| Key | Type | Default | Description |
|---|---|---|---|
global.baseDomain (required) | string | Controls the base domain used to derive all public hostnames. DNS and TLS must cover the resulting hosts. | |
global.tlsSecretName | string | "qodo-tls" | Controls the pre-created Kubernetes TLS Secret used by every public host. With cert-manager, this is the Secret it mints the certificate into. |
global.caBundle | string | Controls the PEM trust bundle for outbound TLS, replacing the containers’ default trust store. Include public roots before private CA certificates. | |
global.pullSecret | string | "qodo-pull" | Controls the Docker registry Secret used to pull every image. The name is fixed in this packaging and cannot be changed. |
global.imageProxyPrefix | string | "artif-reg-self-hosted.codium.ai/proxy/codium-stack/" | Controls the registry prefix prepended to every image reference. Change only when all images are mirrored to another registry. |
global.images.engine-indexer.repository | string | "artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/qodo-engine-indexer" | Controls the container image repository for this workload. Override only with Qodo guidance. |
global.images.engine-indexer.tag | string | "2.54.0" | Controls the container image tag for this workload. Override only with Qodo guidance. |
global.images.engine-pr-kn-consumer.repository | string | "artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/qodo-engine-indexer" | Controls the container image repository for this workload. Override only with Qodo guidance. |
global.images.engine-pr-kn-consumer.tag | string | "2.54.0" | Controls the container image tag for this workload. Override only with Qodo guidance. |
global.images.engine-retriever.repository | string | "artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/qodo-engine-context-retriever" | Controls the container image repository for this workload. Override only with Qodo guidance. |
global.images.engine-retriever.tag | string | "2.54.0" | Controls the container image tag for this workload. Override only with Qodo guidance. |
global.images.git-event-consumer.repository | string | "artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/qodo-platform" | Controls the container image repository for this workload. Override only with Qodo guidance. |
global.images.git-event-consumer.tag | string | "2.228.0" | Controls the container image tag for this workload. Override only with Qodo guidance. |
global.images.gitway.repository | string | "artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/git-gateway-gitway" | Controls the container image repository for this workload. Override only with Qodo guidance. |
global.images.gitway.tag | string | "1.30.1" | Controls the container image tag for this workload. Override only with Qodo guidance. |
global.images.litegit.repository | string | "artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/litegit-gateway" | Controls the container image repository for this workload. Override only with Qodo guidance. |
global.images.litegit.tag | string | "0.271.1" | Controls the container image tag for this workload. Override only with Qodo guidance. |
global.images.platform.repository | string | "artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/qodo-platform" | Controls the container image repository for this workload. Override only with Qodo guidance. |
global.images.platform.tag | string | "2.228.0" | Controls the container image tag for this workload. Override only with Qodo guidance. |
global.images.portal.repository | string | "artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/qodo-platform-fe" | Controls the container image repository for this workload. Override only with Qodo guidance. |
global.images.portal.tag | string | "1.114.2" | Controls the container image tag for this workload. Override only with Qodo guidance. |
global.images.qar.repository | string | "artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/qodo-agent-runtime" | Controls the container image repository for this workload. Override only with Qodo guidance. |
global.images.qar.tag | string | "1.20.4" | Controls the container image tag for this workload. Override only with Qodo guidance. |
global.images.pr-agent-agentic.repository | string | "artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/pr-agent" | Controls the container image repository for this workload. Override only with Qodo guidance. |
global.images.pr-agent-agentic.tag | string | "2.448.1" | Controls the container image tag for this workload. Override only with Qodo guidance. |
global.images.qodo-git.repository | string | "artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/pr-agent" | Controls the container image repository for this workload. Override only with Qodo guidance. |
global.images.qodo-git.tag | string | "2.448.1" | Controls the container image tag for this workload. Override only with Qodo guidance. |
global.images.qodo-git-sidecar.repository | string | "artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/pr-agent-sidecar" | Controls the container image repository for this workload. Override only with Qodo guidance. |
global.images.qodo-git-sidecar.tag | string | "2.448.1" | Controls the container image tag for this workload. Override only with Qodo guidance. |
global.ingress.className | string | Controls the Kubernetes IngressClass. Leave empty to use the cluster default. | |
global.ingress.annotations | object | {} | Controls annotations added to every generated Ingress resource. |
