Argo CD Redis credentials can be read from mounted files

Introduced 2026-02-02 · score 0.93

HOW TO USE IT

When configuring Redis-connected Argo CD components to use mounted file credentials, create a Secret with `auth` and mount it into each component. Set `REDIS_CREDS_DIR_PATH` to the mount directory; file credentials take precedence over credential environment variables.

apiVersion: v1
kind: Secret
metadata:
  name: <secret-name>
  namespace: argocd
type: Opaque
stringData:
  auth: "<redis-password>"
  auth_username: "<redis-username>"
  sentinel_auth: "<sentinel-password>"
  sentinel_username: "<sentinel-username>"

spec:
  containers:
  - name: <component-container>
    env:
    - name: REDIS_CREDS_DIR_PATH
      value: "/var/run/secrets/redis"
    volumeMounts:
    - name: redis-creds
      mountPath: "/var/run/secrets/redis"
      readOnly: true
  volumes:
  - name: redis-creds
    secret:
      secretName: <secret-name>

WHY THIS HELPS

Configure Argo CD components to read Redis credentials from a mounted Kubernetes Secret.

BEFORE THIS CHANGE

Configure Redis credentials through environment variables such as `REDIS_PASSWORD`.

REQUIREMENTS AND LIMITATIONS

Version: v3.3.0
REDIS_CREDS_DIR_PATH (required): Environment variable containing the mounted credential directory path; when specified, file credentials take precedence and environment-variable values are ignored.
auth (required): Redis password file.
auth_username: Redis username file.
sentinel_auth: Redis Sentinel password file.
sentinel_username: Redis Sentinel username file.
Prerequisite: Mount the credential Secret into each Redis-connected Argo CD component that needs access. Components named by the docs: application-controller, repo-server, and server.
The FAQ uses `REDIS_CREDS_DIR_PATH`; the PR description also names `REDIS_CREDS_FILE_PATH`.
`auth` is mandatory; the other listed credential files are optional.
When `REDIS_CREDS_DIR_PATH` is specified, file credentials take precedence and environment-variable values are ignored.
The supplied example manifest excerpt does not include a complete component volume mount configuration.
Docs conflict: The release-note PR description names REDIS_CREDS_FILE_PATH, while the v3.3 FAQ specifies REDIS_CREDS_DIR_PATH; use the documented v3.3 name.

FIRST-PARTY EVIDENCE

Check the installed version and the source before using it. Entry JSON

Report a problem with this card

Tools change faster than your agent’s training data.

Changes

Argo CD Redis credentials can be read from mounted files