Argo Server Auth Mode

You can configure how the Argo Server authenticates to Kubernetes:

• server: In hosted mode, use the Server's Service Account. In local mode, use your local kube config.
• client: Use the Kubernetes bearer token of clients.
• sso: Use single sign-on. This will use the same SA as server for RBAC, unless you have enabled SSO RBAC

For v3.0 and after, the default is client. Prior to v3.0, it was server.

To configure the Server's auth modes, use one or multiple --auth-mode flags. For example:

argo server --auth-mode=sso --auth-mode=client

---

Have a question?

Search on GitHub Discussions and Slack.