global.ingress.appHostname | string | Controls the public Qodo Portal hostname. Leave empty to derive from global.baseDomain. | |
global.ingress.apiHostname | string | Controls the public API hostname. Leave empty to derive from global.baseDomain. | |
global.ingress.portalApiHostname | string | Controls the public portal backend hostname. Portal and platform URLs are derived from this value. | |
global.ingress.authHostname | string | Controls the public sign-on hostname and OIDC issuer. Changing it after provisioning is not supported. | |
global.ingress.gitHostname | string | Controls the webhook hostname for inbound git provider events. The host must resolve to the ingress, have valid TLS, and cannot be shared with other hosts. | |
global.ingress.sdkHostname | string | Controls the public Qodo Agent Runtime hostname used by SDK and CLI clients. Leave empty to derive from global.baseDomain. | |
global.jobScheduling.nodeSelector | object | {} | Controls node selection for database migration, provisioning, and maintenance jobs. |
global.jobScheduling.tolerations | array | [] | Controls tolerations for database migration, provisioning, and maintenance jobs. |
global.externalDatabase.host (required) | string | Controls the external PostgreSQL server hostname. | |
global.externalDatabase.port | integer | 5432 | Controls the external PostgreSQL port. Some components still require a proxy or Service listening on port 5432. |
global.externalDatabase.adminUser (required) | string | "postgres" | Controls the database user that creates application databases. The role requires the CREATEDB privilege. |
global.externalDatabase.sslMode | string | "require" | Controls the PostgreSQL TLS mode. require encrypts traffic without verifying the server certificate or hostname. |
global.externalDatabase.existingSecret | string | "qodo-db-admin" | Controls the Secret containing POSTGRES_PASSWORD. The default name is required by components that reference it directly. |
global.externalDatabase.qarDatabase | string | "qar" | Controls the database used exclusively by Qodo Agent Runtime. |
global.externalDatabase.qarUser | string | Controls an optional dedicated Qodo Agent Runtime login. The role must not have SUPERUSER or BYPASSRLS. | |
global.externalRedis.host | string | Controls the external Redis hostname. Also set redis.enabled: false when using an external server. | |
global.entra.type | string | "entra" | Controls the identity provider connector type. Use entra for commercial Microsoft cloud or generic-oidc for another OIDC issuer. |
global.entra.name (required) | string | Controls the identity provider display name. Changing it after installation registers a second provider instead of renaming. | |
global.entra.clientId (required) | string | Controls the application client ID for the identity provider. | |
global.entra.tenantId | string | Controls the Entra directory tenant ID. Required when global.entra.type is entra. | |
global.entra.issuerUrl | string | Controls the OIDC issuer URL for generic-oidc. Leave empty for the native Entra connector. | |
global.entra.adminRoleName | string | "Qodo-Platform-Admin" | Controls the case-sensitive app-role claim that grants organization owner access. |
global.entra.existingSecret | string | "qodo-entra-idp" | Controls the Secret containing the identity provider’s IDP_CLIENT_SECRET. |
global.entra.externalIdpsExistingSecret | string | Controls the Secret containing multi-provider Dynaconf configuration. Cannot be combined with single-provider fields. | |
global.llm.bundled | boolean | true | Controls the in-cluster LLM gateway used by all Qodo components. |
global.llm.openaiBaseUrl | string | Controls the OpenAI-compatible endpoint used by the bundled gateway. The API key must remain in a Secret. | |
global.llm.modelMap | object | {} | Controls the model mapping published by the gateway. Replaces the built-in set when specified; must include a text-embedding-3 model. |
global.llm.extraModelList | array | [] | Controls additional models with their own endpoint or provider configuration. Each entry must set api_base. |
global.llm.extraHeaders | object | {} | Controls non-secret HTTP headers added to every request forwarded by the LLM gateway. |
global.merge.settings.OPENAI__RESPONSE_API | string | "true" | Controls whether Qodo Code Review uses the OpenAI Responses API. The value must be the string "true". |
global.analytics_sidecar.enabled | boolean | true | Controls the review worker’s log-forwarding sidecar. Disabling it omits the sidecar while retaining local event files. |
global.generatedSecrets.render | boolean | true | Controls in-cluster generation of internal credentials. Disable only when supplying every required Secret during offline rendering. |
postgres.enabled | boolean | false | Controls the bundled PostgreSQL server. When enabled, point database settings to the qodo-postgres Service and set sslMode to disable. |
redis.enabled | boolean | true | Controls the bundled Redis server. Disable when global.externalRedis.host points to an external instance. |
Helm charts
Helm chart configuration reference
Reference documentation for the Qodo on-premises Helm chart.
This reference provides a complete list of customer-serviceable Helm values, default settings, and configuration options for the Qodo Helm chart.
If you’re deploying Qodo for the first time, see Deploy Qodo using Helm for step-by-step installation instructions.
Was this page helpful?