
 {{- end }}
 {{- end }}
+{{- end }}
@@ -1,3 +1,4 @@
+{{- if .Values.controller.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
@@ -13,3 +14,4 @@ subjects:
   - kind: ServiceAccount
     name: {{ include "argo-cd.controller.serviceAccountName" . }}
     namespace: {{ include "argo-cd.namespace" . }}
+{{- end }}
@@ -1,4 +1,4 @@
-{{- if .Values.controller.serviceAccount.create }}
+{{- if and .Values.controller.serviceAccount.create .Values.controller.enabled }}
 apiVersion: v1
 kind: ServiceAccount
 automountServiceAccountToken: {{ .Values.controller.serviceAccount.automountServiceAccountToken }}

@@ -1,5 +1,5 @@
 {{- $apiVersion := include "argo-cd.apiVersions.monitoring" . }}
-{{- if and (.Capabilities.APIVersions.Has $apiVersion) .Values.controller.metrics.enabled .Values.controller.metrics.serviceMonitor.enabled }}
+{{- if and (.Capabilities.APIVersions.Has $apiVersion) .Values.controller.metrics.enabled .Values.controller.metrics.serviceMonitor.enabled .Values.controller.enabled }}
 apiVersion: {{ $apiVersion }}
 kind: ServiceMonitor
 metadata:

@@ -1,4 +1,4 @@
-{{- if not .Values.controller.dynamicClusterDistribution | default false }}
+{{- if and (not .Values.controller.dynamicClusterDistribution | default false) .Values.controller.enabled }}
 apiVersion: apps/v1
 kind: StatefulSet
 metadata:

@@ -1,4 +1,4 @@
-{{- if and (.Values.controller.vpa) (.Values.controller.vpa.enabled) }}
+{{- if and (.Values.controller.vpa) (.Values.controller.vpa.enabled) (.Values.controller.enabled) }}
 apiVersion: autoscaling.k8s.io/v1
 kind: VerticalPodAutoscaler
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.applicationSet.certificate.enabled -}}
+{{- if and .Values.applicationSet.certificate.enabled .Values.applicationSet.enabled -}}
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.applicationSet.allowAnyNamespace }}
+{{- if and .Values.applicationSet.allowAnyNamespace .Values.applicationSet.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.applicationSet.allowAnyNamespace }}
+{{- if and .Values.applicationSet.allowAnyNamespace .Values.applicationSet.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:

@@ -1,3 +1,4 @@
+{{- if .Values.applicationSet.enabled }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -382,3 +383,4 @@ spec:
         {{- toYaml . | nindent 8 }}
       {{- end }}
       dnsPolicy: {{ .Values.applicationSet.dnsPolicy }}
+{{- end }}
@@ -1,4 +1,4 @@
-{{- if .Values.applicationSet.ingress.enabled -}}
+{{- if and .Values.applicationSet.ingress.enabled .Values.applicationSet.enabled -}}
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.applicationSet.metrics.enabled }}
+{{- if and .Values.applicationSet.metrics.enabled .Values.applicationSet.enabled }}
 apiVersion: v1
 kind: Service
 metadata:

@@ -1,4 +1,4 @@
-{{- if and (or .Values.applicationSet.networkPolicy.create .Values.global.networkPolicy.create) (or .Values.applicationSet.metrics.enabled .Values.applicationSet.ingress.enabled) }}
+{{- if and (or .Values.applicationSet.networkPolicy.create .Values.global.networkPolicy.create) (or .Values.applicationSet.metrics.enabled .Values.applicationSet.ingress.enabled) .Values.applicationSet.enabled }}
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.applicationSet.pdb.enabled }}
+{{- if and .Values.applicationSet.pdb.enabled .Values.applicationSet.enabled }}
 apiVersion: policy/v1
 kind: PodDisruptionBudget
 metadata:

