{
  "slug": "applicationset-controller-scm-proxy-flags-d7b3600fecd0",
  "title": "ApplicationSet controller SCM proxy flags",
  "tools": [
    "argocd"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-08-04T08:35:57.000Z",
  "announced_at": "2026-08-04T08:35:57.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When the ApplicationSet controller must reach GitHub, GitLab, Gitea, or Bitbucket Server APIs through a proxy, set `--scm-proxy-url` and optionally `--scm-no-proxy` (or their documented environment variables). These settings route outbound SCM API requests; use `--proxy-url` for Kubernetes API traffic.",
    "examples": [
      "argocd-applicationset-controller \\\n  --scm-proxy-url=http://<proxy-host>:<port> \\\n  --scm-no-proxy=<host-or-CIDR>[,<host-or-CIDR>...]",
      "ARGOCD_APPLICATIONSET_CONTROLLER_SCM_PROXY_URL=http://<proxy-host>:<port>\nARGOCD_APPLICATIONSET_CONTROLLER_SCM_NO_PROXY=<host-or-CIDR>[,<host-or-CIDR>...]"
    ],
    "gotchas": [
      "Version: v3.5.0",
      "--scm-proxy-url / ARGOCD_APPLICATIONSET_CONTROLLER_SCM_PROXY_URL (required): HTTP/HTTPS proxy URL for outbound SCM provider API requests; does not affect Kubernetes API connectivity.",
      "--scm-no-proxy / ARGOCD_APPLICATIONSET_CONTROLLER_SCM_NO_PROXY: Comma-separated hosts that bypass the SCM proxy.",
      "--proxy-url: Use this standard kubectl flag to proxy Kubernetes API traffic.",
      "Prerequisite: Use an HTTP/HTTPS proxy; documented provider coverage is GitHub, GitLab, Gitea, and Bitbucket Server.",
      "`--scm-proxy-url` affects outbound SCM API requests and does not affect Kubernetes API server connectivity.",
      "Proxy support is stated for GitHub, GitLab, Gitea, and Bitbucket Server."
    ]
  },
  "why_it_matters": "Generate ApplicationSets from SCM provider APIs through a proxy while keeping Kubernetes API traffic on its existing route.",
  "before": "Use `--proxy-url` to route the controller's traffic through a proxy, including Kubernetes API requests.",
  "sources": [
    "https://github.com/argoproj/argo-cd/releases/tag/v3.5.0",
    "https://github.com/argoproj/argo-cd/pull/27788",
    "https://argo-cd.readthedocs.io/en/release-3.5/operator-manual/applicationset/Generators-SCM-Provider/",
    "https://argo-cd.readthedocs.io/en/release-3.5/operator-manual/server-commands/argocd-applicationset-controller/"
  ],
  "rank": 0.98025,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave1b-20261016",
    "verdict_id": "wave1b-20261016:wave1b-20261016-3e6f19ea3fbe0298-10:gate",
    "evidence_hash": "59e3de6b8157068242cc7e1fc3500773d71abd7a18e450e1c7bab99d2b03c82d"
  },
  "review": {
    "draft_hash": "7de30554477a1bd31fa4e71fa999b0d06893ebd35dac4e5d5d5be485dde6e6e7",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave1b-20261016:gate",
    "reason": "3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.98 >= 0.9; 2 needed) and Jev gave 0.70 (>= 0.6 needed)."
  }
}