> ## Documentation Index > Fetch the complete documentation index at: https://docs.qodo.ai/llms.txt > Use this file to discover all available pages before exploring further. # Helm chart configuration reference > Reference documentation for the Qodo on-premises Helm chart. This reference provides a complete list of customer-serviceable Helm values, default settings, and configuration options for the Qodo Helm chart. If you're deploying Qodo for the first time, see [Deploy Qodo using Helm](qodo-on-prem-helm-chart-overview) for step-by-step installation instructions. | Key | Type | Default | Description | | -------------------------------------------------- | ------- | --------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- | | `global.baseDomain` **(required)** | string | | Controls the base domain used to derive all public hostnames. DNS and TLS must cover the resulting hosts. | | `global.tlsSecretName` | string | `"qodo-tls"` | Controls the pre-created Kubernetes TLS Secret used by every public host. With cert-manager, this is the Secret it mints the certificate into. | | `global.caBundle` | string | | Controls the PEM trust bundle for outbound TLS, replacing the containers' default trust store. Include public roots before private CA certificates. | | `global.pullSecret` | string | `"qodo-pull"` | Controls the Docker registry Secret used to pull every image. The name is fixed in this packaging and cannot be changed. | | `global.imageProxyPrefix` | string | `"artif-reg-self-hosted.codium.ai/proxy/codium-stack/"` | Controls the registry prefix prepended to every image reference. Change only when all images are mirrored to another registry. | | `global.images.engine-indexer.repository` | string | `"artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/qodo-engine-indexer"` | Controls the container image repository for this workload. Override only with Qodo guidance. | | `global.images.engine-indexer.tag` | string | `"2.54.0"` | Controls the container image tag for this workload. Override only with Qodo guidance. | | `global.images.engine-pr-kn-consumer.repository` | string | `"artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/qodo-engine-indexer"` | Controls the container image repository for this workload. Override only with Qodo guidance. | | `global.images.engine-pr-kn-consumer.tag` | string | `"2.54.0"` | Controls the container image tag for this workload. Override only with Qodo guidance. | | `global.images.engine-retriever.repository` | string | `"artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/qodo-engine-context-retriever"` | Controls the container image repository for this workload. Override only with Qodo guidance. | | `global.images.engine-retriever.tag` | string | `"2.54.0"` | Controls the container image tag for this workload. Override only with Qodo guidance. | | `global.images.git-event-consumer.repository` | string | `"artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/qodo-platform"` | Controls the container image repository for this workload. Override only with Qodo guidance. | | `global.images.git-event-consumer.tag` | string | `"2.228.0"` | Controls the container image tag for this workload. Override only with Qodo guidance. | | `global.images.gitway.repository` | string | `"artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/git-gateway-gitway"` | Controls the container image repository for this workload. Override only with Qodo guidance. | | `global.images.gitway.tag` | string | `"1.30.1"` | Controls the container image tag for this workload. Override only with Qodo guidance. | | `global.images.litegit.repository` | string | `"artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/litegit-gateway"` | Controls the container image repository for this workload. Override only with Qodo guidance. | | `global.images.litegit.tag` | string | `"0.271.1"` | Controls the container image tag for this workload. Override only with Qodo guidance. | | `global.images.platform.repository` | string | `"artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/qodo-platform"` | Controls the container image repository for this workload. Override only with Qodo guidance. | | `global.images.platform.tag` | string | `"2.228.0"` | Controls the container image tag for this workload. Override only with Qodo guidance. | | `global.images.portal.repository` | string | `"artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/qodo-platform-fe"` | Controls the container image repository for this workload. Override only with Qodo guidance. | | `global.images.portal.tag` | string | `"1.114.2"` | Controls the container image tag for this workload. Override only with Qodo guidance. | | `global.images.qar.repository` | string | `"artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/qodo-agent-runtime"` | Controls the container image repository for this workload. Override only with Qodo guidance. | | `global.images.qar.tag` | string | `"1.20.4"` | Controls the container image tag for this workload. Override only with Qodo guidance. | | `global.images.pr-agent-agentic.repository` | string | `"artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/pr-agent"` | Controls the container image repository for this workload. Override only with Qodo guidance. | | `global.images.pr-agent-agentic.tag` | string | `"2.448.1"` | Controls the container image tag for this workload. Override only with Qodo guidance. | | `global.images.qodo-git.repository` | string | `"artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/pr-agent"` | Controls the container image repository for this workload. Override only with Qodo guidance. | | `global.images.qodo-git.tag` | string | `"2.448.1"` | Controls the container image tag for this workload. Override only with Qodo guidance. | | `global.images.qodo-git-sidecar.repository` | string | `"artif-reg-self-hosted.codium.ai/proxy/codium-stack/us-central1-docker.pkg.dev/codium-production/codium-repo-self-hosted/pr-agent-sidecar"` | Controls the container image repository for this workload. Override only with Qodo guidance. | | `global.images.qodo-git-sidecar.tag` | string | `"2.448.1"` | Controls the container image tag for this workload. Override only with Qodo guidance. | | `global.ingress.className` | string | | Controls the Kubernetes IngressClass. Leave empty to use the cluster default. | | `global.ingress.annotations` | object | `{}` | Controls annotations added to every generated Ingress resource. | | `global.ingress.appHostname` | string | | Controls the public Qodo Portal hostname. Leave empty to derive from `global.baseDomain`. | | `global.ingress.apiHostname` | string | | Controls the public API hostname. Leave empty to derive from `global.baseDomain`. | | `global.ingress.portalApiHostname` | string | | Controls the public portal backend hostname. Portal and platform URLs are derived from this value. | | `global.ingress.authHostname` | string | | Controls the public sign-on hostname and OIDC issuer. Changing it after provisioning is not supported. | | `global.ingress.gitHostname` | string | | Controls the webhook hostname for inbound git provider events. The host must resolve to the ingress, have valid TLS, and cannot be shared with other hosts. | | `global.ingress.sdkHostname` | string | | Controls the public Qodo Agent Runtime hostname used by SDK and CLI clients. Leave empty to derive from `global.baseDomain`. | | `global.jobScheduling.nodeSelector` | object | `{}` | Controls node selection for database migration, provisioning, and maintenance jobs. | | `global.jobScheduling.tolerations` | array | `[]` | Controls tolerations for database migration, provisioning, and maintenance jobs. | | `global.externalDatabase.host` **(required)** | string | | Controls the external PostgreSQL server hostname. | | `global.externalDatabase.port` | integer | `5432` | Controls the external PostgreSQL port. Some components still require a proxy or Service listening on port 5432. | | `global.externalDatabase.adminUser` **(required)** | string | `"postgres"` | Controls the database user that creates application databases. The role requires the `CREATEDB` privilege. | | `global.externalDatabase.sslMode` | string | `"require"` | Controls the PostgreSQL TLS mode. `require` encrypts traffic without verifying the server certificate or hostname. | | `global.externalDatabase.existingSecret` | string | `"qodo-db-admin"` | Controls the Secret containing `POSTGRES_PASSWORD`. The default name is required by components that reference it directly. | | `global.externalDatabase.qarDatabase` | string | `"qar"` | Controls the database used exclusively by Qodo Agent Runtime. | | `global.externalDatabase.qarUser` | string | | Controls an optional dedicated Qodo Agent Runtime login. The role must not have `SUPERUSER` or `BYPASSRLS`. | | `global.externalRedis.host` | string | | Controls the external Redis hostname. Also set `redis.enabled: false` when using an external server. | | `global.entra.type` | string | `"entra"` | Controls the identity provider connector type. Use `entra` for commercial Microsoft cloud or `generic-oidc` for another OIDC issuer. | | `global.entra.name` **(required)** | string | | Controls the identity provider display name. Changing it after installation registers a second provider instead of renaming. | | `global.entra.clientId` **(required)** | string | | Controls the application client ID for the identity provider. | | `global.entra.tenantId` | string | | Controls the Entra directory tenant ID. Required when `global.entra.type` is `entra`. | | `global.entra.issuerUrl` | string | | Controls the OIDC issuer URL for `generic-oidc`. Leave empty for the native Entra connector. | | `global.entra.adminRoleName` | string | `"Qodo-Platform-Admin"` | Controls the case-sensitive app-role claim that grants organization owner access. | | `global.entra.existingSecret` | string | `"qodo-entra-idp"` | Controls the Secret containing the identity provider's `IDP_CLIENT_SECRET`. | | `global.entra.externalIdpsExistingSecret` | string | | Controls the Secret containing multi-provider Dynaconf configuration. Cannot be combined with single-provider fields. | | `global.llm.bundled` | boolean | `true` | Controls the in-cluster LLM gateway used by all Qodo components. | | `global.llm.openaiBaseUrl` | string | | Controls the OpenAI-compatible endpoint used by the bundled gateway. The API key must remain in a Secret. | | `global.llm.modelMap` | object | `{}` | Controls the model mapping published by the gateway. Replaces the built-in set when specified; must include a `text-embedding-3` model. | | `global.llm.extraModelList` | array | `[]` | Controls additional models with their own endpoint or provider configuration. Each entry must set `api_base`. | | `global.llm.extraHeaders` | object | `{}` | Controls non-secret HTTP headers added to every request forwarded by the LLM gateway. | | `global.merge.settings.OPENAI__RESPONSE_API` | string | `"true"` | Controls whether Qodo Code Review uses the OpenAI Responses API. The value must be the string `"true"`. | | `global.analytics_sidecar.enabled` | boolean | `true` | Controls the review worker's log-forwarding sidecar. Disabling it omits the sidecar while retaining local event files. | | `global.generatedSecrets.render` | boolean | `true` | Controls in-cluster generation of internal credentials. Disable only when supplying every required Secret during offline rendering. | | `postgres.enabled` | boolean | `false` | Controls the bundled PostgreSQL server. When enabled, point database settings to the `qodo-postgres` Service and set `sslMode` to `disable`. | | `redis.enabled` | boolean | `true` | Controls the bundled Redis server. Disable when `global.externalRedis.host` points to an external instance. |