@@ -1,3 +1,4 @@
+{{- if .Values.applicationSet.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
@@ -94,3 +95,4 @@ rules:
     - get
     - update
     - create
+{{- end }}
@@ -1,3 +1,4 @@
+{{- if .Values.applicationSet.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
@@ -13,3 +14,4 @@ subjects:
   - kind: ServiceAccount
     name: {{ include "argo-cd.applicationSet.serviceAccountName" . }}
     namespace: {{ include "argo-cd.namespace" . }}
+{{- end }}
@@ -1,3 +1,4 @@
+{{- if .Values.applicationSet.enabled }}
 apiVersion: v1
 kind: Service
 metadata:
@@ -23,3 +24,4 @@ spec:
     targetPort: webhook
   selector:
     {{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.applicationSet.name) | nindent 4 }}
+{{- end }}
@@ -1,4 +1,4 @@
-{{- if .Values.applicationSet.serviceAccount.create }}
+{{- if and .Values.applicationSet.serviceAccount.create .Values.applicationSet.enabled }}
 apiVersion: v1
 kind: ServiceAccount
 automountServiceAccountToken: {{ .Values.applicationSet.serviceAccount.automountServiceAccountToken }}

@@ -1,5 +1,5 @@
 {{- $apiVersion := include "argo-cd.apiVersions.monitoring" . }}
-{{- if and (.Capabilities.APIVersions.Has $apiVersion) .Values.applicationSet.metrics.enabled .Values.applicationSet.metrics.serviceMonitor.enabled }}
+{{- if and (.Capabilities.APIVersions.Has $apiVersion) .Values.applicationSet.metrics.enabled .Values.applicationSet.metrics.serviceMonitor.enabled .Values.applicationSet.enabled }}
 apiVersion: {{ $apiVersion }}
 kind: ServiceMonitor
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.configs.cm.create }}
+{{- if and .Values.configs.cm.create (or .Values.repoServer.enabled .Values.controller.enabled)}}
 apiVersion: v1
 kind: ConfigMap
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.configs.ssh.create }}
+{{- if and .Values.configs.ssh.create (or .Values.server.enabled .Values.applicationSet.enabled  .Values.commitServer.enabled .Values.repoServer.enabled) }}
 apiVersion: v1
 kind: ConfigMap
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.configs.tls.create }}
+{{- if and .Values.configs.tls.create (or .Values.server.enabled .Values.notifications.enabled .Values.applicationSet.enabled .Values.commitServer.enabled .Values.repoServer.enabled) }}
 apiVersion: v1
 kind: ConfigMap
 metadata:

@@ -1,4 +1,4 @@
-{{- if and .Values.createClusterRoles .Values.repoServer.clusterRoleRules.enabled }}
+{{- if and .Values.createClusterRoles .Values.repoServer.clusterRoleRules.enabled .Values.repoServer.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:

@@ -1,4 +1,4 @@
-{{- if and .Values.createClusterRoles .Values.repoServer.clusterRoleRules.enabled }}
+{{- if and .Values.createClusterRoles .Values.repoServer.clusterRoleRules.enabled .Values.repoServer.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:

@@ -1,3 +1,4 @@
+{{- if .Values.repoServer.enabled }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -551,3 +552,4 @@ spec:
         {{- toYaml . | nindent 8 }}
       {{- end }}
       dnsPolicy: {{ .Values.repoServer.dnsPolicy }}
+{{- end }}
@@ -1,4 +1,4 @@
-{{- if .Values.repoServer.autoscaling.enabled }}
+{{- if and .Values.repoServer.autoscaling.enabled .Values.repoServer.enabled }}
 apiVersion: autoscaling/v2
 kind: HorizontalPodAutoscaler
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.repoServer.metrics.enabled }}
+{{- if and .Values.repoServer.metrics.enabled .Values.repoServer.enabled }}
 apiVersion: v1
 kind: Service
 metadata:

@@ -1,4 +1,4 @@
-{{- if or .Values.repoServer.networkPolicy.create .Values.global.networkPolicy.create }}
+{{- if and (or .Values.repoServer.networkPolicy.create .Values.global.networkPolicy.create) .Values.repoServer.enabled }}
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.repoServer.pdb.enabled }}
+{{- if and .Values.repoServer.pdb.enabled .Values.repoServer.enabled }}
 apiVersion: policy/v1
 kind: PodDisruptionBudget
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.repoServer.serviceAccount.create }}
+{{- if and .Values.repoServer.serviceAccount.create .Values.repoServer.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.repoServer.serviceAccount.create }}
+{{- if and .Values.repoServer.serviceAccount.create .Values.repoServer.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:

@@ -1,3 +1,4 @@
+{{- if .Values.repoServer.enabled }}
 apiVersion: v1
 kind: Service
 metadata:
@@ -26,3 +27,4 @@ spec:
   {{- if .Values.repoServer.service.trafficDistribution }}
   trafficDistribution: {{ .Values.repoServer.service.trafficDistribution }}
   {{- end }}
+{{- end }}
@@ -1,4 +1,4 @@
-{{- if .Values.repoServer.serviceAccount.create }}
+{{- if and .Values.repoServer.serviceAccount.create .Values.repoServer.enabled }}
 apiVersion: v1
 kind: ServiceAccount
 automountServiceAccountToken: {{ .Values.repoServer.serviceAccount.automountServiceAccountToken }}

@@ -1,5 +1,5 @@
 {{- $apiVersion := include "argo-cd.apiVersions.monitoring" . }}
-{{- if and (.Capabilities.APIVersions.Has $apiVersion) .Values.repoServer.metrics.enabled .Values.repoServer.metrics.serviceMonitor.enabled }}
+{{- if and (.Capabilities.APIVersions.Has $apiVersion) .Values.repoServer.metrics.enabled .Values.repoServer.metrics.serviceMonitor.enabled .Values.repoServer.enabled }}
 apiVersion: {{ $apiVersion }}
 kind: ServiceMonitor
 metadata:

@@ -1,4 +1,4 @@
-{{- if and .Values.server.ingress.enabled (eq .Values.server.ingress.controller "aws") }}
+{{- if and .Values.server.ingress.enabled (eq .Values.server.ingress.controller "aws") .Values.server.enabled }}
 {{- $insecure := index .Values.configs.params "server.insecure" | toString -}}
 {{- $servicePort := eq $insecure "true" | ternary .Values.server.service.servicePortHttp .Values.server.service.servicePortHttps -}}
 apiVersion: networking.k8s.io/v1

@@ -1,4 +1,4 @@
-{{- if and .Values.server.ingress.enabled (eq .Values.server.ingress.controller "aws") }}
+{{- if and .Values.server.ingress.enabled (eq .Values.server.ingress.controller "aws") .Values.server.enabled }}
 apiVersion: v1
 kind: Service
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.server.backendTLSPolicy.enabled -}}
+{{- if and .Values.server.backendTLSPolicy.enabled .Values.server.enabled -}}
 {{- $fullName := include "argo-cd.server.fullname" . -}}
 apiVersion: gateway.networking.k8s.io/v1
 kind: BackendTLSPolicy

@@ -1,4 +1,4 @@
-{{- if .Values.server.certificate.enabled -}}
+{{- if and .Values.server.certificate.enabled .Values.server.enabled -}}
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.createClusterRoles }}
+{{- if and .Values.createClusterRoles .Values.server.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:

@@ -1,4 +1,4 @@
-{{- if .Values.createClusterRoles }}
+{{- if and .Values.createClusterRoles .Values.server.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:

@@ -1,3 +1,4 @@
+{{- if .Values.server.enabled }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -577,3 +578,4 @@ spec:
         {{- toYaml . | nindent 8 }}
       {{- end }}
       dnsPolicy: {{ .Values.server.dnsPolicy }}
+{{- end }}
@@ -1,4 +1,4 @@
-{{- if and .Values.server.ingress.enabled (eq .Values.server.ingress.controller "gke") .Values.server.ingress.gke.backendConfig }}
+{{- if and .Values.server.ingress.enabled (eq .Values.server.ingress.controller "gke") .Values.server.ingress.gke.backendConfig .Values.server.enabled }}
 apiVersion: cloud.google.com/v1
 kind: BackendConfig
 metadata:

@@ -1,4 +1,4 @@
-{{- if and .Values.server.ingress.enabled (eq .Values.server.ingress.controller "gke") .Values.server.ingress.gke.frontendConfig }}
+{{- if and .Values.server.ingress.enabled (eq .Values.server.ingress.controller "gke") .Values.server.ingress.gke.frontendConfig .Values.server.enabled }}
 apiVersion: networking.gke.io/v1beta1
 kind: FrontendConfig
 metadata:

@@ -1,4 +1,4 @@
-{{- if and .Values.server.ingress.enabled (eq .Values.server.ingress.controller "gke") }}
+{{- if and .Values.server.ingress.enabled (eq .Values.server.ingress.controller "gke") .Values.server.enabled }}
 {{- $insecure := index .Values.configs.params "server.insecure" | toString -}}
 {{- $servicePort := eq $insecure "true" | ternary .Values.server.service.servicePortHttp .Values.server.service.servicePortHttps -}}
 apiVersion: networking.k8s.io/v1